Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
File: t-0w6W6la5gOa3k9GobGLdXAvB8.mft (raw, json)
Hash identifier: 9D7yXrHJeG+7RyyzSiwWVmQVHf0ATK6irr+tFFbjQ0o=
Subject key identifier: D7:60:3A:50:01:B1:5E:DB:1E:74:B5:5F:E5:F3:CF:5E:80:2C:B0:28
Authority key identifier: B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
Certificate issuer: /CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Certificate serial: 0199FC585763B19DB70BD8A2EDB667A75D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
Manifest number: 0715
Signing time: Sun 19 Oct 2025 12:01:11 +0000
Manifest this update: Sun 19 Oct 2025 12:01:11 +0000
Manifest next update: Mon 20 Oct 2025 12:01:11 +0000
Files and hashes: 1: 8HKSdNrm9QMyoSA380bXaBqQQ0o.roa (hash: n0TkThrqHtx1QI4h5bmhzme4/EVU3X+pkCgBWj6DraA=)
2: t-0w6W6la5gOa3k9GobGLdXAvB8.crl (hash: m1TAqmq0TNuYjZ55D6e3vxwN1AIx2UI/eQ/iaJkiYC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:57:63:b1:9d:b7:0b:d8:a2:ed:b6:67:a7:5d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Validity
Not Before: Oct 19 12:01:11 2025 GMT
Not After : Oct 20 12:01:11 2025 GMT
Subject: CN=d7603a5001b15edb1e74b55fe5f3cf5e802cb028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:80:dd:f9:28:8e:53:c7:f8:fd:b5:04:01:
e7:90:21:fe:49:35:7d:1a:e4:c6:af:66:1b:87:1b:
b5:ea:2d:f0:06:30:1a:d9:4c:96:d5:51:e7:66:b0:
e2:ae:a6:31:04:50:65:b1:cb:ed:a8:73:b4:a5:06:
bf:f4:64:46:3b:f2:f2:5c:4e:f3:55:6c:6d:31:86:
13:f3:60:b2:20:9b:ef:99:00:8a:d2:61:9f:4c:e0:
13:f2:27:16:76:97:22:a7:25:7c:a5:86:41:13:ef:
fd:ac:14:0d:e5:f3:52:37:f6:ad:e4:05:a3:0a:b5:
f3:34:83:25:f4:b9:82:7f:a2:bb:42:44:1a:96:1d:
38:00:96:4f:9f:fb:cc:18:29:8c:48:aa:f9:1b:a5:
7b:30:08:d6:f0:e4:92:f3:f1:6a:b9:2a:4d:84:f2:
f0:a7:c1:be:ee:8f:3c:99:b1:9b:d1:ea:40:cf:62:
8b:63:09:8d:1a:c3:2a:93:b6:a7:a4:17:c6:b0:48:
48:a8:13:42:61:cf:61:2f:8b:7a:a3:f0:5f:c2:89:
23:09:3e:10:a6:c7:0b:1e:50:f8:8c:65:62:cd:8f:
d8:97:e0:67:33:1a:86:5a:bb:fb:9d:2b:82:c6:eb:
a8:b2:26:a2:e0:82:5b:50:a1:aa:f2:54:4a:eb:4b:
3b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:60:3A:50:01:B1:5E:DB:1E:74:B5:5F:E5:F3:CF:5E:80:2C:B0:28
X509v3 Authority Key Identifier:
keyid:B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d1:3d:9c:e4:26:b4:27:77:8b:d4:61:29:48:7c:63:a5:e7:
f3:89:91:44:cd:9d:ef:77:b8:72:a5:a8:ef:2e:6f:5b:e3:51:
d7:7e:48:1e:6b:48:4d:10:fc:0e:4d:d0:51:0e:7f:c3:14:bc:
e0:8f:7c:be:03:1a:87:a0:d4:eb:b6:54:8c:b8:59:48:a4:b1:
4a:73:dd:93:50:85:af:ea:18:fd:d2:c9:ad:f7:a7:c8:f0:ec:
08:ba:cc:84:36:f5:6e:f7:21:ee:97:61:dc:fd:87:e9:fd:09:
1f:d4:6c:7f:7c:80:ea:b0:c2:33:62:b5:0f:16:23:13:5b:48:
65:4d:0f:0b:f2:18:02:4c:72:82:e7:2f:25:17:53:5c:30:6f:
fa:93:76:d3:2f:45:85:3f:a8:f5:a7:16:dc:22:82:61:0c:b6:
8a:88:9b:f6:51:ea:08:4b:94:45:d9:ee:bf:ea:0b:39:8d:cf:
0a:b8:80:d5:6d:8a:f9:0d:97:15:ba:9b:4b:83:9e:4b:8b:8a:
a5:1c:21:9c:34:2b:0e:9c:29:c2:c6:f8:88:62:23:b8:87:f7:
f3:52:fe:13:ad:10:66:12:e9:77:c4:19:38:01:61:e2:8c:b8:
cf:f7:b4:3f:df:42:8a:1c:aa:a0:83:82:72:71:8b:37:57:d7:
63:ff:5e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:34 2025 by rpki-client