Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json)
Hash identifier: GDgGwsyvGxLLf7jw3QLsUlt8YSx8EG1qlE1wlCMjD7k=
Subject key identifier: 1B:91:5E:63:D6:2C:D8:ED:D6:A9:E1:67:8A:F8:C6:E8:D2:E3:1C:2F
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial: 0198748705C3DF5553F61D08918C31A1FC44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
Manifest number: 0AB4
Signing time: Mon 04 Aug 2025 10:01:02 +0000
Manifest this update: Mon 04 Aug 2025 10:01:02 +0000
Manifest next update: Tue 05 Aug 2025 10:01:02 +0000
Files and hashes: 1: NC9FKYs1BXFgd8eBRdSLNG0ab1E.roa (hash: AdbbA0DHP1eCkTNHXLT0EO4D6DCGT9CWxG1DEmumay0=)
2: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: 4Hv97Dsj1kzUjdyaBltUb+6lKMVmQi64PI2s66KVl/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:05:c3:df:55:53:f6:1d:08:91:8c:31:a1:fc:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Validity
Not Before: Aug 4 10:01:02 2025 GMT
Not After : Aug 5 10:01:02 2025 GMT
Subject: CN=1b915e63d62cd8edd6a9e1678af8c6e8d2e31c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:87:d4:8e:24:a5:c3:38:7b:8a:b1:4a:de:
67:07:96:b2:38:c8:c0:a6:d1:08:7b:84:41:29:3b:
9a:b4:26:8a:ea:c8:cb:72:d2:87:4f:73:ec:6a:64:
95:89:d1:ad:ea:35:bb:c2:9b:61:94:6e:14:63:88:
36:df:a4:4d:56:39:f3:84:87:c8:fb:d0:04:fd:1d:
72:a1:2f:18:ec:d5:58:1a:7a:7a:4d:ba:09:5c:09:
12:82:12:be:e1:bd:6c:ba:e0:83:eb:d2:ab:3c:48:
08:b8:03:a1:ee:e3:73:84:2b:d3:6d:16:6f:67:5a:
0f:02:8a:e0:8c:50:0d:1e:8c:90:a2:3f:25:7b:dd:
35:97:09:8a:a8:00:59:c6:b5:e6:4b:76:1e:bd:8b:
e0:41:fa:0a:75:dd:27:4d:c9:e9:da:0b:98:4a:97:
eb:84:ce:96:75:66:cf:d0:4e:19:75:db:ef:cc:43:
2a:f6:13:ff:43:57:e9:cd:a6:9d:f0:08:31:5d:50:
d2:af:bb:e5:9f:8d:f0:39:f9:38:73:aa:94:1e:1e:
7b:b9:fc:c8:19:61:f6:d0:4d:91:68:ed:de:07:24:
81:e0:f7:c9:5a:9d:66:a2:9c:ff:6f:39:53:c7:11:
cd:63:e3:8a:94:8f:43:fd:ac:e0:40:e4:fa:6b:74:
72:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:91:5E:63:D6:2C:D8:ED:D6:A9:E1:67:8A:F8:C6:E8:D2:E3:1C:2F
X509v3 Authority Key Identifier:
keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ba:f6:a5:01:77:83:71:01:bb:a3:58:c6:3a:52:9a:99:ba:
b0:3e:2f:39:ba:c1:8c:8f:88:42:02:4e:22:76:19:77:72:f5:
05:3d:b0:b1:5a:17:e7:8b:1a:71:b1:37:cb:be:b6:04:32:4f:
12:8a:30:e0:69:40:27:a6:16:9a:59:59:d4:98:cd:5f:a7:37:
64:d7:de:93:45:08:03:00:e8:e0:c7:34:ab:f8:16:dd:44:3d:
83:a3:37:22:5d:45:72:de:ac:df:91:c7:0b:8f:61:a8:82:7e:
06:08:5a:58:c3:97:5f:37:69:5c:a0:b2:ee:32:c2:a1:9b:24:
78:b0:c3:e7:7f:72:ba:67:7a:cd:26:64:22:14:2b:70:55:43:
93:55:2a:79:82:1d:0c:a1:c3:fe:af:79:c5:f5:f8:12:5e:9a:
e7:98:35:5d:ee:82:88:76:99:a6:57:5a:9c:fb:43:00:8a:46:
ea:05:13:ab:27:5a:d1:ac:8c:79:3a:d6:62:53:e5:cd:23:5f:
0b:0b:2c:51:f5:9e:cc:0d:f0:c5:c7:4f:e1:49:84:fe:de:93:
a7:55:6a:b2:99:99:40:e8:fd:33:5e:4f:69:9d:43:80:e4:7d:
1a:7a:f1:6d:4c:20:2a:30:29:90:d6:48:c0:c7:e6:21:ec:b1:
f5:b9:bb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:58:55 2025 by rpki-client