Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
File: t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json)
Hash identifier: kakGVUhBhWfYbstmTXpcj+hl8i8YnTKCw36oqqa0dAg=
Subject key identifier: 27:64:C0:98:94:4A:E5:FA:FE:AA:07:98:7B:41:47:34:B4:50:CD:9F
Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
Certificate issuer: /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Certificate serial: 01992E90273E00E8181760D3CCB6C7024A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
Manifest number: 0FA1
Signing time: Tue 09 Sep 2025 13:00:23 +0000
Manifest this update: Tue 09 Sep 2025 13:00:23 +0000
Manifest next update: Wed 10 Sep 2025 13:00:23 +0000
Files and hashes: 1: qRT-_MhiSov-WJNuRCh-o1ABg_w.roa (hash: Sgwzeb8jM4K/wZC25rDRhN0A8vnEn9LK1zNCxvWZ1iA=)
2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: QLJI0aUYYAtzkAmxXoUOtNQyI5tC6cihUHvTfglRXWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:90:27:3e:00:e8:18:17:60:d3:cc:b6:c7:02:4a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Validity
Not Before: Sep 9 13:00:23 2025 GMT
Not After : Sep 10 13:00:23 2025 GMT
Subject: CN=2764c098944ae5fafeaa07987b414734b450cd9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:2d:4c:41:a1:03:92:0c:5d:3f:75:c5:7b:
5b:1c:2c:ea:f7:b8:24:a0:66:fa:df:37:3e:f5:e9:
f6:fd:be:2a:ba:7f:41:30:c2:29:c9:48:6b:5a:9f:
ad:e3:5f:e3:95:70:d9:e4:f0:d3:3f:38:d4:fa:c5:
82:76:bc:47:3d:77:c4:25:37:c2:cb:3e:8b:a1:96:
99:7a:51:52:52:70:5c:c2:4a:fb:6b:8b:5e:3a:ba:
24:2d:72:2a:83:c6:6c:1c:05:bf:c0:4a:f2:6c:e8:
00:96:6c:c8:6e:28:91:7d:87:56:94:66:ff:93:9b:
8a:12:5f:18:8c:3b:62:22:68:dc:80:11:ba:26:85:
b3:d4:4b:c4:90:9f:5b:f5:5f:12:b4:cf:42:6a:d6:
84:14:d4:3a:23:c9:4f:71:7f:2d:8d:f2:3f:df:13:
b9:7a:db:e2:58:04:db:be:b3:1a:8c:04:89:38:36:
ef:69:d9:66:26:ec:4b:18:43:9e:a1:12:81:63:a6:
65:ca:97:77:11:ef:04:f9:57:3c:1d:98:e3:c5:e4:
a6:7a:a0:36:8b:a6:32:33:84:17:cf:4b:e5:e4:18:
a7:21:db:21:c0:bb:37:3b:7a:e1:42:a6:02:a3:99:
03:6c:83:0d:32:61:78:bd:04:81:f8:c0:79:4e:97:
ca:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:64:C0:98:94:4A:E5:FA:FE:AA:07:98:7B:41:47:34:B4:50:CD:9F
X509v3 Authority Key Identifier:
keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:fa:4b:ad:c6:e8:1c:e2:db:4e:c6:b8:38:03:28:d8:ff:b9:
44:93:7f:a5:f7:46:62:26:06:10:3a:9b:b2:9a:97:1d:eb:49:
71:b7:d2:46:1e:56:3a:73:cf:7a:d7:4c:98:71:49:74:86:c2:
cc:af:44:c7:2a:97:36:72:b0:5b:a9:27:bf:73:67:44:a4:a7:
cd:15:38:37:46:4e:ad:d9:79:0c:3e:89:10:2a:c6:8f:d9:c6:
43:04:b9:07:70:33:0b:d8:1e:34:ef:7b:34:17:d3:04:fa:16:
36:45:8b:79:0d:e1:19:a5:c6:9f:23:0c:68:8b:ab:25:25:c1:
21:72:3e:ec:25:9e:06:70:54:8b:9b:38:d8:ee:de:45:96:b0:
9c:e7:7f:fa:36:a4:f4:55:c6:ff:ee:0d:18:54:81:ed:b4:49:
7d:19:3b:cb:29:5b:77:82:49:ff:82:fd:e2:f2:37:0c:f5:92:
a9:20:6c:58:2a:a9:ae:50:c4:86:fd:b1:5b:03:d1:89:8f:92:
91:e9:77:fb:c7:5b:34:de:ec:8d:89:8a:7b:38:9f:b1:bd:00:
24:86:86:8e:44:a4:a6:5a:f0:ff:48:f3:2c:07:92:5d:d8:45:
63:21:73:99:3a:f7:34:7f:98:da:bb:15:8f:01:42:85:39:5a:
e1:13:da:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 19:06:53 2025 by rpki-client