Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
File: T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft (raw, json)
Hash identifier: A9yqZQkm28EnA2cVW9ZaoPq2hToCViDrWNePP82ReWg=
Subject key identifier: 0E:01:FC:B2:08:B7:76:67:89:47:EE:4F:F0:27:CB:54:DD:EA:9B:97
Authority key identifier: 4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
Certificate issuer: /CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Certificate serial: 019A4E4F56D6628418FC9BAEF0F1A8782643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
Manifest number: 0856
Signing time: Tue 04 Nov 2025 10:00:13 +0000
Manifest this update: Tue 04 Nov 2025 10:00:13 +0000
Manifest next update: Wed 05 Nov 2025 10:00:13 +0000
Files and hashes: 1: O4ZnlVhhx3zd5V2McWkK5lXbTfU.roa (hash: 1/S6pfTZfcr0nY65o+eT5Gg2Gukw2uRx/s1OdeKWKmE=)
2: T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl (hash: yXLMOGB/0CJ6j5laV2DlSkPGTpflg+EXzJ5c6x1GNpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:56:d6:62:84:18:fc:9b:ae:f0:f1:a8:78:26:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Validity
Not Before: Nov 4 10:00:13 2025 GMT
Not After : Nov 5 10:00:13 2025 GMT
Subject: CN=0e01fcb208b776678947ee4ff027cb54ddea9b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:86:d9:41:e6:68:49:ed:15:e1:60:ae:f5:38:
23:89:49:3a:62:6e:c9:80:3c:32:aa:7d:55:21:52:
90:be:4f:09:df:e6:36:ad:cd:b6:f4:1d:e1:5a:61:
76:51:eb:76:e5:18:f4:10:4c:17:4f:33:cb:80:ac:
1e:78:2c:bd:29:33:9b:02:b0:24:d0:70:ed:ac:9f:
5d:fa:a0:33:3a:3d:d4:a8:0e:c1:3c:bf:50:33:6c:
2a:38:45:37:68:f4:5e:a4:bc:75:1f:ae:c6:ed:98:
9b:99:5e:72:25:ba:17:3f:57:ba:17:5b:f9:65:58:
22:95:d1:ba:25:3c:51:17:00:44:a2:ab:7d:4a:ba:
c0:67:b7:50:bc:e3:98:4c:2d:e9:a8:7b:85:23:2c:
8a:11:5a:9d:c7:73:a6:f7:0e:a1:d3:07:c7:d6:bb:
10:f5:6a:86:a6:7f:1f:b4:f1:0d:12:95:c0:07:e2:
d2:8f:7a:e1:23:61:6b:36:63:3b:88:19:c0:48:f7:
c7:97:b8:05:77:fd:bd:48:41:14:a0:16:3a:2e:9d:
37:c7:fc:68:9a:71:f1:91:3f:ed:34:1c:cc:d4:de:
61:a2:57:04:7c:3e:b9:1b:21:c5:ec:8d:bd:44:b2:
ae:38:53:48:fd:50:58:91:5a:12:22:a0:4e:ae:0f:
9a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:01:FC:B2:08:B7:76:67:89:47:EE:4F:F0:27:CB:54:DD:EA:9B:97
X509v3 Authority Key Identifier:
keyid:4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6e:2e:9d:3a:28:57:66:fc:cb:47:79:88:1c:a6:e3:7f:a7:
f3:ec:d9:f2:4a:4b:59:91:07:9b:d8:4a:5e:7d:39:31:9b:ab:
25:e6:49:46:64:df:63:35:61:95:c0:2b:70:01:f8:e7:01:73:
a4:9a:9c:9d:48:cc:f7:a7:48:f8:c2:d4:8a:f1:b1:d3:a6:74:
41:18:a5:d4:b1:d3:14:9a:38:50:63:a6:73:d0:b5:65:8c:72:
c6:7f:c3:a8:f8:aa:0e:f9:56:04:40:df:50:5f:75:cf:02:c3:
d5:db:63:cf:bf:b6:29:49:4f:7d:64:86:06:91:9d:24:0a:01:
2c:c5:c2:f1:e4:f0:50:f6:0f:8f:21:a3:a9:2f:81:c2:8f:06:
4d:d9:7d:07:8e:f3:d4:86:34:98:df:21:b2:7c:dc:e1:25:29:
97:f0:80:db:a4:cf:ab:f1:18:c6:75:16:c6:cf:47:6a:6d:91:
f6:14:9d:0c:26:c5:9f:c8:fc:15:bc:f8:56:53:d7:1c:a8:65:
6b:a7:78:37:f9:00:f6:35:5d:b9:aa:5d:a6:f4:ba:0f:f4:d8:
09:e8:29:3f:01:17:77:86:4b:c4:13:cb:7f:90:11:8b:8c:fc:
1b:ae:0d:56:f3:4b:b4:c7:63:df:ce:9f:45:e7:1d:7c:b0:77:
de:ce:5f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:16 2025 by rpki-client