Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
File: T4BFzPUJd-vDBmo87tj9MvHwI94.mft (raw, json)
Hash identifier: +HurJwg3L+nUm45qSzOZ98I2157Cz/DtHfJYrQupjps=
Subject key identifier: 67:E7:52:1F:83:F8:5E:BF:73:84:9B:67:01:9D:75:72:3A:65:6D:C9
Authority key identifier: 4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE
Certificate issuer: /CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
Certificate serial: 0197B74506536B53C54D6285D70ECF27A68E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
Manifest number: 14F3
Signing time: Sat 28 Jun 2025 16:00:43 +0000
Manifest this update: Sat 28 Jun 2025 16:00:43 +0000
Manifest next update: Sun 29 Jun 2025 16:00:43 +0000
Files and hashes: 1: T4BFzPUJd-vDBmo87tj9MvHwI94.crl (hash: AyCbK7jJ/IHd7QSRQF589LCmLoDZvzCMTnAs9PO3kBY=)
2: YKTSjuC1HFTX7b7hXOaQuasHjw8.roa (hash: DCJ4Y27xyiCClFTgENixBHPREjuVymaDjhE/h8glQl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:06:53:6b:53:c5:4d:62:85:d7:0e:cf:27:a6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
Validity
Not Before: Jun 28 16:00:43 2025 GMT
Not After : Jun 29 16:00:43 2025 GMT
Subject: CN=67e7521f83f85ebf73849b67019d75723a656dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:e7:75:6b:91:3f:91:ee:3a:d7:cd:8a:22:
7c:5a:2a:15:65:15:d6:0d:7d:70:a9:e6:18:dd:a3:
d3:be:b9:dd:bc:22:68:2a:45:96:f9:57:19:7d:91:
e8:b8:9c:28:ef:ee:df:e8:2e:fa:26:01:66:bd:83:
11:b5:ee:17:2f:a2:90:9f:80:b8:68:36:3f:a3:67:
62:96:7a:de:f3:76:5b:b1:d3:3b:6e:fa:ac:d2:81:
ed:4c:53:88:81:c5:e1:5f:89:11:e0:3c:cb:21:52:
d1:66:13:d6:8d:fc:ee:bd:4b:b3:e2:f6:27:fb:4e:
5b:ce:c7:61:08:b2:87:12:8e:3b:73:3c:46:f3:bf:
cf:bb:de:04:0d:29:08:01:67:36:98:17:57:42:51:
c5:e9:10:ad:22:97:49:e9:fb:c9:6e:95:2b:1a:0f:
fa:97:1b:49:1f:d5:3b:cf:96:21:00:a0:9c:02:dd:
9a:4d:e3:f4:a5:74:0b:38:ba:18:37:17:b7:80:b7:
06:09:fa:2e:2d:39:c6:52:37:25:0b:13:96:f6:c4:
fd:68:5e:1d:43:62:b2:bc:a4:d2:33:56:6e:95:09:
bb:da:e1:c6:90:4d:90:a7:ef:5b:3b:ae:9f:29:76:
3f:79:4c:31:8d:4b:c4:3f:8e:9a:e4:4b:30:41:e1:
85:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E7:52:1F:83:F8:5E:BF:73:84:9B:67:01:9D:75:72:3A:65:6D:C9
X509v3 Authority Key Identifier:
keyid:4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:39:61:38:5c:08:7c:79:e0:cc:20:bd:26:00:82:64:0d:9d:
9f:a9:06:2e:b8:0f:8d:3f:49:7c:44:ab:11:f5:8a:9b:97:75:
bc:60:16:21:e3:b2:2d:4e:79:7e:25:6d:45:be:39:fa:4b:77:
26:aa:21:34:76:8f:32:34:e6:58:a3:a1:34:af:4b:57:1c:69:
1e:02:ae:18:a3:06:27:59:84:8c:75:6d:1e:8e:ab:f9:cd:1a:
83:24:db:71:a2:4b:92:84:73:08:04:02:bd:12:0d:06:f3:94:
e2:25:7c:4e:89:36:6b:5c:e5:39:ee:00:60:5c:5b:5c:68:4d:
58:a1:a7:86:f5:8f:07:a6:6d:ef:c0:2f:21:ad:88:b9:d9:9c:
34:2a:b6:1e:61:8a:dc:a9:8e:24:fe:29:bc:17:19:5b:af:d4:
e1:0a:ec:d2:49:77:11:2b:95:e6:62:e3:65:39:cf:f8:f1:47:
10:62:3b:12:f5:a5:32:d8:57:3a:4b:29:2e:15:13:f1:25:07:
fb:08:5d:b2:6a:46:f6:07:89:f1:18:93:cd:50:af:9c:97:0f:
5a:0e:47:b0:2b:8b:10:d9:7c:6e:2c:86:c9:ac:9a:5a:22:ab:
ee:fa:6b:f8:45:e0:82:77:4b:54:e9:03:56:7d:d6:88:14:c0:
01:3a:33:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:19 2025 by rpki-client