Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
File: T5CKbYaKuem9sQRy--wxyWbpQnQ.mft (raw, json)
Hash identifier: XHwv16yelp6hgUBSrix+MdkOiVSmNVaLm1ErqfdJxHM=
Subject key identifier: 5E:D7:45:CF:D9:AE:15:E4:FE:83:7C:27:99:84:F4:3B:C8:6A:65:49
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Certificate issuer: /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial: 019A71B7D9C0B42AE0447E84088DF7DBA074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:01:05 +0000
Manifest this update: Tue 11 Nov 2025 07:01:05 +0000
Manifest next update: Wed 12 Nov 2025 07:01:05 +0000
Files and hashes: 1: N4O1f1HdN3aaUng8Ezj5qGov-Js.roa (hash: sfcsuhZVAT4PlLRFtuXFGetuMIfE20AC6DkhL2YQizc=)
2: T5CKbYaKuem9sQRy--wxyWbpQnQ.crl (hash: y1hkGwFy3SuYc/LmQwFZZrfDSXlRA6uEMQXOdJ2FdmY=)
3: _UFtjPZkJY8PTrDfIiY7fIJkM78.roa (hash: 8nSnhnVWRfLLWBF2I/d3mZE5/5hk3aPfKW0pXvBb3bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d9:c0:b4:2a:e0:44:7e:84:08:8d:f7:db:a0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Validity
Not Before: Nov 11 07:01:05 2025 GMT
Not After : Nov 12 07:01:05 2025 GMT
Subject: CN=5ed745cfd9ae15e4fe837c279984f43bc86a6549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:0f:df:7a:e9:b2:51:90:00:28:a0:a8:f2:
f4:83:cf:37:43:2d:63:ae:52:8c:e4:c3:ea:19:d2:
84:bd:f9:3f:8a:96:b5:99:f7:bb:f0:c4:aa:3d:80:
42:e3:80:1c:70:68:83:ee:98:6b:6c:ee:b9:c0:a3:
ff:f6:aa:97:5d:56:f8:f2:8a:78:fa:30:d5:57:18:
1c:5c:71:e4:40:d0:e0:40:38:75:90:03:99:d3:5a:
c8:6f:55:50:05:45:73:b7:e9:af:40:c3:40:de:73:
38:24:e3:c4:96:c6:b7:ff:d0:6e:a2:c8:63:bf:fd:
64:db:44:d6:9c:a0:5b:e3:01:4b:45:f8:6e:f1:b1:
90:39:6c:1a:d6:4b:c3:b2:70:f7:d6:2e:11:1a:71:
60:f7:d5:1b:03:2d:aa:d3:e2:92:0f:65:f5:e5:68:
f0:ca:d0:a7:10:db:14:b0:2b:d6:cf:ba:ab:08:0a:
1b:1a:06:4b:6d:1f:ef:bb:79:d7:64:b2:5c:d1:16:
82:6a:0a:b1:0c:f7:7d:6b:7a:e9:a2:50:98:89:f7:
22:b9:0d:2c:a9:32:c1:93:60:97:6e:56:7a:7c:d4:
3c:e3:bc:33:c1:18:9f:20:02:64:ef:49:8f:14:94:
b1:66:91:97:1a:93:d8:91:1f:ce:01:d8:eb:70:0b:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D7:45:CF:D9:AE:15:E4:FE:83:7C:27:99:84:F4:3B:C8:6A:65:49
X509v3 Authority Key Identifier:
keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:17:2a:2c:71:2d:a9:d8:1f:a7:7a:51:41:1d:72:3b:9e:8d:
4c:e4:48:48:b0:0e:5a:dd:85:9c:84:e0:d2:2a:93:8b:20:f2:
5e:aa:a6:bd:ad:02:39:c6:98:94:02:f9:9c:8b:ca:f7:60:2c:
d4:10:5c:c3:c2:05:29:63:6e:75:3e:bd:b4:23:14:de:fe:6a:
1f:b4:6b:09:fa:c0:eb:29:e3:c4:6f:e4:67:b4:c3:a8:4a:3b:
fd:e1:e9:7e:f0:09:92:86:9c:21:4d:ce:6b:9f:b5:84:b2:7b:
f9:5a:9e:5d:8f:79:fb:6b:98:11:25:79:7a:2d:ed:33:2d:66:
9f:6c:5f:00:36:1c:59:8a:0e:d1:66:25:02:13:b3:89:55:ad:
8e:6e:dd:f1:62:3d:02:02:dc:d1:25:69:44:e1:5d:f5:38:f2:
19:42:c3:6a:10:ee:5d:26:6e:24:e3:77:ac:69:39:c3:be:ad:
38:38:57:0c:a4:35:0b:5d:0e:4b:fe:47:30:56:3c:5a:a4:86:
1a:78:ca:b1:46:77:e9:be:d0:f8:7d:67:7a:2c:7e:9d:84:a2:
40:b6:d6:aa:6b:8d:24:ef:81:e9:35:ed:08:80:a7:27:8f:5f:
ec:03:21:83:df:36:cf:34:ed:5c:44:55:45:0f:34:e9:93:11:
6e:76:1a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:57:10 2025 by rpki-client