Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
File: T4BFzPUJd-vDBmo87tj9MvHwI94.mft (raw, json)
Hash identifier: vzcBLvoIq7PQyQoV0ZdLTeGE6hUxpBmlEShQtkgvBCY=
Subject key identifier: C6:E1:21:EB:5E:F8:90:D6:CE:94:BD:FD:9B:54:2F:F9:CE:EA:C8:BC
Authority key identifier: 4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE
Certificate issuer: /CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
Certificate serial: 0199FC59050438F467962ADE3D55A31A1C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
Manifest number: 1620
Signing time: Sun 19 Oct 2025 12:01:56 +0000
Manifest this update: Sun 19 Oct 2025 12:01:56 +0000
Manifest next update: Mon 20 Oct 2025 12:01:56 +0000
Files and hashes: 1: T4BFzPUJd-vDBmo87tj9MvHwI94.crl (hash: QQ1DH5BZszwKP++wscf1qz/jnMOFW2b4DsIlKbftB0E=)
2: YKTSjuC1HFTX7b7hXOaQuasHjw8.roa (hash: DCJ4Y27xyiCClFTgENixBHPREjuVymaDjhE/h8glQl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:05:04:38:f4:67:96:2a:de:3d:55:a3:1a:1c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
Validity
Not Before: Oct 19 12:01:56 2025 GMT
Not After : Oct 20 12:01:56 2025 GMT
Subject: CN=c6e121eb5ef890d6ce94bdfd9b542ff9ceeac8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f6:5f:ea:27:cd:86:14:90:a7:27:4e:8e:be:
84:a8:41:99:ef:6d:d5:9a:68:81:c4:2f:a3:18:08:
f4:2e:8e:0b:ac:c1:22:d5:09:5b:15:2f:f9:6f:6c:
82:23:52:7b:2e:97:39:2b:99:ef:fd:b6:c0:0c:ad:
3d:91:0d:a5:e4:8d:97:af:70:cd:d3:43:ba:12:93:
e3:c0:56:95:5b:88:0c:7a:c1:50:80:f9:3d:d7:85:
b8:6e:5e:6e:1b:9d:91:62:fa:27:0c:06:e2:42:a5:
0e:6b:84:09:4e:8c:ae:21:58:b8:fe:c3:0d:41:50:
f8:f7:4c:52:1b:cd:c3:58:23:be:e0:38:46:69:12:
87:dc:76:da:11:ed:5b:b7:8a:24:ac:15:87:a1:c1:
8b:7b:6e:10:bb:4e:40:bc:f0:f5:4d:48:a9:7c:eb:
11:5c:10:f7:1d:4b:a2:a4:02:f4:e2:4e:b5:46:8d:
08:c1:b0:ca:89:66:cc:92:a5:c8:35:07:17:3a:28:
11:ac:4d:0b:97:f7:1d:a9:a7:d4:df:57:f4:8e:84:
da:9f:ef:62:0c:56:b6:ab:2e:b2:e1:69:51:4e:93:
62:f9:ab:7f:87:84:77:27:7b:76:b9:62:e6:82:3d:
7c:4b:63:24:6a:90:a4:dd:77:63:7c:a9:33:79:dd:
61:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E1:21:EB:5E:F8:90:D6:CE:94:BD:FD:9B:54:2F:F9:CE:EA:C8:BC
X509v3 Authority Key Identifier:
keyid:4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e4:78:c1:97:ee:ec:d6:38:2d:56:7e:20:3a:b4:6b:cc:8d:
96:f6:7e:da:59:a6:76:8c:fa:ca:70:4a:09:d7:32:b5:45:18:
d5:de:78:d2:ec:72:ad:87:8a:0e:16:59:c8:ab:61:d1:21:1d:
6c:f0:ec:da:3b:64:7e:66:94:53:15:09:e1:d1:b6:d8:70:43:
f7:15:72:c7:05:27:5e:5b:ce:ee:71:01:3f:53:1d:22:11:c3:
91:3c:a0:7a:f9:1c:41:6c:4f:20:4e:03:20:fd:20:1d:a0:39:
e1:df:07:75:43:e7:cd:42:f8:1e:16:43:d6:1a:05:5f:65:54:
cd:0a:37:f5:92:b9:e7:13:9c:c3:1a:40:09:11:7e:8f:4e:33:
28:9f:2a:2a:10:c7:a4:76:db:a4:ec:9c:ce:a3:fa:79:01:aa:
b2:1c:0d:a4:f5:0a:16:4a:6f:e0:3f:b3:9d:dc:4c:8c:d5:11:
03:88:b0:92:34:d1:e5:e8:79:29:1d:04:c5:22:0d:8d:23:0b:
2d:72:56:1b:2e:65:bf:45:66:d4:04:3e:af:d7:cc:f7:a9:d3:
32:c5:1e:c9:6c:bb:5b:bb:48:9e:fc:ee:46:be:05:31:ad:1a:
0c:23:84:59:32:ee:8c:1a:bd:cb:55:80:5b:1f:e9:02:18:de:
6c:80:b9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:28:47 2025 by rpki-client