Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
File: T0HFbqBp7nscHfZoa9NuDhRSiiA.mft (raw, json)
Hash identifier: finbc+8gJ3HDp4/qWom96ONRudGbqw0nJ7PKCyOy/gA=
Subject key identifier: AE:A3:8E:10:11:A7:03:DD:8D:3C:5D:4D:EA:67:FA:95:57:4B:B5:83
Authority key identifier: 4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
Certificate issuer: /CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Certificate serial: 0199FB7CB093A90516D399259851AF969FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
Manifest number: 0E08
Signing time: Sun 19 Oct 2025 08:01:16 +0000
Manifest this update: Sun 19 Oct 2025 08:01:16 +0000
Manifest next update: Mon 20 Oct 2025 08:01:16 +0000
Files and hashes: 1: DRrOJLgDL5rmiSF6D3RMJURdhRI.roa (hash: 7NgLPdqIa5BkuBXQmhxzkicPEWRt/mYhR9CY8DkwoYg=)
2: T0HFbqBp7nscHfZoa9NuDhRSiiA.crl (hash: DSYtd/5o8ALBe2vZ7BK2L6D+yqaQoMVlthzWFh/KDCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b0:93:a9:05:16:d3:99:25:98:51:af:96:9f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Validity
Not Before: Oct 19 08:01:16 2025 GMT
Not After : Oct 20 08:01:16 2025 GMT
Subject: CN=aea38e1011a703dd8d3c5d4dea67fa95574bb583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:41:c4:6a:50:5d:f2:ba:b3:4c:f5:67:35:
8f:e6:b3:39:2f:77:c4:06:4a:e8:90:fd:c1:b4:83:
9f:f3:2b:43:76:34:ab:ab:9a:95:0e:fe:ed:06:f5:
58:08:f5:0e:3b:5c:b0:0f:9f:d8:36:39:cc:68:c4:
2b:e0:d1:04:68:55:79:3e:31:5a:ca:05:ce:fb:a6:
e8:b2:05:6f:b6:a5:2e:0c:9c:ac:69:c6:3c:76:13:
2a:8c:dc:a5:94:76:8e:79:fc:0d:77:b2:56:c1:9a:
1f:7f:f4:4a:d2:e3:23:08:5d:f8:a5:34:36:b7:31:
f1:f6:8f:ba:84:f8:32:1f:02:d9:bf:54:80:82:43:
e1:f1:e4:ed:bb:50:66:fa:2c:ac:5c:2f:5c:77:78:
c3:72:21:ca:d4:3a:30:22:5d:14:35:24:e5:ad:20:
c7:2f:0d:eb:8a:db:40:e8:0a:c1:be:dc:6d:90:0c:
42:15:22:9c:25:3d:8c:a0:30:39:dd:b1:0e:81:d4:
12:83:a5:29:d6:3e:92:05:a1:bc:6f:c6:9e:17:30:
92:5f:5e:49:3f:a8:46:c1:29:74:49:32:01:11:4f:
2c:2a:fd:48:fc:6b:6b:99:d5:d9:15:e6:c2:c6:37:
f2:17:f0:8a:38:20:90:2e:51:4a:7b:fb:3c:0f:e2:
49:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A3:8E:10:11:A7:03:DD:8D:3C:5D:4D:EA:67:FA:95:57:4B:B5:83
X509v3 Authority Key Identifier:
keyid:4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:02:b0:24:5b:52:1d:55:a1:8e:fe:d5:5d:cd:3b:87:21:79:
97:13:34:85:0f:07:54:92:17:c3:52:d3:87:5e:20:7f:4c:92:
2d:e8:ea:01:d8:61:a4:a7:cb:d5:b9:3f:cc:97:e7:c7:98:95:
7d:6f:40:d6:6c:d8:43:3e:0e:7c:1a:ea:58:b2:ba:20:8d:e8:
aa:67:72:df:af:cc:69:44:6c:ce:2f:3e:da:d1:30:ee:19:6b:
30:f5:0b:1d:a4:d4:fc:1b:60:e9:8a:3c:70:7b:59:77:31:e9:
5d:e4:40:5c:22:fa:0c:7d:e5:12:59:af:ae:5b:d2:57:b9:97:
38:fb:ac:62:68:85:62:3c:0e:c2:8d:a8:a2:8b:a8:27:e1:7e:
53:3c:f1:ad:33:0d:97:24:ef:32:0f:63:0c:dd:3f:80:d1:76:
f9:4e:bc:f4:b0:f6:d4:7f:9d:3b:3c:25:4b:ab:5d:97:a5:4b:
31:a4:e7:2f:4d:82:33:98:83:92:f6:3c:8c:d0:84:37:e2:ed:
fb:7c:78:06:da:08:50:67:f9:1a:cc:31:49:d6:b3:08:1a:67:
7b:f4:2e:2e:ab:78:26:37:99:2c:69:b7:4a:15:42:27:60:eb:
13:ff:06:45:19:7a:69:6e:e4:cd:d2:bf:3b:af:ae:28:b6:be:
12:5b:d8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:04 2025 by rpki-client