Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
File: t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft (raw, json)
Hash identifier: BydprJK6+diQFaaew0E2U4T8iT8gOZoM4xsi/8hLMgs=
Subject key identifier: 63:CD:F2:D4:4E:C7:11:C4:C6:53:4E:2F:D2:67:94:81:1C:C3:11:BA
Authority key identifier: B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
Certificate issuer: /CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Certificate serial: 019A2F323C777E522FF62A93B555027228BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
Manifest number: 16FD
Signing time: Wed 29 Oct 2025 09:00:12 +0000
Manifest this update: Wed 29 Oct 2025 09:00:12 +0000
Manifest next update: Thu 30 Oct 2025 09:00:12 +0000
Files and hashes: 1: 4tvYqBz30c-0SHwQf2CtT0VNBPQ.roa (hash: qCyQEU6OdMbxdWiqsxkcJvwc0b3lfRGI0KL0oWxXAXQ=)
2: 5BiiR8tyxMqnVkrCR-JVCe5thJE.roa (hash: Hg2Lr4BrUeLiGXPiTTswxDVsunI16iUbiaP/wD6FGp4=)
3: t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl (hash: J0wHxLocUhH7O7kx0RlVOkWrdemgKdOLjQHCTUrTXVE=)
4: zmgQ_aWhp6cEGx4y0seWn4Gsss4.roa (hash: /bqbphYKFU51MVxXzZqrdhuQ80/Caxadp1A0xOJ6vp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:32:3c:77:7e:52:2f:f6:2a:93:b5:55:02:72:28:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Validity
Not Before: Oct 29 09:00:12 2025 GMT
Not After : Oct 30 09:00:12 2025 GMT
Subject: CN=63cdf2d44ec711c4c6534e2fd26794811cc311ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:05:8e:16:53:c9:54:9b:08:15:8c:83:e8:
3b:a7:fd:77:5a:46:42:48:e5:8e:71:54:65:de:d3:
f6:33:1d:8c:c2:39:f8:c7:f2:6f:7d:65:dd:a3:6d:
22:59:70:ed:eb:b4:49:a0:1b:6f:a6:bd:19:d8:be:
25:03:5e:6b:11:2f:f7:cf:e1:41:83:3d:33:3d:90:
4a:18:9d:44:66:34:83:98:e3:fc:de:be:40:3a:29:
f1:bb:91:ad:4e:d9:e3:6f:a6:53:50:26:cf:9b:56:
2f:ea:da:c7:08:a1:3c:bc:b2:f6:3c:5d:b3:0c:58:
41:88:90:ee:76:2b:5b:79:2b:f4:d1:fb:26:ab:1c:
45:db:ec:7f:95:6b:7f:75:75:e5:40:f9:12:64:7c:
c9:be:9e:c7:a5:2f:1c:de:3b:de:47:d4:01:e7:04:
6a:dc:6d:b8:ae:97:b3:1c:42:1f:a5:df:04:34:81:
53:34:a1:c9:56:94:16:25:38:e3:5f:e9:e8:58:8e:
9a:20:74:96:a6:d7:07:bf:41:ed:56:21:07:3d:5b:
9d:df:a2:97:e4:e0:d3:e0:7c:8f:89:37:fe:f8:be:
3f:b9:6d:36:d1:65:87:76:cb:34:4c:c5:b7:72:c4:
f1:89:d2:44:f8:c2:16:c9:96:59:1b:1f:e3:7e:b2:
ce:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CD:F2:D4:4E:C7:11:C4:C6:53:4E:2F:D2:67:94:81:1C:C3:11:BA
X509v3 Authority Key Identifier:
keyid:B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:fc:18:90:48:cf:71:85:2a:38:ae:11:10:0b:f6:ad:b4:6e:
28:75:95:1c:a8:17:32:21:04:88:10:49:99:ef:3b:81:1a:43:
61:87:4a:00:77:94:84:4e:59:1d:c7:f4:35:b1:27:78:d3:2a:
22:b8:af:0c:67:3a:a5:11:c4:61:a7:df:57:eb:f3:64:27:a4:
8f:87:2a:56:af:04:81:5b:60:3a:11:04:d5:bf:10:83:e8:1d:
dc:d4:33:b0:1a:56:f7:16:40:17:7e:fc:05:a6:47:71:7a:b8:
5c:aa:da:c1:39:e9:26:a1:cf:0f:b7:f2:da:c4:b5:c5:dd:4e:
9b:05:b6:df:87:9b:98:4e:d0:6a:c4:a3:04:57:de:42:be:cf:
4a:75:43:d4:4a:a5:0e:7b:9d:ff:10:10:b8:3e:db:49:57:67:
f2:9d:0f:97:3d:ba:0f:02:c6:20:db:44:fd:1d:6d:b6:ca:94:
d2:8e:d2:8a:22:6b:53:b8:24:91:59:db:6c:b8:ee:17:00:37:
5d:51:73:5e:a3:bc:ce:3c:a0:35:37:e8:c8:c2:a1:91:97:d5:
38:b8:4b:59:20:a0:6a:62:7e:c8:82:75:7d:95:24:06:41:78:
d1:2f:43:6b:d1:5f:bb:eb:89:e9:50:48:0c:9a:53:0c:30:c8:
7b:5c:c5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 12:26:16 2025 by rpki-client