Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
File: T7EQS7paPx3dLe67o0gZGfT5YaQ.mft (raw, json)
Hash identifier: p0aOAqIC6oHsO8DNaVNrS+/D+OwOi88Avg3YGgkDmDQ=
Subject key identifier: 70:08:FB:6C:17:FE:35:7E:FE:68:2F:3E:10:6D:76:45:06:0F:3F:DA
Authority key identifier: 4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
Certificate issuer: /CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Certificate serial: 019A72938379A369931C7A95978AEEDA1BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 11:01:00 +0000
Manifest this update: Tue 11 Nov 2025 11:01:00 +0000
Manifest next update: Wed 12 Nov 2025 11:01:00 +0000
Files and hashes: 1: PHtHgmSOY6QlNjsIyECg_KW7ZYU.roa (hash: cSzW9+Tdn6riD70yyykVu3Jxk7SzmVYuL8aIL6ZeXmM=)
2: T7EQS7paPx3dLe67o0gZGfT5YaQ.crl (hash: I/www/+mx+yVgWRYO+iGeZRz8oNYgRrp7bT8BPqRxHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:83:79:a3:69:93:1c:7a:95:97:8a:ee:da:1b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Validity
Not Before: Nov 11 11:01:00 2025 GMT
Not After : Nov 12 11:01:00 2025 GMT
Subject: CN=7008fb6c17fe357efe682f3e106d7645060f3fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:08:52:29:58:8c:89:d8:9e:eb:3d:42:06:00:
5b:2c:75:7a:bb:f4:5b:61:3f:e6:3d:be:47:b5:3f:
4b:d6:6e:ec:c3:85:75:fc:73:20:19:a0:b2:6c:55:
02:b2:5a:97:31:05:b4:2f:4e:86:1b:dc:d9:d9:1c:
d6:e7:97:59:f5:87:72:92:98:95:bc:21:7c:32:58:
8b:c4:d5:3a:81:e1:0f:d4:d5:a6:4e:ab:29:67:32:
12:cb:16:fe:7d:18:0b:4c:8e:89:ae:4b:71:8b:76:
5e:eb:40:f6:ee:e8:67:55:c8:17:e9:b6:fc:0c:aa:
9c:ef:92:f4:0b:f1:b1:8d:e2:af:a2:19:45:48:c0:
4e:d1:8a:0b:8c:90:8f:fe:b2:53:9f:5f:fc:07:75:
50:70:b2:e8:b8:db:43:46:10:d2:6f:23:dc:22:89:
62:3d:48:94:7e:a4:91:68:d9:7e:d8:a9:29:e7:1a:
41:9b:df:49:82:c9:2a:88:4d:2b:f9:35:43:b8:08:
6c:25:c8:5b:27:74:ec:4d:13:28:be:2e:5b:a5:9e:
a4:5d:b5:cf:59:70:e1:c4:0a:d8:9a:6e:60:e3:c7:
a2:d2:54:a8:e4:28:d6:58:9e:4c:a7:e9:47:06:13:
dd:92:0d:da:d9:ab:80:7f:ce:f9:3f:82:91:db:0c:
b9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:08:FB:6C:17:FE:35:7E:FE:68:2F:3E:10:6D:76:45:06:0F:3F:DA
X509v3 Authority Key Identifier:
keyid:4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:2a:9c:8a:52:c2:a7:43:e6:92:ac:b1:68:6b:61:55:8b:15:
9e:e2:b4:3e:d2:4d:32:93:92:f8:ce:77:53:ef:c0:74:50:fe:
2f:98:bd:ed:dc:e2:9a:60:6e:60:b3:2e:f1:06:37:c0:0a:f5:
75:ac:ba:a5:c7:8d:d7:40:df:93:3d:db:ac:de:f2:5f:a1:35:
d7:12:60:46:fd:88:97:09:5b:88:57:4b:40:01:7a:3f:55:44:
7c:fc:75:85:63:0b:6f:a0:1e:1c:f0:6c:e8:d5:29:75:dd:90:
36:3f:00:8d:dc:45:0e:d2:b8:63:de:58:ea:81:e6:b9:92:74:
f9:70:4f:87:e0:f3:47:1a:92:7c:f1:a6:08:98:96:d2:7a:dc:
c0:ab:36:91:a0:d3:fc:86:b5:e9:3c:ae:0d:38:cc:77:5a:a7:
4b:b8:c6:37:e9:75:55:55:83:4d:03:d6:82:9b:9f:de:8f:3a:
b3:fa:82:bc:ad:57:49:1a:f9:cd:2b:94:82:89:4d:98:01:c4:
0f:bb:2e:9d:b2:bd:9f:5c:33:f6:6b:6b:5e:87:b9:96:71:15:
43:f8:1b:bd:b4:e3:44:a0:95:34:43:ba:27:2e:42:45:e9:e0:
20:0f:dc:78:c7:10:8b:d3:84:7b:ac:be:b8:cc:79:2e:e5:ed:
da:8d:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:12:37 2025 by rpki-client