Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
File: T4zW4dX8wEW55lmcDK6hfUdoX5U.mft (raw, json)
Hash identifier: WTNbm5tQHz/xvcgsDdU2MAdrECFDyRhunY4ZrDZquAg=
Subject key identifier: 2A:74:5B:5D:EF:C8:E0:5F:E7:1B:5E:86:3C:A1:79:BE:DE:5C:55:1B
Authority key identifier: 4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
Certificate issuer: /CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Certificate serial: 0196C15D3ED813EC7118CCF094A4CE8EFC56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
Manifest number: 1077
Signing time: Sun 11 May 2025 22:00:35 +0000
Manifest this update: Sun 11 May 2025 22:00:35 +0000
Manifest next update: Mon 12 May 2025 22:00:35 +0000
Files and hashes: 1: T4zW4dX8wEW55lmcDK6hfUdoX5U.crl (hash: jsQvWd+B3R4gGh97Waznvpgp/t4f6OCSfYNcuh+bvE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:3e:d8:13:ec:71:18:cc:f0:94:a4:ce:8e:fc:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Validity
Not Before: May 11 22:00:35 2025 GMT
Not After : May 12 22:00:35 2025 GMT
Subject: CN=2a745b5defc8e05fe71b5e863ca179bede5c551b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a6:d0:c2:d2:4e:a8:13:ec:3f:db:f0:3d:8b:
80:a1:56:3a:11:0b:6f:12:13:3e:75:b6:43:33:36:
90:50:cc:55:df:7b:0d:92:52:cc:1e:78:53:01:3c:
cf:5c:6d:ba:cc:3e:d2:dd:54:a6:36:1a:d6:95:a2:
5c:43:07:52:b4:19:42:be:15:1b:b5:f8:a7:75:7e:
c9:99:49:e5:7f:fc:e0:21:83:e7:c8:87:b0:71:6a:
92:67:05:bd:2c:21:49:71:89:dc:c2:6e:32:28:96:
45:38:61:cc:dc:08:47:6d:b5:95:78:68:1b:ed:29:
54:33:7a:d9:31:6d:95:d7:ce:56:be:19:a0:db:a4:
26:96:c8:62:b5:ef:2d:2e:0d:a2:03:95:49:b6:86:
40:c5:18:08:78:f9:46:be:55:06:88:d0:ca:1c:e0:
94:77:4a:ef:da:e7:c2:ce:d5:70:3a:76:8b:cf:15:
14:6f:f4:ca:90:e6:7f:4f:3c:af:5e:53:63:b6:de:
ba:08:ab:dd:d0:10:e0:bc:dd:97:f5:0f:f4:da:38:
0c:c6:8e:7e:19:ee:eb:0c:86:52:f2:43:d3:13:37:
23:26:12:28:9e:17:e2:93:df:fd:e8:55:d8:75:f9:
4b:a0:f3:9f:03:de:fe:e5:a8:2c:19:f8:84:a8:72:
5d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:74:5B:5D:EF:C8:E0:5F:E7:1B:5E:86:3C:A1:79:BE:DE:5C:55:1B
X509v3 Authority Key Identifier:
keyid:4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ec:75:bb:0e:7f:c5:45:05:5e:f9:ad:78:70:e4:da:c1:af:
40:01:ff:f3:0d:04:52:d1:3e:2d:03:fa:27:d4:5b:46:fc:c2:
64:6e:6b:71:23:6c:f4:32:cc:dd:a1:b9:97:55:ed:46:a1:f4:
d4:c5:34:ef:f1:e4:5e:25:c3:b1:42:c5:09:f9:08:1a:95:d8:
3e:03:7a:10:ab:a5:15:53:ee:07:35:10:1f:55:ff:4a:31:a9:
d6:74:ed:c3:4a:77:2c:35:0d:e9:b8:84:02:8e:c4:20:4e:1e:
85:cc:ef:d9:45:37:a0:46:51:da:eb:8f:cc:ac:b4:1d:30:60:
2e:39:64:3d:26:67:c0:34:8f:ca:bf:e9:6f:d6:68:da:af:d0:
0e:59:5f:24:f7:b4:5e:ec:18:82:59:6c:c1:3b:69:c6:2a:10:
9a:e8:47:5a:48:a1:52:3f:ad:23:65:3d:8c:d6:d3:a0:a7:2b:
62:b8:e3:48:f3:b7:35:0f:cd:3b:bf:fd:23:6a:af:94:0e:41:
9a:60:9d:74:4f:87:85:c5:f8:f5:74:18:28:2a:95:15:63:70:
e2:32:1a:56:fb:14:51:f2:f0:1e:f7:84:37:81:be:93:77:55:
35:ed:29:37:d3:01:f5:5b:b1:bc:19:68:0b:0e:22:60:87:e2:
5e:1b:de:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBXT7YE+xxGMzwlKTOjvxWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGNkNmUxZDVmY2MwNDViOWU2NTk5YzBjYWVhMTdkNDc2
ODVmOTUwHhcNMjUwNTExMjIwMDM1WhcNMjUwNTEyMjIwMDM1WjAzMTEwLwYDVQQD
EygyYTc0NWI1ZGVmYzhlMDVmZTcxYjVlODYzY2ExNzliZWRlNWM1NTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4abQwtJOqBPsP9vwPYuAoVY6EQtv
EhM+dbZDMzaQUMxV33sNklLMHnhTATzPXG26zD7S3VSmNhrWlaJcQwdStBlCvhUb
tfindX7JmUnlf/zgIYPnyIewcWqSZwW9LCFJcYncwm4yKJZFOGHM3AhHbbWVeGgb
7SlUM3rZMW2V185Wvhmg26Qmlshite8tLg2iA5VJtoZAxRgIePlGvlUGiNDKHOCU
d0rv2ufCztVwOnaLzxUUb/TKkOZ/TzyvXlNjtt66CKvd0BDgvN2X9Q/02jgMxo5+
Ge7rDIZS8kPTEzcjJhIonhfik9/96FXYdflLoPOfA97+5agsGfiEqHJdHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCp0W13vyOBf5xtehjyheb7eXFUbMB8GA1UdIwQY
MBaAFE+M1uHV/MBFueZZnAyuoX1HaF+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDR6VzRkWDh3RVc1NWxtY0RLNmhmVWRvWDVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mNGI2MDktY2U1ZC00OWYwLTkxMzYt
MmVjYTc2YmM3ZmNhLzEvVDR6VzRkWDh3RVc1NWxtY0RLNmhmVWRvWDVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9mNGI2MDktY2U1ZC00OWYwLTkxMzYtMmVjYTc2YmM3ZmNh
LzEvVDR6VzRkWDh3RVc1NWxtY0RLNmhmVWRvWDVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+x1uw5/
xUUFXvmteHDk2sGvQAH/8w0EUtE+LQP6J9RbRvzCZG5rcSNs9DLM3aG5l1XtRqH0
1MU07/HkXiXDsULFCfkIGpXYPgN6EKulFVPuBzUQH1X/SjGp1nTtw0p3LDUN6biE
Ao7EIE4ehczv2UU3oEZR2uuPzKy0HTBgLjlkPSZnwDSPyr/pb9Zo2q/QDllfJPe0
XuwYgllswTtpxioQmuhHWkihUj+tI2U9jNbToKcrYrjjSPO3NQ/NO7/9I2qvlA5B
mmCddE+HhcX49XQYKCqVFWNw4jIaVvsUUfLwHveEN4G+k3dVNe0pN9MB9VuxvBlo
Cw4iYIfiXhveJg==
-----END CERTIFICATE-----
Generated at Mon May 12 07:38:15 2025 by rpki-client