Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
File: T0Es0mmU-vYJva1ONdV2wsrkZVU.mft (raw, json)
Hash identifier: V6yoVo4k6xJaNNFlH8F57Hlorb4sCNWBk63Km+ocD68=
Subject key identifier: 30:D0:64:58:4B:0F:96:3C:72:69:E0:87:37:EE:D0:6C:7D:53:05:36
Authority key identifier: 4F:41:2C:D2:69:94:FA:F6:09:BD:AD:4E:35:D5:76:C2:CA:E4:65:55
Certificate issuer: /CN=4f412cd26994faf609bdad4e35d576c2cae46555
Certificate serial: 019A71B8E1E08C9AB91727A9D5AE8A6E0B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:02:13 +0000
Manifest this update: Tue 11 Nov 2025 07:02:13 +0000
Manifest next update: Wed 12 Nov 2025 07:02:13 +0000
Files and hashes: 1: T0Es0mmU-vYJva1ONdV2wsrkZVU.crl (hash: MwnKOZDwuT2dh3Gpv47rsPO/iIy2iOu3k5TNfjqJDUk=)
2: aNuMhZPoB5D8geUtVgUfLtn3hcA.roa (hash: kR0Yb3G1j8U1LWYfw43kMYf1t4xNNQqgRVkQzHfelvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e1:e0:8c:9a:b9:17:27:a9:d5:ae:8a:6e:0b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f412cd26994faf609bdad4e35d576c2cae46555
Validity
Not Before: Nov 11 07:02:13 2025 GMT
Not After : Nov 12 07:02:13 2025 GMT
Subject: CN=30d064584b0f963c7269e08737eed06c7d530536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:21:68:c7:43:dd:64:66:4c:14:e9:eb:32:85:
ce:dc:57:e3:55:a8:cd:b8:4d:72:14:5f:7b:8f:2c:
07:2b:5a:0c:4a:3b:63:66:ef:27:ab:64:4d:22:1f:
3f:c0:9e:be:04:ea:22:48:ff:73:c3:94:d9:f9:c4:
cf:84:a2:3a:1d:c4:08:90:e6:f6:e3:97:23:8b:05:
29:94:c1:bb:79:34:8e:4b:26:a7:22:1d:1d:4b:7c:
06:20:93:42:99:0e:35:a8:46:42:1e:d9:07:d0:6d:
69:a2:43:50:0c:30:73:39:36:9d:b9:83:86:a5:80:
d0:50:c6:0f:36:33:b1:78:50:f9:6c:04:ec:c0:93:
11:a3:0a:c0:26:9b:da:6b:83:c8:eb:4a:b4:73:7a:
42:ad:83:7a:f0:da:0c:03:18:cc:3e:37:9a:0d:38:
37:22:05:90:ee:82:21:58:4e:17:7d:88:06:35:ec:
ee:a0:eb:58:cd:c5:e2:42:11:1d:a3:eb:75:83:b1:
8d:6d:71:2c:a6:9e:fc:96:13:6f:3a:2e:a0:cf:ab:
88:0f:57:d8:0c:99:41:80:47:7f:ba:ec:a4:ec:61:
de:4a:84:de:84:a0:d5:70:8e:43:c7:6e:61:ad:fa:
7d:64:db:cb:cb:ea:0c:10:28:e5:85:20:c7:89:34:
15:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D0:64:58:4B:0F:96:3C:72:69:E0:87:37:EE:D0:6C:7D:53:05:36
X509v3 Authority Key Identifier:
keyid:4F:41:2C:D2:69:94:FA:F6:09:BD:AD:4E:35:D5:76:C2:CA:E4:65:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6d:2f:f1:9a:cd:f2:38:ae:18:6a:93:d4:f2:0f:7b:c1:c3:
86:d0:ee:fc:81:39:80:bc:46:b7:f2:ad:36:13:53:01:3a:79:
72:b6:a4:24:5d:bf:0c:7b:e8:31:e3:75:c2:84:74:3f:6a:c1:
05:3f:a3:0b:38:16:21:30:1a:f0:dc:a0:a9:25:27:4e:21:0a:
38:ed:c8:6b:e6:b1:71:6f:44:e1:71:44:ae:1d:57:ff:87:29:
14:c4:be:3f:fb:81:59:04:2f:99:96:44:6f:c1:82:7d:2e:8e:
b0:c0:2f:54:d9:c0:87:d1:1a:38:7c:dd:7b:47:0e:1d:0c:5a:
e6:e2:89:c1:f5:34:46:c7:9c:bf:33:a6:07:53:cc:30:93:bc:
76:21:7f:51:e9:9b:f8:20:79:e3:d7:76:ed:77:84:fd:78:af:
79:67:c0:87:a5:20:cd:a9:68:07:b6:06:f3:80:3c:00:89:50:
d3:3e:62:b6:40:99:f0:0c:4c:68:d4:c5:11:b2:a4:08:29:ea:
a0:b6:d9:25:36:8c:22:ab:8b:6c:e7:4b:42:99:45:e8:8d:01:
7e:ff:c1:ac:59:1a:73:23:02:81:72:54:4b:fe:9d:8d:b1:2a:
4d:6a:f4:b3:26:24:b9:c7:b5:94:d8:93:16:6d:42:89:4e:26:
08:f2:20:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:20 2025 by rpki-client