Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: pw03S1hVYMxUkDiJfngzd0WJeZ1GmLzuhfQJbtT6UF0=
Subject key identifier: A1:22:EC:85:F1:F6:58:8C:D6:B6:C5:D0:BA:18:38:95:39:B7:A2:E9
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 019A4F9912797740EF2F722FDA8C6B35D660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0C61
Signing time: Tue 04 Nov 2025 16:00:23 +0000
Manifest this update: Tue 04 Nov 2025 16:00:23 +0000
Manifest next update: Wed 05 Nov 2025 16:00:23 +0000
Files and hashes: 1: 6b2ERBxknPAevOnYxSvxzu95eG8.roa (hash: 3kiDbks8aSmKxwaOLs+GDp7zBcCi628ZZOq/BNMJfnI=)
2: NOOroZsnjsQfsZH4dRjzbuju0Hk.roa (hash: Zg6ieQb4LhmgSd9bfRqKPOaZLXbcVzG7102ETjzQ1ro=)
3: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: d+YCrAr04i8ClSxpKnrOkTJFaQYwlGwkJOZks6snWho=)
4: auS9-c0NKZclAN6n9ZeMxPqllbY.roa (hash: jmic3pbI/PzbYEfrYr0mHzcn9EBC12zQGVngarCFUoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:12:79:77:40:ef:2f:72:2f:da:8c:6b:35:d6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Nov 4 16:00:23 2025 GMT
Not After : Nov 5 16:00:23 2025 GMT
Subject: CN=a122ec85f1f6588cd6b6c5d0ba18389539b7a2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ec:bc:38:68:d8:57:00:fb:ba:b3:77:32:e9:
8a:bd:71:e0:12:ed:66:6b:4f:b4:9e:3f:28:b8:8c:
19:88:10:a1:7b:c7:e0:28:bd:3e:11:a2:50:2a:e1:
2b:96:26:d8:25:75:54:02:29:ed:90:90:dc:5e:b2:
3b:f4:56:fd:e0:7f:0a:86:50:74:e0:ef:0c:83:21:
93:3c:b3:ce:2d:47:11:f9:11:6f:26:2f:03:00:18:
37:2d:77:23:8d:01:7f:78:40:72:4b:8f:20:6c:e7:
59:7c:9a:c6:23:ce:f2:8e:3e:f6:3a:69:10:30:cc:
f3:fb:da:87:73:81:f6:98:47:7b:d0:e0:e0:48:82:
71:ba:51:f9:93:0f:79:34:6c:74:37:e3:0f:28:c1:
41:1f:3e:aa:03:ef:24:ed:94:da:f0:d5:d4:79:b4:
52:96:fd:fd:7e:26:b5:3f:cf:e7:a3:38:fb:dd:1f:
74:3d:dc:87:c7:0f:69:c2:f9:8e:29:84:b6:1c:c2:
77:0a:36:fe:38:89:1e:83:c8:4f:17:8c:7c:7f:5c:
f5:76:ac:86:a5:71:2a:75:d0:f9:c6:c3:3c:46:fd:
f4:ae:0b:d8:9a:49:84:9f:fd:4b:48:10:d6:40:88:
df:83:5d:cb:b4:45:d2:32:31:6a:02:7e:bd:b7:aa:
38:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:22:EC:85:F1:F6:58:8C:D6:B6:C5:D0:BA:18:38:95:39:B7:A2:E9
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3a:aa:9c:d7:af:52:0c:5d:7c:81:6c:42:79:be:b0:4b:ab:
2b:a1:fe:4a:12:06:ce:37:71:71:b4:00:a4:dd:d1:42:33:c6:
86:d5:ef:89:73:37:9b:e6:aa:a2:19:6f:b3:b4:88:d3:29:23:
9e:76:06:b6:dc:8d:1d:90:2f:31:6b:d0:7a:95:44:7f:1d:e3:
ec:ef:b5:54:b8:8b:80:5f:aa:e1:05:d2:71:c3:45:07:e8:cd:
4a:23:27:62:f2:bb:76:39:4c:86:c9:ea:e8:a6:d5:ea:ae:71:
3d:e2:b1:8f:f5:80:c2:e3:37:6a:54:8e:00:b3:13:d4:b5:ea:
ad:68:64:25:09:fd:bf:c5:6f:d3:19:7c:26:32:b4:79:15:1c:
17:b0:2f:96:87:78:25:78:99:96:31:a4:34:4e:4c:0d:b4:0a:
5d:cf:f5:e3:08:75:18:19:28:65:8a:d0:f5:61:4e:30:d0:0c:
40:fe:48:e3:40:19:67:63:f3:d3:b6:5b:18:c5:22:fe:88:97:
f0:90:2e:96:e9:ca:b5:03:38:f8:74:49:bf:2d:87:18:1f:a1:
1a:41:b7:b6:d9:3a:5f:6a:c2:fd:1d:2a:b2:be:80:2c:7a:95:
0b:85:07:b3:4c:7c:6f:7b:19:2e:a7:88:75:bb:b0:2f:31:7f:
73:05:3f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:09:49 2025 by rpki-client