Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
File: t060sgvFlKwro6pa7zDnTiXhVuE.mft (raw, json)
Hash identifier: qmtwJ96OyDt4CnqEwGv3+tJ6UHI12b0/wHBB1Bc0DRc=
Subject key identifier: D6:D5:80:58:41:7B:0D:06:4D:A7:01:C0:5D:C2:DF:D8:F6:B0:C7:B0
Authority key identifier: B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
Certificate issuer: /CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Certificate serial: 019A0780010B5EBB9668E0FB8D00E75D4AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
Manifest number: 0B88
Signing time: Tue 21 Oct 2025 16:00:20 +0000
Manifest this update: Tue 21 Oct 2025 16:00:20 +0000
Manifest next update: Wed 22 Oct 2025 16:00:20 +0000
Files and hashes: 1: 96zfb_as6Uu1dQBioEPRjkMoH0A.roa (hash: ZbDgERbOZ82dnNJrpA+vEp4hFeMsEzejOuHoVOcv55k=)
2: t060sgvFlKwro6pa7zDnTiXhVuE.crl (hash: Odc3lWx/xQgB+tmD59to9BAZ/M84rJJom+4ib4y9WXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:80:01:0b:5e:bb:96:68:e0:fb:8d:00:e7:5d:4a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Validity
Not Before: Oct 21 16:00:20 2025 GMT
Not After : Oct 22 16:00:20 2025 GMT
Subject: CN=d6d58058417b0d064da701c05dc2dfd8f6b0c7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ed:dc:f3:a2:5d:e7:87:9c:17:33:23:8c:6a:
73:11:67:c1:2f:09:a2:07:1e:f4:81:3f:e3:64:f4:
9c:ba:57:cb:43:9f:2f:d7:0e:55:e4:18:c6:28:f6:
b2:1a:49:02:56:7b:f8:00:dd:f5:4b:b3:0b:91:73:
3e:58:c5:58:d7:11:61:08:ea:59:8f:e1:12:54:db:
c5:3f:e6:0a:f3:04:d3:26:fd:9e:2f:1c:9f:ce:17:
44:c6:1a:73:19:12:80:bf:47:2c:dc:4e:f0:0f:fe:
72:31:07:8b:44:73:12:ab:79:ee:c2:43:dd:12:03:
7c:b0:fc:e9:a2:18:f4:eb:71:7f:de:4d:1e:3d:d8:
e7:62:5c:74:b9:88:63:95:22:bf:66:ef:e4:d0:41:
91:8c:fe:51:7e:cf:45:68:ce:19:ea:c2:47:dc:e3:
e8:dd:c6:1e:47:c1:67:d5:8b:43:91:87:8c:44:88:
da:6d:c1:3b:03:c7:02:d0:fb:0f:86:b7:fc:6c:4e:
14:71:92:fe:1b:c5:51:e0:f1:8d:56:6e:92:83:07:
c9:90:81:c7:e7:d6:5e:23:ff:e2:9b:2e:13:f9:c7:
79:f0:63:4e:c7:eb:e7:92:26:9c:6e:fc:7d:b8:42:
d0:5d:d0:39:10:46:b8:bf:17:0a:21:ca:8d:2d:bf:
c8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D5:80:58:41:7B:0D:06:4D:A7:01:C0:5D:C2:DF:D8:F6:B0:C7:B0
X509v3 Authority Key Identifier:
keyid:B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:45:e9:b6:55:9f:38:e3:94:de:32:9c:c5:50:55:1a:a2:90:
b2:e6:52:25:d5:3d:6c:3e:59:e9:3c:01:bc:54:fa:98:30:b1:
7e:00:34:db:fe:23:47:44:f9:ee:c7:4b:a8:53:60:9c:1d:f1:
09:e7:55:ea:78:08:ad:a9:0f:cc:8d:c7:ec:26:ec:36:6d:aa:
4a:f9:2e:f9:23:82:e9:57:4c:5a:b0:d6:e9:d5:e6:34:3e:a6:
f8:68:8d:c8:15:b8:4e:bf:8d:72:f6:f5:96:17:3d:e4:da:c5:
0b:c8:ee:e5:af:89:e1:69:72:ab:da:1e:9c:04:fe:80:f1:9a:
20:e2:ed:46:4b:8b:93:be:5a:d8:3d:2c:80:cd:d6:47:24:8f:
57:6c:b2:31:04:ad:e4:57:73:a9:67:78:93:a6:f1:73:dd:48:
1f:a6:c2:ea:ff:7a:1e:db:77:86:80:1a:59:05:3d:8a:9b:8a:
df:cc:87:45:73:32:24:6f:aa:94:54:14:1c:4f:d2:54:37:d7:
cc:d1:a1:4b:a4:9c:77:05:86:8d:4b:81:9f:cc:99:bd:ae:ec:
88:8d:e5:d1:75:0f:19:53:b8:bc:2c:f9:17:4e:fc:7a:73:c9:
92:7c:5f:84:0c:56:57:9c:fe:64:67:ae:dd:af:7c:19:d8:8c:
35:08:b3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:36:14 2025 by rpki-client