Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
File: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft (raw, json)
Hash identifier: ecnS1xg6WF9GA/UPxSiCVF1DqMC+s/CzQKlPHJPJ/Cc=
Subject key identifier: 74:4E:60:21:6F:7F:D4:7E:56:7F:65:62:67:D1:9C:C3:0E:3B:14:FC
Authority key identifier: 4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
Certificate issuer: /CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Certificate serial: 019A20D2761AC49109A8BA5AD1C16B566C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
Manifest number: 01CF
Signing time: Sun 26 Oct 2025 14:00:54 +0000
Manifest this update: Sun 26 Oct 2025 14:00:54 +0000
Manifest next update: Mon 27 Oct 2025 14:00:54 +0000
Files and hashes: 1: 1-zM-AxIs8xBhVggB7kaXu3nKz6g.roa (hash: LftIky1Ihf5BPrdrifEnWJNrxUQ7AoG9kgjyQfCqmf0=)
2: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl (hash: g7nLv7FvDSjOG5GAu9gwrjeD9r3bCHgPJL0leFMB1zQ=)
3: g2bIRp1_Ofi7tBEEaDVHCapdwAY.roa (hash: mKK0SH1X7uOReLc+h1naUYfsSMGvNovIT24/wKrbp8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:d2:76:1a:c4:91:09:a8:ba:5a:d1:c1:6b:56:6c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Validity
Not Before: Oct 26 14:00:54 2025 GMT
Not After : Oct 27 14:00:54 2025 GMT
Subject: CN=744e60216f7fd47e567f656267d19cc30e3b14fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1f:d6:35:4d:f9:cb:e4:93:86:91:f9:3f:2f:
ac:50:21:b8:43:ef:1a:1b:57:c7:cc:18:3c:f5:a7:
9a:92:3b:d1:91:45:a1:e4:5f:df:ba:3a:46:b1:20:
d8:a9:1a:bf:f7:55:f6:ef:eb:55:2d:90:15:8d:41:
23:54:a5:d5:4d:1d:d4:e0:b2:01:83:93:9a:e2:e2:
7f:ec:78:ab:d6:b1:83:1e:63:a5:7e:d5:ff:5c:9d:
cc:6a:13:23:7a:c4:6f:45:c1:fe:e7:70:b7:c0:92:
ca:15:7c:69:c3:7d:5a:cc:fa:eb:c3:7c:bd:7b:08:
95:fa:48:ed:d1:a6:fc:d0:1b:7d:9b:d2:c9:c7:92:
63:85:31:43:41:5c:40:7d:eb:3d:20:5a:42:b6:bf:
fd:09:04:bb:80:1d:d6:47:d5:35:ee:e6:40:50:32:
a9:e9:ff:e1:10:58:39:c7:2d:3f:bb:60:3b:c5:3e:
b2:a1:32:c8:5c:2f:7f:5e:3a:87:ce:3f:a8:5c:4e:
ed:e1:92:1c:aa:1a:65:21:b1:81:26:91:bc:4d:44:
1c:8b:63:eb:6a:fb:05:c1:a7:e6:b5:70:9d:e0:51:
aa:8b:39:fe:79:c1:91:f2:d3:b4:30:e4:e6:cf:3c:
e7:f7:6c:ea:fb:fa:97:35:98:61:8d:87:c0:af:76:
26:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4E:60:21:6F:7F:D4:7E:56:7F:65:62:67:D1:9C:C3:0E:3B:14:FC
X509v3 Authority Key Identifier:
keyid:4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1c:6b:48:48:75:1f:53:0e:c9:45:57:6a:e8:17:12:1c:1e:
f5:5a:c0:00:e1:7b:51:0b:db:5d:52:f3:b6:d8:37:2e:e7:e8:
76:26:e2:26:42:3b:85:98:16:a1:7f:af:ab:4e:53:5f:11:d3:
16:b9:4a:ed:f1:cc:bb:03:f4:89:6d:19:33:b2:36:f2:cc:ff:
53:68:6a:3f:53:12:47:65:0f:0d:95:b5:28:04:40:fd:ac:ad:
b8:c7:74:4e:0f:88:ee:2a:7e:48:5d:43:72:d7:7c:62:69:6b:
6d:07:11:4c:fd:f6:39:22:38:29:15:25:2a:19:d7:03:2e:5e:
dc:e2:3e:82:f7:84:7b:0f:f7:3a:58:1e:96:39:8e:e9:28:9d:
0d:9d:69:f1:cc:55:fa:a2:cd:2f:59:e9:ee:91:f5:f7:87:c6:
59:9b:0c:be:4d:e3:76:a2:b8:61:4e:d1:6c:f0:39:d4:a3:99:
3a:44:aa:2c:c0:94:d1:3a:ad:be:84:b7:67:22:38:b2:62:a0:
5a:b7:02:ec:07:8e:37:b7:13:b1:97:20:80:4c:a8:be:7b:a6:
b5:f4:25:d4:46:0c:1f:fd:7f:6a:ee:40:60:d9:4e:a7:06:78:
2e:7b:74:f7:cf:36:9d:db:49:dd:4c:7d:9d:f8:ba:23:8c:82:
49:5d:3c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:54:28 2025 by rpki-client