Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
File: T0d31JE06rdaecERgyrX7OcmcUU.mft (raw, json)
Hash identifier: w9pjmtAbw3BDHZkYtOYSjUWu3fvQAagLmu5/h+1Ve4I=
Subject key identifier: A6:22:18:16:D3:B0:90:D8:07:F8:84:5D:61:A1:5D:4F:01:66:71:BB
Authority key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
Certificate issuer: /CN=4f4777d49134eab75a79c111832ad7ece7267145
Certificate serial: 019A3EA52C5E86691BDD96C65ED5D9144088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
Manifest number: 0671
Signing time: Sat 01 Nov 2025 09:00:03 +0000
Manifest this update: Sat 01 Nov 2025 09:00:03 +0000
Manifest next update: Sun 02 Nov 2025 09:00:03 +0000
Files and hashes: 1: T0d31JE06rdaecERgyrX7OcmcUU.crl (hash: NW3AkwTB4xvmmMVbGogHZviBx7PagW2m5uCHtJbYKFo=)
2: xBIT4PfyqTeMr9EZAxQSDFw_tsM.roa (hash: +1108t61ZAdcCTRierOezlIx1u0lJ4yi+OpdSaQwRQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3e:a5:2c:5e:86:69:1b:dd:96:c6:5e:d5:d9:14:40:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4777d49134eab75a79c111832ad7ece7267145
Validity
Not Before: Nov 1 09:00:03 2025 GMT
Not After : Nov 2 09:00:03 2025 GMT
Subject: CN=a6221816d3b090d807f8845d61a15d4f016671bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:7e:7b:0a:88:e1:73:64:f7:17:a3:44:58:
07:f1:58:36:46:10:72:45:b5:6c:df:ab:18:9c:7f:
d2:5b:25:48:24:77:a7:a2:1c:32:b9:ed:1e:9f:f3:
5a:25:38:a5:e0:6b:05:23:bb:10:8d:2a:df:a8:03:
06:98:38:49:1a:42:b1:e3:52:d8:5f:91:11:28:7d:
96:ff:f3:d7:aa:4f:d4:0f:15:ae:20:da:94:e9:23:
0e:c3:d0:cd:3f:f3:6f:95:7b:28:61:05:b5:7a:8a:
74:c4:e0:7e:13:d4:75:e0:dc:8a:fc:c7:f5:2d:45:
fe:05:1a:4b:0f:bd:17:3c:84:37:19:7e:55:80:56:
f5:6f:50:cf:98:f0:0a:5b:6f:dd:db:d8:ef:2b:17:
29:eb:b0:4e:bc:77:d8:a8:93:ad:a5:5a:9d:6b:d2:
9a:5e:24:cd:71:22:33:0d:73:47:f8:7c:7d:d5:8f:
5d:5d:74:3c:a4:17:1d:27:ff:ec:59:84:28:6b:80:
f7:08:07:a8:a8:b2:67:55:56:90:e7:d5:e7:34:33:
9a:9a:88:5c:1e:f2:ad:6e:7b:a4:a4:d3:c6:2e:b8:
c2:ac:56:6c:b1:ea:84:76:0a:65:84:82:86:8a:7a:
61:19:b6:ea:f5:2a:4c:79:b0:fc:7f:ee:2d:14:77:
34:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:22:18:16:D3:B0:90:D8:07:F8:84:5D:61:A1:5D:4F:01:66:71:BB
X509v3 Authority Key Identifier:
keyid:4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:27:e9:d0:c8:c4:12:9b:b6:f9:34:28:86:15:78:7d:5a:12:
8e:98:fd:2d:94:8e:58:c5:70:f5:0f:39:96:ad:bf:47:6e:46:
71:5b:82:18:b5:b7:8e:74:4b:7e:4c:78:3c:47:ea:91:9d:03:
3b:b6:a0:9f:96:61:af:47:88:d6:15:36:d8:0e:ca:c4:db:66:
4f:a2:b6:71:d9:1a:61:f9:7b:e9:a0:3a:fd:ff:29:5f:a7:85:
12:f2:07:5c:1b:39:30:a2:5c:b9:82:0c:0d:f0:f0:5c:ce:78:
37:cf:a2:48:6b:08:2f:47:c5:b6:32:64:ea:b6:90:29:64:1b:
07:76:31:9a:bc:21:b0:3e:ca:00:a5:b4:05:06:35:d8:84:aa:
c5:44:ac:07:eb:5c:54:ce:ce:c4:c9:0d:7c:81:98:06:df:04:
47:82:01:a8:26:b3:c6:0e:84:cf:ee:6f:22:f4:76:d6:36:e8:
aa:be:dd:dd:74:d8:ae:7c:f8:70:36:39:80:b9:84:69:b3:37:
cd:09:a8:08:66:9a:df:dc:9f:09:a5:5e:52:cd:72:2a:ab:30:
35:ee:64:42:23:21:52:5b:81:87:90:7d:0a:6e:46:e8:da:be:
99:aa:ec:f8:a5:3e:8a:f9:ee:45:db:10:6a:72:64:66:f1:dc:
f4:ec:34:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 18:41:34 2025 by rpki-client