Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier: BtK3J9XFatUG6SMI6GKZGAG4+UvBtbG3KkLJmd01gcc=
Subject key identifier: C1:05:3B:74:43:E4:45:5F:E6:CA:22:17:6F:89:67:0F:DF:D6:26:91
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 019A4F993EB3343E75FEA7BD4130EC3164E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number: 0FF8
Signing time: Tue 04 Nov 2025 16:00:34 +0000
Manifest this update: Tue 04 Nov 2025 16:00:34 +0000
Manifest next update: Wed 05 Nov 2025 16:00:34 +0000
Files and hashes: 1: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: Z0cH6cwgW0Qdo/V73ahsKJRaSlDgYQ/GQIntjy/0QFc=)
2: vHSz7syZCdc9si7_Pq1PLv6tdnc.roa (hash: DpwRdEh/R0r3FLFeNbLkCKGthqDKuAQzsAmQCtR8AOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:3e:b3:34:3e:75:fe:a7:bd:41:30:ec:31:64:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Nov 4 16:00:34 2025 GMT
Not After : Nov 5 16:00:34 2025 GMT
Subject: CN=c1053b7443e4455fe6ca22176f89670fdfd62691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:70:e9:68:61:52:ba:91:79:7a:d3:59:62:
06:c1:c5:3b:f9:db:32:18:70:f2:67:86:d5:6b:e6:
bc:2c:b6:f9:e5:c2:ef:c7:55:c1:79:54:c8:2b:18:
92:5d:c2:cd:d6:ef:96:ef:63:75:1b:5f:2e:d8:b0:
6e:85:2c:79:6b:10:ff:6f:ca:5c:fb:06:8b:c9:36:
ff:b6:90:f2:d7:f3:4b:1c:d0:81:95:84:44:db:37:
6d:c6:a2:6f:20:6a:b9:78:c5:34:04:5b:a8:0f:db:
7a:aa:b7:e3:91:d6:cf:65:d2:94:50:5e:71:09:66:
46:c3:51:d2:5c:13:28:96:e9:b8:26:31:a3:82:66:
ef:24:3d:be:d9:87:7d:3d:7f:69:84:33:9f:b7:a6:
8b:08:ec:50:08:6a:7b:59:09:18:b4:4c:b1:e5:27:
2a:0e:42:81:fb:2c:86:d7:d4:77:53:e1:10:14:f2:
63:70:7c:19:78:06:59:34:c4:9e:13:3e:3f:96:71:
4b:f4:df:86:24:59:01:8c:75:0c:a2:9e:32:52:da:
0a:4e:78:a9:ea:62:69:11:64:6e:b1:6a:62:f8:87:
a4:20:33:60:eb:4e:d0:7a:f9:3a:a5:62:9d:2c:7e:
df:d4:38:4d:1e:c4:b2:b9:f5:fc:13:aa:2b:58:cd:
37:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:05:3B:74:43:E4:45:5F:E6:CA:22:17:6F:89:67:0F:DF:D6:26:91
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:83:a3:de:af:b1:72:af:43:f1:9f:44:56:c3:0b:6d:7d:44:
50:5c:ef:5e:36:d9:e9:a4:ef:6f:35:7b:fa:7c:2e:31:31:ff:
01:ea:6d:86:3d:ec:e6:89:29:9f:2d:99:c4:71:68:7e:72:96:
f9:ec:af:63:61:a2:3f:db:ed:6c:27:26:84:d5:0a:e9:7f:29:
5a:f6:a7:ff:b2:99:37:2a:11:b8:12:3b:62:91:24:79:e4:e8:
05:83:43:fe:42:88:d0:f8:f0:80:0a:99:10:03:16:a4:4e:70:
25:36:f7:48:99:80:eb:15:ca:3a:85:f8:c6:02:fb:9d:f8:9f:
21:a7:1d:31:e1:02:32:a5:6a:af:f3:35:6d:b5:fe:87:96:ee:
c2:1b:25:ef:de:ef:41:e9:1c:83:cd:c4:7c:7d:e6:17:4e:d7:
bc:d8:e6:d2:0b:91:ad:01:8d:67:ac:fb:1c:d5:31:c7:00:51:
23:de:a4:24:01:d1:56:38:d5:f8:b3:00:06:85:32:c9:63:4b:
f2:70:7f:c0:11:18:7a:bc:8e:5c:32:db:93:20:38:4d:00:5e:
5f:d3:20:2d:ca:ce:ce:d8:e9:11:4d:5e:39:45:28:66:52:73:
77:04:eb:d8:89:da:eb:11:67:94:cc:fb:40:79:e0:17:cd:12:
9b:84:0c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:43 2025 by rpki-client