Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
File: T51fuq92qApl4OksAgYeiVsrgRc.mft (raw, json)
Hash identifier: MYZci8tCv5Sn/QVofSzXdd85Rf1pKqrmwbIu580PM/o=
Subject key identifier: 81:38:AE:42:C2:72:DB:DC:7E:40:7E:71:FA:7B:7D:64:60:88:4A:DB
Authority key identifier: 4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
Certificate issuer: /CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Certificate serial: 019A71EE708FDB02F193E13A89B47C8A8D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:00:43 +0000
Manifest this update: Tue 11 Nov 2025 08:00:43 +0000
Manifest next update: Wed 12 Nov 2025 08:00:43 +0000
Files and hashes: 1: T51fuq92qApl4OksAgYeiVsrgRc.crl (hash: gv0DUkTlVdOzXMONuCA7ZytDrSCedRazjDcTUu2HNis=)
2: oudSfHdCLiNB6U8UydMcb_Ovg84.roa (hash: LQDm0fv1Tzx1NMtk5XfrPEJuzKPUwQiMUZ87fbukA4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:70:8f:db:02:f1:93:e1:3a:89:b4:7c:8a:8d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Validity
Not Before: Nov 11 08:00:43 2025 GMT
Not After : Nov 12 08:00:43 2025 GMT
Subject: CN=8138ae42c272dbdc7e407e71fa7b7d6460884adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:6b:b9:b6:b5:53:93:c2:f8:33:01:e3:30:87:
ed:c1:99:c6:84:6e:cd:7d:08:2a:55:26:aa:18:bc:
58:c8:86:65:87:35:12:0c:7d:2b:b7:76:8f:cd:e5:
30:bb:63:02:43:e3:11:3e:99:0b:3e:e1:9f:54:56:
84:b4:d5:eb:bc:9d:7e:b8:70:0c:f9:8b:d8:df:18:
9e:1f:7f:e3:da:d8:51:d7:7c:46:8a:1a:a5:dc:fa:
4e:6f:97:4b:2c:6f:c2:fb:3d:9c:5e:8a:53:cd:a2:
f3:23:82:6e:e3:47:64:fe:4d:e3:17:09:38:5d:ff:
50:c4:73:5c:88:28:a8:84:30:1a:29:69:1b:7c:4b:
71:3b:70:61:b5:3d:90:f8:a4:0c:eb:fa:eb:4c:f5:
42:aa:36:16:bb:5d:8e:cc:ef:62:58:e3:65:70:61:
7a:c1:e1:48:77:b8:0a:57:19:91:bd:4f:7f:20:45:
37:4b:4e:04:07:09:d4:92:4b:4e:82:7c:a7:bc:45:
d8:52:19:f4:1f:f9:ac:b5:4b:d7:05:3c:3d:61:b5:
fa:af:f9:14:f3:00:c3:04:f5:55:3d:6d:81:9f:28:
c8:56:6a:7e:d9:06:5b:6f:85:49:7b:63:92:3d:92:
94:a7:a6:75:72:ec:d4:44:97:18:34:f3:f7:74:ec:
3c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:38:AE:42:C2:72:DB:DC:7E:40:7E:71:FA:7B:7D:64:60:88:4A:DB
X509v3 Authority Key Identifier:
keyid:4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:32:1e:40:9f:92:48:92:d7:0f:39:37:c3:8d:02:4b:44:03:
ad:db:f7:9e:5f:48:c6:3c:53:c5:7d:14:ae:fd:35:e7:7b:29:
b1:8d:cb:75:ee:32:52:2d:5c:96:08:57:f7:07:30:e1:fd:07:
ad:13:f9:d1:23:d0:a9:77:aa:58:42:f8:50:9e:64:34:00:f6:
21:91:18:2a:38:ca:b3:ac:e2:6d:3b:67:cc:10:67:62:ab:54:
69:bf:9a:9a:1b:cf:20:ee:3d:82:94:ca:f0:c4:d2:0d:f5:bf:
ff:f3:cf:cf:15:b0:6b:1c:7a:0d:1f:1f:57:41:b7:0e:4f:03:
b9:db:6a:56:21:70:96:df:03:77:df:c3:c0:09:92:f4:2f:22:
18:42:39:79:df:74:27:e0:d1:49:3e:5a:b0:93:60:d9:44:13:
7a:b8:22:fe:38:ef:bc:dd:be:b6:f2:ab:89:0e:0f:c4:3a:f7:
3c:9f:c2:54:26:cb:89:a4:a3:65:2c:35:e4:cb:ee:5a:2a:27:
e5:ee:d7:56:64:23:8e:c9:d4:16:94:46:ba:29:1b:f2:83:f1:
76:a4:ff:63:5e:af:ab:ed:b3:66:d0:69:e0:47:45:fc:5d:51:
62:3e:a8:90:60:dc:0e:6f:5d:b5:61:8c:78:a4:4e:14:69:fd:
77:73:39:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:04 2025 by rpki-client