Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
File: t-0w6W6la5gOa3k9GobGLdXAvB8.mft (raw, json)
Hash identifier: +Nb7F8sRmBMjEUQX87LPW4xm/cXKgY5ez5vSN+HM0rM=
Subject key identifier: 41:D8:EA:06:3B:D2:3C:47:5B:64:AA:C9:BC:CC:98:02:D5:A1:B4:13
Authority key identifier: B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
Certificate issuer: /CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Certificate serial: 019A72262805A77EB173F0697A86A0B6F6F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
Manifest number: 0752
Signing time: Tue 11 Nov 2025 09:01:34 +0000
Manifest this update: Tue 11 Nov 2025 09:01:34 +0000
Manifest next update: Wed 12 Nov 2025 09:01:34 +0000
Files and hashes: 1: 8HKSdNrm9QMyoSA380bXaBqQQ0o.roa (hash: n0TkThrqHtx1QI4h5bmhzme4/EVU3X+pkCgBWj6DraA=)
2: t-0w6W6la5gOa3k9GobGLdXAvB8.crl (hash: bSIclu2irPsxn3tp2kj6fB2NA0832KxEXuAt2izwFO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:28:05:a7:7e:b1:73:f0:69:7a:86:a0:b6:f6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Validity
Not Before: Nov 11 09:01:34 2025 GMT
Not After : Nov 12 09:01:34 2025 GMT
Subject: CN=41d8ea063bd23c475b64aac9bccc9802d5a1b413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:de:cb:23:98:8a:3b:91:f1:ac:91:96:24:
37:18:6d:f6:0c:16:66:43:a6:fe:c4:d8:cc:f5:08:
0d:35:87:43:bd:2d:fc:bc:51:ef:94:22:4d:c4:88:
28:43:b3:e7:02:8b:00:c3:87:08:f2:8d:a0:c3:c7:
30:54:41:79:c5:10:96:41:90:a2:a1:04:5f:24:23:
46:ec:f5:78:47:4d:be:30:a0:5f:b6:5b:29:29:36:
dd:99:50:1d:27:5a:98:1a:e9:84:4a:2f:20:28:62:
97:bf:cc:4a:1a:9e:de:b4:84:6c:f8:cb:f8:75:96:
e0:3e:ab:0a:4d:65:84:2a:b1:43:6e:c5:98:cd:c3:
f4:e4:a4:9c:ab:c7:e8:cb:e6:e1:d8:80:97:46:fc:
c2:77:00:34:df:e7:6c:f9:7b:f6:73:0d:c7:f0:6c:
6e:9c:3b:c3:9d:24:88:6b:9d:7c:28:2e:80:27:d4:
cd:c7:50:bd:5a:d3:a1:17:18:77:2d:c4:bd:51:51:
64:5c:9a:f7:d4:03:05:3a:c6:b5:3f:bf:e4:5a:ed:
22:ad:9b:17:c0:a0:7b:c3:eb:5b:be:56:45:db:6a:
5c:de:02:cd:2e:c8:e3:b8:af:76:b8:0e:13:61:9f:
33:9f:a0:ec:48:35:8d:f4:53:67:d5:8f:1b:1e:06:
19:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D8:EA:06:3B:D2:3C:47:5B:64:AA:C9:BC:CC:98:02:D5:A1:B4:13
X509v3 Authority Key Identifier:
keyid:B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ed:8a:73:b2:fc:c1:63:d2:f7:a9:b3:8e:d5:34:13:0c:87:
b5:a2:7c:88:b2:3f:31:f7:0e:11:4e:49:09:08:96:24:48:cc:
a2:f0:8d:88:bd:fb:10:13:33:f5:6a:ad:65:38:ac:4b:53:56:
56:3a:dc:e3:0f:eb:4f:3a:27:60:e9:93:b2:a6:44:f7:0f:10:
30:5e:3e:b7:7f:37:f8:20:20:c3:ed:e9:11:e4:1f:5a:39:dc:
25:9e:01:42:c8:85:4d:30:7e:3b:58:c8:d5:34:cc:23:bc:20:
5d:54:23:b9:95:9d:38:88:28:88:4e:67:6f:bd:7a:d9:e4:c3:
56:99:47:e5:2d:6f:b9:32:50:6f:4c:22:f8:f1:b4:15:e4:da:
1c:7c:f1:89:cd:04:f0:d0:b2:0f:91:65:12:75:e7:5c:89:2a:
27:03:23:a3:ed:69:ec:64:e0:2b:e8:61:a9:c9:33:84:dd:e0:
e3:b1:ec:54:bd:6e:82:07:a5:48:49:00:bd:de:db:77:59:d1:
a4:ea:40:25:3d:ec:1d:24:41:58:6c:4a:8b:e8:e5:c3:15:ca:
2f:1a:d5:02:82:14:fb:85:96:7d:56:05:e4:aa:0e:1e:16:6e:
ed:db:4a:53:e6:ef:a7:52:63:a8:81:71:d9:5f:5b:49:fb:15:
76:35:c4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:28 2025 by rpki-client