Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
File: T-uUV-xRnoI3hncQvMgvow6uZ8A.mft (raw, json)
Hash identifier: Fk6R89yQ4LYHNjEuLmQrhWxCsnEFPuHSttMj8m6TsXU=
Subject key identifier: F8:D0:31:5A:13:DF:F4:D7:FA:05:E2:33:61:19:81:87:87:7B:37:54
Authority key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Certificate issuer: /CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Certificate serial: 019A6EB71CD629406E6CB843F43D59B28CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
Manifest number: 171D
Signing time: Mon 10 Nov 2025 17:01:25 +0000
Manifest this update: Mon 10 Nov 2025 17:01:25 +0000
Manifest next update: Tue 11 Nov 2025 17:01:25 +0000
Files and hashes: 1: DMobrS7vy2moYzGxgBwp5Xf3ALI.roa (hash: FXiETzyRXvUDm+4e6t+4D5feOq7eyRK3o1W4hSbV9WQ=)
2: M_KXgx_JXGIc6tpaSDgr0M5BMPw.roa (hash: X3pXFD/5xK/MixjNA4bRNTqRZIbmtfbltIvMKrIW70U=)
3: T-uUV-xRnoI3hncQvMgvow6uZ8A.crl (hash: ZDeLS4h4porUoxjrNunWT+H8WFuYLl77qjo/Z0w23ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 15:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6e:b7:1c:d6:29:40:6e:6c:b8:43:f4:3d:59:b2:8c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Validity
Not Before: Nov 10 17:01:25 2025 GMT
Not After : Nov 11 17:01:25 2025 GMT
Subject: CN=f8d0315a13dff4d7fa05e23361198187877b3754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a3:f6:c8:40:04:56:58:8d:05:65:76:7f:b7:
8a:51:c4:11:73:e8:94:be:71:15:b7:30:b9:02:f4:
fb:79:20:5b:8d:0c:8c:e1:79:d0:95:d6:6e:08:12:
5e:49:97:93:9d:58:68:c7:5f:2b:1d:4b:b0:da:67:
0e:65:18:4a:61:db:1e:22:c4:7a:84:b4:81:a3:be:
7e:8b:83:48:ef:5d:67:9e:9c:4b:55:09:3b:b6:7e:
50:8e:f4:ca:2c:f5:19:74:68:2b:cc:33:1f:57:0d:
98:74:57:b9:89:f1:27:b1:8f:ba:d3:56:f2:de:a5:
16:f1:a8:bd:34:75:ff:f2:a0:f6:e3:3b:29:5f:9f:
75:d7:27:b5:3b:e3:17:80:a2:ba:f2:25:38:a7:71:
95:8b:57:62:a8:ba:e6:83:dc:92:09:6b:00:0f:3c:
06:ff:37:85:2e:f2:cd:ee:5f:11:ab:7f:d6:20:2b:
82:cb:21:3d:c5:6d:01:04:bb:e1:58:df:d2:da:c6:
f5:92:02:87:4a:f2:3d:67:2d:bc:ee:8f:55:40:33:
d5:e9:cc:e7:37:ca:64:4c:be:92:a3:11:93:0b:96:
5a:9a:9e:2c:8a:87:36:81:28:3c:0a:dd:30:e3:64:
c0:2c:57:ac:1e:62:f6:a4:7b:aa:46:08:f9:9a:c1:
c7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D0:31:5A:13:DF:F4:D7:FA:05:E2:33:61:19:81:87:87:7B:37:54
X509v3 Authority Key Identifier:
keyid:4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:76:68:02:1f:ee:2f:8b:59:54:9e:06:ab:ed:e4:45:eb:00:
bd:f5:88:bb:ce:73:0f:c3:55:9b:1d:5e:2f:0c:a3:b1:a3:a3:
07:1c:99:ff:bd:5b:81:ad:9e:1f:96:63:39:63:2d:f0:c7:e1:
42:98:f6:b3:4c:7b:12:f3:93:97:46:b5:24:bd:30:5c:25:a1:
c6:25:88:08:3a:d0:b3:2a:72:c8:9b:cf:27:00:80:7d:cb:57:
4f:f8:09:06:b6:d8:75:f6:68:64:61:5b:c2:5b:fe:9a:45:40:
f2:81:2e:ba:13:6c:e5:f7:ce:b7:b8:cf:a2:5a:04:33:86:0b:
7d:74:90:04:3a:8f:08:09:bf:4a:af:d8:f8:ca:55:b9:86:8a:
10:63:36:d7:5b:6d:ca:d5:bb:1a:3f:16:c4:b2:b4:81:10:22:
2b:5f:bc:b6:8e:96:ca:6a:54:19:a6:ad:47:f9:37:4e:b6:2b:
85:c4:4f:ce:76:14:da:82:e4:32:94:ac:23:44:3c:49:81:02:
aa:8c:5f:2a:6f:c4:d7:84:4e:a4:eb:99:2a:36:6c:f6:69:af:
89:d9:df:2c:d9:0d:57:a0:9a:c4:65:70:eb:29:35:f2:40:f8:
30:71:87:10:45:92:4e:eb:36:0c:fc:e8:db:38:72:b8:95:1f:
e8:51:6d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 10 21:23:13 2025 by rpki-client