Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json)
Hash identifier: SOh7ggKMltvot9td7Kur4JpsaJQ9REDG96peNZ1sdxk=
Subject key identifier: 70:3E:61:34:4D:6E:71:4D:A7:F2:92:FD:08:64:F9:28:FD:7C:13:84
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial: 019A725CD610FDC422D3C6526326C4000CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
Manifest number: 0BBC
Signing time: Tue 11 Nov 2025 10:01:17 +0000
Manifest this update: Tue 11 Nov 2025 10:01:17 +0000
Manifest next update: Wed 12 Nov 2025 10:01:17 +0000
Files and hashes: 1: NC9FKYs1BXFgd8eBRdSLNG0ab1E.roa (hash: AdbbA0DHP1eCkTNHXLT0EO4D6DCGT9CWxG1DEmumay0=)
2: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: fA5dFvmJBaAqSTZLVk/QiXjj+8VeYjekQfImizDFyM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d6:10:fd:c4:22:d3:c6:52:63:26:c4:00:0c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Validity
Not Before: Nov 11 10:01:17 2025 GMT
Not After : Nov 12 10:01:17 2025 GMT
Subject: CN=703e61344d6e714da7f292fd0864f928fd7c1384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:71:30:2f:2c:1c:10:31:48:f0:1d:c1:51:8f:
be:21:c6:14:32:1a:ac:2f:72:88:9e:78:7f:61:19:
15:d3:08:49:7f:f2:fc:45:a8:0f:31:11:86:f3:fe:
01:0c:af:17:42:5e:8a:97:25:2b:aa:94:17:02:e9:
e9:17:0b:e0:94:c5:e1:8e:48:5e:97:be:97:69:d3:
c1:fc:bb:ef:9b:c4:f8:18:0a:9c:a3:50:30:1b:d4:
5c:2f:9d:a7:f3:26:fb:2a:5e:91:5c:b5:85:be:85:
eb:98:7a:0d:13:85:84:33:47:2f:d9:91:76:14:f7:
2f:45:2d:a0:43:68:5b:9c:b5:16:60:37:68:ad:4f:
be:bb:52:9d:cd:c3:75:8f:d2:6e:be:e6:50:30:7b:
77:37:2c:f1:1a:70:a2:c5:d0:c6:66:55:24:2c:75:
70:82:63:da:3e:b4:9c:d8:c9:f6:7d:2e:81:86:05:
fa:ac:4d:de:0f:e8:cf:8a:9c:ba:09:70:8e:b1:66:
84:39:d4:25:51:f0:d9:39:68:a2:6c:eb:c7:0b:82:
e2:2e:43:0e:73:aa:37:32:8d:cc:e7:05:38:03:f8:
57:2e:57:ca:ab:84:f4:3d:86:08:a1:e4:72:3d:be:
9f:e5:7f:ea:cf:89:79:97:34:1a:19:07:f4:36:73:
23:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3E:61:34:4D:6E:71:4D:A7:F2:92:FD:08:64:F9:28:FD:7C:13:84
X509v3 Authority Key Identifier:
keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:e8:a7:39:81:8a:52:7f:7d:1a:f1:a5:87:33:f4:ab:48:2d:
66:55:71:9f:c1:de:26:1e:d0:bb:2f:c4:f5:3b:8d:52:66:64:
6a:b7:2c:b8:a2:7d:9d:9a:59:c9:da:7c:48:0a:65:aa:6a:a1:
c5:45:36:06:09:c5:7d:bc:06:19:f9:e1:de:f4:91:f2:e7:e1:
b3:8b:5d:73:7c:34:7d:a6:9f:dd:77:bd:c2:b9:a3:13:05:22:
2a:e8:65:6a:4a:9d:1c:42:fb:da:70:61:cb:59:26:27:0f:c9:
9a:bb:93:09:49:0b:2d:db:da:4b:86:3d:ca:7f:87:d1:f5:5b:
a2:5b:46:6e:bc:9f:2e:36:f5:e1:28:71:cc:3b:36:86:16:02:
85:7a:8f:5f:87:33:9c:76:9c:60:e0:67:27:71:ca:94:f8:bc:
5e:89:d5:89:9a:48:ba:57:3d:ca:56:a2:6d:8a:77:4a:77:66:
de:bf:ab:4d:f2:0e:be:db:8d:88:14:70:42:51:0c:c5:32:57:
b6:62:12:ca:db:67:08:ee:0e:23:3e:39:f9:16:4d:d3:28:10:
af:19:cc:7d:0c:96:a6:95:41:a3:12:7c:2d:b4:fa:8b:a0:92:
ab:74:b0:00:c0:51:ba:95:3c:65:0b:2c:a7:c1:c8:ee:75:ad:
01:bd:1f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:35 2025 by rpki-client