Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
File: t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json)
Hash identifier: OvnPHDe6cuN1k/3+89tWRGcvFZ7gRUggM/sJHqNsRcQ=
Subject key identifier: 4F:98:E5:AA:BE:0F:36:03:6D:6F:C6:30:E9:2D:60:03:5C:0C:FF:B1
Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
Certificate issuer: /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Certificate serial: 019A4E4F3CE89D07A07E134D544F1ED18BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
Manifest number: 1036
Signing time: Tue 04 Nov 2025 10:00:06 +0000
Manifest this update: Tue 04 Nov 2025 10:00:06 +0000
Manifest next update: Wed 05 Nov 2025 10:00:06 +0000
Files and hashes: 1: qRT-_MhiSov-WJNuRCh-o1ABg_w.roa (hash: Sgwzeb8jM4K/wZC25rDRhN0A8vnEn9LK1zNCxvWZ1iA=)
2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: Yw7lFHQ6ZSR7kBd/W4x6z1x7xUV1QNSgLzhnz6yNAFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:3c:e8:9d:07:a0:7e:13:4d:54:4f:1e:d1:8b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Validity
Not Before: Nov 4 10:00:06 2025 GMT
Not After : Nov 5 10:00:06 2025 GMT
Subject: CN=4f98e5aabe0f36036d6fc630e92d60035c0cffb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ab:38:1d:49:9b:e6:b4:44:52:a8:1f:06:00:
2f:d0:77:7c:8f:3e:c6:7a:37:54:d7:80:45:07:b3:
12:4b:18:74:c4:71:b3:b3:1f:f1:d9:e6:7e:f6:24:
51:fd:4e:33:1b:a9:46:af:23:1b:c4:52:55:db:1e:
b3:92:50:b9:7c:45:88:7c:d9:d7:c8:e4:55:4a:f8:
63:fa:58:7b:e5:05:1e:e6:bb:cc:4f:cf:00:ce:77:
80:1d:c0:ac:e5:b8:00:42:ad:28:49:db:39:d6:04:
5e:2d:5f:18:77:51:01:3a:bf:cf:f0:43:09:fd:38:
16:2a:6c:a1:64:a9:8c:bb:88:90:a7:d0:6a:e0:1e:
c6:d5:8c:5d:de:d7:e1:13:6f:7c:bb:df:22:d9:f2:
a0:ef:02:ac:8a:c3:23:8d:63:07:64:47:2c:28:bc:
d1:c5:9d:f5:73:a5:63:0b:2e:30:c0:e2:35:32:e8:
3c:c6:69:56:37:72:73:f3:d0:48:45:90:1f:12:75:
f6:f8:90:be:09:f9:7f:20:62:26:32:78:85:81:cd:
8a:9d:70:fe:00:75:ce:b5:3c:9c:28:27:52:1b:7c:
af:d3:31:73:e1:3b:eb:7a:ca:4f:f7:ed:af:f3:0f:
c2:a2:d2:7c:e7:d7:59:bf:bf:40:58:47:19:5a:b3:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:98:E5:AA:BE:0F:36:03:6D:6F:C6:30:E9:2D:60:03:5C:0C:FF:B1
X509v3 Authority Key Identifier:
keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fb:b0:e1:03:72:52:83:fd:9b:95:57:8f:96:ba:f2:b6:ce:
95:a5:2e:8b:54:a7:fb:4a:2a:a9:5e:4b:0c:9e:75:d9:9d:5a:
ac:ec:e4:52:26:3f:9f:5e:84:59:1a:f1:af:e0:14:f8:e5:ef:
fc:69:ae:08:7b:c7:66:e4:c2:ea:d1:59:05:cc:fa:9b:67:d9:
35:bb:26:29:91:5f:be:6b:37:52:f5:05:da:44:b6:9d:1c:66:
89:e6:48:f6:81:b1:81:97:56:70:5b:21:42:d1:8f:ab:bd:ed:
ab:30:97:88:dc:ea:57:3f:a6:a0:59:5d:50:23:dd:a7:4c:56:
55:77:2b:6e:fe:e2:e8:55:ec:d4:7d:c6:a5:73:2a:3c:25:0c:
6e:a2:6b:8f:59:3b:b7:be:bc:1f:97:42:ae:70:5b:d6:fe:dd:
93:38:36:5f:c4:7b:fe:52:28:d0:38:e5:62:22:ac:13:3a:c1:
dd:fe:10:1a:6d:2b:2f:4a:f9:37:89:5a:22:ff:ba:16:ee:85:
dd:92:7f:c1:6b:0e:6d:dd:bb:19:e7:e6:40:77:f5:58:d0:29:
83:4b:e0:e3:c1:6e:12:1c:f4:80:fa:31:5c:b2:da:da:ec:96:
ee:89:69:cd:24:b9:2e:2e:b8:fe:5f:ca:02:94:55:a6:03:7b:
53:be:fb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:58 2025 by rpki-client