Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
File: t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft (raw, json)
Hash identifier: UcVkL2Ko3O+1EBeHWFar56dtE2pM9Bxi/6WWpon3YdI=
Subject key identifier: F6:92:5A:10:A7:FA:1F:1C:E8:C0:BF:93:91:F7:44:52:AC:AE:D0:4C
Authority key identifier: B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC
Certificate issuer: /CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec
Certificate serial: 0198D6613CE41B22E5F4C55992D99005B3A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
Manifest number: 09EF
Signing time: Sat 23 Aug 2025 10:02:33 +0000
Manifest this update: Sat 23 Aug 2025 10:02:33 +0000
Manifest next update: Sun 24 Aug 2025 10:02:33 +0000
Files and hashes: 1: t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl (hash: +e/bU6y+gGh3vDZptH/AHBmrggyiHydBLtqDK4CjjaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:3c:e4:1b:22:e5:f4:c5:59:92:d9:90:05:b3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec
Validity
Not Before: Aug 23 10:02:33 2025 GMT
Not After : Aug 24 10:02:33 2025 GMT
Subject: CN=f6925a10a7fa1f1ce8c0bf9391f74452acaed04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:bc:94:cc:20:ef:4d:25:4c:3b:2b:c0:70:
e1:f7:20:ab:3b:7f:7b:e4:41:6f:34:fb:c6:aa:9c:
c9:ba:e2:86:1f:5f:84:af:e6:cb:f3:3d:53:ee:04:
cd:36:e5:1a:32:b0:16:18:28:b4:cf:a1:89:32:49:
01:f8:c2:43:40:09:93:cf:3f:d9:7f:93:43:5b:88:
ed:07:82:78:fb:71:c2:58:82:30:ba:aa:3d:91:32:
92:6d:b6:27:1c:57:12:af:17:37:c8:0b:1e:ab:42:
f2:5e:33:f8:7b:4a:64:86:e8:34:10:f4:f0:1b:7d:
60:3f:06:6a:16:fe:fd:1c:d3:4c:f6:cd:a3:b5:85:
50:e7:02:fa:18:29:be:9e:ca:ba:04:f4:40:fa:fa:
96:63:ff:25:23:db:9c:dc:89:7c:e9:93:c1:72:3e:
9b:c4:6e:bc:04:48:c4:2c:f3:e0:64:4d:ad:a1:5b:
3d:6f:31:14:63:a3:ae:45:fc:bd:cf:36:86:48:b0:
17:79:74:94:a3:b2:0d:ca:47:d9:49:dc:d7:55:b0:
70:f4:d9:99:1b:e4:23:65:7a:31:f8:a7:70:b6:85:
af:6f:ab:a1:67:ee:39:d3:bd:6d:ac:0f:9c:a3:b9:
1a:db:7f:1e:f8:b8:1f:e3:25:93:a4:19:8c:d9:98:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:92:5A:10:A7:FA:1F:1C:E8:C0:BF:93:91:F7:44:52:AC:AE:D0:4C
X509v3 Authority Key Identifier:
keyid:B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:83:3a:6e:7e:9a:02:14:b2:88:8e:d7:c7:14:01:0d:94:65:
97:f9:8a:21:d4:df:75:27:b6:46:dc:24:ba:22:8a:50:00:1b:
c3:07:01:dc:aa:7a:ba:05:8c:41:af:54:26:88:4e:b1:fe:dd:
dc:21:89:ca:67:27:d2:a0:db:e1:93:42:a4:87:3d:1c:e4:25:
0c:08:17:44:f4:49:d3:25:c8:43:da:b9:ac:63:dd:80:4f:8f:
2f:e7:7e:fb:c8:20:6f:f4:e3:7f:41:97:55:c3:d3:5b:10:77:
1d:3f:5f:a9:33:93:86:d3:5d:ff:21:68:04:e9:8e:5e:ca:33:
66:76:b4:1c:14:5f:32:fb:14:c1:7f:55:79:8c:b3:a1:82:4b:
f6:4a:49:a2:68:35:b7:1d:54:eb:a0:56:f4:90:07:ff:86:dc:
9e:4f:79:56:95:7b:39:6b:0e:a9:b4:a6:c4:bc:26:d9:5f:33:
b4:7b:3d:d6:b7:58:e1:09:26:68:17:ea:6a:dd:c8:74:09:8a:
af:be:a6:4d:21:ed:53:5e:93:89:44:e6:81:00:a1:d3:a7:ce:
f0:6a:00:ca:5b:50:55:fa:a5:9a:99:17:6f:f4:d3:b0:f3:b6:
5d:de:0c:cc:ec:05:c8:aa:22:13:b7:ae:bf:f6:4c:e7:bf:c4:
69:f6:df:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYTzkGyLl9MVZktmQBbOhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODlhMzBjZDZmNmMxODIwNWZkOWFjYTE0YWRiNDJiZjBk
YzkyZWMwHhcNMjUwODIzMTAwMjMzWhcNMjUwODI0MTAwMjMzWjAzMTEwLwYDVQQD
EyhmNjkyNWExMGE3ZmExZjFjZThjMGJmOTM5MWY3NDQ1MmFjYWVkMDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV68lMwg700lTDsrwHDh9yCrO397
5EFvNPvGqpzJuuKGH1+Er+bL8z1T7gTNNuUaMrAWGCi0z6GJMkkB+MJDQAmTzz/Z
f5NDW4jtB4J4+3HCWIIwuqo9kTKSbbYnHFcSrxc3yAseq0LyXjP4e0pkhug0EPTw
G31gPwZqFv79HNNM9s2jtYVQ5wL6GCm+nsq6BPRA+vqWY/8lI9uc3Il86ZPBcj6b
xG68BEjELPPgZE2toVs9bzEUY6OuRfy9zzaGSLAXeXSUo7INykfZSdzXVbBw9NmZ
G+QjZXox+KdwtoWvb6uhZ+45071trA+co7ka238e+Lgf4yWTpBmM2ZjjbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaSWhCn+h8c6MC/k5H3RFKsrtBMMB8GA1UdIwQY
MBaAFLeJowzW9sGCBf2ayhSttCvw3JLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRtakROYjJ3WUlGX1pyS0ZLMjBLX0Rja3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iMmIzMTEtMmUzMi00YjBkLWI4NmMt
NjcxMzVkMzE2ZThjLzEvdDRtakROYjJ3WUlGX1pyS0ZLMjBLX0Rja3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iMmIzMTEtMmUzMi00YjBkLWI4NmMtNjcxMzVkMzE2ZThj
LzEvdDRtakROYjJ3WUlGX1pyS0ZLMjBLX0Rja3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYM6bn6a
AhSyiI7XxxQBDZRll/mKIdTfdSe2RtwkuiKKUAAbwwcB3Kp6ugWMQa9UJohOsf7d
3CGJymcn0qDb4ZNCpIc9HOQlDAgXRPRJ0yXIQ9q5rGPdgE+PL+d++8ggb/Tjf0GX
VcPTWxB3HT9fqTOThtNd/yFoBOmOXsozZna0HBRfMvsUwX9VeYyzoYJL9kpJomg1
tx1U66BW9JAH/4bcnk95VpV7OWsOqbSmxLwm2V8ztHs91rdY4QkmaBfqat3IdAmK
r76mTSHtU16TiUTmgQCh06fO8GoAyltQVfqlmpkXb/TTsPO2Xd4MzOwFyKoiE7eu
v/ZM57/Eafbfgg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:53 2025 by rpki-client