Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
File: T2F9awPi_l-JEcvrX64tyjvWZ38.mft (raw, json)
Hash identifier: ln97i3DXVHwo1Ozr1hzU79UPSnVaht+lPRtZOLBPs0E=
Subject key identifier: 94:8B:17:36:38:88:08:15:1B:0D:81:DA:87:00:71:C2:CE:61:7F:D2
Authority key identifier: 4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
Certificate issuer: /CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Certificate serial: 019A515076C5D55D0F3BF63E3A1070665906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
Manifest number: 13EF
Signing time: Wed 05 Nov 2025 00:00:19 +0000
Manifest this update: Wed 05 Nov 2025 00:00:19 +0000
Manifest next update: Thu 06 Nov 2025 00:00:19 +0000
Files and hashes: 1: NwaNp5L0RusVDFFM4pIExblfTEU.roa (hash: B2/PCGdwG+WPaQH+f8v2+xUGdjLlo6CPicFBvC+Ii04=)
2: T2F9awPi_l-JEcvrX64tyjvWZ38.crl (hash: fH1m2fuQ2NkDVUUqlnqBTXiMS8dVBHRL7lYwL4oYTxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:76:c5:d5:5d:0f:3b:f6:3e:3a:10:70:66:59:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Validity
Not Before: Nov 5 00:00:19 2025 GMT
Not After : Nov 6 00:00:19 2025 GMT
Subject: CN=948b1736388808151b0d81da870071c2ce617fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:53:8f:fd:43:97:dc:6e:be:f1:75:ec:36:a6:
a2:bb:94:30:55:88:ab:46:d4:35:6e:83:0d:e5:c7:
34:8a:ca:79:2c:90:7f:ad:a3:42:5d:a6:49:8a:1b:
14:03:15:66:04:a1:be:e7:06:ef:6a:8d:d6:83:45:
f6:b0:b7:da:36:a8:15:35:7c:9f:34:96:41:5a:39:
c6:b3:36:ab:8b:de:bc:08:4b:d5:01:b7:65:1a:4b:
21:20:12:54:c8:07:1a:22:55:e2:94:0e:1f:27:0c:
a8:e3:53:f9:b4:b0:bc:6f:1e:31:44:ef:72:7f:e8:
f9:ae:cb:87:60:62:f2:73:b7:e6:16:d0:1b:38:ea:
00:e3:20:a0:0a:a2:9d:09:01:85:5c:fa:84:6c:74:
3e:e5:7b:55:36:8b:f3:74:80:21:ff:5c:1a:00:e2:
8e:9e:22:15:6b:f4:91:c9:bf:02:f1:bf:e3:c4:6d:
15:8b:31:96:1c:8f:34:a4:8b:c4:44:ce:05:17:8d:
23:1e:c8:38:94:5f:6b:ad:7a:9f:dc:4f:cd:a4:23:
f3:26:da:a5:a7:ee:e9:a4:77:11:1f:f1:70:c4:51:
b0:08:8a:64:10:ca:5b:3a:dc:41:c9:de:62:62:c2:
af:97:df:a6:1e:c4:56:6e:31:c0:00:ae:a1:80:15:
6d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8B:17:36:38:88:08:15:1B:0D:81:DA:87:00:71:C2:CE:61:7F:D2
X509v3 Authority Key Identifier:
keyid:4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:36:e9:be:fa:43:79:fa:56:46:31:52:3f:11:ad:4e:fd:3b:
8b:c4:09:b3:5a:9f:ef:b4:1d:2d:41:ca:de:4e:64:57:5f:0e:
37:b9:40:80:03:0c:b7:fb:83:fc:62:7c:73:71:64:3b:fa:2b:
30:a2:3e:3c:11:f9:5f:83:c3:e3:dc:57:da:5e:95:bf:27:00:
09:5b:9e:b0:a2:0c:cb:4f:02:7a:0c:05:83:07:bc:41:11:42:
d1:be:ff:4f:73:39:82:12:b5:35:98:f8:8a:05:27:53:ca:bc:
5a:c9:5f:b2:de:e3:df:d0:b0:32:05:dd:e7:21:94:03:de:b5:
75:37:f7:72:7b:e7:77:9e:d6:a8:a8:84:61:bc:3b:8b:7d:55:
ea:25:19:fb:6d:14:1c:ad:dc:f1:d4:fc:58:b4:d1:57:4e:3d:
5f:40:24:1b:55:bb:a7:3d:c1:87:84:49:e4:52:f2:0a:91:ac:
87:bf:7c:d3:da:8d:5b:9a:df:14:1a:89:0f:e7:a1:1e:ca:f7:
85:e1:a7:75:98:42:b6:16:6c:e3:34:8a:c2:03:5f:da:a9:30:
fc:91:05:a1:f4:ff:78:c3:a0:c7:70:74:d8:91:58:12:ac:e1:
30:f0:f9:53:e3:3a:77:c4:c1:a4:30:df:d7:f1:ba:9d:0b:bf:
a6:09:49:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:36:53 2025 by rpki-client