Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
File: T5nk6uSKAceB-q0R9tgakeozvf8.mft (raw, json)
Hash identifier: aPjdgVUrluYpBWYibm8h8LrKy5qvz+Jfhot3d15Vk7s=
Subject key identifier: 68:85:46:C9:35:04:71:70:04:84:A5:90:74:39:B1:A8:D1:77:76:C4
Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
Certificate issuer: /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Certificate serial: 019A71B7E9C051D5425D5DE22E79CA4DBDCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 07:01:09 +0000
Manifest this update: Tue 11 Nov 2025 07:01:09 +0000
Manifest next update: Wed 12 Nov 2025 07:01:09 +0000
Files and hashes: 1: 1rrQNZWItDgfdECFOf22Jh7vi4k.roa (hash: oHl9vepG9gEfJ6vCHFkAvnbQr+mxDKJlGHdGdAeE9CA=)
2: 3RF21_ECpL5M_wnxKo1LaLxJwIk.roa (hash: DwVXHnFiU49l5hw1O5O7YFwPLdE2x6EWi17vCjDfMV4=)
3: OfliSFK47yOA2Tkix0wrkAH4x2c.roa (hash: B0Voqn9uU+7JqaJFZrNcBBKpjX2nZFFKEZ39gYCt+es=)
4: T5nk6uSKAceB-q0R9tgakeozvf8.crl (hash: HnN15UFT7KhnwILgG6iSMqelijf/zSUGwydJBtMMKQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e9:c0:51:d5:42:5d:5d:e2:2e:79:ca:4d:bd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Validity
Not Before: Nov 11 07:01:09 2025 GMT
Not After : Nov 12 07:01:09 2025 GMT
Subject: CN=688546c9350471700484a5907439b1a8d17776c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:10:d8:4d:20:cc:ef:3b:57:fa:05:e3:a9:
80:09:2d:81:82:6e:f3:a5:0e:77:d2:1e:19:50:4e:
49:da:70:2d:95:10:d9:0b:04:68:a1:c1:6c:bc:47:
37:fa:d3:84:de:bd:bb:cb:2f:34:19:dc:aa:85:43:
9f:36:a9:cc:fb:a4:98:8e:59:03:ba:57:14:a7:61:
3f:a5:0d:57:5d:18:a2:ce:e1:9f:16:89:bb:bd:63:
c7:4d:e3:25:cb:ea:ed:d9:e8:7b:d5:fe:46:04:e5:
94:03:a7:d2:b9:8b:91:2c:5f:f8:66:05:ed:4b:ce:
d5:42:8f:ce:62:97:f1:6a:96:7e:7a:7b:51:0c:99:
73:a7:69:6a:16:6c:fd:ed:3e:da:bd:03:43:8a:c7:
a5:73:97:0b:7b:d3:16:63:9e:a6:b3:49:de:32:8d:
f7:9a:10:cf:50:6d:1a:59:38:8e:ad:16:a9:6e:8e:
32:97:b6:0b:34:4a:5d:da:9c:18:ec:d2:5b:52:cc:
f7:53:e0:50:95:d3:a3:5c:f6:95:a2:00:b2:33:b1:
bd:fe:5f:fc:dd:9e:4a:36:58:8e:6c:40:da:94:f0:
06:fb:6e:cd:c7:38:b4:37:13:71:08:82:ff:ed:07:
79:ac:aa:2c:36:a1:fa:62:b4:ed:81:4d:77:cd:dc:
e6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:85:46:C9:35:04:71:70:04:84:A5:90:74:39:B1:A8:D1:77:76:C4
X509v3 Authority Key Identifier:
keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a5:8e:a3:50:9b:9b:97:9c:94:fc:db:95:14:49:ab:77:be:
45:7d:35:dc:b7:b1:40:ea:bb:ac:be:ed:c7:5a:da:93:ed:67:
7d:84:79:b1:0e:d4:cc:94:e3:44:40:8e:e1:fb:e9:ac:5f:34:
e0:40:8c:28:60:8f:e0:f6:51:12:ca:6a:53:1c:df:5c:ce:58:
38:87:e7:b7:ce:87:a6:4b:de:2d:cb:ee:c6:69:30:5a:db:4b:
c6:77:4d:59:9f:f9:c7:53:15:9a:fb:7d:4c:4f:6d:f2:a9:20:
2f:4d:4b:e6:ba:53:b3:97:62:c8:a9:b8:f9:e8:07:4f:ea:73:
43:71:e5:45:7b:cc:02:e6:b3:2e:d2:2e:9e:54:07:e4:49:02:
ae:74:5d:91:41:7c:75:8f:d2:74:fe:08:ed:38:79:67:34:fb:
df:26:f3:5c:c9:37:9d:88:ed:23:dc:ce:43:43:67:9a:4b:15:
8d:3e:cb:0e:a5:70:e9:46:98:4e:b1:45:47:a6:92:85:e7:45:
59:5c:65:ca:db:14:e1:3a:ff:92:77:28:a3:eb:14:51:e2:6e:
e8:93:7e:fa:f3:42:ee:e3:23:51:cc:c6:43:a1:9b:ee:61:11:
bc:12:60:2e:a6:28:21:03:6b:32:09:7c:e3:79:29:14:83:d4:
3e:38:d4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:28 2025 by rpki-client