Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: 8pLN3kRKMa//MVwvIIVHjP+hXSBGam5Qja14r+hPag0=
Subject key identifier: 97:F0:9B:89:81:53:33:6A:24:71:33:E3:E9:58:7E:BA:E6:0A:51:E0
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 019A518791CB5C24AF59CC76FA6BEBD2F860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0C62
Signing time: Wed 05 Nov 2025 01:00:30 +0000
Manifest this update: Wed 05 Nov 2025 01:00:30 +0000
Manifest next update: Thu 06 Nov 2025 01:00:30 +0000
Files and hashes: 1: 6b2ERBxknPAevOnYxSvxzu95eG8.roa (hash: 3kiDbks8aSmKxwaOLs+GDp7zBcCi628ZZOq/BNMJfnI=)
2: NOOroZsnjsQfsZH4dRjzbuju0Hk.roa (hash: Zg6ieQb4LhmgSd9bfRqKPOaZLXbcVzG7102ETjzQ1ro=)
3: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: TfMWju38Gx2uVF2kmBSp9ikWyyeuxojg2Ik9L755+2c=)
4: auS9-c0NKZclAN6n9ZeMxPqllbY.roa (hash: jmic3pbI/PzbYEfrYr0mHzcn9EBC12zQGVngarCFUoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:91:cb:5c:24:af:59:cc:76:fa:6b:eb:d2:f8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Nov 5 01:00:30 2025 GMT
Not After : Nov 6 01:00:30 2025 GMT
Subject: CN=97f09b898153336a247133e3e9587ebae60a51e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d7:f6:42:d8:b9:37:aa:0f:cc:0d:0f:31:f9:
9f:48:c4:b1:59:4f:bb:62:08:4d:f8:1e:59:37:70:
fc:9f:bb:56:7c:1d:29:e2:a9:7a:e6:c9:7d:89:71:
8c:b7:13:9b:c1:f8:f8:2c:55:78:18:4b:76:3c:e6:
eb:47:ec:73:ca:21:48:3c:63:e8:ca:76:6c:36:0e:
bd:2f:c2:e8:1c:a4:8e:99:70:1f:7a:72:14:e0:e7:
e1:93:57:87:bc:16:17:5c:b6:ec:56:79:81:12:fe:
ba:ac:af:77:57:ef:2d:8e:80:75:79:60:9f:24:df:
31:53:da:5b:85:26:9a:ff:f6:c7:35:10:fd:49:97:
b3:12:23:44:13:c9:bc:6f:5b:32:06:b5:82:1a:3e:
4d:94:9d:6d:1d:c8:00:12:30:e2:79:16:44:ce:31:
3b:d7:ba:58:f1:02:1f:38:90:27:e0:c1:77:c6:f6:
7e:0e:5c:9b:62:fd:82:54:b0:08:44:1f:2a:22:5e:
45:fd:5f:f4:c7:5c:fc:af:ae:8d:51:e9:e4:c5:27:
e9:1f:6d:30:15:80:af:ca:bc:f3:2d:7e:96:5b:ee:
6c:6a:23:2c:6d:bb:bf:72:05:a7:4d:6c:c3:fb:be:
bd:5a:0c:49:f7:d3:0b:90:a5:42:4b:e5:10:24:7b:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F0:9B:89:81:53:33:6A:24:71:33:E3:E9:58:7E:BA:E6:0A:51:E0
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:bf:35:48:05:32:2c:ce:4f:e8:e4:66:9e:12:d8:17:0a:f7:
b5:1c:38:fb:99:d2:eb:66:21:d1:39:42:d8:76:01:85:ae:ae:
fd:fe:01:f8:3c:06:ab:4f:a1:8f:18:d3:21:cd:ac:74:56:4c:
da:fa:ee:7b:ff:16:b9:32:f9:af:0f:12:6c:31:11:50:45:4b:
78:ef:b4:8b:91:36:6a:99:29:bf:08:e5:36:86:77:b5:af:28:
d5:d9:3f:d0:0b:69:3b:8d:41:5d:b7:45:ae:57:d5:bb:a5:d5:
8d:ea:96:44:b8:02:71:0d:f0:bd:07:67:48:1c:2c:82:99:74:
34:ec:e6:51:57:ee:16:6d:7c:26:75:ed:6a:a1:8c:13:a7:8a:
eb:9c:ea:4a:3a:d3:67:29:d9:e8:ee:fc:76:20:c0:66:81:01:
f2:66:ba:bb:4c:da:df:36:e8:8d:51:f2:b1:be:0f:6a:30:1a:
46:73:1d:5f:38:8c:8b:bc:07:c6:25:3a:79:db:2e:41:06:63:
d6:20:9c:97:05:56:b2:a9:6d:cf:28:ee:66:e3:42:40:19:2c:
21:19:5a:3c:6f:bb:9a:b1:b9:07:1a:0e:0c:18:a1:69:b1:4d:
06:a0:7b:c0:13:22:a6:81:8c:04:cb:11:b9:c0:4c:0c:2b:c7:
21:16:37:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:11 2025 by rpki-client