Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
File: T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft (raw, json)
Hash identifier: T9H+7kVPUZzBTM5Xsxrn7N0TGyIDqPU8RDm9n2Sowi0=
Subject key identifier: B9:17:EA:9B:52:86:55:55:24:5D:9D:84:A8:5F:4E:6E:65:7E:F8:E9
Authority key identifier: 4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
Certificate issuer: /CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Certificate serial: 0198771A38C487626C5C8EABB46D3835580B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
Manifest number: 0762
Signing time: Mon 04 Aug 2025 22:01:03 +0000
Manifest this update: Mon 04 Aug 2025 22:01:03 +0000
Manifest next update: Tue 05 Aug 2025 22:01:03 +0000
Files and hashes: 1: O4ZnlVhhx3zd5V2McWkK5lXbTfU.roa (hash: 1/S6pfTZfcr0nY65o+eT5Gg2Gukw2uRx/s1OdeKWKmE=)
2: T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl (hash: TSLF/zDohVcQP6cacs4Om2grZBM4nGX91XXITij6UC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:77:1a:38:c4:87:62:6c:5c:8e:ab:b4:6d:38:35:58:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Validity
Not Before: Aug 4 22:01:03 2025 GMT
Not After : Aug 5 22:01:03 2025 GMT
Subject: CN=b917ea9b52865555245d9d84a85f4e6e657ef8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:bb:09:d1:01:32:64:0b:b9:39:68:00:a2:
74:61:ce:e8:aa:8b:55:ed:ac:62:94:44:00:16:cc:
17:7e:5c:13:f6:3c:c2:4d:98:22:e8:0b:e2:00:ac:
2f:8c:9a:07:55:4d:b6:03:59:bf:c6:bd:7f:1b:05:
89:fe:42:15:5f:ac:b2:ea:e4:63:43:6a:57:13:8c:
a4:63:25:b0:99:1b:00:1d:0b:01:15:8e:90:3e:ea:
32:0b:72:92:2c:32:5e:54:5b:72:79:3e:a1:40:5c:
3e:47:fe:c1:8a:f6:e1:6e:24:8f:a7:34:45:a4:2e:
73:56:0e:e0:a7:49:96:e4:f9:57:2a:2e:e6:76:69:
b3:e4:68:df:c8:31:94:22:f0:f0:28:07:43:87:21:
2c:21:36:d0:ee:a7:f1:48:5f:f5:fd:29:44:e5:77:
2e:bd:b5:c0:97:fd:9b:98:7c:0c:bf:74:12:55:71:
c5:ee:f6:8e:9c:ee:43:c0:ab:5a:85:ac:f2:5d:b9:
c6:90:f6:a4:3f:6a:35:71:ab:ea:c6:7f:da:da:e2:
01:d4:59:4c:5c:62:8f:c6:1b:db:6c:45:c2:a9:ed:
f0:e3:34:11:22:04:70:19:a7:84:e9:6f:53:21:dd:
e2:b0:f6:0f:3e:8d:2c:8b:71:59:44:b0:86:97:9a:
29:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:17:EA:9B:52:86:55:55:24:5D:9D:84:A8:5F:4E:6E:65:7E:F8:E9
X509v3 Authority Key Identifier:
keyid:4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:d0:d9:cb:d4:79:9c:04:7a:f5:a4:a4:07:c9:2b:97:49:bf:
ee:e4:14:05:0e:b1:dc:f3:a5:80:08:8c:5b:80:f3:07:cf:6e:
b2:9f:2d:24:97:3f:2a:84:b3:7d:e2:66:12:55:42:98:de:c9:
23:f9:2d:62:40:ec:52:75:bc:32:b4:87:aa:d5:7d:d0:38:b1:
a8:8a:dc:14:e5:4b:9f:a2:af:05:a5:5e:70:f8:da:9f:aa:02:
6a:f7:fb:d3:55:ad:48:b4:ec:09:dd:72:18:ef:11:f3:f1:30:
25:d5:57:ba:6d:cb:23:f7:ce:8c:f0:16:8a:0e:14:04:0a:a2:
25:d4:60:ec:d0:81:fd:21:aa:5f:37:d7:b8:91:15:1e:48:c4:
0a:ca:5b:ca:02:cb:cb:f8:a3:81:49:fa:85:cd:1a:64:0f:69:
b0:f7:24:cd:42:5c:07:21:41:67:18:c0:dd:5c:43:9c:cb:2c:
31:ce:9d:16:31:f1:3b:33:fd:cf:94:25:cd:72:38:42:0a:e3:
ee:a9:62:70:3c:d0:46:51:34:39:61:06:9c:4d:4d:0d:aa:69:
cf:8c:e1:10:24:ee:d8:58:23:6a:69:1e:09:b0:da:e0:57:a9:
4a:20:95:c1:05:f8:9b:d2:0a:4a:dd:69:ad:e0:bd:ce:b0:c4:
13:32:b2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:13:02 2025 by rpki-client