Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
File: T7EQS7paPx3dLe67o0gZGfT5YaQ.mft (raw, json)
Hash identifier: KR4Plj8HFqyiWrO1xdXbu+NDZ52mXBzhj2001lr6MgQ=
Subject key identifier: 41:62:15:55:72:44:84:08:6D:B6:52:CE:AA:76:BA:41:07:56:92:E2
Authority key identifier: 4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
Certificate issuer: /CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Certificate serial: 0199228CB142FEC75EBB610F78EFA948547E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
Manifest number: 106C
Signing time: Sun 07 Sep 2025 05:01:09 +0000
Manifest this update: Sun 07 Sep 2025 05:01:09 +0000
Manifest next update: Mon 08 Sep 2025 05:01:09 +0000
Files and hashes: 1: PHtHgmSOY6QlNjsIyECg_KW7ZYU.roa (hash: cSzW9+Tdn6riD70yyykVu3Jxk7SzmVYuL8aIL6ZeXmM=)
2: T7EQS7paPx3dLe67o0gZGfT5YaQ.crl (hash: TZYUY84FWl3IfDTCZxfN0TPE/m8GQHzPMAEcnAmVLmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:b1:42:fe:c7:5e:bb:61:0f:78:ef:a9:48:54:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Validity
Not Before: Sep 7 05:01:09 2025 GMT
Not After : Sep 8 05:01:09 2025 GMT
Subject: CN=41621555724484086db652ceaa76ba41075692e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:7e:93:76:42:f3:90:3f:97:1e:fc:52:eb:
e7:f4:7e:1f:b2:c1:d1:41:f6:bf:1f:00:f4:98:84:
a3:86:7d:c0:07:a6:dd:c7:d8:f4:3d:86:f9:ce:46:
ef:95:34:db:94:17:4d:d9:26:c6:b7:2a:07:0f:de:
11:e5:c7:6c:9c:76:f0:7e:31:78:8c:4e:db:81:ec:
af:73:0d:79:91:7a:25:8c:75:93:5f:10:fe:af:ab:
30:f7:aa:c5:23:34:d4:63:14:ed:20:db:a0:de:c6:
b8:05:2e:1f:4c:cd:ec:a7:40:f0:cd:3a:5c:b6:ee:
c7:70:bb:f5:87:9d:67:28:75:7e:ca:ae:8c:1f:3b:
d3:49:0f:c3:a1:2c:73:41:83:10:c9:67:cb:59:f8:
2a:ab:0a:b5:3d:99:8f:0c:1a:58:0a:65:a9:aa:96:
fd:fe:ae:46:0f:57:7b:c1:b9:16:0b:c6:31:52:d9:
92:16:6e:25:b9:1b:12:cb:57:7b:78:cb:41:8b:01:
c6:70:8e:38:de:b1:bf:0f:c9:27:b1:c0:78:07:b6:
c3:82:61:56:2a:59:af:16:2f:33:60:93:22:88:35:
03:11:5d:2c:66:5b:f1:bf:4b:46:ed:ce:19:af:5b:
c0:47:6e:d6:6f:99:32:25:ab:35:24:0d:a3:b4:47:
f1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:62:15:55:72:44:84:08:6D:B6:52:CE:AA:76:BA:41:07:56:92:E2
X509v3 Authority Key Identifier:
keyid:4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:24:02:08:3b:32:ee:7c:57:c2:dc:2d:98:66:93:95:56:9a:
44:cc:4d:a2:1d:f5:ec:11:da:a0:3d:9a:e4:1e:76:ad:c7:83:
90:25:6d:cd:85:c9:97:dd:82:77:f9:ec:d7:a2:39:cf:cb:fa:
b2:05:87:c8:f7:87:fa:54:75:4d:aa:71:b5:8e:46:de:f8:e5:
c7:40:e1:f6:99:07:de:0d:39:03:55:3f:e4:b0:f6:42:73:91:
33:27:a9:39:3d:eb:b1:ad:5c:95:8f:e9:33:72:f1:07:87:06:
c1:8a:80:df:cf:d3:4e:e1:6f:97:f2:1f:47:27:19:8f:03:3d:
52:4c:e9:10:82:32:9e:c4:6d:1d:2d:d8:3b:16:7d:bd:91:8e:
e6:0f:08:18:ea:a5:2f:fb:1c:da:70:1d:78:ad:6a:fc:8f:f6:
cc:51:bc:19:12:90:8e:a9:e1:09:30:ff:d6:3c:91:13:1b:cc:
8e:8c:73:c9:51:33:bd:26:41:19:d7:0e:2a:45:87:a0:2c:ec:
1f:d0:ba:eb:2d:49:67:8d:7e:26:5a:04:c2:ba:1f:6a:7f:1e:
de:a1:13:78:cd:90:77:58:67:55:05:3a:16:05:0d:35:a2:5a:
0a:09:4c:bf:bd:c1:47:03:57:dd:38:d7:98:6e:05:75:70:f1:
f3:46:65:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:21 2025 by rpki-client