Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
File: T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json)
Hash identifier: XuV+bszJtVUdRL4+Xm851WRr6cKJVcWq/KiFq8nUaFE=
Subject key identifier: 0D:E7:93:3F:23:A1:51:AE:79:95:06:BA:25:CA:6F:7B:72:69:C4:8C
Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Certificate serial: 019936EE6DA2FA43BE4F333B84619487E9B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
Manifest number: 11D3
Signing time: Thu 11 Sep 2025 04:00:19 +0000
Manifest this update: Thu 11 Sep 2025 04:00:19 +0000
Manifest next update: Fri 12 Sep 2025 04:00:19 +0000
Files and hashes: 1: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: uzoNdQ/FUjU/Yey70aD6mbPv7lRXuYaRuEGNGekOCKI=)
2: ZowTG3oT7jR7fyuFs8EJsOqQnDk.roa (hash: BeTzHEyDuFcWSVUJFUf815UpcdMSl9Ku2ZGRMNQ+8lo=)
3: oN_HXrNwEKHWNOBeBXWLmMaedS8.roa (hash: EF1LIVK1qYYVxrGAD02d8UOfG8Hm02T8nbZi/iaVNaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ee:6d:a2:fa:43:be:4f:33:3b:84:61:94:87:e9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Validity
Not Before: Sep 11 04:00:19 2025 GMT
Not After : Sep 12 04:00:19 2025 GMT
Subject: CN=0de7933f23a151ae799506ba25ca6f7b7269c48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d5:18:12:b4:5f:06:78:bd:2c:92:48:f8:da:
70:d0:02:17:ac:9d:3b:e4:fe:2c:3f:29:10:ff:71:
c4:52:9f:eb:dd:cd:69:34:16:13:0e:9d:06:26:77:
20:8c:98:85:fa:cc:53:4b:52:02:50:5c:66:d1:df:
ac:14:11:3a:7a:ee:5a:dd:c3:0b:d0:1c:7f:cc:ef:
e5:f3:d7:32:61:9a:d8:24:46:51:58:67:86:f1:8a:
f0:42:3b:06:83:e0:f0:3b:0d:aa:a0:11:a3:61:b3:
b2:ce:55:00:7f:56:9a:36:aa:26:40:2c:9c:1e:e7:
62:c9:ae:1d:e3:b1:56:ca:e6:f9:3e:95:9c:4a:7d:
57:af:f8:da:67:d6:da:5e:53:1e:0b:f4:52:1b:04:
e8:99:d1:02:a6:d2:c2:98:c7:b6:92:58:70:4a:3d:
6c:b9:90:e8:e6:5f:64:51:5b:f1:a8:b4:fc:ee:cf:
78:3f:8f:49:fc:f7:41:18:7c:ad:51:8b:38:d3:f3:
64:ed:f6:7b:b1:ef:93:ae:74:7f:b7:d8:65:bd:bd:
c7:52:49:9b:dc:87:72:73:9d:9f:4c:ef:91:63:52:
83:62:02:4a:88:0b:20:d4:69:96:fb:94:b3:8f:8f:
1b:ff:12:46:dc:9c:33:10:c3:3a:7a:a7:a8:1c:6d:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E7:93:3F:23:A1:51:AE:79:95:06:BA:25:CA:6F:7B:72:69:C4:8C
X509v3 Authority Key Identifier:
keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b6:09:76:6b:d0:60:12:66:8f:d8:88:c6:a4:21:65:9f:c0:
7b:9a:84:ab:d3:2f:20:5e:82:a1:55:48:23:01:5e:b1:57:d2:
45:79:e7:e8:5d:af:18:ad:84:fd:0d:c1:0e:77:7b:96:0f:9b:
e8:e9:3e:7a:b2:a4:fc:8c:d9:7f:3c:b8:90:56:85:af:6d:5c:
be:49:41:a7:1a:fb:03:a6:da:7a:7e:b3:e1:5f:6d:a2:1b:81:
5f:65:02:30:b5:fb:23:fe:c0:b9:7d:6c:39:8a:88:f7:5c:49:
1d:c9:29:7a:e9:c3:c0:43:f1:c4:61:29:c8:f7:f0:57:b9:24:
97:1a:5c:a6:b4:e7:7a:72:40:da:ed:62:ad:56:e8:a5:60:c8:
fc:8a:a8:6a:3d:00:e9:4d:da:75:99:30:6c:69:a4:4a:1c:13:
1e:85:18:63:d9:bc:98:7f:69:f7:bc:e0:42:21:9d:72:43:36:
c1:08:dc:55:4b:d0:00:9f:23:22:79:97:00:8f:4b:52:6e:21:
98:ac:34:3b:f8:f3:97:06:55:1c:b7:23:bc:03:a8:52:c9:06:
9e:37:77:25:85:e6:a0:24:89:90:eb:2b:6f:e4:90:6f:65:24:
f2:c3:fd:7d:31:14:13:39:4f:01:5c:3a:28:1e:02:7f:27:65:
4d:08:69:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 10:15:05 2025 by rpki-client