Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
File: T_hs8z4V6kCJ2inip4gddG34Ju8.mft (raw, json)
Hash identifier: zSO5kYMXoxhKlY2NthynNMDgyFukO4PYWxRGjXMXmVE=
Subject key identifier: B9:7C:F7:45:A6:C0:E0:33:86:6D:DB:78:41:15:22:32:C9:06:93:B7
Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
Certificate issuer: /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Certificate serial: 019A0A813DDFDDA38949B894BF83C6E66B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
Manifest number: 104B
Signing time: Wed 22 Oct 2025 06:00:33 +0000
Manifest this update: Wed 22 Oct 2025 06:00:33 +0000
Manifest next update: Thu 23 Oct 2025 06:00:33 +0000
Files and hashes: 1: T_hs8z4V6kCJ2inip4gddG34Ju8.crl (hash: ZayDxc1YtMS08cKJHt2m8Ij6J5kmtNsz7MknSHC/bpM=)
2: g8aVgQMBCBvrswyPJiarAr7VpUM.roa (hash: 5HrRjfLYW0OBZJTQk2MmBVB6mxhIUJtfwo5zMV6ZrEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:81:3d:df:dd:a3:89:49:b8:94:bf:83:c6:e6:6b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Validity
Not Before: Oct 22 06:00:33 2025 GMT
Not After : Oct 23 06:00:33 2025 GMT
Subject: CN=b97cf745a6c0e033866ddb7841152232c90693b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:fe:65:96:e8:c9:7f:41:db:d6:91:35:d3:
bf:bf:48:55:7d:33:5e:c6:c4:86:a5:fd:fa:87:8a:
f1:dd:cb:d8:2e:5a:3c:7b:54:ea:4a:2e:a0:ee:50:
1a:c5:81:10:8b:75:06:b9:33:b1:cd:c7:a6:be:60:
d2:df:db:2b:75:05:95:62:8a:08:16:5d:ea:3e:e2:
f6:2c:3f:5b:bd:32:a5:7c:da:9a:5c:10:96:b7:d1:
9c:1b:2a:5d:5c:19:cf:29:45:cb:37:55:5c:b0:4b:
be:1b:2d:f8:d5:e8:a4:21:13:03:1f:fc:3d:2f:c2:
ea:59:2a:b7:0a:68:4d:02:a6:ff:98:3d:7f:2f:1b:
c7:8a:74:18:35:9c:b9:29:e2:3b:2b:80:82:52:4c:
8b:cc:80:f9:9f:da:30:37:fc:02:a2:f9:71:e0:5d:
9e:69:84:24:8f:34:a9:fb:d0:61:65:0d:5a:01:4f:
79:86:48:26:47:82:93:5a:d2:e5:aa:10:6e:1b:54:
e8:6f:f8:a4:ea:b0:9e:bb:ea:7d:e2:ae:2d:4b:32:
8f:74:82:16:da:69:bf:f8:1c:20:fd:07:ed:62:a1:
ce:75:cf:05:f3:02:4e:a8:b1:f2:c6:20:72:58:c2:
e2:88:0f:94:ae:69:e4:8b:a4:71:a9:4e:ed:d3:f1:
14:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7C:F7:45:A6:C0:E0:33:86:6D:DB:78:41:15:22:32:C9:06:93:B7
X509v3 Authority Key Identifier:
keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e9:9f:1e:14:fe:33:79:af:3c:ad:32:38:90:5e:20:c8:83:
0a:a3:69:53:aa:1f:49:7a:1c:bd:e8:fd:62:84:ea:de:87:b9:
c1:76:64:ad:9e:02:59:2f:ba:ed:4c:8f:dd:3d:a1:1d:1b:35:
75:e8:7a:91:9a:bb:c2:77:4f:ab:a9:67:5b:8e:b0:cc:ae:90:
64:46:3d:59:31:69:0b:0b:35:7b:7f:1c:8b:f6:d7:4b:cc:ac:
b7:c1:5a:11:81:58:6c:9a:a3:c6:17:67:4a:93:a3:60:90:80:
28:78:be:a7:a9:bd:7c:95:5d:37:94:6c:ac:39:11:2a:68:5d:
20:80:11:91:a1:b0:34:45:42:8c:b1:a7:4e:5a:5c:79:67:b5:
ce:c0:6f:45:9b:c9:84:94:7e:d0:3d:06:fa:e4:e8:44:ec:46:
77:7e:db:f8:d9:85:43:d9:05:b7:c1:4e:6c:f0:3d:d0:ec:85:
23:57:02:69:fa:cc:d1:40:fa:92:22:9c:21:15:f8:1c:04:9a:
8c:1b:f7:13:04:50:a0:4e:90:04:f7:f5:c0:dc:44:9a:17:5a:
e7:0d:25:4e:10:49:90:86:e5:bf:87:3d:10:47:5a:0c:68:32:
cd:e0:d9:d3:26:10:5c:3d:91:18:d3:1c:04:7e:1b:29:6b:e4:
46:52:7f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 16:45:45 2025 by rpki-client