Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
File: t5OlR78L4t7tfIT-kC4zZld6IxQ.mft (raw, json)
Hash identifier: qBekQYK7qGEMrmBELEcwJpOJpLYmRKdRct/4Q7Oxk0E=
Subject key identifier: A1:47:7B:84:04:58:83:0F:C4:A4:31:32:25:93:42:10:61:6D:8E:F0
Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
Certificate issuer: /CN=b793a547bf0be2deed7c84fe902e3366577a2314
Certificate serial: 019A213FD2731E51161342BDEEC191BF6B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
Manifest number: 0F79
Signing time: Sun 26 Oct 2025 16:00:22 +0000
Manifest this update: Sun 26 Oct 2025 16:00:22 +0000
Manifest next update: Mon 27 Oct 2025 16:00:22 +0000
Files and hashes: 1: Fu8V7L-KmE4RQ0KgwQ-l9VyTFvE.roa (hash: G5JYSxAwHyem4a69edN/KGJ90OxsVksEMhgNs6pZaOw=)
2: fuJdLqdlLbSFzR5wICuESp5-Mhc.roa (hash: cagQfCDycKKd/UTpNij0HKDwbg7i0kvIBBf3pZu1p7Q=)
3: t5OlR78L4t7tfIT-kC4zZld6IxQ.crl (hash: 73nJb28G0La1Au/Dk/kjNO4cDT2OVy/qzfcZK/0c52M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:3f:d2:73:1e:51:16:13:42:bd:ee:c1:91:bf:6b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314
Validity
Not Before: Oct 26 16:00:22 2025 GMT
Not After : Oct 27 16:00:22 2025 GMT
Subject: CN=a1477b840458830fc4a4313225934210616d8ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:cd:98:b6:2f:a8:e2:8c:f4:65:93:74:23:
34:93:21:fb:f4:4b:88:1c:b7:7b:ed:82:88:2b:20:
94:60:49:7b:1b:02:cc:22:81:d9:ed:24:0d:2f:27:
c9:63:4d:56:18:9a:a4:5a:db:90:b1:39:b7:64:14:
bf:87:67:6a:82:78:70:8a:c8:65:e6:c7:d5:3a:8e:
9a:cf:83:ca:61:fb:62:9a:45:1b:a4:fd:b6:28:8c:
3c:9a:29:1d:56:6b:74:f1:41:39:10:ea:ae:9f:d6:
54:cf:c2:e6:b1:7c:f6:50:e2:ae:11:13:f3:d7:0f:
67:75:c9:f7:c1:a1:cd:f1:dd:03:25:50:52:05:21:
d4:b2:7f:4a:b3:23:f8:f0:db:e6:c7:e8:4d:41:88:
17:d4:a4:67:6c:62:56:6c:5b:b3:ae:b6:46:fe:0e:
ba:b9:b3:ea:f0:c6:05:a0:5f:00:8d:f3:55:24:eb:
73:ae:e3:67:50:6d:9f:7b:84:02:75:0c:4b:d7:4a:
c2:5f:a8:54:5f:00:b6:bf:38:63:07:6a:76:3c:15:
ac:92:16:eb:76:04:7b:42:58:c6:49:7f:81:61:35:
cc:e3:44:43:48:be:95:69:95:ba:87:57:4c:fc:c5:
06:6c:86:f3:de:5c:e2:84:87:e5:a8:dd:54:ea:c4:
6b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:47:7B:84:04:58:83:0F:C4:A4:31:32:25:93:42:10:61:6D:8E:F0
X509v3 Authority Key Identifier:
keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9a:07:e4:72:7e:a1:8b:ab:8f:ba:5c:26:4d:48:d5:ee:c0:
4d:7d:f3:d2:fd:24:a5:bf:71:43:7b:62:2d:ca:4d:7c:54:69:
ff:86:5d:8f:ec:0c:78:1f:67:a1:0f:26:18:09:b2:72:73:fe:
58:b9:22:3c:85:81:33:ed:37:16:65:7c:31:ea:4b:44:45:a2:
6b:f1:70:08:a2:da:83:85:cf:07:5d:f7:75:9d:5d:ca:f7:72:
03:47:d6:8e:23:ed:de:a3:9c:d4:e0:9d:16:19:a5:8a:a5:3f:
6a:00:26:7a:1f:11:5b:ba:31:90:72:7b:e6:27:84:2f:24:86:
32:14:60:79:e3:fe:28:95:e2:c9:a9:c8:93:2e:02:0a:f4:78:
5f:75:67:76:ff:2b:6e:49:ab:40:2e:ea:d4:97:e9:a1:a3:8f:
c3:6e:93:db:58:a6:74:0b:af:8d:b4:f7:26:49:48:81:18:0b:
c2:bb:d1:00:43:3d:0b:aa:d4:df:07:9d:c0:f6:4c:9f:e8:6c:
8b:b5:4a:3a:77:fa:b9:08:f6:c9:49:02:31:f8:f3:8b:09:0d:
6c:39:92:d8:5a:a5:af:67:3c:1a:6c:a7:11:86:b7:63:27:ec:
43:f7:da:2f:7d:e4:19:b5:7e:1c:43:e1:d4:c4:56:f2:30:d0:
11:3e:1d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:50:53 2025 by rpki-client