Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
File: Ty_D6GA1oLjpOA_7I_I_V0MLess.mft (raw, json)
Hash identifier: qtZWI9X7k65X86+EM5JPVyglIdyNHa9PZSfjOn8s1e0=
Subject key identifier: 28:7F:A1:9C:DB:37:53:59:E6:E2:6F:E6:DD:C5:DA:9E:FE:B4:64:CE
Authority key identifier: 4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB
Certificate issuer: /CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb
Certificate serial: 019A4E18B89FBF93C095EDCF7FAD612BCAA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
Manifest number: 0F7C
Signing time: Tue 04 Nov 2025 09:00:34 +0000
Manifest this update: Tue 04 Nov 2025 09:00:34 +0000
Manifest next update: Wed 05 Nov 2025 09:00:34 +0000
Files and hashes: 1: Ty_D6GA1oLjpOA_7I_I_V0MLess.crl (hash: FNJrbIPTvjSTeUIcw5M4E7LojpmNHNeX4qo8HXvGZlE=)
2: WjR-M02WnGrf1hvkkNo0bZEQvnQ.roa (hash: CW8wqMfi/RZSfPuGRw3DqaK3c0hn412Beo4u95KUkQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b8:9f:bf:93:c0:95:ed:cf:7f:ad:61:2b:ca:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb
Validity
Not Before: Nov 4 09:00:34 2025 GMT
Not After : Nov 5 09:00:34 2025 GMT
Subject: CN=287fa19cdb375359e6e26fe6ddc5da9efeb464ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:79:2b:0e:45:6b:a4:7b:71:cb:83:3d:b2:a8:
18:0a:1f:67:5e:7f:8f:37:85:70:29:3c:be:5c:1e:
8e:70:9c:65:c7:e3:f6:de:25:c1:40:0e:ff:58:1e:
17:a3:a2:bd:99:8b:7e:07:a0:26:c1:54:c8:5e:8c:
42:bc:95:a1:70:8e:57:e3:9c:83:5a:93:f9:8e:5f:
d9:37:ea:7b:28:5e:a2:34:9f:0d:89:4c:17:d6:e2:
39:19:af:b7:b7:9f:61:52:66:bf:60:78:2d:4c:f8:
37:b5:18:69:b6:e0:90:e1:71:ad:46:88:8a:86:e6:
9c:1a:5e:f0:f9:83:76:1e:d7:7f:bc:94:b7:12:f4:
00:4d:51:81:62:d4:39:62:3e:e5:46:4d:0e:fa:12:
5c:7b:6e:34:d6:01:30:94:28:02:4b:a4:97:09:59:
37:5b:60:21:75:fa:1d:de:af:4f:b0:18:11:5a:04:
ca:de:1c:d6:57:b4:00:ff:10:30:0a:ec:41:d2:08:
35:74:7d:2b:63:8d:87:0b:5a:ad:00:93:d0:6d:c3:
c2:b9:a4:5e:97:87:86:a1:27:5a:b7:c7:87:17:a2:
83:56:e4:11:04:04:9b:26:6d:da:c5:50:ba:26:af:
9c:16:74:bc:19:fa:db:0e:77:21:ae:2e:e8:6e:20:
0d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7F:A1:9C:DB:37:53:59:E6:E2:6F:E6:DD:C5:DA:9E:FE:B4:64:CE
X509v3 Authority Key Identifier:
keyid:4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:fe:b5:a5:eb:a1:6f:08:0b:e3:4f:e4:70:f7:73:49:6f:75:
04:fa:13:22:9a:f5:75:52:a4:f4:42:ea:da:3a:d6:5f:5f:14:
ee:eb:65:c1:68:d4:65:7f:14:fe:36:9f:de:c2:0b:e1:c2:2d:
93:8a:b2:e8:76:08:a3:3c:d0:04:45:f4:58:47:44:fa:82:f4:
9c:f4:e4:65:1e:be:6b:6e:03:c6:b5:c6:ba:7d:ee:52:5e:2a:
0f:06:63:9f:c8:a3:35:24:e4:8b:4b:e7:40:42:c8:81:b7:13:
e1:b9:b2:4c:c9:23:80:ce:19:3f:b0:ec:48:d6:e7:ff:12:6f:
ca:a9:42:25:97:6c:7a:59:37:b3:9a:6f:61:5c:db:10:2e:5a:
0b:f0:80:28:8b:ed:24:9e:a1:6d:6a:e3:cc:5a:30:f1:a9:b5:
47:76:a1:a3:ef:85:ac:1b:92:ed:7d:c7:25:58:04:30:85:63:
7d:be:50:d4:54:ab:c3:60:4c:81:05:9a:a1:24:97:fe:56:b5:
f5:89:1e:03:1c:31:27:a3:95:cc:45:d4:7e:6e:df:8f:83:8b:
f1:44:1c:a4:8e:f1:d6:3c:a2:55:b0:39:03:ee:d1:1e:fa:b4:
5a:28:5d:f9:f3:9b:32:bb:c4:50:30:7a:6b:a5:00:96:c2:db:
b6:5c:2f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:21 2025 by rpki-client