Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
File: T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft (raw, json)
Hash identifier: rcM2VCvwZe7tJgw+FbwJM4cGhrvuEdHd+auX6NGQviY=
Subject key identifier: B5:B9:B0:3A:79:72:CE:63:69:38:DE:DF:0C:AE:DD:32:FD:80:05:13
Authority key identifier: 4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
Certificate issuer: /CN=4fbb63df06de00c843da63977349595471e51a26
Certificate serial: 01989DF0766D0818F0EBD1B7488E7B73A571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
Manifest number: 162C
Signing time: Tue 12 Aug 2025 11:00:38 +0000
Manifest this update: Tue 12 Aug 2025 11:00:38 +0000
Manifest next update: Wed 13 Aug 2025 11:00:38 +0000
Files and hashes: 1: T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl (hash: gzdDqW8YL+SPs4JzkftmVrbI2mE1zh1KSoBPKynMtBs=)
2: qMVYOgqIzk9KMROylZiVtF-t3Zc.roa (hash: xqIRDpc2sFOdr1/l4Pzbo0nNaeEXShJ8C0GuGpTGneI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:f0:76:6d:08:18:f0:eb:d1:b7:48:8e:7b:73:a5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbb63df06de00c843da63977349595471e51a26
Validity
Not Before: Aug 12 11:00:38 2025 GMT
Not After : Aug 13 11:00:38 2025 GMT
Subject: CN=b5b9b03a7972ce636938dedf0caedd32fd800513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:cb:12:66:d0:dc:57:75:ef:93:20:dd:01:
94:0c:1a:66:7c:14:35:c5:ee:bc:af:c3:68:af:80:
a3:1d:e3:ce:9a:3b:74:4b:41:83:a7:af:7d:f4:53:
21:6c:63:38:ab:2b:ae:e2:2b:27:53:87:28:4f:f1:
9c:8d:41:3a:9a:3f:77:59:53:ba:3a:3a:32:91:be:
de:92:3f:70:fd:22:6b:09:87:38:a2:9e:b2:af:d2:
c1:4e:b5:b3:99:e7:eb:92:18:2f:e2:db:07:cb:dd:
b1:67:96:7e:ee:cf:cd:a3:82:1e:2b:00:1e:76:b4:
32:74:4c:c6:53:a2:a8:e4:84:a5:81:1b:51:9f:f7:
bb:69:15:d4:20:1c:ff:f0:0f:6b:34:e9:ef:97:92:
85:3d:cd:37:14:30:90:c0:0e:d6:96:c0:72:97:9f:
53:f1:0d:b7:e3:73:82:91:e9:b7:c1:a5:54:e0:b4:
a9:78:8f:ed:0a:b0:7c:25:5a:be:35:c8:5e:90:88:
ce:85:14:50:42:1e:64:e3:7d:ba:9a:25:a8:77:95:
b4:86:c3:53:93:59:8d:73:e5:b9:15:92:38:1b:ba:
25:54:08:39:9f:9e:9c:0e:be:b7:d7:cb:29:e3:77:
b9:c2:65:55:38:23:15:4c:c6:7d:e5:d0:31:3e:d0:
03:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B9:B0:3A:79:72:CE:63:69:38:DE:DF:0C:AE:DD:32:FD:80:05:13
X509v3 Authority Key Identifier:
keyid:4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e2:d8:0e:18:1e:11:58:cd:ff:9b:43:ca:80:8b:e3:2a:ed:
91:d6:4b:06:30:41:77:68:4a:fc:13:ee:f4:a4:02:2d:9a:45:
62:38:c5:45:42:b7:49:e8:ac:e3:b4:ea:25:62:86:0b:16:02:
3d:6d:34:72:dc:66:1b:51:51:81:8c:fb:ca:c2:c5:74:2d:e7:
64:e0:db:c0:bd:bd:55:d0:50:24:42:a8:a3:df:21:cb:c3:4c:
38:e6:06:6d:ac:90:f8:ef:8e:94:5f:b0:da:29:15:a5:3f:98:
91:98:66:6d:49:5e:ce:13:6c:f6:34:34:15:32:7a:66:c1:3e:
d4:32:1f:6a:26:ce:22:e8:de:4e:24:94:69:bc:d7:97:f4:75:
9e:ac:dc:ea:93:0b:c9:5c:95:e4:12:39:2a:15:bb:db:f1:c7:
2b:5e:6b:95:f7:e3:78:23:90:23:a0:fe:25:70:69:d5:3f:5c:
f0:82:68:a8:b4:f9:c4:28:29:e7:7a:40:1c:ba:e2:9c:df:22:
dc:06:a4:af:98:0d:84:bd:3a:18:c6:7d:0c:66:2c:fd:75:ec:
1f:4a:92:f0:7d:b5:ba:7e:be:c7:34:4b:69:69:0c:ba:c7:78:
ca:3d:59:c5:2d:51:a5:64:47:1b:c4:a8:d5:5c:0d:93:0c:28:
df:ef:e8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 19:04:26 2025 by rpki-client