Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
File: T0HFbqBp7nscHfZoa9NuDhRSiiA.mft (raw, json)
Hash identifier: K1CfmxfQI6GQyXaScBs62o+zCToMKyFrKgLfFBC3kN8=
Subject key identifier: 3D:F3:0E:DC:73:27:B9:E0:FC:F6:74:10:6B:77:CE:E3:B8:6F:B8:81
Authority key identifier: 4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
Certificate issuer: /CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Certificate serial: 0198D404DDC883DB5C60E8F3CCC844DE4036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
Manifest number: 0D6F
Signing time: Fri 22 Aug 2025 23:02:25 +0000
Manifest this update: Fri 22 Aug 2025 23:02:25 +0000
Manifest next update: Sat 23 Aug 2025 23:02:25 +0000
Files and hashes: 1: DRrOJLgDL5rmiSF6D3RMJURdhRI.roa (hash: 7NgLPdqIa5BkuBXQmhxzkicPEWRt/mYhR9CY8DkwoYg=)
2: T0HFbqBp7nscHfZoa9NuDhRSiiA.crl (hash: tIjyB0bYcsL4WlrZb/Mpbt86g7CuU1iWUA4m4BIEmfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:dd:c8:83:db:5c:60:e8:f3:cc:c8:44:de:40:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Validity
Not Before: Aug 22 23:02:25 2025 GMT
Not After : Aug 23 23:02:25 2025 GMT
Subject: CN=3df30edc7327b9e0fcf674106b77cee3b86fb881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:bd:e1:e7:a5:cd:6e:c9:60:51:5c:ae:7a:
63:43:87:23:95:2c:60:64:aa:c8:97:3b:31:f0:de:
e4:d0:65:15:3f:e7:97:be:d9:17:e2:87:f8:c2:f5:
ac:7c:d2:a8:6c:98:fe:cb:3b:e1:01:65:9b:8e:22:
86:4f:35:1b:49:23:68:d1:ae:50:3d:7a:13:4b:77:
a8:cd:b0:ba:67:20:98:9b:91:a4:9d:51:76:1f:b4:
03:78:c2:ba:aa:99:95:d4:98:22:65:dc:6a:f9:96:
55:3a:5e:7e:85:55:d5:4c:32:c3:af:ba:28:00:d5:
70:fa:e3:b0:a8:fb:27:b5:80:a1:c6:0a:5e:7c:d8:
95:af:1b:28:86:cf:d7:28:fb:5a:c1:fa:35:02:0a:
c8:18:78:4d:d7:df:5c:4b:25:b7:17:b4:39:8c:0f:
67:e2:aa:c4:63:b0:2f:46:01:58:b3:6e:47:48:c8:
5e:65:00:a7:6d:a4:77:6f:3d:8c:98:f5:7e:e4:6f:
95:cb:76:1d:48:50:52:dc:e2:0d:b4:a7:72:0e:d3:
5f:44:38:1b:02:92:67:68:fc:12:68:59:eb:98:8b:
97:30:a9:17:ea:b9:1d:df:48:94:12:a9:f4:bd:f7:
35:8e:5d:bf:4f:12:ca:cd:df:38:76:76:34:36:95:
c0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F3:0E:DC:73:27:B9:E0:FC:F6:74:10:6B:77:CE:E3:B8:6F:B8:81
X509v3 Authority Key Identifier:
keyid:4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7b:14:09:0f:b3:20:49:31:82:1a:a2:84:ee:36:e7:92:6b:
62:ff:ed:4e:65:76:87:b9:f9:ba:19:68:34:76:9b:24:9f:f3:
bb:f5:ba:81:fb:cc:63:60:1a:0a:07:f3:b8:c0:eb:46:b5:58:
20:d9:37:bc:4b:27:5e:d2:07:22:54:10:9a:87:ca:c9:c4:f8:
c8:7d:e5:31:81:04:a7:fa:85:1b:11:20:3d:ba:43:c2:07:e8:
b2:07:be:ac:8f:50:76:a7:e8:ad:49:f1:d0:b7:f7:ee:69:c6:
80:8d:8e:76:8f:27:f6:a8:e3:a3:7f:bc:4a:bd:70:46:8f:5e:
08:ed:f5:09:fa:eb:4a:83:ce:8b:7a:6c:14:f1:c4:7a:b3:fc:
12:35:f0:6c:48:cb:57:fc:b7:56:fc:71:f0:be:dd:b3:b4:ce:
d7:fb:ca:ef:b9:7d:45:78:b1:90:bd:2f:33:f0:42:d8:01:7d:
89:ed:41:49:23:b9:3c:bb:3e:4f:c7:82:6e:10:e3:aa:bb:17:
ee:df:aa:db:8f:f2:5c:68:44:3c:04:84:b5:a7:c6:46:73:a6:
fa:ce:34:4f:e6:bf:ba:64:55:76:b2:45:3d:81:75:f9:84:1e:
05:42:a5:18:d3:4f:60:bc:3b:e0:92:e2:b8:89:dd:fa:2f:da:
09:46:c4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:35 2025 by rpki-client