Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
File: T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json)
Hash identifier: XGWTsgthcVZZDK/9cVfaszFwZIr5ex/co3NEfe7c2+k=
Subject key identifier: EB:23:55:1D:6A:1D:0F:A9:F9:38:57:51:37:75:FF:BE:E9:D8:8E:9A
Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
Certificate issuer: /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Certificate serial: 019A503E09511B3CF934471D8E770F917826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 19:00:34 +0000
Manifest this update: Tue 04 Nov 2025 19:00:34 +0000
Manifest next update: Wed 05 Nov 2025 19:00:34 +0000
Files and hashes: 1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: ZSewwiOxglVMC82GbdMwYybHfLNSggCe133I25whwws=)
2: kfsN1HfyfK-NQ9iZIGxx8I0iebc.roa (hash: 471clsXqk9Nk68jCHR5a7ma3NzbA1DO/nClDnuoSJLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:09:51:1b:3c:f9:34:47:1d:8e:77:0f:91:78:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Validity
Not Before: Nov 4 19:00:34 2025 GMT
Not After : Nov 5 19:00:34 2025 GMT
Subject: CN=eb23551d6a1d0fa9f93857513775ffbee9d88e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3f:87:87:3c:7a:ca:04:51:1d:9d:6e:4c:b5:
9f:38:8a:92:ae:c5:5a:58:86:29:ea:54:d6:05:62:
f2:af:71:43:1c:c3:07:d4:11:f9:76:54:42:93:3f:
b6:7f:99:4e:c5:ab:fe:bf:98:c4:f5:2d:fc:bb:fd:
4c:bc:e9:fa:68:fe:f6:57:63:d9:29:04:17:00:3e:
50:6b:aa:96:1b:21:27:17:58:52:c0:a6:a3:21:96:
a1:bf:0f:3d:8e:7c:ee:9f:cc:a6:5a:4b:1e:8e:c9:
55:72:c0:6b:2e:f2:cd:13:6a:8c:06:01:3b:59:99:
5a:3e:e0:c9:02:40:95:f2:20:68:29:ac:cb:79:ee:
34:2b:c5:71:e1:22:f5:c1:2e:48:c3:10:7c:71:d0:
aa:87:85:0b:31:5b:35:f0:cb:4a:4e:a4:1f:7b:6f:
4e:bf:25:63:21:9a:0b:33:18:44:5a:cf:65:b7:74:
12:70:d9:ae:b6:b0:11:f0:52:a2:14:ab:8c:1a:cc:
69:0f:c8:a4:06:c1:62:3b:a6:c2:c6:20:5d:d8:d6:
59:6a:db:eb:97:9c:3b:fd:11:1c:ed:65:fa:d0:af:
53:3f:8f:a5:b3:8a:55:59:fa:28:bf:45:99:c3:a7:
0f:98:90:7d:00:ee:8e:07:f8:62:15:c5:23:38:75:
8b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:23:55:1D:6A:1D:0F:A9:F9:38:57:51:37:75:FF:BE:E9:D8:8E:9A
X509v3 Authority Key Identifier:
keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:10:78:41:cd:fc:b4:36:27:7b:c9:68:ad:cd:ca:fb:e3:1f:
99:34:d8:68:81:9c:7d:2c:6f:ba:79:4c:08:d8:eb:61:2b:40:
0a:c9:67:02:2a:51:6c:60:d5:83:8b:f3:c6:ae:1d:c9:34:b5:
a7:7a:ea:d3:d0:b9:5c:69:db:e8:0a:d1:8f:df:04:01:ca:fb:
9d:8d:27:5c:f6:7b:f6:1d:3d:01:85:3f:1f:e8:d2:c4:f7:57:
39:83:d2:e8:d4:a2:5e:5a:fd:b3:72:ef:db:42:86:e6:ef:76:
92:c2:3e:82:af:5e:16:aa:d8:8b:7f:30:c8:9a:86:47:fd:fb:
7e:ad:33:2e:1a:c0:81:cf:d8:15:6f:3c:95:d1:53:39:5d:b1:
0e:dd:7e:0b:91:bd:c1:0f:ed:92:f4:19:39:4f:d3:63:53:41:
22:19:1a:74:1e:0a:c3:ed:b3:4d:b7:72:10:ab:81:79:71:41:
95:ed:f2:d0:84:56:66:00:12:4e:80:5f:9d:4a:a3:84:d0:c8:
c6:fe:36:df:58:3b:f5:4b:52:02:5a:b4:b1:b5:c4:ef:40:95:
4b:6f:05:37:de:a7:73:d8:37:d4:1b:5e:d7:d8:54:d4:e0:89:
2c:00:0b:72:e1:a1:2c:51:c3:11:5f:6a:9d:bc:2a:e6:9e:00:
92:a5:51:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:26:13 2025 by rpki-client