Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
File: T1JcTLrI19lzMkWHalyr5rNeL-k.mft (raw, json)
Hash identifier: T5p/ik5eKbv2YsoglaGLz6PXQ3BKkmTrjPEpVbtQKo0=
Subject key identifier: CD:67:41:8A:BF:51:4C:0F:2D:2C:8C:05:43:3F:89:95:10:4B:26:1C
Authority key identifier: 4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
Certificate issuer: /CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Certificate serial: 019A4DE1ACBB53ED8EA36BFB05D3DF7C2ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
Manifest number: 0FA3
Signing time: Tue 04 Nov 2025 08:00:26 +0000
Manifest this update: Tue 04 Nov 2025 08:00:26 +0000
Manifest next update: Wed 05 Nov 2025 08:00:26 +0000
Files and hashes: 1: T1JcTLrI19lzMkWHalyr5rNeL-k.crl (hash: Dy2PbljlrGIqp/qTMkOS1Ve9TWvee8xH0duiYq5MET0=)
2: c8I1j-_EdlLIZz3-7BnhuaavJno.roa (hash: CwCN8RoP1XffLa+Wr9AuQzfDKd1y2haHBaFngEMqfpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ac:bb:53:ed:8e:a3:6b:fb:05:d3:df:7c:2e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Validity
Not Before: Nov 4 08:00:26 2025 GMT
Not After : Nov 5 08:00:26 2025 GMT
Subject: CN=cd67418abf514c0f2d2c8c05433f8995104b261c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:60:8d:ab:aa:cc:e9:8d:e9:53:c7:85:14:
04:0a:41:e4:fa:78:45:3f:9c:a2:68:73:9e:b0:50:
02:b9:c5:eb:e6:16:0b:1a:6d:39:77:47:8d:8e:fa:
40:86:49:33:ac:9f:a9:eb:ba:84:e5:ef:6c:54:dc:
cc:1b:04:59:db:e8:4e:5c:c1:c6:00:2e:9c:66:bb:
66:27:c6:2b:d5:e8:de:31:04:2a:a5:2b:88:16:f3:
5a:d6:f6:53:30:67:98:7e:d0:12:a6:bc:5e:93:5c:
89:7a:f6:ba:a7:71:2b:87:3a:c5:46:98:37:5b:da:
83:03:99:eb:d8:1e:43:1a:20:a1:78:20:99:ce:7c:
e3:80:ed:f8:59:22:5b:b7:6d:a8:a7:b2:85:c8:1f:
1e:0d:ca:b0:bf:ee:55:1f:8c:69:8a:bf:2c:66:66:
9b:a1:bc:7c:49:e0:0c:d5:bd:f6:47:65:33:6c:02:
41:54:3f:b7:ed:14:62:9f:4f:a6:ea:d9:68:95:f4:
6e:11:85:e5:70:bc:e7:52:85:03:6f:83:11:71:b6:
1e:1b:bc:0d:07:9f:62:af:b3:c9:cd:2f:27:19:06:
91:17:14:a1:dc:44:7b:3c:3e:46:74:9b:7a:a2:d9:
4b:50:b6:16:16:f4:06:ac:1e:b1:73:f9:30:21:be:
d0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:67:41:8A:BF:51:4C:0F:2D:2C:8C:05:43:3F:89:95:10:4B:26:1C
X509v3 Authority Key Identifier:
keyid:4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:43:2e:90:94:58:5d:2a:24:46:8f:9c:a3:b0:c7:a4:0f:52:
f7:18:68:1d:bd:99:f3:04:93:3b:b7:ac:b8:85:74:c1:51:82:
2b:19:2a:24:ac:cc:77:0e:98:a2:bb:6f:44:35:8b:c2:2c:fd:
1b:c7:cb:37:74:4c:fc:59:22:a0:4f:5c:bb:bf:51:41:e0:5d:
2f:db:be:f9:e8:2b:9f:91:19:44:0f:b8:ec:94:e8:03:9b:a3:
63:92:1d:44:64:25:43:02:17:fa:69:ed:3b:b5:02:c6:d7:88:
d1:2b:c8:dc:c6:b3:06:d0:72:18:f1:ec:1d:34:67:0b:2d:8b:
e3:03:07:2c:82:8e:c3:77:2e:4e:09:ae:33:c8:d4:45:d7:8c:
c2:ee:1e:f0:a3:31:3c:dc:78:79:be:e8:4d:38:c8:f2:0d:2b:
79:51:a1:98:c4:a1:8c:bb:ec:27:f6:78:3d:a1:be:e3:6a:d5:
5e:06:60:49:6e:09:17:68:c1:1c:41:8f:9b:2a:cb:e0:1b:be:
b2:ad:44:25:c2:13:5f:5d:5b:75:a7:cb:08:3d:d6:0e:11:8b:
6d:19:d2:5b:8e:09:e6:c9:32:26:08:41:75:69:95:c8:27:30:
ff:ee:e9:63:21:2e:13:5b:ef:90:cb:d0:b4:24:9d:11:91:04:
7b:cc:6a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:43 2025 by rpki-client