Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
File: T0HFbqBp7nscHfZoa9NuDhRSiiA.mft (raw, json)
Hash identifier: cka4UsqsYJQYmnqmFZ+8ZVkopiM3zQDTv4iZLLywGfM=
Subject key identifier: 69:88:B9:38:09:22:0E:24:05:B4:D1:48:93:B4:34:1F:15:5C:7D:1A
Authority key identifier: 4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
Certificate issuer: /CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Certificate serial: 019A73387EC59E03114CA5505CC42A5AD4E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
Manifest number: 0E46
Signing time: Tue 11 Nov 2025 14:01:13 +0000
Manifest this update: Tue 11 Nov 2025 14:01:13 +0000
Manifest next update: Wed 12 Nov 2025 14:01:13 +0000
Files and hashes: 1: DRrOJLgDL5rmiSF6D3RMJURdhRI.roa (hash: 7NgLPdqIa5BkuBXQmhxzkicPEWRt/mYhR9CY8DkwoYg=)
2: T0HFbqBp7nscHfZoa9NuDhRSiiA.crl (hash: s/XEo1A2txzUsyhEl768xQ3polbzLUZDcMaatPAABkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:7e:c5:9e:03:11:4c:a5:50:5c:c4:2a:5a:d4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Validity
Not Before: Nov 11 14:01:13 2025 GMT
Not After : Nov 12 14:01:13 2025 GMT
Subject: CN=6988b93809220e2405b4d14893b4341f155c7d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:a1:e0:42:47:b1:f7:a4:88:73:ca:50:b0:
62:5e:63:36:45:4c:59:95:18:51:c1:81:2f:d1:fd:
d5:18:3d:d5:a6:a9:e2:bb:b5:22:76:4d:83:9e:95:
6e:24:4e:4c:36:c4:29:a2:f1:67:f6:d6:23:c8:ed:
9b:87:19:4e:3e:5d:32:83:e3:20:c0:11:f7:bf:62:
4f:b0:8c:95:58:64:47:4e:55:86:8f:4a:19:61:03:
5e:29:7c:97:8e:6f:cd:0e:96:84:5b:ed:a3:f5:ae:
60:f1:37:b4:b5:bc:58:de:03:42:5d:bb:4d:7d:a9:
4e:86:d1:82:f6:12:32:ac:76:cb:11:c7:7b:90:ad:
af:8f:fc:75:37:41:f7:b3:b0:2f:87:15:8e:44:36:
09:53:30:7c:94:82:69:27:b9:9b:40:e3:b4:53:be:
d9:f5:90:e9:f5:b6:87:34:cd:e9:b4:cc:98:cf:c5:
38:2d:b6:59:6f:f5:b6:69:c2:da:d6:53:35:42:03:
50:4e:39:9e:a9:57:30:a9:fd:6d:fb:8a:79:11:65:
64:94:d0:e0:2f:8c:8a:2a:c1:f9:42:3c:90:d3:f2:
1f:c1:72:15:52:96:37:c4:32:2e:a2:9a:6d:2d:a4:
8e:47:5f:d4:b9:06:b4:d7:e0:dc:21:8f:41:8c:ce:
81:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:88:B9:38:09:22:0E:24:05:B4:D1:48:93:B4:34:1F:15:5C:7D:1A
X509v3 Authority Key Identifier:
keyid:4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:74:ab:1c:ed:22:85:80:59:03:f1:0a:25:b9:0f:76:eb:a3:
cd:bc:f7:f4:80:c0:7c:47:7f:7a:ff:26:b9:9c:41:64:7c:e8:
1e:01:60:f4:7f:ab:5c:c2:81:4c:3f:fc:eb:a5:25:1c:80:d0:
4a:23:90:9f:92:6d:72:6e:2e:d7:f9:4f:47:c7:5b:64:1e:87:
9a:54:16:59:99:f6:05:06:7f:6e:88:f8:08:cc:b7:be:16:26:
7b:4b:16:7a:07:84:8e:82:66:3c:5f:74:a8:61:63:08:d9:20:
6a:8b:58:9d:11:8f:25:5a:d4:79:71:ea:4c:87:86:99:64:e5:
b2:96:ed:59:e4:76:07:83:4f:e8:dc:cc:a2:7c:22:c6:47:6d:
b3:f1:fa:34:57:ce:1c:43:7b:ee:94:4c:95:72:50:eb:aa:4e:
24:42:37:e2:15:dd:e7:11:4a:e4:63:0f:2c:66:d4:98:be:47:
5f:68:d0:73:e1:b3:e9:22:39:fd:e1:b4:a1:d5:df:d8:24:12:
61:f9:1b:5b:d5:8a:07:43:5e:64:b0:51:d7:f6:50:0c:56:49:
3d:84:7b:60:03:b2:62:2b:b9:43:93:fa:5f:e3:77:eb:33:e1:
fd:31:e7:ef:e9:27:27:a9:09:07:e9:1c:f8:d3:1c:42:60:d9:
78:3b:27:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:52 2025 by rpki-client