Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
File: T5CKbYaKuem9sQRy--wxyWbpQnQ.mft (raw, json)
Hash identifier: Sb1TG11CnK+7Epv39yznazAY2Q18woATyB3MCF+n0mo=
Subject key identifier: 37:A5:D5:0F:D3:20:70:B5:0D:A2:CE:EE:1A:61:9A:BB:BE:E1:06:67
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Certificate issuer: /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial: 0199239F03AD1115A22643C0DA6A7A13673A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 10:00:47 +0000
Manifest this update: Sun 07 Sep 2025 10:00:47 +0000
Manifest next update: Mon 08 Sep 2025 10:00:47 +0000
Files and hashes: 1: N4O1f1HdN3aaUng8Ezj5qGov-Js.roa (hash: sfcsuhZVAT4PlLRFtuXFGetuMIfE20AC6DkhL2YQizc=)
2: T5CKbYaKuem9sQRy--wxyWbpQnQ.crl (hash: NlkTSxLuBvUdDRzJxh0dpL3vH1OZoetvDmuM10d5OM0=)
3: _UFtjPZkJY8PTrDfIiY7fIJkM78.roa (hash: 8nSnhnVWRfLLWBF2I/d3mZE5/5hk3aPfKW0pXvBb3bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:03:ad:11:15:a2:26:43:c0:da:6a:7a:13:67:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Validity
Not Before: Sep 7 10:00:47 2025 GMT
Not After : Sep 8 10:00:47 2025 GMT
Subject: CN=37a5d50fd32070b50da2ceee1a619abbbee10667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:d2:04:55:dd:b2:8d:e8:b7:50:52:67:91:
ef:26:79:39:6c:5d:88:9d:4c:61:2d:62:2c:5d:50:
38:73:2c:e5:9a:b2:46:cf:3d:c8:9c:63:b1:e0:60:
ed:2d:bf:75:fc:06:bf:c2:a6:67:56:85:e3:c3:97:
17:da:8d:8a:d0:a9:22:de:75:bb:7e:b1:0f:68:84:
a3:dd:b8:f1:0b:8e:e0:b0:50:e9:e7:f4:c2:78:31:
b0:14:d1:3e:ad:1f:c5:3b:72:ca:6c:5e:0a:1a:62:
6d:45:f1:3f:8e:1d:1a:04:e9:b6:40:1c:2f:eb:be:
f2:5d:1e:f5:bc:a8:4d:8a:84:ef:5d:24:52:f5:ee:
2d:6c:0e:ed:bb:f5:ea:1c:d9:c4:5c:dc:27:a7:45:
fb:6c:c6:1d:8c:80:95:dc:88:82:31:32:0e:00:4f:
ff:63:33:ed:f9:0e:04:58:13:f7:cb:35:85:4f:45:
c5:1e:8f:74:35:72:e2:f6:de:e9:cc:7a:ee:99:4d:
f0:31:60:8d:0a:dc:06:48:c9:0c:95:60:92:c4:ae:
b4:9b:eb:9e:2f:d0:ce:22:52:27:06:57:f2:4d:11:
98:d1:46:20:74:a8:fd:b9:74:61:81:12:b0:6e:ec:
f1:f8:98:75:fc:3d:e7:9b:c3:99:4b:1c:0c:23:52:
7e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A5:D5:0F:D3:20:70:B5:0D:A2:CE:EE:1A:61:9A:BB:BE:E1:06:67
X509v3 Authority Key Identifier:
keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fe:90:27:6c:47:c8:e3:b8:36:c9:1d:e7:0f:fd:78:23:2a:
c3:81:39:5c:b7:37:f3:12:8d:16:bc:9f:5d:8e:5d:8f:55:26:
4c:b4:d1:b5:84:7e:e1:e4:4d:f8:1f:56:da:b7:b1:03:7b:b9:
70:fd:65:84:bb:b0:67:47:06:b7:cf:e7:a7:b8:f7:c9:8a:5b:
18:48:2b:5d:c2:ed:67:ed:11:e8:bb:af:63:b3:ab:f4:d7:4a:
21:22:ee:88:35:65:bb:17:54:97:36:60:99:fc:3d:b2:72:77:
76:15:9e:56:43:4a:50:fd:20:7c:a0:28:d5:cd:4c:63:df:ea:
3e:3e:e9:99:a1:18:8b:88:9a:95:4a:79:18:05:55:de:bb:46:
66:52:b5:e5:89:9b:cb:7f:ac:93:20:05:88:a0:63:94:30:bc:
18:db:a9:0a:e3:b3:31:e8:92:5d:9f:48:66:30:0d:8a:11:ae:
e0:9b:9e:88:3e:ac:94:84:a6:78:74:29:da:39:9f:2c:90:6b:
3e:ce:f2:bf:a4:bd:c4:d9:28:f8:3e:d4:18:18:16:5e:b1:bf:
fc:96:cb:52:59:03:9a:14:d9:71:53:5b:88:b6:e2:8a:9c:d9:
1e:39:64:e1:9e:f6:eb:a8:dc:64:c7:47:af:b4:f7:01:46:36:
fa:66:09:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:19 2025 by rpki-client