Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
File: T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft (raw, json)
Hash identifier: jYHurn5wo0JdubEd7i50r2HcDN4oB/6alR9r7/sMO3I=
Subject key identifier: 2E:86:F3:0B:8B:BB:5B:23:C8:63:46:C9:A7:63:8D:AE:57:FB:30:0B
Authority key identifier: 4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
Certificate issuer: /CN=4fbb63df06de00c843da63977349595471e51a26
Certificate serial: 01984AE5AFDCD376CB4D83124C8FA69C1D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 08:00:23 +0000
Manifest this update: Sun 27 Jul 2025 08:00:23 +0000
Manifest next update: Mon 28 Jul 2025 08:00:23 +0000
Files and hashes: 1: T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl (hash: xj5nNcFrprD71d4Ulpsdnl97wdDiGzOIlKYHgAQPCOQ=)
2: qMVYOgqIzk9KMROylZiVtF-t3Zc.roa (hash: xqIRDpc2sFOdr1/l4Pzbo0nNaeEXShJ8C0GuGpTGneI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:af:dc:d3:76:cb:4d:83:12:4c:8f:a6:9c:1d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbb63df06de00c843da63977349595471e51a26
Validity
Not Before: Jul 27 08:00:23 2025 GMT
Not After : Jul 28 08:00:23 2025 GMT
Subject: CN=2e86f30b8bbb5b23c86346c9a7638dae57fb300b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:79:df:36:a1:fb:e6:b7:a6:5d:5f:8b:ae:3f:
63:47:1f:30:2c:86:d6:09:23:78:c8:b7:5f:72:9c:
28:f1:dd:6c:16:6e:af:06:03:9b:b4:a4:c5:84:e0:
10:7f:c7:a6:1b:81:7f:34:9a:f1:99:3b:24:aa:b9:
72:67:ea:af:63:7a:15:d1:7c:93:78:02:17:8c:e7:
cd:8d:a1:b7:bf:d6:ed:7c:bd:d2:12:64:1d:90:8e:
a9:af:53:c4:81:4a:36:c9:35:38:62:1d:04:49:4e:
dc:04:f3:72:6a:9b:93:03:65:f3:23:27:f2:e6:7d:
a0:44:c9:ea:cb:27:70:7b:04:74:6e:3d:3b:70:64:
8e:01:db:2f:5f:da:a7:82:da:6f:ba:61:66:59:03:
c6:35:6d:16:a0:51:c1:72:35:02:43:cb:61:2b:5f:
e8:12:de:c7:e3:31:53:97:f9:52:b4:fa:48:42:87:
03:b1:de:f3:bd:f4:d6:7e:3f:ba:6b:0d:42:8b:4e:
23:06:3f:f9:15:c7:2d:69:ac:0c:6b:a4:5c:fc:d6:
e3:6d:78:18:94:6c:54:1d:f6:8e:ab:44:71:99:0a:
0c:95:cf:85:74:be:a7:77:ed:2f:fd:67:a9:8d:fb:
31:f8:cd:7a:e1:25:45:b0:d0:5d:e4:78:18:d1:c6:
a7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:86:F3:0B:8B:BB:5B:23:C8:63:46:C9:A7:63:8D:AE:57:FB:30:0B
X509v3 Authority Key Identifier:
keyid:4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b2:22:4c:23:a5:49:3d:df:31:94:9f:e9:db:22:15:8e:55:
8a:24:94:01:f1:ae:12:f6:dd:77:ff:12:80:d2:fd:21:fd:c4:
26:38:f0:c6:22:c4:23:86:7c:7d:2e:90:8a:2e:2a:df:d6:b9:
5d:3f:be:45:4f:0d:4e:ef:9f:77:47:d7:0e:c9:a0:76:0b:75:
9e:dd:23:6f:40:ef:56:80:d7:78:0b:45:b8:fe:4c:6e:75:be:
48:56:12:64:9f:48:7b:f4:64:4a:04:ad:bb:2f:a3:d9:3c:cf:
33:77:38:13:db:66:8a:fb:84:dd:a7:46:c1:73:e1:6b:6f:64:
8a:63:c9:ac:0d:0b:fe:23:5b:79:6c:b1:04:22:9b:78:9d:41:
02:be:e5:8a:5a:2b:01:e4:6f:f7:d1:1c:d5:d2:f8:0a:c9:d0:
d0:4b:dd:c2:95:69:83:4e:1c:1e:53:2d:45:ba:68:7c:88:28:
50:9c:27:ba:70:77:ff:c4:54:cb:58:59:e8:51:a7:b9:ca:47:
08:bf:04:bc:b4:61:86:e5:91:72:78:ad:21:3c:90:a0:31:6d:
cb:df:83:d7:6b:38:a3:1c:3b:ba:8d:d9:80:29:b2:00:9e:e3:
ac:bc:43:73:cd:a0:e4:04:dd:96:09:ee:56:b5:6d:67:e9:ae:
d3:49:91:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:14:45 2025 by rpki-client