Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft
File: t3gT9sVnClhoatw9SVV0QpXdFBk.mft (raw, json)
Hash identifier: jxVr5gpgczJIren0EYYdVX/VBm5iQXbv8GKoYPSZIDo=
Subject key identifier: 99:9E:1D:F8:D0:BE:39:D9:C9:BA:31:C2:9E:CB:A9:A4:7C:36:25:18
Authority key identifier: B7:78:13:F6:C5:67:0A:58:68:6A:DC:3D:49:55:74:42:95:DD:14:19
Certificate issuer: /CN=b77813f6c5670a58686adc3d4955744295dd1419
Certificate serial: 019A7225F2AD4B4DB0EB46478B657EB1F896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft
Manifest number: 0FF7
Signing time: Tue 11 Nov 2025 09:01:20 +0000
Manifest this update: Tue 11 Nov 2025 09:01:20 +0000
Manifest next update: Wed 12 Nov 2025 09:01:20 +0000
Files and hashes: 1: t3gT9sVnClhoatw9SVV0QpXdFBk.crl (hash: BdgltB1ORrbFYxdEmO4Qm4CLUNk7gqdrPmPfdgYKzjU=)
2: xy0ayvCMPxVGUij5mpyeTNFKRNw.roa (hash: tXbOwwPUAQhZJRCjintnYpclKOHIFWoxy2lUX1RBhtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f2:ad:4b:4d:b0:eb:46:47:8b:65:7e:b1:f8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77813f6c5670a58686adc3d4955744295dd1419
Validity
Not Before: Nov 11 09:01:20 2025 GMT
Not After : Nov 12 09:01:20 2025 GMT
Subject: CN=999e1df8d0be39d9c9ba31c29ecba9a47c362518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:02:d3:a2:ef:0a:51:3b:dc:94:ab:7e:52:45:
c4:b1:b0:be:b3:c9:3a:b5:8d:76:5a:0f:7c:12:71:
78:e0:1f:86:fc:5b:0f:44:47:89:d4:0a:a5:91:b9:
09:7f:70:f4:27:25:73:e2:cc:38:00:6b:86:0b:7f:
7a:d6:13:61:bd:df:2a:68:29:05:79:aa:fe:83:d3:
63:4d:cc:06:d5:49:5c:98:c7:b9:a4:0b:9a:33:05:
91:c4:32:4f:b8:d7:b3:32:52:d8:64:a1:b3:cb:69:
7b:d6:6b:0d:ba:d1:7a:b6:0d:a0:1d:27:68:f9:30:
a9:cb:e1:e9:1c:2b:7f:75:4c:37:00:a3:29:a1:4c:
b4:24:1e:11:12:52:48:20:db:95:b2:2b:7c:95:27:
7d:2f:e3:72:5b:ac:68:b0:c6:0b:fb:f9:53:d7:55:
32:12:b7:9e:cb:5d:a5:33:de:48:65:e2:68:21:3e:
62:34:77:6f:0f:fb:cd:47:31:a0:00:38:b1:e1:1e:
b4:29:35:2c:33:80:b1:4e:31:40:89:d6:44:cc:39:
47:2f:da:30:eb:02:c2:59:8c:3b:54:63:d0:46:33:
71:39:46:9b:d7:2b:d3:70:be:8f:5a:76:ce:21:ce:
bb:e7:76:3a:6a:fe:6e:38:fd:e6:98:e8:b8:ff:93:
5e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9E:1D:F8:D0:BE:39:D9:C9:BA:31:C2:9E:CB:A9:A4:7C:36:25:18
X509v3 Authority Key Identifier:
keyid:B7:78:13:F6:C5:67:0A:58:68:6A:DC:3D:49:55:74:42:95:DD:14:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:37:4c:3d:6c:86:80:f5:35:49:2b:ed:23:50:bd:f5:37:de:
34:62:b4:61:0f:cb:a5:2b:e3:2d:a8:8c:f2:63:bc:4c:ec:5d:
82:34:49:d9:a7:2d:66:db:ea:71:9e:ba:a0:6f:d3:33:10:24:
24:f3:46:55:62:91:39:fb:63:ae:a1:e4:f8:24:21:bd:dc:06:
33:4c:66:7a:bd:73:94:e4:e7:2c:7c:b8:22:ff:58:c4:1f:99:
48:1c:76:03:64:ca:3a:2a:92:24:92:bc:d6:22:03:07:f9:59:
4f:02:7a:86:37:4c:03:b9:a5:cc:ce:8f:ab:9e:42:50:d6:aa:
13:95:95:55:97:4d:34:d8:eb:d4:e2:39:61:81:20:f4:e9:3e:
28:8c:48:1c:4d:07:34:f7:21:91:37:f3:0e:53:da:62:1d:af:
e3:e9:59:6e:d6:eb:6f:b8:da:a9:44:89:89:df:bf:46:95:d6:
36:84:92:6a:af:5a:5d:93:f0:29:ac:91:18:06:27:d7:73:c4:
bb:f2:fc:ba:17:69:d2:bd:d5:4d:a3:f4:ba:61:e7:82:da:6c:
0f:5d:7a:44:01:f6:69:86:77:5d:32:c4:7d:57:7c:a4:0e:16:
cd:ad:c1:20:23:30:ca:0a:ec:e0:69:8e:c1:2c:36:af:05:c6:
50:d2:a9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:59 2025 by rpki-client