Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier: qs6QsvjFWgX4bPuDVEf8Og6iFfWVC02VMHBM/pGDnCw=
Subject key identifier: F8:74:54:A5:6F:70:D6:17:A9:D2:EF:57:BD:27:09:0C:B4:72:0C:9B
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 01992255B074F7C8EF3EF07ABCF489A23012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number: 0F5A
Signing time: Sun 07 Sep 2025 04:01:05 +0000
Manifest this update: Sun 07 Sep 2025 04:01:05 +0000
Manifest next update: Mon 08 Sep 2025 04:01:05 +0000
Files and hashes: 1: HO5kHHVnIPEFaMxltsULzo8s2Vc.roa (hash: Pi2xNmIKaW+pbH3+gTOC2OW0sYYGJ1NWu+Za1hJg9Rk=)
2: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: 3mRBbG0YDdUTuQ5C3iA5OWlwLKkw4pyjsQHeC27NCXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:b0:74:f7:c8:ef:3e:f0:7a:bc:f4:89:a2:30:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Sep 7 04:01:05 2025 GMT
Not After : Sep 8 04:01:05 2025 GMT
Subject: CN=f87454a56f70d617a9d2ef57bd27090cb4720c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:36:b6:4f:10:cd:4e:b8:0e:d3:4f:69:a1:
7b:97:bd:0b:6f:27:3a:02:57:18:7f:da:9f:e5:90:
7c:bd:18:52:52:29:17:be:43:93:66:cd:56:be:a8:
6c:4f:12:37:27:89:ae:02:75:dc:74:8f:86:a0:70:
8f:35:fc:cf:52:24:f7:f6:4f:93:09:4c:47:18:40:
01:fe:ea:0d:dd:67:93:e8:9d:70:42:2d:2b:a4:73:
96:dc:58:25:bd:44:c8:75:6b:cb:11:2f:67:6a:21:
83:31:28:3b:62:4c:1d:4c:1d:18:f5:6e:19:8e:8c:
25:87:44:cb:f0:d8:2d:d8:3b:73:e2:07:b4:e1:8f:
cb:20:ae:9a:59:f4:4f:5c:d3:07:25:72:38:a8:8d:
f6:42:b0:10:ef:f7:8f:31:f7:0f:a0:24:d7:15:59:
c6:e9:e1:1e:ee:fa:7f:b8:54:42:5c:0e:03:72:00:
0a:c4:0e:b4:96:05:8e:d4:72:c9:30:2b:5a:92:ab:
1a:af:55:76:e1:9a:07:b7:c4:58:63:29:44:1a:8d:
5b:12:a7:60:2f:42:ab:a8:98:bb:e5:6a:e9:d4:cd:
76:31:e5:54:92:a3:6d:7e:b9:47:ef:03:14:b1:7a:
52:89:c5:dd:ef:d7:69:a1:54:30:17:ee:53:8c:d6:
8a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:74:54:A5:6F:70:D6:17:A9:D2:EF:57:BD:27:09:0C:B4:72:0C:9B
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3a:a3:79:20:6b:2f:aa:a7:56:ba:61:75:f1:95:73:f0:4d:
b7:45:13:c9:92:bd:2f:f1:37:d4:11:79:c7:5f:83:68:2b:a7:
32:00:ed:78:ae:3a:3b:51:e0:ac:c2:13:c8:d9:b2:89:69:fe:
d2:e5:f5:a6:01:ab:71:41:18:a6:f2:15:0b:ba:d7:ef:55:37:
c9:34:1a:5b:a3:ab:94:d5:1b:20:7c:95:04:a2:3c:68:6c:07:
df:f7:00:2d:9a:69:68:b9:8e:32:74:ed:7b:80:9b:61:c4:ce:
18:0b:f7:20:f0:f4:ff:8e:57:6f:39:6b:ec:8d:b8:72:1b:1e:
67:d8:f1:82:7e:9c:13:0a:bb:18:a9:19:63:11:57:38:d6:de:
20:9d:2f:c1:7e:fc:f2:a6:6e:47:6d:37:f8:ee:c9:dd:43:a7:
bc:44:8a:97:97:17:87:dc:8a:8f:bf:c4:98:18:bb:67:f8:ba:
58:a8:92:22:94:78:0b:ef:a8:84:c5:30:47:c7:93:04:9d:79:
39:ba:47:21:88:c8:ec:bd:52:7c:da:23:8f:06:20:37:28:7b:
0b:89:42:49:06:11:fa:31:bd:11:c0:68:1a:e2:54:04:f0:00:
d9:f9:9a:d4:2e:b9:c8:f0:f7:37:a7:a0:19:1f:95:cb:c8:0b:
9b:59:5b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:53 2025 by rpki-client