Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
File: T4dGzo6jgv8gOyinnvhBzrczyXs.mft (raw, json)
Hash identifier: g70v2YbQSEvGSvAqygwhA3MYLF0XPiMr7n7NHnMdZwE=
Subject key identifier: AF:77:56:CC:E2:E7:5B:01:1B:A6:D3:F7:9C:0E:EE:EE:AC:48:9B:E5
Authority key identifier: 4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B
Certificate issuer: /CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b
Certificate serial: 0199FB7C7CC56706127D8710A394B18EC68E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
Manifest number: 0233
Signing time: Sun 19 Oct 2025 08:01:03 +0000
Manifest this update: Sun 19 Oct 2025 08:01:03 +0000
Manifest next update: Mon 20 Oct 2025 08:01:03 +0000
Files and hashes: 1: T4dGzo6jgv8gOyinnvhBzrczyXs.crl (hash: e4EWHl+G+U+cD31D+yVuxxv18BxA0+l1d65lW/SuQYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:7c:c5:67:06:12:7d:87:10:a3:94:b1:8e:c6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b
Validity
Not Before: Oct 19 08:01:03 2025 GMT
Not After : Oct 20 08:01:03 2025 GMT
Subject: CN=af7756cce2e75b011ba6d3f79c0eeeeeac489be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:db:52:05:73:13:46:44:56:0c:f1:69:ed:
47:08:c1:07:8f:5d:06:e8:4a:ad:fe:60:ef:98:e7:
ef:0b:79:94:17:5b:46:d6:a3:47:59:5c:95:c8:09:
d9:f7:49:70:6a:e5:f8:16:33:fa:6f:44:c2:21:45:
46:76:6b:75:86:50:7e:34:dd:5f:ca:cf:d1:df:5b:
6e:1a:f5:b1:4d:f0:9b:a3:41:5c:8c:38:76:90:d0:
57:d1:0d:36:ed:58:38:81:81:df:76:e9:2f:6d:40:
63:b9:5a:e1:ff:68:da:e7:8f:ea:69:c7:bb:e2:2d:
4f:fa:76:3c:72:ab:b0:bd:17:9b:35:3a:9c:1f:b6:
c6:89:6e:58:f8:a2:84:75:c7:1b:87:6a:1d:3a:56:
e0:e6:30:f6:b8:8a:b2:92:a7:36:a8:a7:1c:95:ba:
93:d8:32:bb:0c:a6:6c:3c:24:12:21:ce:31:1a:cb:
cf:42:b8:2b:a9:cb:45:48:45:a2:12:e2:ab:ec:ce:
66:92:90:34:60:32:8a:26:2f:2f:20:c7:14:ec:37:
e3:f2:63:5c:78:41:28:aa:ee:ed:d5:42:a9:e7:8a:
3c:ea:93:33:d3:10:f4:ed:37:b7:1a:e4:91:fc:5d:
79:67:ed:41:1b:f6:fd:2d:9d:75:91:6e:a2:09:59:
17:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:77:56:CC:E2:E7:5B:01:1B:A6:D3:F7:9C:0E:EE:EE:AC:48:9B:E5
X509v3 Authority Key Identifier:
keyid:4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d7:f2:ce:62:ba:47:17:2f:7e:9d:9d:41:7c:d2:fb:18:c0:
19:05:ce:f8:2f:b3:08:de:d8:62:cf:6f:72:aa:94:91:17:ea:
12:c6:1e:1a:40:25:c3:e5:a2:af:b2:f3:89:4a:50:79:9a:84:
d5:41:59:23:15:4d:ce:a9:e9:2a:f0:d9:04:db:7d:61:6c:2a:
11:d9:41:88:cf:49:65:e6:fa:4b:95:af:d1:e7:4f:7a:90:6e:
40:43:86:cd:25:35:ba:a1:07:50:ea:29:d3:fe:2b:28:df:0f:
0a:41:e5:e3:51:a2:dd:15:45:d6:af:6a:d9:8c:c5:0a:09:ba:
f6:c0:a8:a4:6b:3e:a0:52:8e:f0:d2:ca:1b:d0:66:c5:b2:fe:
ad:27:7e:20:b3:a0:4d:cf:d3:fc:c8:38:38:47:e3:97:54:b0:
93:f2:f8:82:1c:db:48:45:2b:46:fe:59:ad:fa:59:5a:5d:bc:
ef:ef:a5:43:8e:f8:56:18:bf:f0:7a:54:e4:0a:15:9a:2f:88:
75:fe:3c:89:a7:1d:66:1d:40:90:60:40:3f:ee:a6:20:b8:bf:
c6:bb:74:a6:d8:88:cb:cc:fe:c5:e5:e2:6d:e0:20:0f:4d:5e:
dc:c5:70:d7:42:67:fd:92:34:e9:2d:c0:a7:39:ed:6d:cb:a6:
93:d8:c7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:56 2025 by rpki-client