Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
File: T4zW4dX8wEW55lmcDK6hfUdoX5U.mft (raw, json)
Hash identifier: nxwggUzO8BIhaABSVTW+lUywOYyRncJcMIHLrN7uD2U=
Subject key identifier: 7E:32:2C:6C:7C:0B:3A:AB:CC:9E:E5:87:FD:B5:EF:21:EC:0F:90:F2
Authority key identifier: 4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
Certificate issuer: /CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Certificate serial: 0198D84FD5F41BE81EEB0C37E2927BCF82B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
Manifest number: 118C
Signing time: Sat 23 Aug 2025 19:02:47 +0000
Manifest this update: Sat 23 Aug 2025 19:02:47 +0000
Manifest next update: Sun 24 Aug 2025 19:02:47 +0000
Files and hashes: 1: T4zW4dX8wEW55lmcDK6hfUdoX5U.crl (hash: fB/sLa+rxysuG9GVfHhnnzj0iI/g0UkHR70D/MRYDEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:d5:f4:1b:e8:1e:eb:0c:37:e2:92:7b:cf:82:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Validity
Not Before: Aug 23 19:02:47 2025 GMT
Not After : Aug 24 19:02:47 2025 GMT
Subject: CN=7e322c6c7c0b3aabcc9ee587fdb5ef21ec0f90f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bf:0b:2b:3a:ab:cb:da:d6:75:63:2a:84:cd:
6b:a0:85:f6:5f:85:b3:91:59:7d:2f:72:de:07:5e:
b3:b4:a6:fc:9b:4f:0a:e1:8d:2b:10:ac:45:61:ca:
5e:3d:40:92:81:e0:bf:c0:c8:89:29:17:ce:a9:7d:
2f:92:27:b0:99:ed:37:0a:0b:a6:ab:40:98:c0:a6:
39:1c:6d:5f:5a:7d:f2:f2:c1:2b:52:eb:b7:2f:4a:
21:82:2f:9e:b5:85:27:a2:07:19:c4:06:8b:68:ea:
99:b0:2f:ce:8d:24:9a:87:48:78:72:58:7d:e2:ed:
4b:bd:28:68:81:21:b4:64:69:03:1c:e3:23:1f:6b:
a8:60:75:2c:91:ea:ff:82:68:82:5d:f6:7b:80:a5:
f5:89:c1:df:29:8d:2d:43:aa:69:da:81:e2:ae:4b:
e7:c0:46:4a:1d:45:16:47:4a:84:02:05:c4:74:e5:
87:1b:c0:43:0b:75:8f:b5:ce:39:73:2a:f6:01:2f:
04:49:49:3c:5f:40:db:1a:cb:00:26:6d:d6:1a:ed:
20:67:23:a6:95:62:e2:36:2e:b9:1e:b7:2b:8b:93:
ab:f6:e2:e9:f0:7f:52:22:e4:3b:43:28:e5:4b:4d:
ad:74:d3:fa:14:6f:6a:4f:fd:40:b6:b2:5f:91:bd:
d0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:32:2C:6C:7C:0B:3A:AB:CC:9E:E5:87:FD:B5:EF:21:EC:0F:90:F2
X509v3 Authority Key Identifier:
keyid:4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d2:21:44:e1:26:c8:a9:e4:23:e2:c4:ae:7c:21:3f:75:02:
d9:09:02:f4:35:d5:fc:9c:e0:4d:86:0e:5f:54:a0:0e:4b:78:
41:29:1d:28:51:c2:d7:9b:b8:2a:24:26:66:13:f1:c3:90:18:
24:97:86:62:0c:df:7e:6f:7a:05:e2:fe:e7:bb:44:b2:40:cf:
48:f6:61:72:53:fb:e6:ed:5a:c5:27:c8:fb:b7:8b:e5:8b:8a:
48:8b:97:fb:3e:ab:1f:6f:60:20:c1:00:97:31:f8:c3:da:4f:
9b:ea:64:a7:cc:b5:da:1d:89:23:d1:b0:1f:b4:a6:24:4d:75:
7e:ca:ca:4f:47:06:25:8a:4f:6f:aa:78:a7:65:33:e8:26:83:
29:80:21:53:d8:db:2b:66:19:22:9f:50:fe:9f:e5:5b:77:95:
9d:1a:bc:5e:11:99:ca:8d:8d:cc:b2:c8:a0:8f:8b:97:1b:27:
ea:68:65:8a:14:9a:96:92:76:b8:4d:df:d2:e0:ea:05:c7:1e:
42:3b:3b:05:08:36:c1:73:8a:d3:46:01:60:b4:f7:9f:4e:ae:
41:0c:71:a1:c0:8b:1e:bc:ca:b2:38:71:bc:58:99:a8:4f:2d:
9e:83:25:00:94:e8:c4:f1:c7:26:ae:83:b9:13:72:e6:a2:f9:
48:35:69:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:49:30 2025 by rpki-client