Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
File: T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json)
Hash identifier: J1KWi6nYbmYtsabHMITV+7vXJnZX3dhNPo/rA5UNIqs=
Subject key identifier: 61:85:5B:71:CE:FF:D6:1F:AB:EF:E6:01:4D:55:70:4C:AD:DC:FC:B9
Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
Certificate issuer: /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Certificate serial: 0199FD344A6279960CBD93D65E5161E46380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 16:01:26 +0000
Manifest this update: Sun 19 Oct 2025 16:01:26 +0000
Manifest next update: Mon 20 Oct 2025 16:01:26 +0000
Files and hashes: 1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: +jx/fwqk9DSL6LeaU4ECsgWiS5BqB3srf/Q7Lh4+MRA=)
2: kfsN1HfyfK-NQ9iZIGxx8I0iebc.roa (hash: 471clsXqk9Nk68jCHR5a7ma3NzbA1DO/nClDnuoSJLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:4a:62:79:96:0c:bd:93:d6:5e:51:61:e4:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Validity
Not Before: Oct 19 16:01:26 2025 GMT
Not After : Oct 20 16:01:26 2025 GMT
Subject: CN=61855b71ceffd61fabefe6014d55704caddcfcb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ed:ab:12:67:c0:ea:bf:7f:e4:cb:37:ea:5e:
7d:5a:3e:73:4a:8e:e7:ab:74:62:03:bf:17:22:05:
4d:48:b4:39:bd:b4:27:88:4c:45:5a:17:74:de:cd:
38:14:6d:65:95:d5:0c:f1:0a:18:7d:60:6f:a3:32:
6c:6c:10:3b:49:56:32:f5:ff:da:1f:1a:30:88:8a:
62:10:0c:c2:8d:17:1c:6c:d3:91:be:b8:b2:6c:10:
00:bd:52:3f:e4:dc:78:6f:a8:7c:1b:d7:d0:7a:b8:
8e:d7:6e:99:a5:e4:43:a7:36:4c:b9:8a:a1:98:d7:
df:00:d4:99:a1:97:41:6c:a9:0b:ed:84:ba:5a:e7:
83:4c:e7:41:7d:54:01:fe:89:45:5d:01:eb:d7:57:
11:bc:0e:ad:13:67:9e:33:0e:89:7a:4f:18:57:77:
d5:31:5b:13:e9:78:4c:2c:b6:8d:e9:8d:4c:2c:8c:
03:2c:d9:ae:f9:42:e4:48:dc:52:3c:42:7c:7d:f6:
6e:df:fd:82:38:97:06:67:c9:6e:f3:fc:78:d9:28:
92:c4:12:b1:95:0b:7c:9b:22:4b:e9:28:8d:5b:66:
c2:d4:c5:d2:cb:74:80:3a:5f:4f:a7:c3:f1:d5:03:
cd:8f:51:ba:22:ed:d6:5b:f0:6f:97:c8:3c:35:1f:
09:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:85:5B:71:CE:FF:D6:1F:AB:EF:E6:01:4D:55:70:4C:AD:DC:FC:B9
X509v3 Authority Key Identifier:
keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b0:63:1b:e8:36:25:1f:11:e6:e9:03:b6:b6:81:c2:a8:e6:
8d:d5:c1:05:21:43:2f:08:d8:83:fc:89:3e:ea:6c:8c:13:10:
96:ae:9f:5f:06:fa:39:ff:0f:44:fa:6c:b6:69:c0:bf:72:d4:
9b:33:4f:cd:d9:c1:6a:7c:22:95:83:fb:02:0e:e4:0b:b8:60:
a4:6b:62:0a:00:9a:83:65:ee:a6:1f:cb:b6:45:0f:19:d9:35:
aa:7b:6c:6c:ba:fd:81:27:ac:0f:f0:b8:9f:99:8e:8d:a9:46:
da:4e:c9:4e:52:c1:bc:07:53:89:f4:e0:ad:0a:c4:8b:f6:14:
28:38:71:eb:ca:8f:e6:f5:e8:35:c9:0e:e3:2f:ca:9a:f1:e1:
86:a6:ac:3a:0d:78:7d:0b:e8:04:73:1e:5f:ad:a5:48:cc:d3:
89:da:9c:e4:8f:f9:89:28:e6:b6:e2:c7:f6:db:6c:4d:3a:41:
4d:31:6d:f1:b6:d9:9b:84:8e:bf:58:be:88:49:b7:aa:b5:04:
48:c7:89:cc:4f:46:eb:e8:07:43:8c:40:0a:97:03:85:26:10:
35:15:bf:2f:a0:f8:4d:06:48:c7:96:78:09:bf:63:ce:80:2f:
26:0f:4a:2e:24:5c:2d:be:7a:34:d0:ed:9b:be:4c:d9:f1:26:
77:2c:0d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:41 2025 by rpki-client