Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
File: t4OAtB43tXV9PU4u7N8G2TCnC50.mft (raw, json)
Hash identifier: KB7Ty6YbxTOXGOIs4FYB/UdmB8t9X0m9zzgwPyVd+3k=
Subject key identifier: 03:9C:5B:F9:7A:25:70:C9:A2:D9:A5:7F:0E:EF:43:D6:9A:9E:52:08
Authority key identifier: B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
Certificate issuer: /CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Certificate serial: 019A7293B8AB9C430436E534A503DCA26723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
Manifest number: 1726
Signing time: Tue 11 Nov 2025 11:01:14 +0000
Manifest this update: Tue 11 Nov 2025 11:01:14 +0000
Manifest next update: Wed 12 Nov 2025 11:01:14 +0000
Files and hashes: 1: FFNfocwWW0AfwhIbyh5sOWKp-YQ.roa (hash: +IQV10jr/ct4eRg1uckgNvPR/qQ6+ipg5/BVGvg6xW8=)
2: t4OAtB43tXV9PU4u7N8G2TCnC50.crl (hash: cs3j/Sy4+Rr2IrQWZCI4F1ovkYHFfhNW1YQwC3BoGyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:b8:ab:9c:43:04:36:e5:34:a5:03:dc:a2:67:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Validity
Not Before: Nov 11 11:01:14 2025 GMT
Not After : Nov 12 11:01:14 2025 GMT
Subject: CN=039c5bf97a2570c9a2d9a57f0eef43d69a9e5208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:89:01:0a:09:43:bb:90:1c:a6:23:7b:5a:8f:
e6:28:6d:11:9d:b2:d1:5a:c7:4b:ef:c9:b2:20:b4:
52:51:bb:06:82:42:30:45:f8:7b:98:0e:cc:e4:9e:
00:84:ef:54:be:27:34:23:e8:98:97:16:bb:49:a9:
b2:97:31:92:b7:70:e1:83:84:1a:69:be:de:b6:0f:
66:f6:f4:b5:f7:14:68:78:21:13:d6:a3:4e:c4:28:
dc:14:e3:8b:47:32:2f:79:e8:5b:71:81:a0:e0:49:
17:09:83:b4:38:dd:46:f0:d6:72:01:cc:6d:f9:90:
6c:da:2b:5f:6a:21:8a:94:b2:c9:cb:f7:34:ce:b0:
79:8f:57:40:fc:8c:27:3e:df:79:bb:f1:15:31:30:
a3:15:5c:0f:be:96:eb:3f:09:c0:8b:80:64:eb:84:
4d:e4:a0:04:3c:2c:65:58:76:7f:16:bc:e2:0f:19:
5f:dd:e0:49:53:b5:e8:93:ae:1e:4d:72:06:83:bc:
b4:37:f6:c8:8d:72:84:e5:1e:39:a1:d2:61:b9:6a:
53:7f:f4:47:6d:65:04:3a:e8:53:b2:f4:97:d8:03:
cb:2c:a0:24:7e:34:8d:2e:81:71:0e:2e:ae:2d:e6:
20:58:85:88:f3:6c:fa:d2:92:02:7d:14:73:3d:81:
6a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9C:5B:F9:7A:25:70:C9:A2:D9:A5:7F:0E:EF:43:D6:9A:9E:52:08
X509v3 Authority Key Identifier:
keyid:B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0d:9c:b4:63:46:27:da:61:5c:c0:e3:25:62:ef:cd:93:49:
1d:b5:dd:68:3d:0d:df:8f:94:e0:24:13:3d:f3:23:1d:c3:d0:
42:19:ae:19:32:bf:c0:6e:83:8b:a4:d5:54:bc:b1:da:b7:65:
ea:5d:eb:c6:a9:3b:37:51:7d:73:54:84:e0:f3:9d:05:32:6b:
be:e5:70:3e:e9:e4:b6:88:88:08:b1:a6:f5:43:81:52:3d:cb:
5d:b4:59:39:71:45:98:d3:64:fd:38:bd:f3:e9:ab:74:99:f2:
40:37:24:74:c4:fc:b6:41:44:38:f9:d4:59:6e:08:c6:e6:d1:
b5:1c:b5:1b:3c:dd:a5:09:e8:04:68:2f:a6:f8:5c:21:5d:7d:
ae:51:85:16:87:f2:f4:7d:9f:26:76:56:3a:5d:6b:bf:20:91:
1d:7c:80:62:78:26:c2:3f:4b:03:c5:84:a2:50:2b:25:8c:02:
72:1a:52:9f:5f:cb:5b:58:d0:be:01:3a:e9:de:cb:16:29:9e:
85:a7:03:2d:e1:49:b7:8d:f1:38:7d:94:cf:c0:18:9c:3b:7a:
b7:87:e8:13:c1:72:94:c7:75:e2:28:da:53:f1:05:88:27:c1:
b4:32:7b:2e:4f:ff:ed:12:d5:18:1d:70:c0:ce:41:2e:9f:f6:
35:e2:c9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:53 2025 by rpki-client