Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
File: t4zdv8dr2iagKeqAyJh3mHRfHwI.mft (raw, json)
Hash identifier: Y9bwd9c96OwULK1mz/makJEqnUgzbgNDiduMRF3Pc9o=
Subject key identifier: B2:D3:CD:B8:64:C2:D4:8E:58:89:E9:E9:AD:5A:3F:B1:63:1E:3E:4A
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Certificate issuer: /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial: 019A4EF4D5D44931D7CB945B95B08AF6B156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
Manifest number: 13C1
Signing time: Tue 04 Nov 2025 13:00:59 +0000
Manifest this update: Tue 04 Nov 2025 13:00:59 +0000
Manifest next update: Wed 05 Nov 2025 13:00:59 +0000
Files and hashes: 1: 4ZMkun0YVKsQhMtugX5PoEy0_rI.roa (hash: fKBmMFAsGdJAHOCtTHbLGukOIg/BNTMMvT6hLSCBWOk=)
2: 9SX4KosI9EGxvqBg-r1JnjKT0ZM.roa (hash: WqcTzSMCYbly9wYW2w55k/ugMgucEMXzGeFeea+G7IU=)
3: t4zdv8dr2iagKeqAyJh3mHRfHwI.crl (hash: 9NyX5QeXIxBSVxVNYpV89D8eYIaeHlVHEC92/tyfvw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:d5:d4:49:31:d7:cb:94:5b:95:b0:8a:f6:b1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Validity
Not Before: Nov 4 13:00:59 2025 GMT
Not After : Nov 5 13:00:59 2025 GMT
Subject: CN=b2d3cdb864c2d48e5889e9e9ad5a3fb1631e3e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:0c:aa:9f:ec:87:f2:7c:26:d9:66:a9:eb:
0e:5e:fe:32:e8:91:ac:27:2a:34:93:1f:af:ab:b5:
04:90:a5:88:1e:58:c1:9c:06:d3:a6:98:1d:27:6a:
e8:dd:1c:02:f9:0c:f9:46:c9:dd:cb:da:89:54:71:
12:1d:98:8b:eb:95:9a:bc:54:57:70:8e:05:ea:42:
ca:c6:3a:83:1b:97:7e:c4:e1:e6:b4:88:11:48:22:
e8:2d:4d:54:f3:5f:04:46:05:41:99:4b:75:4a:64:
f9:16:95:75:fd:e9:0f:2a:40:ed:c8:07:a0:95:2a:
45:ae:2b:64:e5:22:d5:71:76:16:39:6d:90:3e:0d:
d5:37:0a:ad:8e:06:17:a7:35:64:c4:cf:03:3e:33:
39:7f:e2:5e:6f:1a:ff:d7:e8:4d:bc:b4:99:ef:31:
df:8b:5a:ae:6b:a2:76:14:7b:25:54:8b:8c:e5:f1:
52:f3:54:f9:17:3c:61:9e:af:f2:ca:2c:0f:80:9b:
fb:f0:e0:aa:8e:2f:38:ef:76:69:c3:d0:74:36:df:
a4:11:cc:c4:d7:6f:9a:43:b5:ee:e7:4c:60:08:ad:
0f:ce:50:7f:95:ce:68:72:13:f7:75:10:3b:cc:18:
8f:11:15:a3:5a:07:1d:bd:fc:f3:00:f6:ac:3c:ab:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D3:CD:B8:64:C2:D4:8E:58:89:E9:E9:AD:5A:3F:B1:63:1E:3E:4A
X509v3 Authority Key Identifier:
keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c0:84:c0:94:91:e4:00:33:93:e9:9e:3f:d6:a0:48:a4:6c:
94:44:73:38:e3:f2:ed:de:c0:51:db:eb:e3:6f:8f:67:8c:fd:
18:19:2e:d0:86:6f:0c:05:93:01:71:17:32:db:bc:b2:f6:c1:
10:47:99:de:77:f3:33:dd:31:ae:06:40:ca:7b:2f:94:9b:f8:
3e:d9:72:02:cc:54:5d:ec:a4:4a:e0:c7:cb:a2:65:1a:ad:ec:
eb:51:94:bd:b5:d4:de:5c:9d:d2:fb:0e:59:79:3e:ed:ff:e2:
6c:50:25:14:00:48:a3:52:7b:77:b8:f1:e8:68:36:34:be:07:
e3:2b:45:81:ff:fe:16:22:d4:75:5d:2c:9b:48:bc:8b:10:7c:
c1:82:24:1c:28:a4:cb:02:d3:be:0d:3d:78:96:32:e3:2d:16:
f1:27:fe:cb:60:da:98:a6:53:35:8c:47:c1:2a:bd:73:d8:65:
a2:ad:e5:4c:38:76:38:e8:ca:7a:d8:f3:bb:20:eb:58:c3:f2:
83:12:e2:c1:79:66:1a:6b:a3:c1:30:9c:ff:5d:1a:25:72:51:
4c:7f:0a:c7:16:a1:14:a2:3b:f3:69:68:0d:3f:f2:0d:6b:db:
c4:41:1a:31:d6:37:60:46:e1:29:13:a7:cd:3f:0f:12:20:04:
02:3c:d0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:35 2025 by rpki-client