Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json)
Hash identifier: mf3XkDMBZ7gynYiksm4jCuLPTjqJ7kJRVHvLW7py9Hs=
Subject key identifier: 8F:F7:B7:AE:29:AA:3C:79:84:BC:2A:FD:8F:84:F3:F8:7E:4C:A2:AD
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial: 0199FE7DDBD5D6DC38C84A41D037F4146495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
Manifest number: 0B80
Signing time: Sun 19 Oct 2025 22:01:25 +0000
Manifest this update: Sun 19 Oct 2025 22:01:25 +0000
Manifest next update: Mon 20 Oct 2025 22:01:25 +0000
Files and hashes: 1: NC9FKYs1BXFgd8eBRdSLNG0ab1E.roa (hash: AdbbA0DHP1eCkTNHXLT0EO4D6DCGT9CWxG1DEmumay0=)
2: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: 5J4xEcqcOrskeReiffquyn9QcRnMZ7F1sw6Q8+79khc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:db:d5:d6:dc:38:c8:4a:41:d0:37:f4:14:64:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Validity
Not Before: Oct 19 22:01:25 2025 GMT
Not After : Oct 20 22:01:25 2025 GMT
Subject: CN=8ff7b7ae29aa3c7984bc2afd8f84f3f87e4ca2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:ef:c8:be:86:31:a6:4b:e4:bd:05:50:85:
a0:60:83:24:62:b3:42:95:f7:a9:fc:bc:f0:c3:b2:
6f:c9:f4:c3:46:57:b3:0b:0c:b6:0f:13:13:ee:94:
bb:b1:3b:47:3f:16:b9:18:f4:28:c3:75:90:42:5e:
24:d0:61:bf:c6:15:b2:4c:08:15:68:bc:b7:df:b9:
7e:a0:eb:4d:b8:b6:b2:f8:eb:73:23:5f:d2:c2:b2:
e8:1c:9b:56:3e:35:04:3d:6d:26:47:ea:43:74:61:
1c:1f:41:07:a2:dd:2a:28:ea:a0:bd:d7:7f:0c:e3:
a7:9a:86:d5:6d:37:65:5a:05:e4:53:d6:01:0f:7b:
7e:37:0b:70:88:e2:ef:cd:da:52:df:6a:8c:ca:7e:
6e:f3:bc:b6:39:e7:0c:10:ae:bb:3d:64:f5:e2:39:
f6:2c:cc:6f:fc:12:18:89:c1:5b:90:02:15:61:49:
46:49:53:f7:9e:93:a5:fb:26:de:41:3c:f8:ee:2f:
c0:e9:7e:6e:b5:10:88:ac:09:37:c6:a9:db:74:20:
2d:f8:42:02:c9:55:f8:1d:40:0d:c4:c6:6e:08:50:
ce:73:32:28:f4:6c:da:98:13:92:4d:4f:a3:1b:ec:
2f:f8:9f:bd:f9:bc:19:73:c4:bd:d9:4b:b6:01:46:
ca:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F7:B7:AE:29:AA:3C:79:84:BC:2A:FD:8F:84:F3:F8:7E:4C:A2:AD
X509v3 Authority Key Identifier:
keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:48:e3:de:7d:1c:67:e9:eb:ce:8b:cb:85:f2:a0:e1:80:00:
a2:6f:ae:77:ce:d5:ff:7d:73:08:38:6e:5d:f4:8f:02:3a:14:
15:69:8e:b2:b6:2e:1e:f1:85:04:43:3f:5d:7b:83:6f:7c:91:
9b:2e:91:61:d9:78:41:3c:63:01:bb:d7:15:7b:53:df:99:9a:
d0:8b:aa:50:88:f1:12:85:b4:ed:a1:0d:8e:95:76:f5:39:02:
fb:26:a2:fd:60:90:6d:20:d4:7f:b1:50:26:7f:cb:ac:78:8d:
35:03:c4:e6:73:35:00:2b:c8:3a:6a:01:b3:9d:14:e2:84:66:
57:7f:29:e3:0f:a8:9f:be:fb:4d:1b:c5:0f:ac:af:21:bd:ea:
b2:36:64:3e:40:91:87:0e:05:e4:d0:d5:a7:43:f4:41:9a:4e:
18:ef:c2:01:c1:a8:18:ec:37:49:e2:86:0d:88:a6:78:71:9f:
cc:d3:db:a0:f7:44:94:7a:c6:4f:9f:45:a6:cb:fb:3a:bb:62:
8f:77:ab:79:38:21:95:43:82:bd:2e:5a:9b:b3:3f:2e:e7:f0:
46:16:4f:9b:ab:6f:6c:53:51:5a:da:81:ac:2c:67:bc:9f:ae:
f4:e9:6b:c3:95:d8:50:b8:20:d5:c2:80:63:6f:7a:5d:64:74:
37:92:3d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:08:50 2025 by rpki-client