Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
File: T4zW4dX8wEW55lmcDK6hfUdoX5U.mft (raw, json)
Hash identifier: OGi9h9zORP/zjQMVfC1oSkzGeUwzmLri1XFVpLr6luM=
Subject key identifier: 9A:C5:BB:3A:86:0A:B1:51:BA:45:30:8B:67:E1:C5:85:E7:46:B7:A8
Authority key identifier: 4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
Certificate issuer: /CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Certificate serial: 0197B6A0D490271A2A2C95642FBEA81D48F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
Manifest number: 10F6
Signing time: Sat 28 Jun 2025 13:01:22 +0000
Manifest this update: Sat 28 Jun 2025 13:01:22 +0000
Manifest next update: Sun 29 Jun 2025 13:01:22 +0000
Files and hashes: 1: T4zW4dX8wEW55lmcDK6hfUdoX5U.crl (hash: lh7BvJL8pM/ghvkbKXKq7HbE5uX7G/eoEzFmjy8qNps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d4:90:27:1a:2a:2c:95:64:2f:be:a8:1d:48:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Validity
Not Before: Jun 28 13:01:22 2025 GMT
Not After : Jun 29 13:01:22 2025 GMT
Subject: CN=9ac5bb3a860ab151ba45308b67e1c585e746b7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:32:f1:9a:7d:10:9b:8d:42:05:35:d5:a9:
e0:7b:32:7e:7c:e1:e9:56:84:27:a5:26:98:05:78:
6f:fe:21:7b:29:ab:7b:5d:5d:de:74:22:2d:7f:5e:
cc:7d:44:e5:d9:49:e8:e7:d2:60:30:14:74:d1:a8:
c6:9f:58:f3:14:af:cd:eb:d2:99:66:d7:c0:4d:9c:
6b:ea:ae:a9:8e:72:c3:57:b1:49:ae:eb:01:94:1d:
d7:06:f3:3a:7b:3c:17:bc:ed:ee:93:b0:4f:99:ea:
f6:9d:bb:09:0b:ba:ac:69:b3:62:14:c0:89:95:d3:
a0:fd:9b:df:94:df:e6:47:d5:ca:05:5f:61:b3:6d:
29:ed:21:9f:df:b9:6e:47:cd:c5:d8:e6:da:0b:e7:
d3:5d:a9:1c:75:58:95:54:6b:b8:40:1e:1b:7c:82:
1c:7e:b4:4c:ce:0d:f6:c1:85:4f:4b:0f:da:22:12:
a0:f1:d4:1c:eb:9a:56:61:de:b3:dc:1d:0f:6b:22:
61:57:4c:99:13:44:20:11:cc:ec:14:d3:79:26:39:
a9:15:94:92:e5:58:96:88:01:f4:e4:bc:ae:8e:83:
96:1e:8f:41:fd:7f:e6:cd:f9:81:f5:1c:e8:0f:bf:
dc:6e:76:17:93:cb:53:c3:e1:1a:9b:dd:d7:5a:a3:
d6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C5:BB:3A:86:0A:B1:51:BA:45:30:8B:67:E1:C5:85:E7:46:B7:A8
X509v3 Authority Key Identifier:
keyid:4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:58:c8:b0:e4:5a:06:62:3a:db:80:3a:ee:ef:ef:67:7d:9e:
55:5b:26:04:9c:01:73:3b:3b:03:90:1e:f1:50:cb:85:2e:03:
e7:80:00:79:38:ab:6f:26:01:4f:ea:71:11:ce:26:61:f5:b0:
21:47:27:58:fe:a1:66:d4:f4:b0:cb:8f:67:34:91:c1:a8:60:
f6:87:5a:59:a5:43:2b:b9:1c:82:a9:bf:73:f2:62:ca:73:d9:
0f:53:07:c9:3b:07:1e:8b:ae:8f:1d:1f:43:a0:2c:ec:34:92:
f0:a7:90:5a:db:bb:80:b1:3a:bb:18:a9:c7:b1:c3:e2:ab:3e:
41:46:25:5c:5d:4f:11:20:12:9d:6b:30:f3:2e:82:13:f1:4e:
da:15:66:38:85:80:b8:d2:e7:28:bd:9a:67:58:df:e1:b7:9a:
00:c6:fd:d6:f4:37:7d:5a:06:f2:a4:cf:e9:46:f8:23:53:e6:
98:3b:79:33:49:5e:b3:16:32:e2:61:b1:09:6a:a5:80:23:53:
d0:10:6e:13:e7:28:9c:fd:9f:b9:a1:65:c7:7c:28:d3:bd:29:
ef:e0:c1:ad:1a:cb:be:cb:d6:d4:a2:67:a5:d8:a4:89:6e:ac:
1b:62:bb:70:26:fc:84:9a:d0:46:72:b1:ce:c5:20:6b:b9:b9:
a8:eb:53:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oNSQJxoqLJVkL76oHUj0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGNkNmUxZDVmY2MwNDViOWU2NTk5YzBjYWVhMTdkNDc2
ODVmOTUwHhcNMjUwNjI4MTMwMTIyWhcNMjUwNjI5MTMwMTIyWjAzMTEwLwYDVQQD
Eyg5YWM1YmIzYTg2MGFiMTUxYmE0NTMwOGI2N2UxYzU4NWU3NDZiN2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovYy8Zp9EJuNQgU11angezJ+fOHp
VoQnpSaYBXhv/iF7Kat7XV3edCItf17MfUTl2Uno59JgMBR00ajGn1jzFK/N69KZ
ZtfATZxr6q6pjnLDV7FJrusBlB3XBvM6ezwXvO3uk7BPmer2nbsJC7qsabNiFMCJ
ldOg/ZvflN/mR9XKBV9hs20p7SGf37luR83F2ObaC+fTXakcdViVVGu4QB4bfIIc
frRMzg32wYVPSw/aIhKg8dQc65pWYd6z3B0PayJhV0yZE0QgEczsFNN5JjmpFZSS
5ViWiAH05LyujoOWHo9B/X/mzfmB9RzoD7/cbnYXk8tTw+Eam93XWqPW5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrFuzqGCrFRukUwi2fhxYXnRreoMB8GA1UdIwQY
MBaAFE+M1uHV/MBFueZZnAyuoX1HaF+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDR6VzRkWDh3RVc1NWxtY0RLNmhmVWRvWDVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mNGI2MDktY2U1ZC00OWYwLTkxMzYt
MmVjYTc2YmM3ZmNhLzEvVDR6VzRkWDh3RVc1NWxtY0RLNmhmVWRvWDVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9mNGI2MDktY2U1ZC00OWYwLTkxMzYtMmVjYTc2YmM3ZmNh
LzEvVDR6VzRkWDh3RVc1NWxtY0RLNmhmVWRvWDVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVljIsORa
BmI624A67u/vZ32eVVsmBJwBczs7A5Ae8VDLhS4D54AAeTirbyYBT+pxEc4mYfWw
IUcnWP6hZtT0sMuPZzSRwahg9odaWaVDK7kcgqm/c/JiynPZD1MHyTsHHouujx0f
Q6As7DSS8KeQWtu7gLE6uxipx7HD4qs+QUYlXF1PESASnWsw8y6CE/FO2hVmOIWA
uNLnKL2aZ1jf4beaAMb91vQ3fVoG8qTP6Ub4I1PmmDt5M0lesxYy4mGxCWqlgCNT
0BBuE+conP2fuaFlx3wo070p7+DBrRrLvsvW1KJnpdikiW6sG2K7cCb8hJrQRnKx
zsUga7m5qOtTyQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:34 2025 by rpki-client