Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
File: t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft (raw, json)
Hash identifier: E7myG+f12xl6QmqhYEuEjY01gehhuOpMQh36+hzk45U=
Subject key identifier: 23:34:17:DB:9A:C4:45:CE:E8:A7:75:5B:2B:CB:5F:B6:55:F9:44:57
Authority key identifier: B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC
Certificate issuer: /CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec
Certificate serial: 0199FBEB63697A3EE458E3E762B0B3EF9BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
Manifest number: 0A87
Signing time: Sun 19 Oct 2025 10:02:11 +0000
Manifest this update: Sun 19 Oct 2025 10:02:11 +0000
Manifest next update: Mon 20 Oct 2025 10:02:11 +0000
Files and hashes: 1: t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl (hash: cvjFgWhtKZDC25Dg9y8ou1z/AC22YrRwU040ZNXOGJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:63:69:7a:3e:e4:58:e3:e7:62:b0:b3:ef:9b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec
Validity
Not Before: Oct 19 10:02:11 2025 GMT
Not After : Oct 20 10:02:11 2025 GMT
Subject: CN=233417db9ac445cee8a7755b2bcb5fb655f94457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8c:8e:2a:62:1f:80:0a:7a:88:1d:47:0a:e4:
e5:6f:ee:bb:84:2a:59:c4:27:4c:d8:92:d1:17:81:
56:7c:cf:90:ea:ee:92:5c:c3:8a:70:56:12:1d:1a:
1a:36:76:ca:26:df:fe:bb:79:d3:8c:4b:45:39:e0:
da:8d:40:49:61:5e:51:74:8c:4b:b6:24:67:0c:2b:
8d:19:f4:1b:f4:b8:9f:b9:36:db:c8:08:f8:db:aa:
39:d6:b2:28:a6:0d:5b:52:1a:ac:53:f7:c8:68:b0:
06:11:00:a0:cc:35:ee:2c:46:a9:cb:4e:6f:18:5c:
6b:e2:32:4f:f8:a3:17:96:96:0b:80:fb:2c:43:f9:
2d:50:e6:11:82:73:fc:24:a3:00:ac:db:bd:09:f5:
59:4c:40:90:33:40:2e:a8:7d:16:48:99:6a:7f:39:
c3:9d:ce:22:b9:f1:7c:eb:9d:b7:39:93:50:e2:81:
c0:76:a4:20:85:33:b1:c0:63:c8:98:9e:66:e7:b2:
28:4e:f7:de:79:58:44:8d:9d:7b:da:d5:b7:1d:8d:
0a:27:9b:d6:7a:1e:97:11:44:8c:bb:a5:ad:8d:1a:
83:97:29:1b:79:de:3b:f0:b7:81:7f:83:87:e7:9e:
e7:20:1e:51:f9:71:ca:f1:2f:8c:4a:2f:cb:f8:c6:
d9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:34:17:DB:9A:C4:45:CE:E8:A7:75:5B:2B:CB:5F:B6:55:F9:44:57
X509v3 Authority Key Identifier:
keyid:B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:67:0a:58:b5:d6:89:35:e0:4c:3a:d3:3e:15:62:d5:68:c2:
bc:e3:7d:c4:35:a1:41:94:7c:3a:0b:70:b9:8e:ae:90:9e:e8:
fc:4b:9b:70:3b:8f:33:22:4f:1e:ba:d6:88:0f:14:67:ec:e0:
00:d4:3c:16:a8:8f:37:a4:fc:c0:48:8c:8a:9f:82:2e:4b:4c:
ab:7b:7d:f5:dd:ae:41:5d:f6:35:53:50:86:57:90:98:a4:ce:
60:bb:ce:ac:6a:a1:05:45:a9:50:e7:ae:4e:59:b2:e0:d9:e0:
3e:d8:0c:05:ad:76:68:7c:d6:c4:1a:61:88:8d:44:9b:4d:96:
dd:c6:a4:d1:8f:36:b5:fe:11:0d:5b:8a:f3:ad:ed:87:46:95:
25:31:0c:89:41:88:bf:ff:70:92:51:93:a0:5f:b9:be:8b:5e:
20:ba:b3:bc:0b:60:54:d4:43:56:8c:36:39:3e:b0:6e:5c:05:
d7:8f:35:01:a6:16:98:0d:b4:8f:fb:52:25:17:9e:64:b5:bc:
dd:c4:2f:ed:11:7a:1a:79:a5:db:32:18:3a:40:f2:a6:aa:df:
ff:4a:60:88:bf:c8:84:46:4c:a0:64:75:7f:77:01:d1:ed:7a:
38:8a:34:cf:ee:05:aa:d6:c0:db:26:c3:97:2c:a0:2e:6e:ec:
4a:9b:3f:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn762Npej7kWOPnYrCz75vWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODlhMzBjZDZmNmMxODIwNWZkOWFjYTE0YWRiNDJiZjBk
YzkyZWMwHhcNMjUxMDE5MTAwMjExWhcNMjUxMDIwMTAwMjExWjAzMTEwLwYDVQQD
EygyMzM0MTdkYjlhYzQ0NWNlZThhNzc1NWIyYmNiNWZiNjU1Zjk0NDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoyOKmIfgAp6iB1HCuTlb+67hCpZ
xCdM2JLRF4FWfM+Q6u6SXMOKcFYSHRoaNnbKJt/+u3nTjEtFOeDajUBJYV5RdIxL
tiRnDCuNGfQb9LifuTbbyAj426o51rIopg1bUhqsU/fIaLAGEQCgzDXuLEapy05v
GFxr4jJP+KMXlpYLgPssQ/ktUOYRgnP8JKMArNu9CfVZTECQM0AuqH0WSJlqfznD
nc4iufF86523OZNQ4oHAdqQghTOxwGPImJ5m57IoTvfeeVhEjZ172tW3HY0KJ5vW
eh6XEUSMu6WtjRqDlykbed478LeBf4OH557nIB5R+XHK8S+MSi/L+MbZaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCM0F9uaxEXO6Kd1WyvLX7ZV+URXMB8GA1UdIwQY
MBaAFLeJowzW9sGCBf2ayhSttCvw3JLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRtakROYjJ3WUlGX1pyS0ZLMjBLX0Rja3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iMmIzMTEtMmUzMi00YjBkLWI4NmMt
NjcxMzVkMzE2ZThjLzEvdDRtakROYjJ3WUlGX1pyS0ZLMjBLX0Rja3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iMmIzMTEtMmUzMi00YjBkLWI4NmMtNjcxMzVkMzE2ZThj
LzEvdDRtakROYjJ3WUlGX1pyS0ZLMjBLX0Rja3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2cKWLXW
iTXgTDrTPhVi1WjCvON9xDWhQZR8OgtwuY6ukJ7o/EubcDuPMyJPHrrWiA8UZ+zg
ANQ8FqiPN6T8wEiMip+CLktMq3t99d2uQV32NVNQhleQmKTOYLvOrGqhBUWpUOeu
Tlmy4NngPtgMBa12aHzWxBphiI1Em02W3cak0Y82tf4RDVuK863th0aVJTEMiUGI
v/9wklGToF+5voteILqzvAtgVNRDVow2OT6wblwF1481AaYWmA20j/tSJReeZLW8
3cQv7RF6Gnml2zIYOkDypqrf/0pgiL/IhEZMoGR1f3cB0e16OIo0z+4FqtbA2ybD
lyygLm7sSps/ow==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:45 2025 by rpki-client