Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
File: T2F9awPi_l-JEcvrX64tyjvWZ38.mft (raw, json)
Hash identifier: D24QAXyHtCc5e2eqWpu8uUKVkXgEoFm4GoOkbkMr0AE=
Subject key identifier: 0E:38:95:2B:95:24:F6:D4:DA:91:94:B3:9D:36:98:14:C0:20:61:3F
Authority key identifier: 4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
Certificate issuer: /CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Certificate serial: 019A72259D0F94143B3C1F17CF155D84E026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
Manifest number: 1400
Signing time: Tue 11 Nov 2025 09:00:58 +0000
Manifest this update: Tue 11 Nov 2025 09:00:58 +0000
Manifest next update: Wed 12 Nov 2025 09:00:58 +0000
Files and hashes: 1: NwaNp5L0RusVDFFM4pIExblfTEU.roa (hash: B2/PCGdwG+WPaQH+f8v2+xUGdjLlo6CPicFBvC+Ii04=)
2: T2F9awPi_l-JEcvrX64tyjvWZ38.crl (hash: dNvOVY5eA+P7FuNadWfw0UkdGm9NXrZHH97VN1zG8rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9d:0f:94:14:3b:3c:1f:17:cf:15:5d:84:e0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Validity
Not Before: Nov 11 09:00:58 2025 GMT
Not After : Nov 12 09:00:58 2025 GMT
Subject: CN=0e38952b9524f6d4da9194b39d369814c020613f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:7e:ee:44:b0:a0:bd:d7:bd:69:12:f5:10:
9e:bf:18:f3:a3:55:ae:fe:9c:a5:1e:eb:18:12:96:
a1:5e:3f:57:8a:27:31:ee:d3:46:93:76:9c:c5:3b:
19:37:9f:c7:a7:3b:1f:c6:09:0b:b7:93:4c:b7:9c:
6f:b1:43:b8:1a:92:b9:17:44:91:40:84:80:ba:d4:
4d:e7:e8:58:eb:27:05:5b:ad:e7:c3:84:e2:c2:a4:
b5:c5:41:47:bd:24:c9:1c:7a:fc:24:27:44:eb:0b:
6e:48:d8:ee:91:aa:77:1a:bb:21:11:0a:f9:9f:d8:
89:4f:18:2d:4a:5a:ea:cf:8f:1f:61:44:09:9d:b6:
2c:d1:8d:f3:db:42:ad:8a:af:24:42:ad:1e:0b:e4:
41:85:9a:62:fb:2b:45:83:1f:cb:a7:22:3f:79:85:
da:64:42:24:b2:1f:4c:e1:db:af:e2:24:55:54:d7:
83:bd:2c:91:ed:fb:ca:49:0d:49:7a:c8:30:bd:ee:
99:dc:9f:3b:8a:f7:cb:08:09:bd:5f:3d:0c:dc:4e:
0e:a8:78:d8:90:63:ad:a4:c3:0e:6b:9e:ec:f9:50:
cd:05:ff:2e:6e:f5:79:71:da:d4:5c:f9:14:4a:45:
42:ff:0b:f3:95:a5:c2:87:dc:1e:13:68:37:9a:06:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:38:95:2B:95:24:F6:D4:DA:91:94:B3:9D:36:98:14:C0:20:61:3F
X509v3 Authority Key Identifier:
keyid:4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:39:31:f1:1c:d1:da:04:16:8c:9e:b3:0e:26:fa:c2:f7:1f:
47:9c:0f:fc:a8:67:06:8d:26:ea:2a:88:2e:20:a3:8b:ee:42:
57:78:79:0b:1c:2f:af:91:08:c5:f0:38:68:f8:88:01:30:1d:
fe:34:39:10:01:65:ec:c3:3b:82:ae:26:ce:cd:82:af:38:8e:
08:ff:67:1e:59:2c:31:8b:7b:ee:a3:c4:bd:65:b9:55:84:4b:
ba:59:d9:21:1f:0e:f7:4d:4b:8a:41:8e:42:b0:fa:d6:f4:e4:
27:ca:b2:7d:b8:9b:78:0c:32:d2:e4:2c:84:d1:c5:0d:c3:65:
d7:b2:f0:1d:21:71:d6:f8:7a:a7:38:a6:e2:eb:91:a2:e6:d7:
83:48:75:aa:10:13:77:b8:78:7b:0d:54:f8:58:90:d1:30:4e:
73:ee:73:44:86:fc:9b:60:cf:17:69:80:87:e4:af:03:63:30:
60:59:01:20:55:b2:b9:49:ec:70:a3:fb:43:48:b4:62:8c:f6:
c6:3f:c6:8f:f0:bb:fd:a3:f6:75:c6:0d:df:85:0e:5d:8e:15:
98:77:50:31:aa:ef:e3:38:2b:a8:65:fa:82:d7:34:42:58:87:
56:6d:55:6a:a1:ea:1c:fd:8f:1f:6e:22:92:57:c2:b1:17:61:
49:ae:16:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:26 2025 by rpki-client