Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
File: T4dGzo6jgv8gOyinnvhBzrczyXs.mft (raw, json)
Hash identifier: UiDDFpoSAcVH1d4TXR4hNFNJlD9mxG9Xa9c9kvSkPNg=
Subject key identifier: 04:31:DC:56:7E:54:08:8B:A0:BC:33:B6:8D:70:45:65:C4:77:C2:7B
Authority key identifier: 4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B
Certificate issuer: /CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b
Certificate serial: 0198D5F179F138A980634D93F00E8CCE1203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
Manifest number: 019B
Signing time: Sat 23 Aug 2025 08:00:28 +0000
Manifest this update: Sat 23 Aug 2025 08:00:28 +0000
Manifest next update: Sun 24 Aug 2025 08:00:28 +0000
Files and hashes: 1: T4dGzo6jgv8gOyinnvhBzrczyXs.crl (hash: XDsXYfHQkkVAnF2PKC6gd7xFjs9IG2sXSIALIP3pFKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:79:f1:38:a9:80:63:4d:93:f0:0e:8c:ce:12:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b
Validity
Not Before: Aug 23 08:00:28 2025 GMT
Not After : Aug 24 08:00:28 2025 GMT
Subject: CN=0431dc567e54088ba0bc33b68d704565c477c27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c5:da:d2:dc:c9:27:b2:bf:b2:47:cd:17:dc:
0d:d3:91:9f:3c:91:c4:22:e4:d1:71:73:2d:06:2b:
aa:08:a9:39:25:2d:f2:61:80:c0:31:c5:ca:97:80:
62:aa:9c:08:9d:6c:ec:b5:c9:94:61:74:db:40:8c:
0f:5a:40:b3:bc:2a:69:e8:17:8a:9e:06:a5:16:96:
ca:78:33:0a:fc:ac:09:f5:ae:8d:d1:07:f7:57:36:
15:c0:07:17:a8:f5:5b:65:4e:f3:e8:3b:84:5f:6d:
c6:05:3c:10:bb:33:d5:ef:3f:61:49:f9:10:f7:45:
fd:c6:dc:5b:6b:e6:d7:51:99:8c:14:9e:b9:65:fe:
74:0d:a8:73:da:40:0e:50:e0:ca:41:29:e9:1c:cd:
76:46:cf:82:09:0a:21:1a:67:16:06:b1:1e:26:87:
fe:60:80:4e:87:17:0d:08:6d:18:ac:c6:1f:eb:0a:
70:01:8d:ac:7c:57:fa:1f:5a:32:54:27:5d:7f:00:
7a:3e:e9:56:7a:b2:97:5f:6d:b6:16:73:e5:9a:e7:
7d:e0:02:ca:0f:b9:b0:3a:80:eb:22:a3:45:90:e2:
55:fb:86:5d:8c:47:4d:1c:e7:b6:ec:9d:08:d6:2a:
46:4e:30:a6:f2:52:a0:46:a0:5e:aa:85:85:76:c0:
fa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:31:DC:56:7E:54:08:8B:A0:BC:33:B6:8D:70:45:65:C4:77:C2:7B
X509v3 Authority Key Identifier:
keyid:4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a6:7b:5f:11:3c:e2:bc:69:86:22:74:d3:5f:18:7d:77:86:
28:45:6d:13:06:8e:39:12:f9:68:a7:be:60:c5:f3:85:05:cf:
8d:d2:94:57:26:4e:38:49:17:18:2f:6d:ed:b5:51:44:e1:6d:
62:38:76:23:d2:06:3f:60:1a:68:4c:53:f4:04:85:26:fb:60:
46:aa:3f:20:6e:79:14:b0:0c:08:56:a2:99:da:21:1f:e3:61:
21:a2:52:d2:33:22:82:bf:31:2a:7f:dc:30:4f:b1:14:8b:6f:
b2:86:2d:e4:97:9f:66:2d:89:a3:d8:5f:9e:e0:ed:97:9d:d3:
80:9e:8d:af:7e:e8:61:b7:24:64:d6:b8:a2:a3:19:8d:96:53:
60:37:53:bf:36:d4:32:8e:66:f8:cd:a6:5c:23:93:5d:14:6f:
a7:0c:72:94:63:90:b5:f9:84:35:b7:4e:c6:9c:1e:bb:fc:e7:
d9:46:59:5f:ef:b5:4d:7b:f0:f1:fa:0c:bf:35:4c:db:f9:dc:
d2:66:06:46:ac:2a:87:43:05:ee:84:cc:a7:5a:68:8e:bb:21:
78:91:85:36:a0:cd:5a:37:fe:de:05:c4:8c:1e:50:d1:fa:15:
a5:9a:fa:fb:59:cd:dc:72:ac:ff:51:a8:8a:eb:3f:0a:18:75:
72:f5:58:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8XnxOKmAY02T8A6MzhIDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODc0NmNlOGVhMzgyZmYyMDNiMjhhNzllZjg0MWNlYjcz
M2M5N2IwHhcNMjUwODIzMDgwMDI4WhcNMjUwODI0MDgwMDI4WjAzMTEwLwYDVQQD
EygwNDMxZGM1NjdlNTQwODhiYTBiYzMzYjY4ZDcwNDU2NWM0NzdjMjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MXa0tzJJ7K/skfNF9wN05GfPJHE
IuTRcXMtBiuqCKk5JS3yYYDAMcXKl4BiqpwInWzstcmUYXTbQIwPWkCzvCpp6BeK
ngalFpbKeDMK/KwJ9a6N0Qf3VzYVwAcXqPVbZU7z6DuEX23GBTwQuzPV7z9hSfkQ
90X9xtxba+bXUZmMFJ65Zf50Dahz2kAOUODKQSnpHM12Rs+CCQohGmcWBrEeJof+
YIBOhxcNCG0YrMYf6wpwAY2sfFf6H1oyVCddfwB6PulWerKXX222FnPlmud94ALK
D7mwOoDrIqNFkOJV+4ZdjEdNHOe27J0I1ipGTjCm8lKgRqBeqoWFdsD6WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQx3FZ+VAiLoLwzto1wRWXEd8J7MB8GA1UdIwQY
MBaAFE+HRs6Oo4L/IDsop574Qc63M8l7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRkR3pvNmpndjhnT3lpbm52aEJ6cmN6eVhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85NjQ5OWItNGQ5ZC00MjcyLTgzMjQt
NmJjMmJhZjk5MjJiLzEvVDRkR3pvNmpndjhnT3lpbm52aEJ6cmN6eVhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85NjQ5OWItNGQ5ZC00MjcyLTgzMjQtNmJjMmJhZjk5MjJi
LzEvVDRkR3pvNmpndjhnT3lpbm52aEJ6cmN6eVhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIaZ7XxE8
4rxphiJ0018YfXeGKEVtEwaOORL5aKe+YMXzhQXPjdKUVyZOOEkXGC9t7bVRROFt
Yjh2I9IGP2AaaExT9ASFJvtgRqo/IG55FLAMCFaimdohH+NhIaJS0jMigr8xKn/c
ME+xFItvsoYt5JefZi2Jo9hfnuDtl53TgJ6Nr37oYbckZNa4oqMZjZZTYDdTvzbU
Mo5m+M2mXCOTXRRvpwxylGOQtfmENbdOxpweu/zn2UZZX++1TXvw8foMvzVM2/nc
0mYGRqwqh0MF7oTMp1pojrsheJGFNqDNWjf+3gXEjB5Q0foVpZr6+1nN3HKs/1Go
ius/Chh1cvVYCA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:18:19 2025 by rpki-client