Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
File: T4zW4dX8wEW55lmcDK6hfUdoX5U.mft (raw, json)
Hash identifier: p8d8jwO9Odo+dayiTZp1F+KWBD7t+gGwrCercZlr9lw=
Subject key identifier: F3:1E:99:40:C5:A3:5E:3D:15:D7:DC:25:A5:EF:C5:81:29:1A:C5:D3
Authority key identifier: 4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
Certificate issuer: /CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Certificate serial: 019A71B900835C31896E4D44F21CD9C92563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
Manifest number: 1260
Signing time: Tue 11 Nov 2025 07:02:21 +0000
Manifest this update: Tue 11 Nov 2025 07:02:21 +0000
Manifest next update: Wed 12 Nov 2025 07:02:21 +0000
Files and hashes: 1: T4zW4dX8wEW55lmcDK6hfUdoX5U.crl (hash: z/dHSG9DsWx7v2xxDLGn3y+OrGBM9LdoGQlOR6Uz1og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:00:83:5c:31:89:6e:4d:44:f2:1c:d9:c9:25:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Validity
Not Before: Nov 11 07:02:21 2025 GMT
Not After : Nov 12 07:02:21 2025 GMT
Subject: CN=f31e9940c5a35e3d15d7dc25a5efc581291ac5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:50:a2:14:7d:b1:6b:1a:8a:6a:25:e5:9f:
c3:e7:0b:34:fa:44:b1:44:45:d6:05:d8:f9:da:fb:
a1:29:80:83:95:9d:f3:c0:a3:54:9a:02:45:7e:30:
6b:e5:fd:09:5f:7d:33:76:cd:fd:82:b8:0a:b3:2b:
c6:f8:cb:15:7f:b3:5e:b8:8a:6b:17:39:22:e6:ef:
4d:15:bc:da:12:a7:a3:1b:05:e2:c9:53:53:80:60:
59:9b:c1:b9:79:02:e2:16:38:a3:af:1d:0b:72:a4:
f1:85:04:01:eb:9b:c6:54:12:0a:32:f4:c7:c6:62:
aa:14:b1:1b:40:a4:f9:b9:d8:fd:18:18:ce:4c:81:
fd:84:cd:24:57:7d:8a:ca:25:5b:04:37:a8:02:02:
c3:d2:9b:56:27:43:4c:13:cc:c7:be:19:44:d1:2b:
b7:c7:01:e4:31:64:58:f0:4e:4e:70:51:93:0c:83:
64:e7:2e:c0:54:f4:90:82:3a:4a:af:00:40:45:b6:
b6:3a:b2:76:c0:cf:d8:2c:ab:12:69:d2:27:50:c6:
32:2e:e7:af:9e:d5:ac:0d:52:95:a2:15:73:9d:00:
c4:83:8f:59:78:61:8f:39:1a:64:24:4a:89:38:a3:
8e:f8:a1:6f:5b:30:6a:66:63:6b:f2:48:17:c0:82:
c6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1E:99:40:C5:A3:5E:3D:15:D7:DC:25:A5:EF:C5:81:29:1A:C5:D3
X509v3 Authority Key Identifier:
keyid:4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c0:26:b0:dd:4b:5b:9c:de:07:1b:71:fa:fc:dc:65:fb:72:
b2:4b:2e:e4:70:a2:dd:97:89:e6:a7:cb:77:a4:31:da:7a:08:
0e:24:90:28:41:16:55:6a:2a:40:c4:99:6c:52:3b:96:05:6c:
f0:d3:2c:27:14:65:e5:d2:ac:64:55:1f:b4:6f:7a:5f:7c:67:
be:7f:b0:c3:42:df:80:e9:97:6b:c9:f7:f0:e9:32:43:cb:88:
5e:7b:2f:8b:e4:ba:44:4a:3a:ea:94:22:19:ed:d0:8f:b0:9a:
02:44:cc:17:a2:d0:6d:fc:aa:c5:e6:fe:2c:4f:cc:0f:de:c5:
73:8b:ea:74:c4:6f:01:6b:2d:1c:96:f2:8d:95:44:75:1d:ad:
c2:2b:48:c6:a3:1c:8e:31:71:5a:55:3f:39:61:3e:b7:7c:ba:
ae:69:52:3d:b7:fd:9c:0d:b0:fc:2b:3e:ac:cd:f9:95:e2:79:
ef:b5:1b:64:cd:8a:1c:ad:ce:8b:e9:e1:35:02:1c:36:48:7e:
9a:45:63:a7:02:eb:10:cd:fc:61:d8:f3:53:4f:84:9e:b1:83:
0d:4c:09:1f:b5:13:b7:9f:aa:f0:e2:19:b7:ad:d2:61:10:a0:
85:30:92:93:2b:51:84:89:30:02:b8:03:07:fc:2b:17:40:2d:
d1:55:4a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:51 2025 by rpki-client