
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
File: T4BFzPUJd-vDBmo87tj9MvHwI94.mft (raw, json)
Hash identifier: ev/Rr0aVn4DfUsE9FmWjLRRTFyiCOgBhlaEEpI091R8=
Subject key identifier: 2B:03:A3:23:C6:46:0A:ED:69:A9:75:EA:FE:2E:40:CB:C7:86:4C:F5
Authority key identifier: 4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE
Certificate issuer: /CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
Certificate serial: 019A4F62982FB4A5E6C2CFAAE9583B490EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
Manifest number: 164B
Signing time: Tue 04 Nov 2025 15:00:52 +0000
Manifest this update: Tue 04 Nov 2025 15:00:52 +0000
Manifest next update: Wed 05 Nov 2025 15:00:52 +0000
Files and hashes: 1: T4BFzPUJd-vDBmo87tj9MvHwI94.crl (hash: tUhnQm9D34XSENpLfHdVhqOZri/gGKLZ8h/3qROhqjk=)
2: YKTSjuC1HFTX7b7hXOaQuasHjw8.roa (hash: DCJ4Y27xyiCClFTgENixBHPREjuVymaDjhE/h8glQl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:98:2f:b4:a5:e6:c2:cf:aa:e9:58:3b:49:0e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
Validity
Not Before: Nov 4 15:00:52 2025 GMT
Not After : Nov 5 15:00:52 2025 GMT
Subject: CN=2b03a323c6460aed69a975eafe2e40cbc7864cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:ec:08:b4:2d:70:f5:04:49:98:02:d8:02:
9c:44:b0:54:2f:b8:31:6f:d6:05:c6:8b:21:b8:c8:
5f:bb:e6:58:65:ca:90:a5:cc:76:ce:cb:73:33:b5:
59:45:b6:6f:7b:fb:8e:31:e2:e1:91:95:26:b4:3f:
b4:5a:a2:a1:a5:e6:b4:3b:7e:82:93:07:81:39:c9:
f3:7b:7c:cc:50:bb:30:d5:6f:bf:d4:fe:10:c7:d4:
5e:f9:c3:ac:8b:03:c5:fb:c0:8c:fb:c9:ec:ca:71:
96:a1:7b:ac:ce:d2:15:35:76:07:dc:00:5c:f7:9d:
61:d0:37:a2:06:0c:55:1b:6e:b7:fd:67:2e:a5:66:
58:53:95:67:80:e8:b6:74:ad:e3:60:bb:35:78:48:
bc:59:dd:fc:30:06:78:e3:3e:48:4b:f0:ad:44:6e:
fc:9d:68:c5:c3:f1:78:2c:bc:df:da:5d:98:bb:13:
ce:2d:05:71:fc:f4:c4:11:8f:a9:2f:7c:2c:35:2d:
62:1d:f6:8e:24:8e:c5:9a:14:5d:6e:b6:f2:a8:5a:
48:2b:53:6f:b3:8e:16:52:85:5b:1d:a7:87:64:43:
22:01:de:ba:a5:38:89:6e:f2:e1:02:05:90:bd:6e:
6d:8a:68:ab:ab:93:30:53:1c:36:06:f2:d1:dc:5a:
d3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:03:A3:23:C6:46:0A:ED:69:A9:75:EA:FE:2E:40:CB:C7:86:4C:F5
X509v3 Authority Key Identifier:
keyid:4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7e:12:36:54:4f:c3:05:96:48:7e:63:4a:35:4d:e9:33:e1:
29:29:bd:84:07:ae:33:29:1f:fb:40:04:f8:3c:5a:13:75:76:
e4:14:4a:85:23:9f:6d:e7:b8:3a:db:59:e7:fa:0f:39:16:83:
c1:ed:03:33:3e:8f:6f:0f:81:ca:ba:a4:47:d4:2c:76:f0:25:
18:21:21:e1:c6:d4:50:44:b7:d2:7c:37:2f:5c:3e:96:90:f3:
e2:68:aa:2d:fa:48:c0:be:89:8e:ad:16:23:b3:d0:97:14:91:
ba:bd:3b:21:f8:ef:35:87:43:91:11:f1:5b:f2:24:9e:8d:9a:
87:80:f8:c5:22:71:b7:d6:2e:ea:f7:65:4e:d9:7c:48:e3:bc:
00:53:0b:f2:db:af:49:a2:e3:78:ed:f6:ed:66:e3:a8:e3:ec:
eb:66:25:19:db:77:cd:61:45:f0:10:7b:e9:db:6c:41:b8:7d:
2d:0c:d8:2e:82:43:2a:ef:07:ea:c6:79:81:c0:17:b7:12:ff:
bb:6e:8f:cc:dd:ec:5b:7f:9e:68:95:f3:e5:18:88:dc:9d:ad:
d0:47:36:f5:db:98:3a:99:19:95:b9:71:a4:6c:28:80:e0:32:
d5:6a:d4:49:7b:f5:28:20:03:00:2b:c5:a9:a8:ab:c8:8c:77:
39:bc:ab:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:11 2025 by rpki-client