Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
File: T4R35WnR19YPBGmnzIp_R0YDm7c.mft (raw, json)
Hash identifier: MfoDOvmDjpURkdFsx2Jfa9atqEkPe9VMNAFn2RZtOtA=
Subject key identifier: 3E:27:94:AB:7B:E8:FE:D0:D4:9F:95:91:E6:68:07:85:70:C8:DF:01
Authority key identifier: 4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
Certificate issuer: /CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Certificate serial: 019A71B912342626CEC55B4134C517674D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
Manifest number: 1383
Signing time: Tue 11 Nov 2025 07:02:25 +0000
Manifest this update: Tue 11 Nov 2025 07:02:25 +0000
Manifest next update: Wed 12 Nov 2025 07:02:25 +0000
Files and hashes: 1: 9sTlJL6XI1F8_6pTnGvYUoHPjLc.roa (hash: p/q9OdpuOMeCTpoZABPBjgzLHhfpzMbQS5v48+zxKpQ=)
2: T4R35WnR19YPBGmnzIp_R0YDm7c.crl (hash: t2BABoCTT3yVrPq+YyQxJMJDUn7MDBxiHcPPcTlBGAM=)
3: ob104eCQJ_C_ID7VnPR1GOcDcA8.roa (hash: 0O8ntyVniHu4kxwME5VY5LDqj4fbOYlq5O01qeomItA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:12:34:26:26:ce:c5:5b:41:34:c5:17:67:4d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Validity
Not Before: Nov 11 07:02:25 2025 GMT
Not After : Nov 12 07:02:25 2025 GMT
Subject: CN=3e2794ab7be8fed0d49f9591e668078570c8df01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:ee:e9:10:65:31:eb:4a:ee:0e:83:36:8b:
ae:7d:66:47:ea:68:59:f6:db:64:62:55:ab:56:6d:
07:5c:6c:f5:e8:4a:c4:47:d5:87:04:d7:35:91:64:
df:0c:29:4a:fd:ab:8d:4a:0d:6e:70:cd:9c:6f:17:
6a:49:fe:ca:7f:02:94:aa:5b:e3:4a:07:2b:fe:b3:
6d:16:aa:38:09:4a:f7:a9:60:9c:8b:a4:7c:27:25:
13:8c:46:62:0d:a4:5c:14:97:df:6f:23:d2:05:26:
47:7f:8a:af:a1:fd:49:47:4d:b2:c9:86:ad:ed:86:
b1:b7:9a:7a:bb:8a:e1:73:bb:64:37:32:25:ac:68:
c0:3d:03:3c:62:bf:85:81:b8:be:20:6d:70:16:28:
59:59:6d:87:ef:c8:a9:7c:1e:97:2a:c9:53:fe:61:
e1:e4:55:fa:e8:cc:15:59:f1:e3:11:d8:ab:5a:72:
ff:1b:3e:06:2d:07:1e:89:56:42:7e:59:d1:f8:6f:
40:f2:ed:22:e6:af:ba:46:51:04:09:18:97:80:22:
9a:f9:cd:2b:2e:99:4e:76:77:35:6a:74:15:2d:72:
3b:f7:85:f4:28:b3:20:56:6f:11:06:be:e3:27:33:
10:9f:8b:25:2b:b2:66:c6:de:de:19:49:89:51:ea:
e7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:27:94:AB:7B:E8:FE:D0:D4:9F:95:91:E6:68:07:85:70:C8:DF:01
X509v3 Authority Key Identifier:
keyid:4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c4:88:79:e1:db:b2:46:05:3a:99:66:22:e8:1c:63:ab:d7:
6d:e1:cf:19:9a:23:6c:da:f2:5c:97:02:d9:7c:34:18:02:79:
75:06:0a:a0:69:cf:0f:72:b6:f2:f8:18:45:ea:1a:a9:cc:0f:
81:af:d0:5e:86:f0:c2:33:6d:cc:e9:37:c4:9f:61:6f:d5:c5:
c9:12:47:a9:f9:b7:66:d4:39:e8:01:40:73:44:2a:0b:be:83:
e4:80:3a:a1:da:d2:79:5d:a2:19:66:91:3f:ba:1b:ad:83:9b:
f3:78:15:06:a9:9a:1b:6d:46:17:f3:47:77:98:84:01:38:ae:
53:64:eb:41:68:4c:ea:f3:ed:c8:cc:50:e2:16:ec:ad:7a:a0:
4e:d5:25:04:d4:3a:16:bd:74:4d:05:35:fc:9e:87:b6:90:44:
f6:e8:83:39:fa:fa:d4:c7:4e:9a:1d:2f:75:3e:78:b6:9f:31:
f5:95:c4:74:40:7a:cf:c8:86:d4:d3:32:e9:2a:ce:6a:88:1a:
4c:88:f7:05:12:4b:e2:bd:73:a9:f9:53:04:bf:2e:f4:c5:c7:
9b:21:0c:6c:64:b4:fb:a0:2b:a6:11:28:bb:89:81:fa:6f:8c:
92:95:bb:12:0f:1c:af:ac:bb:38:70:06:bf:2e:b1:73:cb:78:
05:91:b6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:57 2025 by rpki-client