Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
File: T7OopKDYxa4BqWlbBB7SxtApap4.mft (raw, json)
Hash identifier: BUpPs7Ic8USINiNf5XAwEaSW2hF/pxTSzDlfLXrIAuM=
Subject key identifier: D8:FC:E3:AC:28:C4:94:62:6E:98:49:A1:3F:7E:CB:38:A7:20:FA:1C
Authority key identifier: 4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
Certificate issuer: /CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Certificate serial: 019A4EF4FBFF4C398D4DDA9381B2F47C27D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
Manifest number: 0E03
Signing time: Tue 04 Nov 2025 13:01:09 +0000
Manifest this update: Tue 04 Nov 2025 13:01:09 +0000
Manifest next update: Wed 05 Nov 2025 13:01:09 +0000
Files and hashes: 1: T7OopKDYxa4BqWlbBB7SxtApap4.crl (hash: w+7fnJww0tj2hxL89maxTqluvlBMmE9hsCK1sQyVzTA=)
2: f56823CiqLOMuTriNLS3PUZ78yU.roa (hash: jqCq9kSPvKsgvdkfpEOf8qz0/6Off+XucTySJaLEm7M=)
3: zKhksjQURk5K1Dod96pBNAB3OII.roa (hash: gundq1JGdYbfKX8ieC3GIfS0gF7vi8HY0pmpJJSYlFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:fb:ff:4c:39:8d:4d:da:93:81:b2:f4:7c:27:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Validity
Not Before: Nov 4 13:01:09 2025 GMT
Not After : Nov 5 13:01:09 2025 GMT
Subject: CN=d8fce3ac28c494626e9849a13f7ecb38a720fa1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:71:77:78:1b:03:81:55:2f:65:66:58:30:bd:
1e:7d:08:c5:3a:a2:1a:6b:49:d6:be:af:e5:71:11:
f3:56:f9:bd:4e:86:06:4d:89:1f:5c:aa:6e:d7:d6:
af:a5:d1:cd:a0:a1:78:4b:f6:53:cf:ce:1e:e3:91:
06:50:32:23:73:25:68:dd:a5:f0:d9:c0:e9:56:4c:
64:66:7d:2a:78:70:d1:44:a7:e5:2a:4b:15:ef:08:
66:6c:c8:22:6a:21:c1:b7:dd:12:4b:ab:f4:12:91:
f0:23:fd:dc:b4:93:47:bd:11:70:09:18:61:f9:a2:
e7:12:e3:eb:67:11:ee:5b:e4:87:88:1d:42:a7:98:
9b:e7:a7:03:7f:3a:6d:83:73:aa:e2:40:9c:33:c4:
f7:6a:7f:dd:96:b1:f1:3c:60:ef:8d:c3:db:53:4e:
17:98:14:fa:84:10:c6:15:6a:81:73:e6:b6:81:3b:
dc:15:d7:60:43:44:8b:bd:92:a1:bc:1a:9e:89:09:
0e:1f:9d:8b:8a:5d:6d:98:90:a9:af:df:1e:a8:c8:
4c:49:b7:ea:af:89:f2:b9:b8:15:aa:63:8d:40:85:
0e:97:5e:f2:8b:dc:8d:8c:fa:43:b4:45:7a:72:ec:
c6:4b:4d:06:74:9c:bb:71:4c:ab:c7:b9:4c:eb:3c:
c3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FC:E3:AC:28:C4:94:62:6E:98:49:A1:3F:7E:CB:38:A7:20:FA:1C
X509v3 Authority Key Identifier:
keyid:4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:99:e7:8c:56:17:64:3b:4a:ce:a4:51:fd:e8:54:12:e7:64:
91:04:35:d0:a8:fd:6e:90:d4:a7:bf:77:31:59:ba:25:02:3c:
e1:5b:d7:23:a8:2c:a1:2d:fa:f3:50:0e:e7:db:54:ef:de:5f:
39:e2:5b:7b:06:30:47:e5:4f:ec:f4:b2:a6:59:87:68:93:cf:
2e:53:ea:93:06:95:c0:af:78:20:e0:33:4d:de:e4:f2:4e:1f:
a7:27:a3:3f:fe:17:7f:fb:a3:0e:4c:41:3b:09:34:8d:66:c6:
67:c2:44:13:0d:2c:13:d7:6f:af:c7:3b:cc:00:cd:20:b3:7c:
6b:45:33:be:43:ef:35:19:d4:03:77:c7:ab:d3:e3:35:f5:9b:
61:81:4b:49:41:cd:50:70:fd:9d:16:10:6d:fc:25:e5:91:bc:
a8:a3:d1:e5:50:74:4a:0f:e2:8f:d4:db:94:34:90:b9:9b:b4:
5d:76:71:38:40:65:02:84:a8:f3:a4:4c:d2:32:46:f5:c9:5f:
0f:b3:3f:c4:75:00:c2:d8:21:e5:2f:ce:d0:a0:c7:5e:9d:0d:
58:3a:34:f4:9f:11:0a:ad:c0:a0:9b:d3:65:23:3f:17:31:7a:
06:48:e0:0d:ea:56:65:d1:da:22:05:0d:8b:56:7f:96:a1:82:
47:7b:78:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:12 2025 by rpki-client