Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
File: T4BFzPUJd-vDBmo87tj9MvHwI94.mft (raw, json)
Hash identifier: Zc/YCscKV9MAMvVxkW1rdArZSVzIj2y1YY1pASK6gEY=
Subject key identifier: 6D:95:77:F5:9C:A4:42:D0:18:94:47:2D:4D:4B:58:2C:A9:23:16:05
Authority key identifier: 4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE
Certificate issuer: /CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
Certificate serial: 0198D705F6D7722121E381E177AD09913439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
Manifest number: 1588
Signing time: Sat 23 Aug 2025 13:02:28 +0000
Manifest this update: Sat 23 Aug 2025 13:02:28 +0000
Manifest next update: Sun 24 Aug 2025 13:02:28 +0000
Files and hashes: 1: T4BFzPUJd-vDBmo87tj9MvHwI94.crl (hash: t8OVbSh1L7SvqFuCNDAigJ60L44wQJj96sOM1Qz5qqI=)
2: YKTSjuC1HFTX7b7hXOaQuasHjw8.roa (hash: DCJ4Y27xyiCClFTgENixBHPREjuVymaDjhE/h8glQl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:f6:d7:72:21:21:e3:81:e1:77:ad:09:91:34:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
Validity
Not Before: Aug 23 13:02:28 2025 GMT
Not After : Aug 24 13:02:28 2025 GMT
Subject: CN=6d9577f59ca442d01894472d4d4b582ca9231605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:b8:1b:88:a2:ef:12:31:45:72:08:fc:40:
6e:bd:8f:e6:c6:de:c9:74:22:0d:bf:e2:6d:f1:3d:
8f:f5:f7:e7:e6:21:54:4e:64:5c:f6:fc:a6:0e:0e:
9f:3f:23:0e:13:c2:aa:64:12:72:a8:98:0c:49:03:
51:2c:d1:1d:53:36:bd:3a:e1:39:a5:c6:42:e4:d5:
3f:77:fd:ee:36:92:22:aa:5c:58:f6:6f:c6:ad:52:
84:4f:df:eb:e2:22:89:bc:f2:5b:9f:da:97:c5:4d:
17:1b:4f:ee:13:76:7a:e5:fe:81:af:87:fc:ca:7a:
1f:5c:03:79:f7:26:0e:49:1f:29:7b:aa:bb:a9:80:
99:94:10:0a:ab:26:a6:03:19:7f:b6:44:5b:9d:82:
36:d3:99:a8:78:a8:f2:18:a2:18:7d:62:e2:b0:f6:
c8:23:66:f1:db:84:72:b3:6f:02:d4:07:03:42:9a:
4f:15:61:64:27:44:6d:81:40:55:dd:c3:42:f3:ab:
2b:85:6a:e8:7b:89:09:92:ad:c4:bc:26:5f:9d:70:
84:71:f0:8c:7c:b9:04:5d:2c:f7:70:0e:fe:fe:70:
e4:0a:97:36:16:3f:d1:59:f4:1b:c0:b4:ef:a6:c8:
e2:95:b8:d4:be:2d:c8:e4:9e:b3:d8:54:2c:8b:9f:
04:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:95:77:F5:9C:A4:42:D0:18:94:47:2D:4D:4B:58:2C:A9:23:16:05
X509v3 Authority Key Identifier:
keyid:4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f8:91:6f:0a:09:ce:ae:5e:dc:73:62:95:0f:85:a7:24:9a:
58:2a:19:e5:4c:92:4e:7d:3e:be:cd:16:72:9e:df:48:3b:88:
26:42:7f:84:54:03:dc:86:7b:fe:7a:39:65:5c:e3:65:83:d0:
17:60:7b:3d:fe:fa:1c:6a:4f:e9:fa:ce:59:5a:a9:21:c7:5e:
1c:fe:bd:64:b0:1e:c8:8b:bf:9e:8c:0c:b5:98:a9:b2:7e:57:
79:51:75:60:0d:d0:93:75:5a:79:32:bb:d2:5c:be:0f:05:11:
d9:84:73:17:94:60:4f:be:6f:7b:89:22:5d:46:eb:d0:8e:2e:
18:7d:88:7b:2c:99:6c:01:fe:77:64:a9:55:74:cc:b3:61:b1:
ea:44:ca:9b:a5:44:41:c4:fb:f9:1c:05:94:65:c8:01:77:fb:
b4:69:7d:fe:90:02:be:f0:d5:56:f7:59:bf:d9:0b:6e:32:c8:
59:b6:c9:c2:93:68:89:d2:d6:c9:72:1a:6c:e2:5d:26:56:dd:
19:40:8d:21:f8:cf:29:38:08:0b:3d:ff:f5:be:97:67:a1:93:
b0:53:39:30:8f:65:ce:24:93:d6:d8:b1:1d:49:e8:ee:50:a2:
9c:49:0b:a3:ae:65:58:e8:05:d8:8f:1f:bd:62:99:6f:9e:45:
ff:bc:ee:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:06 2025 by rpki-client