Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
File: T8muTFD6CwOCrdpfPH30GPeSWGQ.mft (raw, json)
Hash identifier: 4KEx6DqGKoB5kS2QWDmM0G5TYfFFxzXWwfhHyXvEZys=
Subject key identifier: 79:8E:5A:8D:47:9C:A6:53:1A:31:53:EC:3A:6E:D0:11:04:85:DC:DA
Authority key identifier: 4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
Certificate issuer: /CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Certificate serial: 0199FC585949B4BDC49C58559E7E6F3CD842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
Manifest number: 6E
Signing time: Sun 19 Oct 2025 12:01:12 +0000
Manifest this update: Sun 19 Oct 2025 12:01:12 +0000
Manifest next update: Mon 20 Oct 2025 12:01:12 +0000
Files and hashes: 1: EfBLqsVRmS2V_zTPOhomf1PD6s8.roa (hash: animJghjOYq1IX/7qhA2FDGSZ8rTFFcjT97KQ/IiWvY=)
2: T8muTFD6CwOCrdpfPH30GPeSWGQ.crl (hash: ZXT+M92ydBIq3ltWeELCSHGZ4OrUPLi8RFSnflnhGyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:59:49:b4:bd:c4:9c:58:55:9e:7e:6f:3c:d8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Validity
Not Before: Oct 19 12:01:12 2025 GMT
Not After : Oct 20 12:01:12 2025 GMT
Subject: CN=798e5a8d479ca6531a3153ec3a6ed0110485dcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2c:45:9d:08:b5:31:23:42:c8:42:ba:3f:b0:
1d:96:86:e9:9d:fa:58:43:52:e2:91:4e:dc:5d:f9:
df:3a:f1:55:3e:61:b0:b9:99:22:3a:0c:b5:83:90:
cd:85:44:87:9b:b9:bb:b5:63:59:fd:02:01:47:cd:
4a:87:96:ed:ad:32:71:7a:f6:a9:86:fb:1a:2f:eb:
df:98:cc:a2:32:02:a4:34:e5:04:8a:64:4d:18:3f:
40:aa:15:93:8b:c1:a6:26:d3:13:0f:cb:e2:ab:e3:
87:a0:89:26:ce:2d:00:2f:19:5a:ad:24:e1:2a:12:
38:51:58:d9:0b:eb:ab:50:a3:9a:6a:84:cf:35:d1:
57:d6:db:61:fe:13:3a:e3:4f:14:b0:57:0c:a5:2f:
86:14:94:a5:85:34:6b:99:69:e3:ff:d7:d6:bd:71:
25:04:d4:c7:aa:f2:62:b2:62:76:ec:f1:9f:05:aa:
b4:28:29:43:41:40:60:bc:9a:ca:7c:9e:39:22:51:
e4:be:3b:40:58:4b:0e:04:fe:2a:d9:76:8c:c4:fb:
d9:27:93:ee:17:cd:81:24:2f:6f:5c:ed:15:6a:43:
6c:74:da:7a:33:bc:e2:06:ef:aa:03:4d:fb:e6:97:
23:3a:b0:36:5b:ab:ca:d5:00:3f:a8:fa:68:8d:b2:
00:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8E:5A:8D:47:9C:A6:53:1A:31:53:EC:3A:6E:D0:11:04:85:DC:DA
X509v3 Authority Key Identifier:
keyid:4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:44:84:93:0c:b4:e1:12:c9:40:a2:d8:4b:ac:b4:4c:5c:11:
7a:2f:85:4e:ea:62:3e:ad:0b:b7:b0:64:14:6e:06:4e:7d:25:
9a:79:db:93:79:2d:8f:9c:cc:a9:2e:7c:b1:7a:4a:f4:54:78:
b2:1e:02:2a:d0:17:f3:64:f7:91:80:57:1b:e2:ef:d5:a6:46:
e4:64:9d:89:ea:2c:d3:b0:75:2e:33:ba:1d:c9:db:1c:6e:a1:
4d:38:bf:c9:f8:99:9a:eb:de:f2:2c:1a:14:d3:b8:4a:3b:21:
ab:a8:9d:09:0d:8f:21:95:d6:f3:0f:e9:a7:54:4d:1e:b9:5c:
51:21:da:9a:8f:4f:92:8d:a2:bd:5f:3d:86:83:44:76:c2:1d:
53:e7:af:c2:70:93:01:eb:db:71:78:2f:86:c5:b7:a1:04:f8:
57:ef:0c:17:a8:0b:0d:d8:fa:70:ed:42:cf:42:d7:8b:cf:6f:
7f:ec:a0:b9:a4:4d:de:f2:52:ea:45:cb:06:a2:d5:9f:4d:fd:
69:69:d5:6f:6c:87:c8:5a:5d:81:83:2b:b0:13:31:50:0b:aa:
f9:53:19:de:09:05:80:11:2a:ca:31:33:05:c3:53:73:0b:6b:
14:60:de:cd:7a:f0:85:60:21:90:9a:5a:11:32:25:07:a8:69:
97:7d:ab:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:12:42 2025 by rpki-client