Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
File: T5CKbYaKuem9sQRy--wxyWbpQnQ.mft (raw, json)
Hash identifier: ++XwF4VaY/NrHkDqbAHPdcy0jsZPiJ2KKA5bxGdqBkI=
Subject key identifier: C9:47:40:09:90:FF:F7:F5:0C:9B:80:87:D8:15:05:CE:DF:6E:39:AB
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Certificate issuer: /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial: 019A52D167546B6C493E030D477F52E8A67B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 07:00:46 +0000
Manifest this update: Wed 05 Nov 2025 07:00:46 +0000
Manifest next update: Thu 06 Nov 2025 07:00:46 +0000
Files and hashes: 1: N4O1f1HdN3aaUng8Ezj5qGov-Js.roa (hash: sfcsuhZVAT4PlLRFtuXFGetuMIfE20AC6DkhL2YQizc=)
2: T5CKbYaKuem9sQRy--wxyWbpQnQ.crl (hash: 0MKgQRNIIRXtDYeHa397YCHkpYQ/eYct6PWrfUX5L9g=)
3: _UFtjPZkJY8PTrDfIiY7fIJkM78.roa (hash: 8nSnhnVWRfLLWBF2I/d3mZE5/5hk3aPfKW0pXvBb3bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:67:54:6b:6c:49:3e:03:0d:47:7f:52:e8:a6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Validity
Not Before: Nov 5 07:00:46 2025 GMT
Not After : Nov 6 07:00:46 2025 GMT
Subject: CN=c947400990fff7f50c9b8087d81505cedf6e39ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:47:10:f4:ea:57:9f:02:e4:69:17:b1:4d:9c:
e6:70:da:ca:94:00:55:80:81:84:8f:89:6f:27:66:
e2:eb:5b:77:26:43:a8:29:80:9f:0e:b7:dd:ee:3a:
93:9e:d3:c1:d3:e2:89:d6:92:b9:02:80:05:99:79:
d8:de:c2:e7:54:e6:fe:d9:47:31:0f:e6:36:3a:04:
bd:13:6a:c9:55:75:25:72:b3:c6:0b:f7:c4:31:d7:
03:ee:7d:4e:25:41:8e:e1:cc:25:c3:96:1b:81:50:
23:56:1d:65:77:f1:7e:80:ec:6c:23:df:6d:63:fc:
8c:71:48:66:6e:b7:bb:b2:71:a6:22:01:fc:cb:d4:
52:17:1a:55:18:f9:85:8b:cb:ab:f9:6c:10:fc:ac:
e9:e0:e7:b8:5a:3e:02:9b:db:46:bf:8b:41:34:ec:
29:36:ca:2e:ed:8f:55:e7:b4:67:af:ec:fc:c9:db:
c9:df:b9:c8:47:e6:53:cf:bd:3e:99:f7:6f:41:fb:
5f:34:f8:1e:10:90:bf:67:ad:6b:5b:2a:11:22:ed:
58:20:d1:b5:21:e5:69:9e:51:85:3f:8a:42:e3:d1:
df:85:38:ad:bb:42:a1:1a:0e:af:89:65:9e:61:8d:
59:7f:fa:69:c0:43:83:4e:1b:18:d7:65:be:f7:ab:
57:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:47:40:09:90:FF:F7:F5:0C:9B:80:87:D8:15:05:CE:DF:6E:39:AB
X509v3 Authority Key Identifier:
keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:dc:58:92:49:0f:a8:88:3c:66:bd:b1:a1:a1:d3:26:80:f3:
e3:d3:7c:a0:02:46:fb:58:1c:f7:16:1e:4e:9a:40:2d:65:a9:
f7:c2:d9:57:eb:9a:39:f3:42:ba:4c:7f:25:11:4f:24:6f:4a:
b7:df:b7:8c:19:82:bd:ce:d8:f7:1a:ed:d3:fb:d4:ca:c0:67:
17:37:20:86:4e:24:db:5b:28:d0:f9:e9:27:86:d3:92:67:71:
f6:1e:58:31:07:31:9a:2f:53:72:63:c6:bc:ba:70:94:62:8f:
64:55:53:0f:13:b4:bf:fb:af:c1:d7:5b:a7:95:ab:e9:10:75:
ee:fc:87:c8:12:7d:7c:6a:0a:83:ee:92:9b:2c:5f:8a:fe:01:
ef:a0:96:54:2c:a0:d0:17:86:a3:cb:62:c5:ac:f7:2d:c8:66:
e2:b8:94:a6:dd:d5:6f:b1:88:9d:84:71:f7:7e:cf:18:af:f4:
46:14:e8:e5:e1:53:e5:c2:1c:c2:88:6c:21:54:06:24:d9:f2:
ec:25:86:04:f3:e5:f5:bd:34:47:94:96:48:b7:b9:a6:2f:08:
d1:6d:77:d5:24:1c:89:16:db:2d:75:6f:bb:ee:ee:01:54:9f:
1a:10:7e:d3:55:1a:d0:46:31:83:2c:df:d8:3e:3c:05:78:d2:
f0:be:b9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:54:47 2025 by rpki-client