Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
File: T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json)
Hash identifier: PnmOsABhoBevH/vvo5+dDr7YetkBjUfPOQliJ5Bn1Do=
Subject key identifier: D0:C1:0C:2B:D6:B0:8F:52:25:EB:B3:2B:7A:76:5B:A3:3A:67:DE:CD
Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Certificate serial: 019A4EF52C75E637B22BF6A5849A6F0C5ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
Manifest number: 1264
Signing time: Tue 04 Nov 2025 13:01:21 +0000
Manifest this update: Tue 04 Nov 2025 13:01:21 +0000
Manifest next update: Wed 05 Nov 2025 13:01:21 +0000
Files and hashes: 1: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: gfJL9u+o50z4FWgGQ4XO2s041zogdMy1uvCvuT0WFDo=)
2: ZowTG3oT7jR7fyuFs8EJsOqQnDk.roa (hash: BeTzHEyDuFcWSVUJFUf815UpcdMSl9Ku2ZGRMNQ+8lo=)
3: oN_HXrNwEKHWNOBeBXWLmMaedS8.roa (hash: EF1LIVK1qYYVxrGAD02d8UOfG8Hm02T8nbZi/iaVNaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:2c:75:e6:37:b2:2b:f6:a5:84:9a:6f:0c:5e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Validity
Not Before: Nov 4 13:01:21 2025 GMT
Not After : Nov 5 13:01:21 2025 GMT
Subject: CN=d0c10c2bd6b08f5225ebb32b7a765ba33a67decd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:af:83:29:29:fa:53:89:ea:ef:de:7a:46:be:
2f:ec:da:fe:d2:0e:da:8c:08:84:95:ac:c8:7e:e5:
87:29:48:9f:cf:ea:18:7c:9d:5a:13:ae:5c:04:25:
ed:30:74:4c:f1:6a:d2:8b:9b:70:57:df:25:b1:01:
07:28:c1:5f:22:2a:f7:79:02:d7:60:48:f0:16:a9:
e8:f7:67:9f:21:bb:46:f6:2e:67:0f:a1:00:d6:51:
40:dc:80:bb:17:43:9c:bb:40:69:8b:2f:8e:08:1d:
43:85:79:72:74:b9:02:9a:79:60:70:fe:2d:7d:ff:
b9:a5:8d:59:d3:49:d3:00:b0:25:6c:c7:93:78:0b:
df:38:08:39:82:60:46:fe:c9:01:97:24:17:42:83:
02:11:57:24:60:9c:cb:6d:b3:18:d6:02:29:35:a4:
1a:ce:ef:62:90:6b:06:0e:cd:6d:e6:ed:a2:b1:6a:
ae:f3:00:f8:78:60:71:fe:12:07:e3:47:8e:d7:5d:
cc:de:62:4e:2d:2e:0f:32:9b:f9:83:03:4b:12:37:
15:0d:d1:98:8a:79:01:43:84:04:98:c7:92:f9:28:
92:3f:0c:b9:83:19:11:a0:44:18:da:66:fa:27:f7:
0e:2a:8c:dc:d3:44:fb:bd:25:0a:d8:cc:f7:70:86:
47:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C1:0C:2B:D6:B0:8F:52:25:EB:B3:2B:7A:76:5B:A3:3A:67:DE:CD
X509v3 Authority Key Identifier:
keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8c:2c:72:45:29:82:c2:52:42:f5:28:88:1b:93:5d:82:2d:
ed:df:0f:50:de:a3:ee:58:54:ca:69:08:c9:25:79:ac:52:a8:
8e:2a:5f:cb:15:5e:a4:3e:d4:f5:ea:9a:40:76:d6:7c:8a:f2:
3f:7b:45:77:0b:97:90:2d:28:e4:2f:ec:0d:2c:5d:4b:5b:ba:
89:5c:d3:81:fb:92:58:2e:ba:ec:41:bc:db:9b:1d:83:19:fb:
03:a1:70:c4:f3:62:ac:5e:07:4f:e7:d5:f4:43:07:7b:10:aa:
51:2d:a5:6a:20:7d:bf:b2:e7:cb:ea:9b:21:c8:33:7e:9d:76:
5f:99:95:d4:9a:94:6c:9d:99:70:44:37:a4:df:ac:e0:c4:82:
ac:9c:e6:4a:aa:5a:b1:a8:8d:b6:0a:b8:13:50:2d:76:85:3b:
5f:29:68:1f:b3:d9:d1:58:dd:f6:62:81:b8:ea:56:6a:89:26:
88:65:38:26:ab:20:7e:86:d4:20:1d:c1:e7:88:3a:a9:07:f0:
6b:c0:42:c4:5b:98:1a:42:35:ad:6c:60:4a:c5:69:c4:90:7e:
a2:62:b1:a8:4f:e5:f1:35:17:d9:f5:1c:12:e3:d8:15:1e:67:
d2:51:d5:42:45:45:aa:bd:a4:10:70:d3:50:a0:1a:ce:63:02:
9f:74:e2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:58:31 2025 by rpki-client