Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
File: t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft (raw, json)
Hash identifier: gqVk2xjc7FS74iWKn9flfz8YvpyMZzEIl37/v7YDWcs=
Subject key identifier: 26:C8:92:08:63:7F:FE:CB:2B:7D:A1:15:9D:D4:65:49:20:12:92:EC
Authority key identifier: B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
Certificate issuer: /CN=b79de9458d190e634329f9df1503b5222c1624ee
Certificate serial: 019A71B84B0136D590C1576E5A4BF2DE9733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
Manifest number: 092F
Signing time: Tue 11 Nov 2025 07:01:34 +0000
Manifest this update: Tue 11 Nov 2025 07:01:34 +0000
Manifest next update: Wed 12 Nov 2025 07:01:34 +0000
Files and hashes: 1: 33E6U-90LI21C0lkTnzQ6VfaiXI.roa (hash: t0pnwqLcy2OtfvtukL13J3l3uzKc9VJEEKWY4aTDjS8=)
2: KTNKEz9B68iNvMGQpqql8Umd6Rg.roa (hash: 4c3WZli6HrqpP5XT4I7aYzD+h8A8/oNoRJSDq9oByhk=)
3: t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl (hash: QHgk2IJWB1cPulYA+qzLIuTFXQeS67NnV+rhN3KeDyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4b:01:36:d5:90:c1:57:6e:5a:4b:f2:de:97:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79de9458d190e634329f9df1503b5222c1624ee
Validity
Not Before: Nov 11 07:01:34 2025 GMT
Not After : Nov 12 07:01:34 2025 GMT
Subject: CN=26c89208637ffecb2b7da1159dd46549201292ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:53:62:99:fb:39:84:c1:29:77:ae:8d:9a:4d:
2f:14:f2:2a:90:ab:94:d6:d4:92:a0:6f:73:fb:f3:
e1:c3:25:27:0d:51:1a:4d:92:a5:ec:7d:b7:f7:97:
93:4b:62:1d:50:47:3d:51:7c:d2:57:bc:b1:5c:1d:
0a:10:da:aa:f6:b0:98:18:aa:77:29:b3:2c:e1:50:
c2:16:1e:61:a4:ca:5e:27:71:72:9c:84:13:e7:b1:
69:4c:28:ff:e5:2e:15:4b:65:30:d8:5c:29:8e:45:
a3:d9:d8:41:2c:fd:78:e7:97:ac:3c:c5:7f:64:97:
ca:bf:cd:d5:c1:52:42:ba:0a:10:32:83:a1:5e:a6:
04:9b:e9:7a:c1:6d:e5:35:a3:eb:36:d4:d5:03:c1:
1b:3f:f8:32:5b:60:ee:2e:b4:e3:c4:69:29:ec:f1:
90:b9:58:a3:5f:54:b2:f5:dc:32:fc:af:ec:d2:f0:
de:08:8f:77:66:93:c1:1c:b0:26:25:cc:9b:78:25:
b7:9c:93:51:86:3c:b0:28:6b:4d:d5:26:56:cb:03:
60:9e:45:52:f7:ce:8b:64:25:2c:91:08:b1:c6:b0:
32:35:ca:9a:23:7b:65:f8:15:01:b8:23:7d:db:25:
1e:8c:9c:ab:1e:49:37:e4:31:eb:a8:38:35:9d:59:
df:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C8:92:08:63:7F:FE:CB:2B:7D:A1:15:9D:D4:65:49:20:12:92:EC
X509v3 Authority Key Identifier:
keyid:B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:dc:5e:28:97:3a:04:9d:67:93:a5:a5:2a:25:b6:b1:a3:ae:
ea:c5:fb:84:f5:f6:1a:bd:cf:cc:6a:85:bd:8b:4c:25:11:9b:
72:b9:98:ac:1f:8d:ee:c8:68:f8:3d:20:ee:34:87:7c:09:6c:
6a:69:b9:16:84:ff:e3:b3:5a:54:6c:c0:32:73:b9:0b:a8:74:
29:49:09:13:63:cb:ca:10:fd:45:e5:6a:b7:61:36:83:df:d7:
aa:a3:ce:e2:86:08:4d:82:b7:36:9a:65:f5:64:0a:a2:f0:cd:
cf:9a:34:24:b7:7e:fd:c6:e7:80:0f:06:62:f7:03:8f:7d:98:
7e:a5:76:3e:19:21:12:06:72:e7:59:19:aa:79:24:f8:e2:84:
89:3e:21:b7:3c:10:99:2f:29:5e:50:40:22:46:2a:e6:5a:08:
41:72:e8:c3:1a:ec:ce:ae:20:f1:31:f3:d9:ae:be:e3:5f:1d:
36:45:22:ef:28:d4:4e:02:af:ac:26:82:fe:c5:e3:ee:a0:e4:
e9:5b:39:2d:83:29:6d:43:ef:4e:f5:c7:e7:0a:b8:b3:c3:05:
7c:7a:66:13:b9:69:44:ac:f6:98:b6:7d:3f:ec:0d:c2:25:c2:
0e:f5:38:2d:ed:8e:27:71:91:a5:f2:92:6f:00:83:60:2c:40:
ca:6b:c5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:19 2025 by rpki-client