Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
File: T4R35WnR19YPBGmnzIp_R0YDm7c.mft (raw, json)
Hash identifier: kiQ9b7+aFpNejhldRlR2QD+9o7fKpdpTIP9CnuneA1A=
Subject key identifier: A5:A9:A7:FE:4B:83:85:76:5E:20:F9:B2:50:01:7C:12:0E:7B:F7:C5
Authority key identifier: 4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
Certificate issuer: /CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Certificate serial: 01983FBD1ACEDBEE322BE7A7D68887F43AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
Manifest number: 1260
Signing time: Fri 25 Jul 2025 04:00:14 +0000
Manifest this update: Fri 25 Jul 2025 04:00:14 +0000
Manifest next update: Sat 26 Jul 2025 04:00:14 +0000
Files and hashes: 1: 9sTlJL6XI1F8_6pTnGvYUoHPjLc.roa (hash: p/q9OdpuOMeCTpoZABPBjgzLHhfpzMbQS5v48+zxKpQ=)
2: T4R35WnR19YPBGmnzIp_R0YDm7c.crl (hash: T3FOAp9R2EUhkcioP5ppqfcP4ffNjpazx7mENFKSd6U=)
3: ob104eCQJ_C_ID7VnPR1GOcDcA8.roa (hash: 0O8ntyVniHu4kxwME5VY5LDqj4fbOYlq5O01qeomItA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:bd:1a:ce:db:ee:32:2b:e7:a7:d6:88:87:f4:3a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Validity
Not Before: Jul 25 04:00:14 2025 GMT
Not After : Jul 26 04:00:14 2025 GMT
Subject: CN=a5a9a7fe4b8385765e20f9b250017c120e7bf7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:67:40:48:77:be:87:5d:8f:f5:10:80:51:20:
d0:c3:52:1f:c4:de:97:d2:98:96:88:0b:02:c7:e5:
4b:f2:76:64:53:1d:9b:1f:32:aa:9d:af:ac:02:d1:
98:c3:8b:03:c8:18:30:1d:b6:1a:cd:c2:ce:46:33:
64:7c:dc:1e:f3:7d:18:b1:09:69:3b:43:9a:19:d1:
79:7f:ec:8c:a7:d5:ac:f2:26:99:4f:f2:cb:7d:e4:
da:c8:d3:91:c7:39:8f:45:17:2f:aa:25:cb:a6:42:
40:96:a1:70:53:b2:8c:22:5c:fa:1c:cc:6f:aa:6a:
60:f5:cd:4c:d9:16:1b:ee:23:fb:5c:e9:a6:04:ce:
8d:84:84:c1:6b:cf:6a:07:ed:dc:ea:ec:1f:8d:0b:
6b:ad:8f:36:43:de:ba:3f:67:cb:e5:61:24:85:84:
f3:15:fb:35:90:ab:e6:36:60:59:98:f7:6d:39:d3:
12:37:d5:fe:cc:15:d0:7b:f7:4e:e4:f4:90:e9:73:
7d:28:7f:7a:2e:d3:8b:20:b1:de:79:22:10:7f:ed:
ba:25:20:37:80:6e:8c:8f:a6:8c:ec:ec:9e:b4:47:
0e:b7:3d:96:03:ce:ba:70:35:30:e6:58:ce:5d:90:
f1:62:9a:7b:81:a7:c8:30:dd:14:f4:6a:76:9e:fe:
54:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A9:A7:FE:4B:83:85:76:5E:20:F9:B2:50:01:7C:12:0E:7B:F7:C5
X509v3 Authority Key Identifier:
keyid:4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6e:76:43:71:66:e6:a6:c2:c1:5c:26:4b:50:ac:00:3a:13:
cf:2c:09:7c:7b:20:e0:d6:bb:f4:6f:cb:3d:c7:c0:2c:a3:84:
b5:ca:86:de:d4:45:66:22:e1:83:a2:16:24:b9:94:45:de:dd:
f9:4b:b5:d2:38:92:56:ba:e5:6e:d5:cd:68:6f:4b:70:1c:f7:
26:a8:2c:0e:50:0e:c9:60:36:35:96:54:56:8f:f6:e8:44:85:
f7:c0:2d:78:5f:a7:b9:50:69:20:8d:0c:33:38:05:45:6c:ae:
e8:ec:4b:58:fa:d2:40:eb:d3:d5:82:9f:64:11:b3:dd:16:70:
22:e3:d8:2c:50:82:94:c5:78:79:0c:c5:80:a0:dc:b5:d7:b2:
09:e6:14:8a:e7:54:22:12:ba:e6:98:a5:26:74:67:cb:b1:79:
7a:56:42:a9:1d:8c:bf:91:94:3d:ce:15:f7:c9:09:65:6e:eb:
b4:de:06:83:6b:36:1d:9e:54:45:e4:60:3a:61:3d:56:c8:f7:
c2:07:1f:98:96:69:ea:97:d2:cf:d7:03:4e:8e:67:61:d8:b5:
8c:43:58:34:d0:02:bb:7f:b5:cc:6d:06:6b:da:c0:df:72:78:
a4:c4:db:35:b8:66:52:b7:78:78:f4:0e:0b:74:32:15:4c:fe:
53:54:40:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:49:18 2025 by rpki-client