Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
File: t4OAtB43tXV9PU4u7N8G2TCnC50.mft (raw, json)
Hash identifier: H2CMq8e99cL81htKeoJ6CiXwwock3+Lx0Mh6n8XyMCE=
Subject key identifier: 36:0D:5E:D1:FE:A2:6E:C3:F3:00:CB:85:70:E0:E4:EA:0A:16:C6:9B
Authority key identifier: B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
Certificate issuer: /CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Certificate serial: 01989F3A62D6375F4E547D292001A2A906DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
Manifest number: 1634
Signing time: Tue 12 Aug 2025 17:01:00 +0000
Manifest this update: Tue 12 Aug 2025 17:01:00 +0000
Manifest next update: Wed 13 Aug 2025 17:01:00 +0000
Files and hashes: 1: FFNfocwWW0AfwhIbyh5sOWKp-YQ.roa (hash: +IQV10jr/ct4eRg1uckgNvPR/qQ6+ipg5/BVGvg6xW8=)
2: t4OAtB43tXV9PU4u7N8G2TCnC50.crl (hash: lyaQ6q3McM0mhoEjgb0EiVHtgSpQIGbm6cRQMoFmI6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:3a:62:d6:37:5f:4e:54:7d:29:20:01:a2:a9:06:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Validity
Not Before: Aug 12 17:01:00 2025 GMT
Not After : Aug 13 17:01:00 2025 GMT
Subject: CN=360d5ed1fea26ec3f300cb8570e0e4ea0a16c69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:63:e5:f3:ea:77:f3:63:d3:93:71:37:10:
2b:0c:df:d8:60:47:65:0d:66:70:3c:60:ae:62:68:
75:b4:56:23:e0:d1:61:b8:15:e4:d7:da:81:f1:0c:
08:e9:bb:26:c9:d3:aa:01:61:75:ab:5d:81:69:74:
82:1d:73:72:17:27:a7:aa:df:ba:56:43:90:be:8c:
38:34:51:cf:00:e0:49:b2:5f:e4:0f:8a:d7:f4:94:
d7:24:1f:f7:1a:4d:30:20:d3:74:4b:bd:4e:b2:08:
1e:7a:1a:fd:d7:b4:50:05:1e:73:f7:d1:6f:a6:71:
c1:3e:9d:30:ea:3c:43:88:61:46:72:c5:ac:ef:63:
2c:61:78:2d:c8:03:a3:0c:2b:25:32:a0:15:e9:93:
a7:26:e2:d6:22:c9:a3:d2:a1:8a:07:36:cb:58:6c:
a2:aa:cf:be:32:41:db:c3:c8:55:cd:9f:ea:bb:7f:
ec:2c:7b:29:3d:86:4a:09:12:92:db:4c:0a:52:4b:
b3:db:3f:f1:2a:0f:d2:44:ad:ce:c4:ac:59:d6:70:
27:73:4c:de:4c:69:02:31:a0:2c:47:f8:9e:fc:a9:
fa:13:95:f0:03:f3:de:ef:58:90:a5:a6:f4:f2:7e:
54:37:22:f4:b2:31:6e:51:e7:41:39:15:5e:c1:a0:
7d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0D:5E:D1:FE:A2:6E:C3:F3:00:CB:85:70:E0:E4:EA:0A:16:C6:9B
X509v3 Authority Key Identifier:
keyid:B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:75:c7:d6:c5:96:42:b5:7f:5d:a1:7c:e2:2e:6d:42:f9:8d:
07:fa:a4:43:ff:cb:88:96:ae:81:b6:76:01:d8:89:03:9f:5d:
f5:14:0e:ec:fa:a1:c8:e1:ed:23:a6:34:4e:cb:80:a3:7f:bf:
8b:9f:1a:c2:ef:56:c0:87:2c:d2:31:f2:98:be:13:ee:1d:eb:
4b:5c:4f:11:10:78:46:a8:0c:9d:ee:01:18:d9:2f:c7:fa:95:
50:7c:63:d8:6f:81:88:12:c0:d7:4e:26:fd:cc:28:e9:5c:cb:
ad:d3:b0:a8:e9:ee:59:1b:f0:d5:52:5f:66:a9:e4:41:56:33:
33:1e:7d:31:4d:42:cd:93:d2:6c:a8:d9:aa:06:4d:66:62:f9:
bd:da:19:c4:a6:98:c9:e5:35:be:3d:a8:52:32:bd:cb:48:19:
00:ab:bb:64:62:79:4a:57:6a:c3:cb:15:7a:9b:35:69:a7:31:
7d:1c:a5:7a:d1:00:ec:18:16:c5:5a:cf:59:02:01:c2:51:c6:
fb:09:d7:ae:44:9d:07:1e:50:7f:9c:d7:5d:65:e8:a5:06:4b:
32:ba:e7:42:dc:d8:89:46:18:90:bb:7d:98:99:c3:01:b3:a8:
9f:9f:d7:1a:03:6d:87:2f:dd:b6:93:eb:18:de:e1:73:cf:e0:
f7:92:94:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:54:08 2025 by rpki-client