Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
File: T-uUV-xRnoI3hncQvMgvow6uZ8A.mft (raw, json)
Hash identifier: nPhwNrgItWKLkJ8tjszYJzLxiTIbTo5HQNxmjRh3ebU=
Subject key identifier: 07:93:C1:42:FE:F9:E3:E3:16:DB:BE:29:8D:4A:99:C0:60:69:7D:4C
Authority key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Certificate issuer: /CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Certificate serial: 01984C2F21C3FF2553C110FBE1A7E9A2ED31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 14:00:13 +0000
Manifest this update: Sun 27 Jul 2025 14:00:13 +0000
Manifest next update: Mon 28 Jul 2025 14:00:13 +0000
Files and hashes: 1: DMobrS7vy2moYzGxgBwp5Xf3ALI.roa (hash: FXiETzyRXvUDm+4e6t+4D5feOq7eyRK3o1W4hSbV9WQ=)
2: M_KXgx_JXGIc6tpaSDgr0M5BMPw.roa (hash: X3pXFD/5xK/MixjNA4bRNTqRZIbmtfbltIvMKrIW70U=)
3: T-uUV-xRnoI3hncQvMgvow6uZ8A.crl (hash: 7/nbmMSN3TNXl9yJDX2Z9TrmD2QIL3gsUH0XWWJsokU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:21:c3:ff:25:53:c1:10:fb:e1:a7:e9:a2:ed:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Validity
Not Before: Jul 27 14:00:13 2025 GMT
Not After : Jul 28 14:00:13 2025 GMT
Subject: CN=0793c142fef9e3e316dbbe298d4a99c060697d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:08:68:fb:8a:5d:fa:7a:97:26:4a:fe:4b:08:
32:7d:35:b2:1a:81:57:32:07:20:69:0e:49:b2:5e:
a3:1f:6d:9d:b4:c6:be:d3:aa:46:35:a2:95:bb:16:
94:cf:e4:d2:e5:a5:cc:12:b3:63:7b:07:27:f5:73:
1e:d9:f1:85:aa:e9:2d:60:02:86:4a:c2:ac:8c:8b:
41:f6:3c:fd:26:d5:22:ed:42:4c:fc:1f:83:88:47:
81:d0:0b:ac:0d:5f:b8:32:73:f4:43:a8:9e:92:ae:
3a:a5:d3:42:19:f5:67:0a:62:a2:67:fd:be:0d:47:
48:53:58:d7:84:5a:d8:d2:98:79:91:c7:04:82:fb:
ab:0e:a4:54:61:3c:c5:5a:ae:68:8e:c6:b2:e9:3e:
b9:0c:0b:61:6a:d8:31:b1:cc:d8:f7:64:4c:86:17:
5a:87:d5:80:5e:be:d8:86:cb:c0:47:f9:10:d1:d2:
3b:22:02:23:00:60:54:58:2f:50:a2:aa:29:a1:a9:
83:2f:ae:9f:06:40:9a:f4:f3:4a:c9:7a:f0:eb:04:
fa:21:f2:cd:f6:bd:5f:8f:6a:73:f8:c8:74:f3:ce:
7c:d8:01:51:72:4a:79:51:5b:92:ba:da:74:29:44:
f0:34:60:cb:ae:05:42:f8:7c:0a:d5:a0:10:58:d8:
10:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:93:C1:42:FE:F9:E3:E3:16:DB:BE:29:8D:4A:99:C0:60:69:7D:4C
X509v3 Authority Key Identifier:
keyid:4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:19:0e:f9:bb:2a:7f:00:30:b9:30:b2:74:9d:4a:95:03:95:
45:fd:58:1a:96:60:34:13:d3:19:42:d4:16:c1:b9:28:67:00:
ad:d8:0d:c1:59:bb:3c:02:f5:08:b3:71:67:c4:1d:51:33:67:
5a:9d:eb:26:f5:7b:39:26:55:16:64:4c:02:38:12:a3:96:ff:
3f:e6:56:e7:53:4b:ca:a2:0c:4c:20:a8:dc:1e:bb:8f:93:c5:
f3:67:c6:4f:85:a7:67:3a:2b:8f:58:5f:25:d1:d6:e3:4f:39:
5e:db:a9:8c:b5:33:68:9b:72:21:55:4e:8a:7d:01:52:fc:5a:
42:92:b3:50:dd:ae:40:17:d8:9d:92:65:fe:c7:61:c3:c3:86:
73:32:9b:37:0b:09:e1:f9:66:f9:c6:20:c5:92:d2:02:58:bf:
48:dd:ec:c9:be:15:a1:a5:00:24:95:d7:63:40:6e:02:22:57:
a4:08:1f:27:a3:27:8e:03:d3:f7:ba:4b:8e:ea:20:ef:4d:49:
40:f3:1d:ea:3e:55:79:0f:95:de:c5:20:6a:1d:32:36:b0:2f:
c8:30:8e:5c:f2:18:27:db:11:62:99:55:4e:45:7d:55:14:90:
e2:89:c0:3b:81:bb:5d:a4:bb:82:2f:87:e0:e7:a5:13:e9:4b:
f6:ec:81:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:50:40 2025 by rpki-client