Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
File: T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft (raw, json)
Hash identifier: jlGkr0ZCSR4vZNBkosIbMAjZL72+f8cK4QkL0QGsieU=
Subject key identifier: 4A:77:86:9F:3E:CC:25:73:41:E5:33:99:13:1E:97:C4:3B:13:71:7A
Authority key identifier: 4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
Certificate issuer: /CN=4fbb63df06de00c843da63977349595471e51a26
Certificate serial: 019A4E867747287707BF0D7BBA58F3968333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 11:00:26 +0000
Manifest this update: Tue 04 Nov 2025 11:00:26 +0000
Manifest next update: Wed 05 Nov 2025 11:00:26 +0000
Files and hashes: 1: T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl (hash: hHUKeJWuJFvXOGuwm/6TewcC3XmvCuXrQWBou+4txno=)
2: qMVYOgqIzk9KMROylZiVtF-t3Zc.roa (hash: xqIRDpc2sFOdr1/l4Pzbo0nNaeEXShJ8C0GuGpTGneI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:77:47:28:77:07:bf:0d:7b:ba:58:f3:96:83:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbb63df06de00c843da63977349595471e51a26
Validity
Not Before: Nov 4 11:00:26 2025 GMT
Not After : Nov 5 11:00:26 2025 GMT
Subject: CN=4a77869f3ecc257341e53399131e97c43b13717a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1a:ee:46:73:e3:c9:46:1b:7d:5a:8c:a6:7f:
3a:2e:f3:9d:f8:77:7e:d2:ea:60:47:36:c8:99:c6:
40:8e:ca:b7:7c:c1:41:8c:1c:50:a5:01:23:30:1e:
b9:27:7d:4b:d4:1a:0c:17:1c:b8:c7:56:1e:3d:f3:
84:7e:ca:c4:18:a7:9a:81:c4:8d:21:02:27:5c:be:
00:77:ed:8a:04:d4:11:00:07:c7:c5:b6:6e:d9:d0:
04:be:13:d9:62:00:03:b6:38:b8:65:66:1c:4a:4a:
e1:91:83:69:66:64:64:f8:53:12:a7:7d:1f:ee:17:
b1:58:b4:4e:17:92:aa:ea:61:bf:92:29:a7:92:dc:
b4:f9:8f:8d:5b:9f:bb:a1:85:7a:5b:ae:b7:9f:46:
00:54:9f:5f:a5:57:18:e5:7b:d4:40:06:b1:9a:f3:
3d:16:c4:1e:1e:a0:0f:fd:e5:65:d5:95:f1:11:87:
f8:a8:8d:f5:a5:c1:4f:38:62:62:33:89:f8:31:96:
50:85:b5:4a:fe:a4:08:9b:af:a1:2d:d0:ce:6f:cf:
5d:8e:da:ab:57:bf:eb:3d:04:6e:2a:ba:d7:5a:2a:
fb:7c:2b:0f:ef:96:c3:8d:03:4c:ee:2c:75:63:89:
d7:bc:08:91:c3:7b:11:1b:62:30:c8:fc:5b:e1:05:
e1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:77:86:9F:3E:CC:25:73:41:E5:33:99:13:1E:97:C4:3B:13:71:7A
X509v3 Authority Key Identifier:
keyid:4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5c:48:da:d0:fe:5d:fc:76:f7:35:3d:73:77:49:3e:26:cd:
8b:5e:a6:9a:8f:91:1c:34:63:c8:15:c2:e2:a8:45:26:c9:59:
ee:31:ce:82:7d:f0:52:78:e3:1b:f8:da:ca:d7:41:84:d0:b1:
65:e5:42:08:ac:2b:a3:a8:29:32:49:3c:94:0d:8d:6c:da:2c:
95:90:73:32:19:dc:87:4d:60:27:ba:4c:b8:5d:8c:ea:1e:81:
17:86:41:ba:14:8f:2f:b7:86:b8:fb:7b:ae:9d:a1:cc:7c:66:
a7:50:fa:30:aa:89:31:32:a3:86:d7:f6:14:de:1f:6c:49:94:
fe:45:4e:3a:ca:e9:80:4f:9c:27:0f:93:06:3c:aa:cb:d2:1a:
e6:61:37:23:e9:a2:a5:e1:79:63:3d:cb:fc:36:09:3c:f2:1a:
6a:5f:32:8e:e3:40:9d:95:db:9d:10:c6:77:2e:50:28:b6:82:
e9:fe:ee:11:88:6a:b3:a1:01:2f:92:4b:27:ef:98:19:a7:15:
ae:fe:be:b6:ec:9b:23:64:62:ef:52:4c:bb:2e:22:d6:08:aa:
e1:79:78:f6:1c:5e:94:d4:29:65:a7:ab:08:08:00:03:27:0d:
2d:85:10:96:4f:80:0e:34:e0:96:53:6f:c6:5d:61:a3:9b:f2:
a9:1f:8c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:59 2025 by rpki-client