Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
File: T7OopKDYxa4BqWlbBB7SxtApap4.mft (raw, json)
Hash identifier: DuFTpgRO7YjAykyqED1BzflWNTtTAZaWI3lO4EQMJr0=
Subject key identifier: 3C:6A:7E:17:B9:FA:B8:A5:FD:67:24:45:20:0D:B9:8F:06:00:C1:07
Authority key identifier: 4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
Certificate issuer: /CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Certificate serial: 019A71B7CDC09D8A4DFE856CBCD5B6487683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
Manifest number: 0E15
Signing time: Tue 11 Nov 2025 07:01:02 +0000
Manifest this update: Tue 11 Nov 2025 07:01:02 +0000
Manifest next update: Wed 12 Nov 2025 07:01:02 +0000
Files and hashes: 1: T7OopKDYxa4BqWlbBB7SxtApap4.crl (hash: /+AUF580Zp6fdmQBEQc3KgsW1yrUsW5THHE08x0eWC8=)
2: f56823CiqLOMuTriNLS3PUZ78yU.roa (hash: jqCq9kSPvKsgvdkfpEOf8qz0/6Off+XucTySJaLEm7M=)
3: zKhksjQURk5K1Dod96pBNAB3OII.roa (hash: gundq1JGdYbfKX8ieC3GIfS0gF7vi8HY0pmpJJSYlFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:cd:c0:9d:8a:4d:fe:85:6c:bc:d5:b6:48:76:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Validity
Not Before: Nov 11 07:01:02 2025 GMT
Not After : Nov 12 07:01:02 2025 GMT
Subject: CN=3c6a7e17b9fab8a5fd672445200db98f0600c107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ee:e9:bc:30:e9:fc:bd:3b:65:b5:4a:fd:ec:
1c:9d:55:08:36:ab:c1:77:97:32:e8:13:b3:f3:e7:
c8:39:61:d2:87:69:7e:57:f2:e6:ed:b7:60:de:aa:
05:84:44:e3:f1:fe:e6:eb:c4:21:15:89:03:b3:64:
5d:39:34:24:51:f8:7a:44:3e:44:64:e2:ae:9e:cc:
48:8e:2e:62:cd:6d:2e:6d:f2:fb:54:83:57:aa:de:
85:f6:9c:7c:f5:71:14:05:ee:b9:d3:3e:99:26:29:
c3:ac:06:39:ef:7f:2b:7f:5b:0d:4b:ef:9b:9c:8e:
e5:50:c3:b2:6a:f8:f0:09:11:42:4f:44:62:ed:9a:
fd:2d:4c:b7:41:d0:14:c8:4f:77:86:4b:d7:c3:54:
7c:cb:33:2a:a0:74:f4:c6:42:a2:ca:28:80:47:52:
64:0e:03:d2:bf:c9:61:f8:0a:77:97:d5:27:16:e4:
c9:c4:79:2c:2d:22:ff:d5:d1:b4:e7:ee:12:7f:a7:
0f:1d:83:ed:0c:ab:d6:19:09:7e:72:ac:1f:35:e7:
19:9d:2d:6c:8c:2d:ca:75:97:f3:7c:3c:31:73:00:
17:a3:c4:fe:31:0c:e4:2c:ae:d9:e3:17:5a:e9:b9:
0f:37:c8:0c:a9:0a:b6:7d:95:e0:8f:4d:fe:ad:9e:
ca:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6A:7E:17:B9:FA:B8:A5:FD:67:24:45:20:0D:B9:8F:06:00:C1:07
X509v3 Authority Key Identifier:
keyid:4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8e:3b:9a:fa:f6:c2:83:09:95:6b:04:d8:2a:7c:2f:b1:aa:
ac:5f:9e:e5:8f:37:4f:b0:eb:27:58:4a:33:90:41:e1:c8:b1:
ea:7a:77:28:f1:f1:06:7b:ba:55:ea:37:3e:6e:aa:71:cb:f6:
46:4c:2f:ba:fd:57:09:4b:03:99:60:95:2f:87:57:38:b9:d9:
d0:2c:bf:f3:24:35:5f:51:ed:9a:11:c8:eb:25:36:6e:89:27:
00:24:7d:12:ef:ba:32:0d:6b:21:26:ae:49:b4:05:24:8e:37:
cd:89:32:dd:c5:73:74:65:20:08:4f:29:fe:6b:50:6c:77:f2:
58:0c:e9:7a:54:0e:74:55:53:58:cb:85:e6:b2:f4:6f:ae:e0:
b1:4c:28:cc:b5:10:d7:37:2f:4e:53:a5:c8:a9:b2:f8:68:2b:
1d:1e:0e:b7:6d:00:5d:d8:5f:eb:dd:f6:a3:e9:0c:f8:ad:0c:
3e:ee:6d:1d:e7:a8:a8:4b:a1:14:15:f5:a8:86:c8:98:e0:28:
69:e7:79:39:a3:ce:92:9f:52:57:9c:72:60:2f:24:d9:d8:a3:
20:cb:bd:fd:3c:68:fd:78:df:9a:d4:88:8f:9c:57:ae:3e:66:
57:54:fa:c5:89:53:22:69:46:dd:13:dc:a2:1e:f3:95:9e:8c:
81:12:94:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:26:57 2025 by rpki-client