Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
File: T0HFbqBp7nscHfZoa9NuDhRSiiA.mft (raw, json)
Hash identifier: lB94wVdaN7pHK1H7jaqJTgr7IiRjLA2fC7RS9AZ+kks=
Subject key identifier: 00:A3:44:3D:75:A2:36:8D:D0:12:66:F0:91:84:70:AB:73:EB:00:59
Authority key identifier: 4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
Certificate issuer: /CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Certificate serial: 01989DF0BDF4C391A1083FECDE3E5109F579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
Manifest number: 0D53
Signing time: Tue 12 Aug 2025 11:00:56 +0000
Manifest this update: Tue 12 Aug 2025 11:00:56 +0000
Manifest next update: Wed 13 Aug 2025 11:00:56 +0000
Files and hashes: 1: DRrOJLgDL5rmiSF6D3RMJURdhRI.roa (hash: 7NgLPdqIa5BkuBXQmhxzkicPEWRt/mYhR9CY8DkwoYg=)
2: T0HFbqBp7nscHfZoa9NuDhRSiiA.crl (hash: FppqupTIjRHM5ZXlwKdBjlnLVToukdroIcTCg4CMIR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:f0:bd:f4:c3:91:a1:08:3f:ec:de:3e:51:09:f5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Validity
Not Before: Aug 12 11:00:56 2025 GMT
Not After : Aug 13 11:00:56 2025 GMT
Subject: CN=00a3443d75a2368dd01266f0918470ab73eb0059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:1a:42:db:9b:4b:07:e3:8e:ad:5a:ae:5e:
41:7c:42:0a:c3:cb:8d:ad:7a:21:f6:0d:c6:ff:16:
fd:37:40:ae:b2:ce:0f:4a:55:7d:6f:dc:e3:78:40:
3c:94:f4:4e:c8:a0:0f:c2:56:42:50:32:f0:3d:47:
4d:1c:d0:7a:84:54:20:11:f8:82:e9:01:ad:2a:ce:
04:d3:3c:f8:70:7c:51:38:41:d4:dc:9e:fc:19:2b:
89:9c:bd:18:24:bb:82:c2:a2:d1:c2:81:ed:cf:7f:
1a:9d:77:2c:d4:52:a8:ad:6c:b6:be:29:53:8c:5d:
7f:a2:4f:c9:b5:a5:10:3c:2d:f4:95:e1:f6:13:56:
07:8e:c1:46:31:ed:85:30:4c:56:ab:ff:09:72:9f:
65:c8:07:07:94:5a:4c:44:f4:08:91:94:46:aa:95:
68:de:61:11:97:a9:dc:d9:1d:72:d0:95:32:84:6f:
91:03:ff:85:31:40:55:b6:52:cb:dc:32:7c:f9:c0:
e6:9e:27:d6:7a:56:65:67:c1:89:8a:d4:4c:bf:a0:
33:93:d2:7a:ef:0b:1e:3e:d7:a4:df:48:b8:bf:53:
ce:1b:41:d8:d6:b4:d2:78:27:91:5d:b1:6b:fb:b9:
f8:48:a7:5d:02:8b:80:3a:cc:e5:bd:0f:d1:c9:ed:
0c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A3:44:3D:75:A2:36:8D:D0:12:66:F0:91:84:70:AB:73:EB:00:59
X509v3 Authority Key Identifier:
keyid:4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:10:e5:81:c8:ba:40:6d:4e:5f:90:4a:d8:35:04:36:14:00:
cd:82:61:e2:d2:6a:8f:99:cb:43:39:82:74:f2:17:e6:9e:fa:
ab:85:20:07:3e:58:18:59:0b:f9:fb:da:33:20:08:06:83:59:
da:f5:f6:cc:94:0d:59:ea:d7:44:03:60:b9:3c:c4:86:7f:56:
c8:b7:35:ed:da:90:9b:6f:25:99:b8:84:dc:ee:a5:ec:99:0a:
9e:7a:f4:ef:91:12:ac:1c:2a:4a:29:50:5a:8d:4b:bd:4a:61:
c5:4b:7a:5a:0e:97:dc:d8:15:63:f5:41:d5:50:c2:91:24:9c:
ec:df:44:15:40:d8:6f:1c:11:b1:d3:6b:e9:bd:06:f4:bf:0b:
77:8f:e2:79:91:4d:e7:3c:74:39:2d:1a:8b:3a:72:c9:af:17:
ed:4b:f7:ba:04:5b:b6:ef:1b:a4:bc:60:92:9d:57:0d:c5:7f:
68:08:91:3f:31:c8:55:9c:f0:f3:5c:17:6e:62:f3:4f:e7:a6:
be:84:7c:0d:2c:a3:7b:bc:f1:a9:d3:6a:ca:90:b8:fa:6b:4e:
03:b2:6c:63:d5:28:a3:3c:24:78:a1:6f:10:1a:37:1e:61:ea:
fb:77:86:72:f9:6d:b2:f6:95:95:2d:20:51:a1:c0:07:4e:cf:
cd:9b:1b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:44:28 2025 by rpki-client