Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft
File: T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft (raw, json)
Hash identifier: H87RBVApASeuCcoBrp7AXK/jdVcr/bVenhhkTHi0CMk=
Subject key identifier: C4:F7:25:9C:3C:FE:F0:33:D9:7D:0A:A7:62:7B:79:47:50:EC:CE:3E
Authority key identifier: 4F:40:1D:C1:3E:50:E9:CC:3D:42:D9:13:EA:65:B1:55:4C:95:A5:48
Certificate issuer: /CN=4f401dc13e50e9cc3d42d913ea65b1554c95a548
Certificate serial: 019923A0C2547EC52399F213839BECFE15BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft
Manifest number: 0232
Signing time: Sun 07 Sep 2025 10:02:41 +0000
Manifest this update: Sun 07 Sep 2025 10:02:41 +0000
Manifest next update: Mon 08 Sep 2025 10:02:41 +0000
Files and hashes: 1: NgWmbAJgungmvuD2b4lhPyG9HS4.roa (hash: t3vC0+4VBb5wCcDlMDg2W8fzOL4JtbOA3CytBK/gjwA=)
2: T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl (hash: OdOAwuh+vpc7k9Q2nwlorRA2b0zfTcCdl2qZm3t3PyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:c2:54:7e:c5:23:99:f2:13:83:9b:ec:fe:15:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f401dc13e50e9cc3d42d913ea65b1554c95a548
Validity
Not Before: Sep 7 10:02:41 2025 GMT
Not After : Sep 8 10:02:41 2025 GMT
Subject: CN=c4f7259c3cfef033d97d0aa7627b794750ecce3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:c3:bd:0d:10:b0:18:3f:35:7a:d2:06:9c:
51:1a:77:82:f0:e7:57:d5:b5:7a:51:fc:8c:5a:71:
41:78:50:76:9f:49:cf:f5:e1:48:43:20:b5:ab:ab:
66:ab:5b:5c:da:31:18:fe:26:78:f2:0e:c6:4f:26:
ce:11:08:8b:be:f9:14:c4:a3:32:7e:5a:56:0a:1f:
c4:11:1a:8a:92:8b:99:8b:ce:d4:a0:c2:4d:12:5e:
c9:60:b8:d3:ba:ca:47:b4:e7:7f:64:4b:22:8a:1c:
f7:e0:7a:d4:bb:ef:8b:d6:e8:89:a9:42:26:10:24:
f1:8c:a5:5c:79:4e:4f:a7:6b:61:3b:e3:64:6a:f3:
c3:1c:e5:59:dc:c5:29:7b:37:3a:3e:13:34:23:13:
82:f9:51:07:2d:fe:a3:6f:95:ca:47:ca:5a:ba:d9:
58:2a:48:8e:79:95:e8:13:13:91:f9:4e:cd:39:6f:
22:c9:10:26:6b:3e:a6:63:3d:6d:ae:42:41:c0:ea:
bd:42:13:b4:05:12:81:68:8d:74:bb:4d:e2:24:36:
51:a7:3c:04:ea:ba:80:92:47:04:0c:ab:ab:ff:b3:
c5:93:bf:37:1e:48:12:73:94:cf:8f:a1:bd:18:00:
b2:b4:ed:9b:67:46:3d:a0:6f:87:ab:76:14:62:d8:
9e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F7:25:9C:3C:FE:F0:33:D9:7D:0A:A7:62:7B:79:47:50:EC:CE:3E
X509v3 Authority Key Identifier:
keyid:4F:40:1D:C1:3E:50:E9:CC:3D:42:D9:13:EA:65:B1:55:4C:95:A5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:30:7c:b5:15:36:00:28:a4:f3:ff:b3:61:41:56:6b:56:78:
6f:36:12:93:70:81:57:26:84:52:fe:4c:cc:1c:ec:25:03:e2:
c5:9f:5c:bd:93:22:d4:30:3d:d4:8f:20:87:f2:35:c4:ee:3d:
c7:47:be:34:15:f0:8a:64:dc:b5:78:bc:93:60:07:11:16:55:
0d:c8:78:d5:d3:1f:57:0f:99:a5:60:b8:14:d8:ea:ca:9a:94:
96:42:2d:84:fd:84:cc:91:24:5b:f7:37:7b:05:f5:9d:e5:a9:
b8:de:5c:59:a6:3c:62:f1:cd:91:94:4a:97:e1:1a:c8:3b:ed:
72:23:30:86:d5:71:dc:8c:b3:29:9c:53:ec:56:a4:1a:10:74:
0a:b7:6d:7e:6f:2a:1d:f2:d2:37:68:9d:fa:97:23:10:7f:17:
ca:b2:15:a7:f2:44:20:ec:f1:09:59:b8:23:86:6a:8b:1b:18:
fe:45:c7:a9:7d:ae:38:43:a7:06:df:86:0d:34:17:0a:7d:cd:
58:0f:8d:57:e2:92:fd:78:14:75:91:1b:85:0f:56:86:37:24:
c8:ff:54:1d:12:6b:84:d2:90:4d:4b:31:b0:07:a1:48:93:91:
f3:6a:f5:59:6a:b1:6c:d2:d1:ac:22:9d:a5:56:21:c6:cf:d5:
5d:1e:c9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:03 2025 by rpki-client