Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
File: T32IU5OzK17uOgv0M44Pqu88dTw.mft (raw, json)
Hash identifier: uJDzli6SjHWRxMeTQXaqVbNus/jpVyNq5E6W4FC1hf4=
Subject key identifier: 49:82:59:71:52:6A:8C:93:58:92:55:6A:92:97:1E:28:62:5A:6D:F2
Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
Certificate issuer: /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Certificate serial: 0198C6EE531BDD8FD87246A78B5C77A4BA10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
Manifest number: 1410
Signing time: Wed 20 Aug 2025 10:02:44 +0000
Manifest this update: Wed 20 Aug 2025 10:02:44 +0000
Manifest next update: Thu 21 Aug 2025 10:02:44 +0000
Files and hashes: 1: K_MyGvHR4IdSBZBjdPl8MukbNFk.roa (hash: HrMHQD3uVG8sdR811mtsQpZxidNNmctDC5Taskmcc7A=)
2: T32IU5OzK17uOgv0M44Pqu88dTw.crl (hash: 6gfcb3vn4P533pojEfXq0mCoWAuGejUzXc431MYV72o=)
3: qt5f6XAHUjkOK9CEjEv3rd6845Q.roa (hash: JhK1mHuSEOx5aV2MrmFZp4Cs5i5KltcCemHPpXmD5pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:ee:53:1b:dd:8f:d8:72:46:a7:8b:5c:77:a4:ba:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Validity
Not Before: Aug 20 10:02:44 2025 GMT
Not After : Aug 21 10:02:44 2025 GMT
Subject: CN=49825971526a8c935892556a92971e28625a6df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:81:ec:fd:c2:7f:11:6e:73:5f:0c:77:57:da:
ce:e7:f8:15:b9:03:a4:60:0c:26:65:08:cc:99:2c:
42:c5:59:de:6f:f7:61:5f:d2:a9:00:6f:6f:9a:1d:
e5:70:22:8c:d1:de:1a:7c:4c:6d:61:8f:0b:7f:af:
2a:01:0a:49:27:16:58:3a:dc:08:ba:11:36:00:bc:
6c:37:d8:d6:a7:40:50:e7:0c:55:bd:b6:dd:74:ed:
7e:26:ad:32:eb:aa:ff:38:51:0f:0a:68:c2:4e:b5:
67:91:10:ab:78:66:3d:a5:f7:a5:62:5f:04:92:e5:
16:00:c0:5b:85:95:bf:d2:cf:45:f4:c6:64:2b:5d:
50:67:ef:82:32:5c:fa:a0:86:bc:da:ca:ce:79:88:
74:f6:14:06:49:8f:c6:fd:07:81:eb:b2:ba:c9:ac:
10:e1:b6:c5:ce:2f:5e:f9:20:61:70:10:8d:72:e0:
6a:6e:a6:d0:d9:48:e6:9b:03:68:1d:8f:be:7c:1d:
18:26:cd:c4:54:1d:99:5d:d1:8d:ed:85:45:d5:91:
4a:2c:d2:4f:0f:a1:b0:39:0c:5c:c4:4b:87:da:f0:
4b:d0:1a:3d:24:9d:f5:b0:e4:ca:04:76:f9:2a:af:
66:72:66:0b:31:99:36:29:31:2e:b5:9e:ed:95:b7:
86:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:82:59:71:52:6A:8C:93:58:92:55:6A:92:97:1E:28:62:5A:6D:F2
X509v3 Authority Key Identifier:
keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:24:05:f9:01:c0:91:db:fb:fb:77:f1:48:ab:be:b0:c2:41:
09:c6:09:c1:f0:a4:d9:be:51:2b:16:0f:9e:dc:04:65:c8:8b:
7b:d3:f9:e3:63:bf:5c:75:fc:99:33:89:61:f5:65:11:00:cc:
1e:09:6b:da:91:99:37:f1:bc:50:d3:a1:e1:82:10:63:84:48:
00:b5:6c:87:9e:53:c7:50:01:51:87:bc:41:e8:de:55:fd:91:
c8:16:f5:59:64:dd:5e:aa:4c:77:62:da:10:64:26:71:44:9b:
10:97:01:e2:fd:d8:7f:81:7f:d5:c2:1b:2f:5a:72:49:78:c2:
de:bd:54:df:c4:3c:37:27:cc:9d:7b:83:bd:01:f7:8f:1e:5c:
cc:30:e5:1f:5e:7a:47:5c:0f:9e:5b:83:56:f4:61:fe:20:5f:
fd:8d:9f:4f:cc:66:a8:75:9e:09:61:b7:ec:f2:af:76:42:56:
c1:b0:c6:87:46:dd:a3:36:9f:43:7b:89:fb:84:f3:26:ab:19:
d9:2b:01:f6:c1:25:04:c6:9a:c7:62:3b:f7:e1:d2:8f:c1:f1:
66:6f:1a:5e:dd:99:0f:1b:3e:4a:91:0b:15:80:af:31:29:50:
af:d6:90:e4:f3:ff:3a:7e:0c:dc:40:00:47:4c:d1:85:e0:6c:
b2:93:d9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:26:03 2025 by rpki-client