Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json)
Hash identifier: q4EDxgvER+eMpAYJhS/OIle7xqVqndDx6NoEhj3is2U=
Subject key identifier: 45:2E:39:ED:55:46:82:A1:38:E9:5B:7B:38:77:AF:52:11:42:D4:BE
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial: 019A4DAADC300CFA76B95C4FBCE93E49D5D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
Manifest number: 0BA9
Signing time: Tue 04 Nov 2025 07:00:34 +0000
Manifest this update: Tue 04 Nov 2025 07:00:34 +0000
Manifest next update: Wed 05 Nov 2025 07:00:34 +0000
Files and hashes: 1: NC9FKYs1BXFgd8eBRdSLNG0ab1E.roa (hash: AdbbA0DHP1eCkTNHXLT0EO4D6DCGT9CWxG1DEmumay0=)
2: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: Ftskb8ZttMJf956kQqLlprxkenDvCU3NE8tnvsBQvfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:dc:30:0c:fa:76:b9:5c:4f:bc:e9:3e:49:d5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Validity
Not Before: Nov 4 07:00:34 2025 GMT
Not After : Nov 5 07:00:34 2025 GMT
Subject: CN=452e39ed554682a138e95b7b3877af521142d4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bc:f1:d0:32:1a:ba:fa:e9:7a:07:0f:93:ec:
a4:9c:c8:1e:65:52:4b:bb:d4:28:16:05:d7:5b:db:
79:2c:8e:a9:e9:ef:b0:56:e3:8c:13:46:20:8c:88:
8e:ab:f8:db:6d:f9:db:db:a3:61:e8:0a:79:47:0e:
b7:ea:cd:2c:c3:6a:28:31:a1:54:5a:9b:be:c2:38:
8c:fd:12:61:cb:32:2f:49:df:ca:c6:80:32:c5:ee:
26:c3:b8:6e:4e:46:b2:0f:ab:39:6b:77:c8:0d:ce:
0e:c1:60:4d:94:b3:f9:37:cd:b4:c7:4c:d0:6e:69:
60:c4:13:93:69:2c:1d:6c:69:c3:ba:fd:09:a6:4b:
90:84:9d:b7:93:a2:83:64:29:9d:30:31:9f:8b:5b:
ea:8f:17:66:98:6e:4c:a5:ed:1c:1f:56:bf:6d:ba:
ed:df:cd:0c:0c:70:7f:98:1a:da:3c:a1:ee:b0:2f:
9e:b1:fc:0a:a2:43:4e:00:1c:95:0c:1b:01:d8:31:
88:a1:de:ea:b2:57:c1:c0:cb:28:d4:56:61:fd:fd:
59:ae:3a:60:dc:68:9e:10:f4:de:09:5e:e7:ca:a7:
f1:89:ac:f8:65:46:80:a9:23:a2:ff:4f:cd:54:86:
c4:51:8b:6c:13:13:1f:3c:1b:ad:43:5d:60:4a:ec:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2E:39:ED:55:46:82:A1:38:E9:5B:7B:38:77:AF:52:11:42:D4:BE
X509v3 Authority Key Identifier:
keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:38:74:0d:1c:9e:45:9d:e9:93:df:87:f3:21:b2:26:2e:52:
5c:35:7d:27:55:9d:65:80:82:97:60:62:f8:ce:16:42:ed:8a:
00:82:93:4d:d4:62:d0:2d:f5:61:da:72:01:5e:07:6d:8c:fe:
36:1a:c1:72:c3:0f:bf:5f:39:98:55:6b:4a:cb:69:6b:6c:f7:
96:c5:0c:8a:09:4c:87:49:19:14:c0:2a:d5:3a:12:b4:c8:81:
fd:73:e6:47:e5:24:99:f5:58:4e:ba:54:10:3d:ff:bc:11:4a:
e2:18:97:08:c4:9f:0d:cb:7a:20:19:62:06:2e:4c:da:79:38:
9d:9d:b3:af:a8:6a:89:a3:e7:63:09:19:9a:32:c8:79:09:84:
62:b0:5d:c1:3c:cd:4f:76:4e:f0:cd:c7:a0:42:f9:c0:b0:f6:
d5:82:36:59:33:3a:cf:24:57:98:66:b5:d7:0c:c7:d3:d6:76:
d3:32:08:f8:d7:3f:3b:fd:71:6a:2d:ca:f9:0a:96:51:ad:4f:
ef:9d:46:21:71:e4:98:35:74:c7:11:ea:0b:89:04:93:3f:a1:
fc:7c:ad:d1:2e:47:14:46:45:9f:26:82:5c:bc:b6:33:4e:32:
93:a8:0b:1c:e3:5a:51:df:06:55:2e:54:5f:60:42:51:b7:c8:
6f:93:8f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:34 2025 by rpki-client