Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
File: T4dGzo6jgv8gOyinnvhBzrczyXs.mft (raw, json)
Hash identifier: IIIL4l8Z2ksUiL+cnu6LC7yhHSvDqV4GPwLyGHSpkvc=
Subject key identifier: 1C:D5:96:78:E4:FC:16:F8:9E:F1:9B:A2:4A:B7:FB:94:67:BE:9D:47
Authority key identifier: 4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B
Certificate issuer: /CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b
Certificate serial: 01974FD80F27D92F92FCDAEB566AA6F471ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
Manifest number: D1
Signing time: Sun 08 Jun 2025 14:00:49 +0000
Manifest this update: Sun 08 Jun 2025 14:00:49 +0000
Manifest next update: Mon 09 Jun 2025 14:00:49 +0000
Files and hashes: 1: T4dGzo6jgv8gOyinnvhBzrczyXs.crl (hash: L+3uq/ptsBMsEG6DCuRrqZlDNW6mB3jkhgELHQW0nos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d8:0f:27:d9:2f:92:fc:da:eb:56:6a:a6:f4:71:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b
Validity
Not Before: Jun 8 14:00:49 2025 GMT
Not After : Jun 9 14:00:49 2025 GMT
Subject: CN=1cd59678e4fc16f89ef19ba24ab7fb9467be9d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:57:56:12:42:08:2e:e1:9d:03:de:ce:88:
28:cd:a7:d3:1f:4c:bf:3d:8b:35:d3:51:99:e1:48:
1e:9f:9c:06:d1:ee:8a:a2:85:c0:d4:da:a0:89:85:
27:3a:72:70:51:dd:1e:c1:ee:a0:d0:df:88:2d:99:
eb:fc:85:fc:8a:6f:37:3c:9d:04:d0:66:2c:e4:c7:
10:34:71:66:7f:2e:96:5e:71:c4:4e:b8:36:4a:6f:
01:45:21:1f:13:fc:7b:7d:8b:86:62:38:43:88:56:
68:6a:44:a9:ca:37:15:d7:4f:43:89:36:9e:a8:06:
53:91:5d:8e:47:f6:8c:d6:44:7f:85:b3:07:91:17:
54:84:4b:e4:25:09:28:2d:9f:40:3d:0c:30:3a:e9:
71:ea:ad:37:f4:f1:d5:93:37:be:54:84:d2:aa:19:
95:49:cf:26:d8:c3:89:6a:0d:d6:ba:11:9a:01:89:
6c:55:d7:ce:ad:41:5f:8b:24:83:eb:7b:60:eb:d7:
a0:cd:7a:47:a8:f0:7c:a6:5d:1b:c4:78:2a:1f:e1:
16:7b:44:6a:5e:12:0f:3f:4e:bb:c5:2b:06:76:40:
26:ba:93:89:01:bc:00:ab:1b:96:b3:5b:c9:3e:a5:
ad:18:fd:a5:0c:8b:a4:59:f6:19:80:17:5e:e0:f6:
f9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D5:96:78:E4:FC:16:F8:9E:F1:9B:A2:4A:B7:FB:94:67:BE:9D:47
X509v3 Authority Key Identifier:
keyid:4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:90:e1:d8:ba:a2:36:ce:22:5d:a8:10:3b:5d:5d:35:73:99:
ed:87:85:5b:5c:2d:25:60:ed:42:f0:93:02:9c:1e:d4:44:82:
b3:22:bb:e4:20:d4:a7:72:a8:3a:ad:a0:c9:5b:4c:e8:bd:8f:
ea:f4:c7:a0:50:0d:25:8a:37:41:af:7f:ed:a4:a0:23:55:ec:
a9:28:ba:c5:9b:49:ab:d1:57:bf:9e:ab:28:c1:1a:f4:74:d4:
eb:04:1b:24:8c:e4:5d:79:ff:8e:c9:81:75:34:ba:30:91:95:
ce:f8:77:90:a8:f1:90:0b:7c:66:40:42:16:df:e8:24:54:10:
a3:80:2a:9a:88:5b:09:27:16:35:91:ef:45:60:d5:51:fa:20:
e3:c7:76:ef:81:a4:1e:9e:0e:13:40:09:90:b9:90:f6:21:79:
e4:39:94:e2:60:5f:6c:9a:26:3d:22:e6:a8:a1:ec:33:03:28:
fd:d1:97:34:83:59:e0:46:51:27:11:73:09:de:f8:53:23:e5:
6d:f3:d1:6b:ae:02:0e:df:f3:bc:94:a2:4e:e6:d7:16:50:fb:
9a:8e:0b:d9:2f:89:e0:6d:6a:2c:48:c4:c3:d3:ae:08:a9:de:
85:14:6a:39:f8:31:97:99:72:61:92:17:4f:3d:2a:46:8c:a9:
23:00:7b:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdP2A8n2S+S/NrrVmqm9HHtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODc0NmNlOGVhMzgyZmYyMDNiMjhhNzllZjg0MWNlYjcz
M2M5N2IwHhcNMjUwNjA4MTQwMDQ5WhcNMjUwNjA5MTQwMDQ5WjAzMTEwLwYDVQQD
EygxY2Q1OTY3OGU0ZmMxNmY4OWVmMTliYTI0YWI3ZmI5NDY3YmU5ZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomtXVhJCCC7hnQPezogozafTH0y/
PYs101GZ4Ugen5wG0e6KooXA1NqgiYUnOnJwUd0ewe6g0N+ILZnr/IX8im83PJ0E
0GYs5McQNHFmfy6WXnHETrg2Sm8BRSEfE/x7fYuGYjhDiFZoakSpyjcV109DiTae
qAZTkV2OR/aM1kR/hbMHkRdUhEvkJQkoLZ9APQwwOulx6q039PHVkze+VITSqhmV
Sc8m2MOJag3WuhGaAYlsVdfOrUFfiySD63tg69egzXpHqPB8pl0bxHgqH+EWe0Rq
XhIPP067xSsGdkAmupOJAbwAqxuWs1vJPqWtGP2lDIukWfYZgBde4Pb5GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzVlnjk/Bb4nvGbokq3+5Rnvp1HMB8GA1UdIwQY
MBaAFE+HRs6Oo4L/IDsop574Qc63M8l7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRkR3pvNmpndjhnT3lpbm52aEJ6cmN6eVhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85NjQ5OWItNGQ5ZC00MjcyLTgzMjQt
NmJjMmJhZjk5MjJiLzEvVDRkR3pvNmpndjhnT3lpbm52aEJ6cmN6eVhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85NjQ5OWItNGQ5ZC00MjcyLTgzMjQtNmJjMmJhZjk5MjJi
LzEvVDRkR3pvNmpndjhnT3lpbm52aEJ6cmN6eVhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJDh2Lqi
Ns4iXagQO11dNXOZ7YeFW1wtJWDtQvCTApwe1ESCsyK75CDUp3KoOq2gyVtM6L2P
6vTHoFANJYo3Qa9/7aSgI1XsqSi6xZtJq9FXv56rKMEa9HTU6wQbJIzkXXn/jsmB
dTS6MJGVzvh3kKjxkAt8ZkBCFt/oJFQQo4AqmohbCScWNZHvRWDVUfog48d274Gk
Hp4OE0AJkLmQ9iF55DmU4mBfbJomPSLmqKHsMwMo/dGXNINZ4EZRJxFzCd74UyPl
bfPRa64CDt/zvJSiTubXFlD7mo4L2S+J4G1qLEjEw9OuCKnehRRqOfgxl5lyYZIX
Tz0qRoypIwB7Sg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:43:55 2025 by rpki-client