Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: gck4xFEgUAa3xXcr8wCZX3G2U53sTryTEUbA3ZzoZA0=
Subject key identifier: A0:5C:72:DE:0D:A8:9E:13:B2:FB:F5:BE:73:11:95:11:74:E2:33:07
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 019A232E7A7EBBC1C0C3875D003C707D9AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0C4A
Signing time: Mon 27 Oct 2025 01:00:39 +0000
Manifest this update: Mon 27 Oct 2025 01:00:39 +0000
Manifest next update: Tue 28 Oct 2025 01:00:39 +0000
Files and hashes: 1: 6b2ERBxknPAevOnYxSvxzu95eG8.roa (hash: 3kiDbks8aSmKxwaOLs+GDp7zBcCi628ZZOq/BNMJfnI=)
2: NOOroZsnjsQfsZH4dRjzbuju0Hk.roa (hash: Zg6ieQb4LhmgSd9bfRqKPOaZLXbcVzG7102ETjzQ1ro=)
3: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: eI32eklz/gTBGGseUID/VcDErlGBDEa2ZYN62klSpPI=)
4: auS9-c0NKZclAN6n9ZeMxPqllbY.roa (hash: jmic3pbI/PzbYEfrYr0mHzcn9EBC12zQGVngarCFUoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:7a:7e:bb:c1:c0:c3:87:5d:00:3c:70:7d:9a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Oct 27 01:00:39 2025 GMT
Not After : Oct 28 01:00:39 2025 GMT
Subject: CN=a05c72de0da89e13b2fbf5be7311951174e23307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:21:6a:6b:23:f3:06:af:54:6e:ff:89:2b:19:
62:f2:58:85:9f:ab:59:74:e8:54:fc:41:7e:76:43:
6d:94:b2:ca:6b:b9:26:1b:47:c0:98:32:5d:1f:f8:
a9:41:c5:0c:53:ab:6e:f0:53:dc:d8:e2:de:58:9a:
8c:fc:bc:94:83:ae:53:f7:fb:e2:46:c3:4a:c0:0e:
64:0a:fc:0f:e1:f9:43:f9:b6:26:6e:6b:c0:63:ad:
63:02:28:be:e3:39:30:fd:1c:29:0c:7e:1e:02:78:
cf:96:e1:e5:42:5a:f5:9f:df:9e:13:99:00:02:88:
65:8e:4f:a2:46:b8:29:66:30:cc:85:35:17:b5:da:
34:32:d0:02:eb:f5:b2:25:42:d3:f3:a9:d4:93:88:
0b:bf:f2:55:9f:a7:ca:d0:3c:35:22:9b:3e:c8:b0:
4e:a2:fc:3f:6d:7f:ff:09:4d:b3:01:e5:1b:2e:ad:
20:0e:3a:55:35:0f:33:b0:af:1d:18:2a:a0:b3:3f:
41:d1:3b:45:ee:7d:c6:9f:27:d3:41:4a:8d:09:0c:
d7:62:40:30:04:22:b0:27:4c:2f:e4:ab:44:92:ba:
48:fe:8d:82:2c:45:74:10:5f:bd:d5:ea:85:e5:9c:
10:e2:84:5d:31:a2:e7:66:94:2a:a2:c0:92:cb:2c:
a3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5C:72:DE:0D:A8:9E:13:B2:FB:F5:BE:73:11:95:11:74:E2:33:07
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:96:c5:de:c8:09:f2:46:8f:e9:29:d1:86:30:1c:7a:f4:3d:
d1:94:9c:e2:d2:5f:8c:91:c3:7b:23:03:fe:dc:f1:e3:32:fd:
96:eb:c1:a8:a7:d3:77:e5:e9:6c:3b:b0:f9:f5:53:e3:68:be:
59:85:e9:52:f2:90:f2:43:69:2a:7f:3f:dd:45:82:ea:ed:7b:
b4:db:35:20:42:71:d3:c0:46:3e:16:84:5f:b5:93:2c:5b:68:
7d:ad:da:df:a2:c9:8a:ca:15:98:28:62:99:a5:4c:15:0e:a2:
d3:2c:96:49:57:1c:fa:df:9d:09:08:02:f4:e1:45:b7:db:bd:
6b:34:4b:a5:a7:58:b5:9b:66:0b:aa:17:39:6e:e7:00:80:08:
c0:f4:65:f7:31:43:87:91:cd:d6:e6:c9:b6:25:ea:ac:a0:bb:
c5:20:80:7d:35:f4:6e:a1:6d:ff:d9:22:cc:61:7d:3c:c7:ea:
5c:c8:70:a6:74:cb:e4:f1:c5:00:0b:38:c2:7d:24:ec:c4:80:
f8:8c:b3:d1:4a:00:04:e9:4f:5f:85:54:3c:c8:5c:36:30:90:
dd:5b:74:75:fd:af:4d:16:e4:27:67:ca:f0:0f:39:e4:df:4b:
7b:f6:58:49:21:f0:b7:90:59:27:8c:31:0a:03:75:fa:3a:45:
c9:ef:be:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:45:50 2025 by rpki-client