Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
File: T0d31JE06rdaecERgyrX7OcmcUU.mft (raw, json)
Hash identifier: PV/PbX1PRrH+QnTo+0nA4SbyPEovyhyJkseDaIBxtZ4=
Subject key identifier: 66:9A:47:7B:E8:76:C7:26:11:8C:08:04:9D:75:D9:D8:4E:A7:43:B8
Authority key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
Certificate issuer: /CN=4f4777d49134eab75a79c111832ad7ece7267145
Certificate serial: 0198D7A91243CABA09E037E005779119E3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
Manifest number: 05B7
Signing time: Sat 23 Aug 2025 16:00:38 +0000
Manifest this update: Sat 23 Aug 2025 16:00:38 +0000
Manifest next update: Sun 24 Aug 2025 16:00:38 +0000
Files and hashes: 1: T0d31JE06rdaecERgyrX7OcmcUU.crl (hash: f72uVKXqPvt/zusOo0T4ogekwLnSdUBebMX+TRRBbRY=)
2: hhgRHJVnB3DztK66fHImmHJUfiY.roa (hash: ywnZNCltyc1wn94Hs8Pg9jk2EOzb5fqb+j6rupGe/7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:12:43:ca:ba:09:e0:37:e0:05:77:91:19:e3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4777d49134eab75a79c111832ad7ece7267145
Validity
Not Before: Aug 23 16:00:38 2025 GMT
Not After : Aug 24 16:00:38 2025 GMT
Subject: CN=669a477be876c726118c08049d75d9d84ea743b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:69:ca:48:0e:d0:bc:40:10:fa:0b:b0:68:91:
dd:08:64:ee:1f:fa:d2:48:76:9a:b2:11:11:bf:da:
77:dd:33:19:ce:f5:fe:bd:ad:98:dc:70:eb:b3:f7:
ea:f7:f2:2a:f2:29:73:92:87:c7:c5:ed:f3:c3:e8:
8f:6f:58:5c:6b:b8:70:8e:1d:71:4d:6f:10:ac:0f:
e8:b4:7d:95:a6:04:97:8e:a6:a7:cc:06:84:0c:3a:
24:b2:cd:c1:1d:49:7f:a7:26:ef:79:33:5b:24:00:
cf:ba:ae:13:8f:70:fa:ba:54:55:c6:08:a8:df:39:
9b:44:67:34:ef:13:33:d3:0c:b6:fb:d4:1b:4d:e2:
c3:d2:60:d4:ca:77:9e:90:ba:ed:59:80:c2:ba:f7:
bf:cb:db:6a:33:24:58:0d:46:bf:17:38:0a:51:2d:
02:c7:4b:af:ad:3b:a1:7a:db:80:c8:7a:9c:be:9d:
d7:93:17:b4:e3:f0:26:94:e9:77:e8:81:ce:c8:16:
a3:c3:ef:ae:ff:86:ff:d1:d8:0a:9c:9b:c0:2d:e9:
d1:2b:95:32:69:83:a6:7d:36:c1:6b:3e:27:ad:a0:
a1:d1:a0:c0:be:13:1b:1d:13:1e:62:46:6e:f5:5e:
f0:27:3d:14:2a:d9:44:c9:8a:4f:ef:f6:f3:c4:e7:
c3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9A:47:7B:E8:76:C7:26:11:8C:08:04:9D:75:D9:D8:4E:A7:43:B8
X509v3 Authority Key Identifier:
keyid:4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:9e:31:eb:6c:2e:79:d2:19:22:cd:78:34:a9:85:3c:8b:d9:
89:a7:f8:a6:7a:87:71:1b:13:f4:bb:a3:89:d9:44:a2:0a:f3:
aa:68:4f:b8:ae:d9:f7:a8:96:e4:20:38:70:f3:a1:d1:98:e5:
a4:27:37:df:fa:cb:96:86:8a:92:8e:e7:22:a2:cf:e4:3e:b1:
3a:90:07:94:9d:ad:b7:19:3b:40:ff:58:bd:64:70:73:33:80:
13:52:b9:b1:a1:1b:ba:28:b3:43:9a:0f:87:2b:77:82:38:6f:
43:8f:da:e7:30:14:1c:f9:56:2b:c1:da:de:c5:2c:76:88:97:
07:b7:d8:21:d5:3d:37:8d:11:cb:ca:d8:ef:05:af:7f:c7:d7:
75:f8:dd:93:01:23:0b:1a:b7:1f:67:49:c3:34:00:81:79:2c:
bf:d4:4c:81:47:09:16:a8:2a:f3:ac:9c:76:6c:09:be:4a:14:
8f:2b:62:55:12:8e:71:6f:01:1b:94:79:1b:d8:31:b5:90:48:
3e:54:6e:0a:f7:3b:d7:c5:cf:d3:6b:d0:c8:8a:99:8d:72:6a:
66:f5:c9:4c:70:81:f5:be:21:97:23:97:8a:ca:67:43:e8:f8:
f9:e2:bc:4c:68:25:78:e6:71:66:12:ac:87:30:50:10:69:af:
b9:6c:89:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqRJDyroJ4DfgBXeRGeP3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNDc3N2Q0OTEzNGVhYjc1YTc5YzExMTgzMmFkN2VjZTcy
NjcxNDUwHhcNMjUwODIzMTYwMDM4WhcNMjUwODI0MTYwMDM4WjAzMTEwLwYDVQQD
Eyg2NjlhNDc3YmU4NzZjNzI2MTE4YzA4MDQ5ZDc1ZDlkODRlYTc0M2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGnKSA7QvEAQ+guwaJHdCGTuH/rS
SHaashERv9p33TMZzvX+va2Y3HDrs/fq9/Iq8ilzkofHxe3zw+iPb1hca7hwjh1x
TW8QrA/otH2VpgSXjqanzAaEDDokss3BHUl/pybveTNbJADPuq4Tj3D6ulRVxgio
3zmbRGc07xMz0wy2+9QbTeLD0mDUyneekLrtWYDCuve/y9tqMyRYDUa/FzgKUS0C
x0uvrTuhetuAyHqcvp3Xkxe04/AmlOl36IHOyBajw++u/4b/0dgKnJvALenRK5Uy
aYOmfTbBaz4nraCh0aDAvhMbHRMeYkZu9V7wJz0UKtlEyYpP7/bzxOfDIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaaR3vodscmEYwIBJ112dhOp0O4MB8GA1UdIwQY
MBaAFE9Hd9SRNOq3WnnBEYMq1+znJnFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDBkMzFKRTA2cmRhZWNFUmd5clg3T2NtY1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZDBhODEtNjRiOS00Y2VjLWJhZDgt
OGVjMWJmOWZkYTJiLzEvVDBkMzFKRTA2cmRhZWNFUmd5clg3T2NtY1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jZDBhODEtNjRiOS00Y2VjLWJhZDgtOGVjMWJmOWZkYTJi
LzEvVDBkMzFKRTA2cmRhZWNFUmd5clg3T2NtY1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJ4x62wu
edIZIs14NKmFPIvZiaf4pnqHcRsT9LujidlEogrzqmhPuK7Z96iW5CA4cPOh0Zjl
pCc33/rLloaKko7nIqLP5D6xOpAHlJ2ttxk7QP9YvWRwczOAE1K5saEbuiizQ5oP
hyt3gjhvQ4/a5zAUHPlWK8Ha3sUsdoiXB7fYIdU9N40Ry8rY7wWvf8fXdfjdkwEj
Cxq3H2dJwzQAgXksv9RMgUcJFqgq86ycdmwJvkoUjytiVRKOcW8BG5R5G9gxtZBI
PlRuCvc718XP02vQyIqZjXJqZvXJTHCB9b4hlyOXispnQ+j4+eK8TGgleOZxZhKs
hzBQEGmvuWyJBA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:22:05 2025 by rpki-client