Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
File: T_hs8z4V6kCJ2inip4gddG34Ju8.mft (raw, json)
Hash identifier: hqnxcrniFLytj1/zbrVW+zKHkVG7Gvq5b9uYkm1yhis=
Subject key identifier: CA:5A:22:18:C0:24:62:CA:EA:AA:CC:43:6D:3B:73:15:D4:BF:F3:11
Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
Certificate issuer: /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Certificate serial: 0199FCFD757D13EBB26EF863D8EED2FB2800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
Manifest number: 1044
Signing time: Sun 19 Oct 2025 15:01:33 +0000
Manifest this update: Sun 19 Oct 2025 15:01:33 +0000
Manifest next update: Mon 20 Oct 2025 15:01:33 +0000
Files and hashes: 1: T_hs8z4V6kCJ2inip4gddG34Ju8.crl (hash: Ybts6MtsaK+mmOaIaIkH3HRqIu0ZwyNOh/PPDWPQt78=)
2: g8aVgQMBCBvrswyPJiarAr7VpUM.roa (hash: 5HrRjfLYW0OBZJTQk2MmBVB6mxhIUJtfwo5zMV6ZrEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:75:7d:13:eb:b2:6e:f8:63:d8:ee:d2:fb:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Validity
Not Before: Oct 19 15:01:33 2025 GMT
Not After : Oct 20 15:01:33 2025 GMT
Subject: CN=ca5a2218c02462caeaaacc436d3b7315d4bff311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:a9:ef:fd:98:d5:b2:ec:91:13:91:c0:14:
2f:0e:63:e2:c2:26:c3:ed:61:d9:80:e5:a9:23:d0:
45:f5:44:6a:98:a2:b2:ca:33:2e:1a:54:68:c4:36:
5a:f8:36:5d:dd:1b:56:d5:f0:b5:01:86:4c:99:f3:
8c:6e:0f:7f:92:d6:7a:2f:27:19:15:98:9a:96:a9:
d8:3c:7c:5c:09:5c:2a:aa:32:7e:21:be:9f:16:74:
e9:32:0c:29:1e:12:31:d6:4e:44:e7:a1:a2:ae:d9:
66:97:bc:4b:3f:06:d8:e5:60:d9:81:ab:4b:56:6f:
7f:28:f7:42:23:aa:ac:14:a6:49:a5:0d:c7:6d:41:
be:62:99:e1:37:3b:78:fb:ba:b2:32:89:64:c2:7c:
b7:29:79:5a:73:cc:c6:5d:42:e8:17:a4:3a:49:15:
e4:60:eb:df:4a:f5:72:c6:e2:e1:66:89:8d:91:8d:
20:48:fb:34:d0:5f:8d:bd:fd:53:68:22:84:62:82:
1b:26:12:0f:6a:43:2d:4f:b4:19:27:cf:b2:7a:bf:
ae:02:74:6a:3e:f3:c6:e1:d1:d7:b5:aa:cd:0b:88:
5b:3d:8a:b5:7b:1b:d3:6c:c8:2e:b3:08:74:3b:0c:
37:35:99:c7:d2:d6:f5:d8:e6:da:bc:50:c2:af:9f:
b4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5A:22:18:C0:24:62:CA:EA:AA:CC:43:6D:3B:73:15:D4:BF:F3:11
X509v3 Authority Key Identifier:
keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:66:c3:06:60:fb:66:fb:09:2c:9b:84:10:c7:60:d0:fd:91:
a3:25:87:30:0b:23:b5:ca:13:1c:64:28:4a:4b:b6:c1:0b:2d:
ec:34:a2:00:d8:62:71:45:42:03:ef:95:61:a3:d0:46:9d:aa:
0a:ba:70:61:c3:7f:d9:f6:45:c0:fe:f0:01:85:c9:62:54:16:
94:67:00:fb:f9:06:c9:1b:08:74:9c:b9:0a:92:be:33:57:f9:
9c:68:80:d8:58:4e:e5:bc:98:30:ab:72:56:1a:da:d3:80:5a:
ed:ba:f9:ae:2c:9e:ac:67:76:4f:eb:ee:b9:ac:97:88:60:db:
ac:6c:52:f5:71:6c:9d:16:bf:d6:a0:ab:d7:fe:b9:99:63:f7:
16:5c:de:0c:86:71:fb:c5:20:7f:e6:19:35:4d:85:48:bd:25:
40:7f:ee:48:95:5e:af:e3:8d:cd:76:12:6a:38:2b:2e:9f:8f:
f6:55:11:88:37:a5:1b:04:21:d5:c6:0e:e1:e0:8d:ea:bf:08:
81:37:93:26:1b:48:1f:85:5d:e3:bf:77:57:93:19:e6:0b:e5:
ec:e6:ba:ea:bb:ac:a7:b9:1f:77:60:35:c7:e4:f4:25:a1:7c:
d0:23:af:39:48:27:19:b9:ac:3e:eb:03:57:d8:22:d9:e1:44:
fb:d5:9d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:01 2025 by rpki-client