Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json)
Hash identifier: FC/DWcguLLdXlpBMNHHLO44onhfa85q07qbzo5EGhJw=
Subject key identifier: D7:2D:E3:84:F1:2D:17:0E:EE:CB:64:F2:68:2C:9F:30:15:FD:2E:00
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial: 01992443FA1D3A4762ABB7A09B54A4D40138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
Manifest number: 0B0F
Signing time: Sun 07 Sep 2025 13:00:58 +0000
Manifest this update: Sun 07 Sep 2025 13:00:58 +0000
Manifest next update: Mon 08 Sep 2025 13:00:58 +0000
Files and hashes: 1: NC9FKYs1BXFgd8eBRdSLNG0ab1E.roa (hash: AdbbA0DHP1eCkTNHXLT0EO4D6DCGT9CWxG1DEmumay0=)
2: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: kGWKOrbdNrek2U60MM+FngUBvKCJL2qeH31wdiypKow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:fa:1d:3a:47:62:ab:b7:a0:9b:54:a4:d4:01:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Validity
Not Before: Sep 7 13:00:58 2025 GMT
Not After : Sep 8 13:00:58 2025 GMT
Subject: CN=d72de384f12d170eeecb64f2682c9f3015fd2e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:f7:58:aa:06:bd:44:fd:54:ac:b8:69:d4:
d9:c4:c9:96:ee:ee:69:3b:c4:68:46:d4:dd:6d:11:
51:2d:c5:fc:26:60:53:d8:9e:a7:a4:07:c1:91:dc:
26:b0:b1:71:ae:e3:41:30:80:29:05:59:a3:14:7f:
c2:e1:de:90:42:84:26:7c:1c:70:f0:84:05:05:ba:
08:33:15:23:0e:a5:be:6a:dc:b4:6c:3e:6e:36:42:
1d:09:8b:1d:43:25:68:57:ba:48:68:33:49:14:1e:
6e:b9:09:21:4a:cf:a5:69:e9:19:32:c1:08:72:19:
2c:f3:af:22:9b:a5:03:ee:80:e8:60:27:42:17:e3:
81:1b:ae:83:fb:7e:f0:56:9d:b0:5c:8f:9d:14:0c:
63:35:23:24:59:6b:df:78:1c:cf:1a:0d:d8:5a:a9:
cf:7a:e5:12:50:fe:cb:59:a3:89:4f:fe:c4:92:4c:
57:69:de:12:f8:f6:e4:02:e7:10:5f:bf:7f:8d:ab:
ce:22:ae:44:3d:d2:2e:d2:37:57:6f:a3:21:d4:10:
0f:61:7c:0a:56:17:2e:a3:a8:7d:92:17:7d:7d:15:
f5:9b:e5:c8:84:96:45:7d:3a:a4:35:27:eb:de:57:
c6:9b:03:6a:90:2a:1a:7f:76:ea:85:68:8d:34:30:
61:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2D:E3:84:F1:2D:17:0E:EE:CB:64:F2:68:2C:9F:30:15:FD:2E:00
X509v3 Authority Key Identifier:
keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:24:b0:e4:cf:02:94:94:7c:60:3f:f4:64:81:2a:ba:a3:c4:
57:0a:2a:8b:59:b4:1d:91:f8:af:96:e9:0a:3d:52:88:4f:cb:
0e:64:d1:d4:f6:3c:56:18:a1:b4:0b:03:c9:1c:fc:30:3c:43:
a8:af:3c:60:ff:0f:8f:b8:bd:b9:89:8a:1f:e0:7c:fe:5e:45:
52:59:66:0b:f7:c7:5d:a7:8b:43:b2:a8:03:e7:73:55:64:b0:
5b:0a:9a:68:e7:79:f2:9b:ba:1a:45:c7:27:0a:62:5a:23:2f:
e7:2c:12:83:c4:6f:88:d3:be:87:eb:30:ac:0b:ae:63:23:2e:
31:fa:70:0d:65:fa:f0:9c:e7:b9:69:be:46:1f:7e:76:b3:69:
dc:58:5d:25:7d:71:c9:6a:53:c7:9f:3d:80:bc:26:e9:e3:e7:
e3:ea:ec:86:12:e7:32:fb:79:69:13:d5:29:eb:13:64:12:ed:
dc:c0:52:34:34:16:12:65:6c:86:91:16:da:82:e4:71:4e:b9:
38:58:71:b2:f3:50:b4:b4:60:57:e3:c0:45:a0:8b:a6:c0:de:
8b:89:0f:c4:33:af:7d:80:d5:2c:0f:a6:c9:d9:3a:fe:b0:ee:
32:64:90:a4:4d:af:a8:8a:54:d0:55:cc:06:b0:de:14:7b:d2:
7a:d9:d3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:14 2025 by rpki-client