Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
File: T5rG_iAxrd4DZoJA48XZHsZxHh4.mft (raw, json)
Hash identifier: axhODNhcqQXUVyqrc6RkIvOMP1MTGDUtHsJnQA7Xnkw=
Subject key identifier: 80:96:34:D8:EF:FB:79:5A:7B:17:E8:C7:4F:5A:F6:F6:00:D5:5A:58
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Certificate issuer: /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial: 019A4DAAEF4F469403DD261DE439905AB3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 07:00:39 +0000
Manifest this update: Tue 04 Nov 2025 07:00:39 +0000
Manifest next update: Wed 05 Nov 2025 07:00:39 +0000
Files and hashes: 1: T5rG_iAxrd4DZoJA48XZHsZxHh4.crl (hash: jSHOcbEbEJb0Khq4zSZCf0yH1APkuxtMPQhkh3eYvmc=)
2: TJcT2DJKq9sbzduugmROupXys-s.roa (hash: 945dsBaVvuzrinluSo92NkW9CX506XM50XuIK87H/WU=)
3: qi7IIsHiw2r5ApLjqmnfIZyDYrI.roa (hash: 2E8e6YWLaIukfT6w9as+SzWaRk3QDMUINAxBnfY7Uh0=)
4: qrp40JibSYUajfp86w1boBXGmSo.roa (hash: Hf8opJvaDtrLthe1laKTVc3MNwDoesRiktOsOBQx/Ss=)
5: t4Wibxq4ODCb7PZTxEDqd4zIWdE.roa (hash: 8Nf30qr6PkolOBfuLtitg9kbH2hSLfyR4zbwrMUsPFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:ef:4f:46:94:03:dd:26:1d:e4:39:90:5a:b3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Validity
Not Before: Nov 4 07:00:39 2025 GMT
Not After : Nov 5 07:00:39 2025 GMT
Subject: CN=809634d8effb795a7b17e8c74f5af6f600d55a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:0d:47:ff:2f:8c:ba:78:97:8d:d8:ed:10:5b:
67:8d:51:d2:a7:55:a2:0b:cf:fa:29:6c:19:96:74:
72:08:e1:fd:7a:97:80:8b:c0:02:fd:38:85:18:d6:
93:af:c8:c4:74:39:a3:18:14:7c:58:e7:81:db:b2:
55:2b:9a:ab:a0:37:2c:11:51:1b:b5:87:b1:d2:26:
b5:7a:cf:c1:a1:59:21:59:1e:4f:91:41:69:7d:11:
1f:02:e9:96:bf:aa:4a:6d:0f:ac:63:7b:60:e3:49:
7b:6c:25:c1:33:63:16:32:3a:68:9c:fc:0d:dc:9a:
56:b0:11:2d:53:02:99:86:6c:50:b6:ad:5e:88:66:
1b:b2:f3:bd:ad:dc:30:89:9c:46:87:c7:3d:74:08:
c1:a7:c3:c6:90:e6:0c:8d:52:50:da:83:b2:4c:b3:
d9:14:b9:c2:03:f3:2a:49:fa:88:ac:6d:b4:31:be:
6a:41:30:73:28:f5:8e:8e:b2:cf:7e:e1:6c:6a:6d:
2e:11:7d:ac:12:cf:fe:8e:4d:3c:1a:fe:72:fd:79:
f1:cf:20:62:ef:f4:e4:50:57:d6:78:16:d7:37:5f:
3b:24:4a:16:24:1a:16:ea:39:03:28:37:6a:d2:43:
04:66:7e:02:fe:0e:c4:bd:2e:db:e4:d8:38:36:6b:
80:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:96:34:D8:EF:FB:79:5A:7B:17:E8:C7:4F:5A:F6:F6:00:D5:5A:58
X509v3 Authority Key Identifier:
keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a6:21:a4:f4:be:a9:8e:1f:64:9c:09:37:2e:09:13:cf:4d:
f1:2b:b8:35:c5:bd:50:cc:50:ec:cb:9b:3b:2a:0b:e0:de:ca:
91:91:94:66:07:f8:60:50:b7:ee:6c:44:73:35:5a:54:0f:4a:
0d:05:33:d6:62:00:4b:ef:0d:ed:b8:33:1b:71:01:07:c6:28:
fd:d2:12:56:f7:b3:17:54:01:54:83:aa:a8:33:5f:49:51:4a:
de:1a:51:79:c1:d5:b9:c7:0d:1d:24:a3:9e:53:dd:a7:68:7c:
5e:6d:26:d8:d2:92:d0:cf:b8:22:e9:2c:40:b0:d1:98:93:20:
3a:79:0b:f7:e5:f7:1c:9f:f8:29:e7:75:21:02:6d:50:2f:b8:
b1:ca:7b:b4:42:be:0c:58:55:55:49:3a:11:8f:75:21:f0:da:
91:2a:a3:d4:b9:48:fd:66:91:df:8d:d8:05:86:87:3d:2a:e4:
39:b9:97:48:16:9f:42:fb:b8:58:c5:53:3f:c9:bf:85:0d:fe:
c6:11:b6:79:4d:93:a7:11:ac:1b:8a:33:b9:c1:da:26:66:fa:
6f:e8:28:eb:af:60:91:d5:4a:0b:15:3a:c9:26:25:54:de:e4:
c3:27:57:93:6a:61:6b:10:db:21:9d:4e:07:10:96:b7:b2:fc:
0f:84:f8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:02:09 2025 by rpki-client