Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
File: t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json)
Hash identifier: xU0ZwgoB7tslevtgILXAotG3lKUY1Vsx81ACSg9Eh24=
Subject key identifier: 44:7E:8D:78:F9:B7:71:08:73:07:89:6C:7D:E4:12:B8:ED:C5:86:39
Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
Certificate issuer: /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Certificate serial: 019A25C19955E1B686518C84F1F4041E060B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
Manifest number: 1021
Signing time: Mon 27 Oct 2025 13:00:35 +0000
Manifest this update: Mon 27 Oct 2025 13:00:35 +0000
Manifest next update: Tue 28 Oct 2025 13:00:35 +0000
Files and hashes: 1: qRT-_MhiSov-WJNuRCh-o1ABg_w.roa (hash: Sgwzeb8jM4K/wZC25rDRhN0A8vnEn9LK1zNCxvWZ1iA=)
2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: zJrbrcE5vj0UgFKS1nd749Ys1mQNPVirzz+BZIZZPLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:99:55:e1:b6:86:51:8c:84:f1:f4:04:1e:06:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Validity
Not Before: Oct 27 13:00:35 2025 GMT
Not After : Oct 28 13:00:35 2025 GMT
Subject: CN=447e8d78f9b771087307896c7de412b8edc58639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:91:fd:37:f2:35:09:08:c2:41:50:0e:ad:
4d:b4:99:30:46:c3:bc:35:4e:49:f1:b3:bc:b2:04:
0c:e4:e8:d4:8a:b0:ae:64:12:a0:74:b8:d2:e6:bc:
ae:b3:71:7f:dc:39:b7:42:5b:cd:0e:ee:8c:33:35:
e7:2b:a0:84:22:af:97:54:79:30:bb:67:79:ec:da:
fa:48:79:b0:2e:19:c6:50:31:cf:52:3e:4b:fe:62:
2a:25:fb:7c:89:76:17:d9:fa:24:72:6f:c1:5b:7d:
c0:9a:51:bd:3e:be:90:9e:c6:98:94:07:b0:47:cf:
ae:64:d6:fe:34:be:23:da:0f:ac:18:1e:f0:0a:8d:
2e:d2:f9:24:8f:9b:c5:f9:e4:6e:56:bd:c1:6c:7c:
cd:38:1a:28:6e:7c:33:55:b9:f1:ab:f0:c2:4d:96:
30:ac:4d:7e:63:b7:2a:23:34:92:7f:bf:d7:e0:47:
57:fb:55:d2:8d:49:e3:b4:85:e4:b8:b6:ae:41:d8:
6e:e6:0f:47:80:05:fe:b6:0c:ed:87:da:57:a1:39:
9f:13:25:46:70:18:a2:64:a6:d2:ec:ac:f7:c9:d7:
79:67:78:dc:b0:67:66:70:52:9e:00:cc:a7:d6:66:
ec:e2:ca:a6:8a:69:b1:d9:46:7e:4c:2b:9f:86:ee:
01:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7E:8D:78:F9:B7:71:08:73:07:89:6C:7D:E4:12:B8:ED:C5:86:39
X509v3 Authority Key Identifier:
keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:62:31:3f:9d:1e:cd:ae:01:ad:25:3b:24:0a:5b:f5:c1:4e:
08:1c:c0:9c:e7:f0:5e:28:d7:8d:49:a5:06:95:de:09:da:2d:
23:88:f3:5b:88:c5:ea:74:52:6b:b1:f6:38:8a:85:2f:e1:62:
08:f0:d4:f4:5c:c9:f8:57:05:6d:d8:40:5c:a9:57:ea:43:7b:
e0:ea:76:a2:0f:3e:64:54:b4:a6:23:10:29:e9:6e:57:9b:0a:
7a:f8:6c:d6:47:f2:a4:be:9d:5e:f3:bb:d3:f1:52:cf:42:0b:
d5:0c:17:5b:ad:79:0d:40:9a:75:d3:a4:5e:7a:0b:f9:a7:41:
11:54:6c:02:a3:58:7c:89:b4:6b:21:39:6e:ee:f9:28:a6:bc:
7a:45:a5:33:2b:72:b6:39:c6:3b:a7:a9:60:4c:51:ce:fe:5e:
6a:73:11:e3:92:a9:84:ed:d6:e7:99:c0:80:34:4f:54:8b:bd:
1f:db:e9:4c:2c:31:95:8b:60:4a:fc:01:86:27:bb:76:19:8f:
c5:aa:4e:85:cf:0a:3c:16:89:5d:b2:a2:bb:9e:07:3a:77:bf:
3c:50:6d:e9:0d:cc:5b:04:9d:39:16:c9:32:5f:3b:3d:07:2a:
ef:73:ab:ee:0d:ec:92:f4:8e:dc:b3:d4:88:0b:82:0c:c1:c7:
29:6a:57:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:30:39 2025 by rpki-client