Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
File: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft (raw, json)
Hash identifier: cMGTu3n5mUtZOkNYl5T6aj+iMNW7wR+tgqdha9J8UQg=
Subject key identifier: 46:B1:68:53:73:A2:BA:0E:3A:C0:81:CD:46:F3:48:43:4F:85:72:84
Authority key identifier: 4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
Certificate issuer: /CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Certificate serial: 01993725F903A269BEF64041487166C06A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
Manifest number: 0156
Signing time: Thu 11 Sep 2025 05:00:59 +0000
Manifest this update: Thu 11 Sep 2025 05:00:59 +0000
Manifest next update: Fri 12 Sep 2025 05:00:59 +0000
Files and hashes: 1: 1-zM-AxIs8xBhVggB7kaXu3nKz6g.roa (hash: LftIky1Ihf5BPrdrifEnWJNrxUQ7AoG9kgjyQfCqmf0=)
2: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl (hash: CJONMW4TdYI3UbQoA6NsIlF6gqwNvBkQ+r1ET8ViT+4=)
3: g2bIRp1_Ofi7tBEEaDVHCapdwAY.roa (hash: mKK0SH1X7uOReLc+h1naUYfsSMGvNovIT24/wKrbp8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:25:f9:03:a2:69:be:f6:40:41:48:71:66:c0:6a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Validity
Not Before: Sep 11 05:00:59 2025 GMT
Not After : Sep 12 05:00:59 2025 GMT
Subject: CN=46b1685373a2ba0e3ac081cd46f348434f857284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:05:f2:de:6f:65:5e:f1:c3:92:35:57:91:2e:
69:c3:ed:17:4d:f9:35:03:36:e5:7b:ef:ec:cf:c5:
63:10:f4:ce:b9:00:a2:6b:68:87:4c:0a:be:46:f3:
81:03:ad:e9:da:99:87:06:b4:5c:41:8e:ef:77:a3:
3c:e1:3b:77:21:a1:fc:8c:9f:35:e6:5b:34:21:a7:
70:56:dc:2f:9d:bc:16:5d:3d:65:f6:e6:54:02:a6:
67:fd:c2:17:ef:0a:86:b5:15:84:89:83:31:7a:f3:
6a:dd:7a:5f:d5:65:5b:f9:13:3d:54:13:0a:fc:9d:
72:f6:10:2f:a7:57:78:1c:6d:36:16:bb:1b:a8:6b:
16:f4:5c:ed:a9:b3:5c:62:40:07:bf:83:e6:14:fd:
be:08:d7:32:88:25:75:bc:4f:40:be:ab:12:9b:19:
1f:23:26:45:46:fd:b5:97:2b:be:59:b2:0a:1d:b8:
3f:da:31:7d:6a:c3:2f:b3:21:58:12:89:5f:7d:c7:
0c:4d:df:00:d6:f9:5a:ce:5e:27:7a:61:50:7c:5c:
9b:3f:71:43:03:6d:c3:38:7f:9f:2f:16:06:ea:01:
97:2d:c8:68:36:3b:be:49:09:ff:ba:20:cc:a9:cb:
5d:5b:41:96:66:bb:fe:48:65:f5:a6:e2:96:b5:4c:
b7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B1:68:53:73:A2:BA:0E:3A:C0:81:CD:46:F3:48:43:4F:85:72:84
X509v3 Authority Key Identifier:
keyid:4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f5:40:ac:17:1f:8e:d6:a5:b1:ec:36:07:7d:dc:83:41:cc:
b0:7d:1f:5e:8f:8b:29:d8:47:22:06:b5:b9:82:ff:7d:3a:47:
ca:f7:38:88:e0:fe:a8:b2:2e:0d:3a:ac:ac:42:6a:05:71:3c:
48:11:9a:27:12:d4:f3:f7:45:62:0d:93:ba:b3:a5:ca:a4:3c:
bf:6f:1b:53:a5:03:42:41:c0:01:90:c6:ad:25:44:f2:a6:92:
1c:85:46:83:80:31:fe:3d:55:91:8b:c3:27:3c:fe:67:33:d6:
78:54:a5:fb:46:af:24:b2:8b:d9:34:42:21:73:40:1c:dd:24:
fc:35:f8:eb:01:0f:88:7f:d5:09:d5:15:9c:1a:17:bc:85:3a:
67:4b:be:9f:0f:db:59:f3:63:42:55:d4:b0:1d:93:2d:2c:52:
00:da:1a:77:40:0f:f8:ae:a5:bf:08:df:50:7d:56:de:7d:28:
25:75:a6:62:89:6b:d8:44:6a:4b:cd:48:0d:4c:ef:ec:2c:69:
e7:3a:31:a4:b2:25:c2:0a:84:d5:97:35:bf:58:a4:3f:f4:52:
2e:f6:b2:54:bf:c2:e1:c9:ee:46:f9:9f:93:c4:62:85:70:d1:
51:3d:17:e5:06:b1:d2:d4:1a:f7:3b:6d:90:9d:b1:cc:1c:a3:
dc:eb:25:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:53:47 2025 by rpki-client