Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
File: T0HFbqBp7nscHfZoa9NuDhRSiiA.mft (raw, json)
Hash identifier: 8yum1vl3hyk9D9iW2bIRGrCFqvhzcEJ+1hrHxPbN2ls=
Subject key identifier: A2:88:27:25:3B:AB:D8:94:A2:56:B9:9E:AA:4C:36:77:EC:82:EC:6D
Authority key identifier: 4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
Certificate issuer: /CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Certificate serial: 019A5263666022EFD730D929A9A2DD0C9E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
Manifest number: 0E35
Signing time: Wed 05 Nov 2025 05:00:37 +0000
Manifest this update: Wed 05 Nov 2025 05:00:37 +0000
Manifest next update: Thu 06 Nov 2025 05:00:37 +0000
Files and hashes: 1: DRrOJLgDL5rmiSF6D3RMJURdhRI.roa (hash: 7NgLPdqIa5BkuBXQmhxzkicPEWRt/mYhR9CY8DkwoYg=)
2: T0HFbqBp7nscHfZoa9NuDhRSiiA.crl (hash: owECNkG8MZJ0H0R4vbify6CRSS8oU90o5Z87+y5EVPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:66:60:22:ef:d7:30:d9:29:a9:a2:dd:0c:9e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Validity
Not Before: Nov 5 05:00:37 2025 GMT
Not After : Nov 6 05:00:37 2025 GMT
Subject: CN=a28827253babd894a256b99eaa4c3677ec82ec6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:69:7e:42:eb:ab:c5:23:52:16:c7:2f:e6:
d5:57:4e:76:e6:f0:ad:80:0f:cb:ef:12:91:a4:e9:
0a:06:f1:de:b5:52:35:01:a2:8f:56:3e:a8:ae:64:
eb:6a:77:60:bb:38:8b:3d:69:0d:60:d1:11:f9:61:
bd:80:7b:63:39:08:73:ff:20:4e:b4:6f:82:32:eb:
c4:b4:bb:60:92:34:82:55:30:8f:83:fe:93:d7:32:
d0:32:0c:e3:01:72:8e:3f:60:89:39:12:6e:b9:fd:
fd:cf:37:a6:ef:22:8e:e2:7d:a7:e4:3d:e8:6f:0c:
af:c8:41:f9:2d:39:9a:13:8b:fb:a2:49:34:61:87:
cb:5f:1c:01:97:fc:05:e0:0b:79:fd:db:44:a2:08:
4d:0a:e6:5a:fa:89:34:28:13:ad:d3:9e:93:0c:86:
44:9d:51:fc:38:d1:ce:8f:28:e9:67:bf:2c:3d:10:
07:3f:9d:3e:96:7f:dd:54:97:7d:0a:56:97:f2:ad:
0b:45:cd:0c:b2:2c:55:cf:4c:04:99:24:2b:be:b7:
3e:b4:fd:f9:83:d8:f8:1e:0e:a4:35:94:2a:01:87:
b5:dd:c5:bd:40:9b:73:5e:84:31:82:a6:a7:ab:40:
6a:fd:d8:fd:12:65:1c:3d:56:f1:9d:18:d9:2b:cd:
1d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:88:27:25:3B:AB:D8:94:A2:56:B9:9E:AA:4C:36:77:EC:82:EC:6D
X509v3 Authority Key Identifier:
keyid:4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:60:6f:6b:d9:ae:66:7c:35:4f:f8:d0:a3:fb:71:ad:cf:a1:
23:29:15:11:b4:2e:86:5d:3b:0d:d6:64:d0:d1:9c:4c:48:0e:
a4:aa:d1:fe:25:f6:c7:e9:a7:84:93:25:07:61:0d:36:34:35:
5f:b1:f5:d1:e0:e5:e2:80:37:b0:4e:a2:4a:e8:e9:49:eb:d4:
a2:f1:4a:98:17:03:06:a3:12:af:f2:a3:45:01:5d:71:f6:cc:
5d:30:87:84:d4:ad:f6:9b:cc:ee:c7:4b:00:83:c2:e1:6c:f3:
32:4d:b4:27:93:1f:80:b8:64:3e:b8:d5:60:4c:2c:5e:8d:42:
9b:b2:c6:1e:8f:6f:33:37:d4:6b:f1:50:ee:f4:b2:fc:ee:70:
8f:ff:a3:fb:02:84:a9:ba:80:0c:b0:6a:9c:35:28:a1:06:52:
be:f0:d9:60:76:f7:b2:32:30:7e:8d:41:60:cd:ce:c5:e8:e5:
f7:06:d7:91:91:9f:6a:bb:f5:81:4f:c7:be:d3:17:2a:6d:5d:
2e:eb:b0:5c:fe:fa:7e:12:83:15:d1:c2:fe:a7:c4:90:59:11:
91:86:71:44:fe:61:b6:6d:82:70:a8:97:26:7f:1d:f3:be:8c:
93:e7:e8:f6:df:d6:2f:bb:c1:a1:81:a9:ff:30:e7:a3:d4:02:
da:31:b8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:36:47 2025 by rpki-client