Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
File: t2lbmOCKN4vw3JRNLxpgofaVSYE.mft (raw, json)
Hash identifier: 3ZgLo5f0n5GLeMf+wxUkRN4gOfGl+3QQG/1zVvtccR0=
Subject key identifier: B1:A0:52:A9:B3:4A:3C:66:6F:23:BC:D3:B0:2D:F6:26:69:E1:24:6C
Authority key identifier: B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
Certificate issuer: /CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Certificate serial: 019A72939A92D7E1713B2B86652CEEE3B0C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 11:01:07 +0000
Manifest this update: Tue 11 Nov 2025 11:01:07 +0000
Manifest next update: Wed 12 Nov 2025 11:01:07 +0000
Files and hashes: 1: RqpmvtEuocHrmP7Ze69kHKJjV2o.roa (hash: VpfnBez6Qe55xKI1hHxTR48bK27mTUWeo89TggdAg0Q=)
2: t2lbmOCKN4vw3JRNLxpgofaVSYE.crl (hash: mXUIdvMh1y8RbiyxlEk0bdvZwnTakswpCpSWfDMr9Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:9a:92:d7:e1:71:3b:2b:86:65:2c:ee:e3:b0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Validity
Not Before: Nov 11 11:01:07 2025 GMT
Not After : Nov 12 11:01:07 2025 GMT
Subject: CN=b1a052a9b34a3c666f23bcd3b02df62669e1246c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7a:b0:89:2f:00:35:44:7a:e6:04:20:68:5e:
96:f9:ea:f7:1a:ef:3b:ee:cd:e4:a5:ad:a5:d5:07:
b6:da:99:5a:38:01:bd:b1:db:a2:45:d2:e8:7d:1b:
56:d4:da:62:11:78:42:e4:aa:cd:c5:3f:cf:17:1f:
64:42:80:85:ac:c1:f6:9f:d6:e5:c5:e9:4f:4e:38:
99:14:17:c1:4a:a8:55:6c:5e:d0:f3:df:4c:91:f8:
35:d7:49:5c:ec:6b:17:9d:00:63:30:7a:49:9b:30:
61:b6:dd:8d:a6:2d:05:7c:45:40:a6:8b:bb:c2:ef:
ad:d4:38:1a:1f:09:af:fc:a7:ad:e1:3e:4e:57:34:
67:ee:89:03:ca:af:d0:49:2c:8c:be:b8:55:61:16:
36:50:8a:85:a6:dc:d9:9b:c4:63:d8:44:06:eb:b0:
e0:c6:5a:a5:bf:a7:85:99:16:71:28:72:cb:3a:7b:
d4:f9:ee:eb:81:51:0d:45:72:98:fe:ab:d7:5f:7c:
79:9c:0a:21:c3:d4:80:2c:f1:b1:11:64:1d:ee:9c:
45:3e:cc:a9:92:5d:42:c8:83:b5:6b:23:6d:b8:5c:
5d:66:58:0d:f7:70:c4:2b:b7:78:c9:69:77:aa:65:
b4:6a:ba:73:52:bd:38:6d:56:c0:05:80:6e:71:00:
e9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A0:52:A9:B3:4A:3C:66:6F:23:BC:D3:B0:2D:F6:26:69:E1:24:6C
X509v3 Authority Key Identifier:
keyid:B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:05:54:a0:66:f9:96:f1:0b:ea:df:8a:11:c8:91:44:e4:7c:
0c:29:09:7b:63:4b:7c:46:21:e2:f9:88:88:cd:3f:71:09:29:
c4:b7:d7:e4:40:0b:ac:e8:fa:57:6a:b6:bb:0b:6d:08:09:68:
a1:3d:ff:10:02:af:9c:cb:d4:73:b4:6e:e3:81:c8:45:c9:09:
6b:f0:50:9f:7b:88:5d:81:78:2f:83:6a:79:9e:76:67:e9:95:
b6:e3:16:d3:c7:4c:d2:a8:6d:b8:6c:e2:eb:e4:97:da:27:8e:
d2:85:f2:b0:8c:08:6e:50:7f:e7:8e:4a:8e:7c:14:d1:e4:ea:
23:d0:1e:67:72:1b:b8:6f:9e:3c:b6:16:a5:db:2d:3b:da:3a:
bb:68:60:7d:db:62:fb:2b:09:23:60:34:e9:35:ae:39:67:c9:
76:08:31:04:0d:7c:e1:7c:ed:40:de:9b:4c:ee:72:59:e7:06:
bb:08:36:e7:75:20:02:aa:54:f0:5c:10:80:67:3e:28:97:42:
3b:cb:a4:4d:7d:ff:64:40:2a:d5:6c:77:18:7f:29:9f:ef:df:
99:ba:34:b7:16:df:ba:33:fa:2c:22:ff:02:49:0b:75:03:58:
a9:99:fa:88:2a:97:3c:3c:cc:05:04:48:4e:82:ae:f0:90:39:
98:72:2e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:49 2025 by rpki-client