Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
File: T0HFbqBp7nscHfZoa9NuDhRSiiA.mft (raw, json)
Hash identifier: GwpxPaxUuC0j3wVRqaJlIs53VB31a8ShfgeTmYNft7o=
Subject key identifier: A7:99:60:B0:51:C7:24:D2:71:BA:76:2F:87:89:C2:E2:8D:E0:D5:7D
Authority key identifier: 4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
Certificate issuer: /CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Certificate serial: 0198529F650461FD1D672FD1E5EF4BB38400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
Manifest number: 0D2C
Signing time: Mon 28 Jul 2025 20:00:34 +0000
Manifest this update: Mon 28 Jul 2025 20:00:34 +0000
Manifest next update: Tue 29 Jul 2025 20:00:34 +0000
Files and hashes: 1: DRrOJLgDL5rmiSF6D3RMJURdhRI.roa (hash: 7NgLPdqIa5BkuBXQmhxzkicPEWRt/mYhR9CY8DkwoYg=)
2: T0HFbqBp7nscHfZoa9NuDhRSiiA.crl (hash: lH/q2ZpJpN1ajl2zl3hn/N7pttjrxPryWJPEh71aY7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:65:04:61:fd:1d:67:2f:d1:e5:ef:4b:b3:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Validity
Not Before: Jul 28 20:00:34 2025 GMT
Not After : Jul 29 20:00:34 2025 GMT
Subject: CN=a79960b051c724d271ba762f8789c2e28de0d57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:cf:4e:9c:5c:55:6e:b3:a2:ec:94:c5:75:
b6:7b:27:90:79:85:42:6c:74:9d:b2:1d:66:80:58:
82:b9:b4:f7:e2:9a:3f:3b:39:39:90:21:bc:03:15:
fa:aa:a2:3a:fb:46:60:cf:11:c5:18:3f:47:db:86:
96:e5:15:04:70:46:47:de:6d:f7:6d:ed:56:48:1a:
dd:22:ad:a5:de:6b:ea:d4:33:66:69:44:e9:ca:18:
0b:79:4a:aa:9f:02:67:d7:fe:02:98:37:4b:a4:d0:
f2:5d:5a:39:fb:a4:6a:47:0f:d8:fe:20:fb:f2:30:
b7:f0:66:c1:76:cf:06:52:c5:c0:61:16:8c:b5:3a:
fd:bc:b6:b8:7d:b0:19:6c:b6:73:cd:d8:f7:70:39:
2a:32:dd:20:67:4f:06:43:c8:b3:d9:3b:ab:62:42:
2c:69:be:dd:8e:33:7c:e8:36:a9:df:26:97:02:a6:
6a:4b:92:e8:d3:1e:17:26:7b:1d:75:c1:90:ff:e3:
dc:52:5c:83:38:4d:17:f7:c7:ad:25:f1:e1:ea:6a:
0b:d2:68:71:3a:44:4b:d4:32:64:a5:60:4f:c6:48:
d2:d6:4c:28:f1:35:0c:7a:5b:db:f9:e7:33:5e:4b:
f3:c7:c8:21:a9:1e:b4:c5:73:cf:f9:01:49:cc:44:
88:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:99:60:B0:51:C7:24:D2:71:BA:76:2F:87:89:C2:E2:8D:E0:D5:7D
X509v3 Authority Key Identifier:
keyid:4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7d:ef:f4:c7:86:aa:72:1e:99:a3:5f:35:02:f0:ac:1e:b0:
c9:ed:81:d3:f2:81:cb:00:55:49:ee:5e:67:9c:03:9a:94:a9:
3d:7e:26:bd:66:ee:88:83:72:fa:02:73:36:34:45:ac:8f:04:
f1:68:67:56:5e:25:46:50:8a:19:e7:41:13:8f:51:f2:cc:1f:
95:58:bc:77:fe:12:73:b8:af:68:b2:b5:d2:51:39:25:a0:d9:
c4:e3:91:32:e8:a3:74:a4:5d:16:0c:56:13:1c:72:f0:d6:f1:
6f:80:7f:26:41:57:29:7b:c7:49:d1:69:4a:bf:cd:f5:5e:71:
4c:0f:3d:11:5b:8c:55:a9:7a:3c:1c:de:1e:3b:da:1a:5f:58:
d1:fa:de:db:3c:c4:5a:4b:e4:7c:9f:3d:08:94:d6:75:97:9a:
e8:95:2d:d8:f6:c5:51:51:74:11:53:f4:99:e2:1d:82:51:0b:
1e:ec:61:21:f4:38:c1:59:81:9b:db:a3:c1:ef:57:7c:95:ff:
78:f5:78:e9:b4:dc:52:3e:cd:f5:8c:74:eb:96:65:5e:dd:e8:
26:e1:4e:4c:3d:a8:88:83:09:2b:ae:b8:d3:d5:d9:2e:3f:32:
d1:e8:ad:e4:4d:df:6a:04:33:f2:b7:fb:bd:5a:9d:3f:cd:6a:
ad:9f:b0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:07:43 2025 by rpki-client