Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
File: T0d31JE06rdaecERgyrX7OcmcUU.mft (raw, json)
Hash identifier: GITVcCQ8eZtVYm1xXNujzceu1gZ5GgrSTvgTBG3ATPY=
Subject key identifier: 88:95:F1:E4:46:7C:63:D6:2C:0A:BE:14:1A:C1:74:E0:CC:70:67:9F
Authority key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
Certificate issuer: /CN=4f4777d49134eab75a79c111832ad7ece7267145
Certificate serial: 01989600A9329C8249356C65ADAB9561C0F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
Manifest number: 0595
Signing time: Sun 10 Aug 2025 22:01:22 +0000
Manifest this update: Sun 10 Aug 2025 22:01:22 +0000
Manifest next update: Mon 11 Aug 2025 22:01:22 +0000
Files and hashes: 1: T0d31JE06rdaecERgyrX7OcmcUU.crl (hash: 0rh+oHOqZ8/BwqrrdlTvDKpn1QDcD9yQdbtqmjKxrug=)
2: hhgRHJVnB3DztK66fHImmHJUfiY.roa (hash: ywnZNCltyc1wn94Hs8Pg9jk2EOzb5fqb+j6rupGe/7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:a9:32:9c:82:49:35:6c:65:ad:ab:95:61:c0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4777d49134eab75a79c111832ad7ece7267145
Validity
Not Before: Aug 10 22:01:22 2025 GMT
Not After : Aug 11 22:01:22 2025 GMT
Subject: CN=8895f1e4467c63d62c0abe141ac174e0cc70679f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:a2:30:c8:07:00:dd:54:86:f1:65:38:2f:
7e:95:91:10:05:f5:cd:13:e9:07:39:13:39:7f:97:
3a:5c:83:11:f1:82:ba:a1:36:03:ba:3c:4c:ec:cb:
62:13:ec:ea:57:57:a0:6b:8e:df:a9:52:b8:4b:d1:
56:2d:62:46:86:eb:b5:7e:fc:b9:e8:fc:64:5e:ba:
d3:85:cb:26:6c:77:e2:53:3a:63:34:d8:26:5b:3d:
b2:af:f9:0b:98:29:54:58:d6:17:2a:f8:82:e8:f9:
df:34:1c:6c:81:77:9e:3f:e3:63:eb:98:a8:c2:1c:
6a:eb:c1:14:bc:66:f3:75:c6:95:3c:47:33:51:a6:
0d:1d:da:6e:3c:bb:55:ef:8b:d0:c1:9d:ab:fa:e2:
a3:99:b3:4c:dc:37:d2:0b:8b:c7:6e:c0:8e:c5:5d:
59:4b:c1:49:46:7d:dc:91:a8:4c:b4:b4:e0:d8:ce:
b3:60:82:ce:76:b4:91:01:d8:01:8f:5f:cc:8e:38:
e8:a7:cb:f1:2c:c1:a1:44:63:26:ae:43:51:ac:76:
4d:3e:36:b1:98:ef:9d:24:07:56:38:52:39:cc:63:
ea:3a:39:28:f7:66:73:ec:94:3a:6f:fd:88:e0:e7:
aa:8e:b0:7f:45:8e:6c:80:68:1e:b9:61:8e:04:94:
34:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:95:F1:E4:46:7C:63:D6:2C:0A:BE:14:1A:C1:74:E0:CC:70:67:9F
X509v3 Authority Key Identifier:
keyid:4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:af:fd:6a:cb:23:d3:e6:2c:26:37:70:fe:55:2d:c3:c5:03:
35:79:6b:d3:66:d3:31:e5:21:90:3a:fc:d8:ff:fa:82:98:76:
0a:ed:21:31:78:15:b3:19:0f:55:5e:a9:54:67:f9:d1:e4:43:
b2:d5:27:bb:3c:04:2a:b3:09:2a:99:e9:fa:6b:7e:02:31:08:
99:5c:90:1c:6d:eb:e0:10:63:9e:48:ab:a1:71:73:3a:e2:a8:
93:b3:9b:b9:eb:6b:77:8d:ef:07:e2:90:ae:4a:b4:77:cb:0f:
8a:6c:fd:1b:0d:2e:e9:56:a6:f2:d3:c1:6f:81:5c:28:01:f5:
9a:8e:dd:6e:b2:e3:43:51:73:ab:58:e8:5d:49:7a:27:87:28:
f0:f7:05:4f:76:ce:82:a7:0b:f5:5c:9a:7c:6e:cf:7f:6c:a9:
4b:f4:d0:ba:e9:4e:f7:5d:9f:96:c1:45:37:a4:66:7c:d5:a9:
47:df:57:60:7a:55:c6:e1:70:93:c3:2d:9e:39:14:97:aa:e8:
4f:f8:52:f4:9e:80:f8:72:a9:37:b5:df:a0:75:00:9e:7b:68:
e7:e8:b5:95:38:23:94:d7:bc:75:8e:00:b9:26:65:5f:eb:dc:
4a:71:f7:68:a9:48:d3:c9:65:f2:ae:e3:2f:32:ba:38:fa:18:
7d:a9:5a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:22 2025 by rpki-client