Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
File: t4SM0jk8F4NlegV3erMV45jrsj8.mft (raw, json)
Hash identifier: XowZNw4Fv8q6dtjtLV77GpOfO/1D8IUfF6niBOQskyo=
Subject key identifier: F6:C5:42:23:8D:84:C9:EA:E6:EF:C8:3F:3A:B1:EF:CE:74:5B:B2:23
Authority key identifier: B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
Certificate issuer: /CN=b7848cd2393c1783657a05777ab315e398ebb23f
Certificate serial: 019A1F88E87DBB9D9C0C818DC029F5B14EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
Manifest number: 07D4
Signing time: Sun 26 Oct 2025 08:00:57 +0000
Manifest this update: Sun 26 Oct 2025 08:00:57 +0000
Manifest next update: Mon 27 Oct 2025 08:00:57 +0000
Files and hashes: 1: pTPPFKoFJuWdMRGvxA7E4jX80_c.roa (hash: HeJcd3mD5OFJbnZMPOd7wMALaLnR8ioIMvdpAeeFOz0=)
2: t4SM0jk8F4NlegV3erMV45jrsj8.crl (hash: 9nFWZ7Y3DRoCZ952xgkCLlPYKc/yxWyWR3y99HZckYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:e8:7d:bb:9d:9c:0c:81:8d:c0:29:f5:b1:4e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7848cd2393c1783657a05777ab315e398ebb23f
Validity
Not Before: Oct 26 08:00:57 2025 GMT
Not After : Oct 27 08:00:57 2025 GMT
Subject: CN=f6c542238d84c9eae6efc83f3ab1efce745bb223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:c2:20:3f:aa:ba:6a:3f:b8:90:48:e1:76:
df:5d:bd:e8:cc:e8:9b:e2:59:ba:04:79:53:5f:01:
8a:41:f0:3e:58:d0:a8:5c:df:24:62:61:d1:0e:7a:
4c:f4:7c:a3:99:a8:e3:07:10:f1:c1:41:08:60:a3:
2f:50:9a:39:e1:fb:3d:2c:e4:a2:e8:3d:9a:b2:fd:
52:d0:02:02:bf:54:b8:a9:81:57:bb:41:fb:8e:83:
4d:d1:51:ef:5f:3f:79:12:b3:58:66:97:06:08:09:
7a:80:a8:9a:c4:11:e4:91:71:85:81:21:c4:d7:58:
71:43:94:56:3c:c8:81:ab:2f:98:38:47:4b:c8:e4:
24:8d:ef:ca:3b:7b:6d:c5:ba:a1:be:9a:e4:1c:7e:
cb:76:8a:02:07:aa:84:2b:d7:86:cf:84:62:86:26:
9b:97:0f:78:51:fa:14:b6:bd:7f:6b:3b:1c:85:3c:
93:42:0d:30:45:fd:2b:18:32:e8:f1:93:90:00:a3:
62:e2:3d:f4:03:df:06:25:ee:2f:96:3d:80:09:04:
45:92:43:9e:52:55:29:4a:85:5e:ec:13:77:c2:4d:
1b:fd:22:9d:1d:6f:11:13:70:89:59:73:10:11:67:
49:ef:3a:03:72:33:db:97:c8:04:bc:73:a5:c0:bb:
0e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C5:42:23:8D:84:C9:EA:E6:EF:C8:3F:3A:B1:EF:CE:74:5B:B2:23
X509v3 Authority Key Identifier:
keyid:B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7b:35:38:20:5c:97:03:0d:7e:02:c9:c7:01:b1:69:32:a8:
fa:45:87:f7:b7:99:2a:92:a4:b4:21:96:6c:31:25:b9:69:5b:
a8:bf:b4:4f:50:9e:34:d5:e8:d0:8a:b8:b8:ba:6c:83:5d:24:
3c:e7:0c:33:66:a2:0b:21:cb:d5:22:4b:ba:42:57:89:b1:dd:
24:76:96:51:e2:6b:dc:f8:80:ad:64:7d:3d:bf:b5:09:63:a1:
82:18:1e:b8:92:d5:fa:92:c9:96:98:ca:05:68:c0:08:a2:92:
99:96:98:5b:07:e7:6b:ba:f7:c9:76:b9:9c:d3:d8:ce:a3:c0:
7d:96:c7:04:29:6b:f2:1b:61:38:98:e8:62:3b:ac:73:f5:2a:
39:d4:3c:88:83:ca:bb:11:34:c5:8a:07:9d:82:4d:db:a7:f5:
34:c8:ed:ae:1b:6e:40:6c:2c:41:2e:01:e7:f6:13:50:d8:fd:
c7:47:4f:4d:c7:3b:f7:17:50:34:10:b9:9a:68:ad:75:17:ec:
0b:f9:e7:0d:12:34:26:14:ba:ce:95:d2:78:77:87:9c:ec:4a:
03:9a:44:91:86:ab:31:a5:e7:0f:43:48:a8:c8:5f:0e:7e:3c:
59:17:ad:58:a6:f2:0f:71:f1:a5:88:eb:25:fc:00:0d:2e:8b:
e1:fe:b0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:52:33 2025 by rpki-client