Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
File: T0d31JE06rdaecERgyrX7OcmcUU.mft (raw, json)
Hash identifier: ZM/7y/y86d9UbIDHikDomnkxhguG3aOsSdqrWoXDiUc=
Subject key identifier: B8:25:B3:06:2E:F8:53:17:E7:45:6F:16:ED:A0:CC:6D:58:D0:FE:6B
Authority key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
Certificate issuer: /CN=4f4777d49134eab75a79c111832ad7ece7267145
Certificate serial: 0199FCFD5BD987C0791FD93FB515743B7B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
Manifest number: 064F
Signing time: Sun 19 Oct 2025 15:01:26 +0000
Manifest this update: Sun 19 Oct 2025 15:01:26 +0000
Manifest next update: Mon 20 Oct 2025 15:01:26 +0000
Files and hashes: 1: T0d31JE06rdaecERgyrX7OcmcUU.crl (hash: 31d6+ttjJl0GBGZ2OySAMRVg3nEHuANS7xGMgdhc5Wc=)
2: xBIT4PfyqTeMr9EZAxQSDFw_tsM.roa (hash: +1108t61ZAdcCTRierOezlIx1u0lJ4yi+OpdSaQwRQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:5b:d9:87:c0:79:1f:d9:3f:b5:15:74:3b:7b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4777d49134eab75a79c111832ad7ece7267145
Validity
Not Before: Oct 19 15:01:26 2025 GMT
Not After : Oct 20 15:01:26 2025 GMT
Subject: CN=b825b3062ef85317e7456f16eda0cc6d58d0fe6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:80:7d:7b:36:d1:04:6f:c3:3d:cd:20:6d:76:
a0:e4:09:4b:ec:d1:8c:df:5f:8f:0b:1c:6d:f5:c5:
cb:db:9c:fc:1e:fe:3f:73:72:0a:fe:db:77:08:a4:
51:53:90:53:ef:01:06:c3:28:63:7c:7f:25:2f:1d:
82:94:43:86:2e:55:5b:e8:96:20:c8:4a:85:83:73:
2a:4b:78:52:76:7c:34:58:2e:76:85:31:80:05:84:
c6:35:4b:00:02:cb:d9:60:e7:3a:b5:8b:11:29:1b:
da:6f:e0:80:94:53:57:9b:86:9b:3c:81:1c:95:e7:
16:10:37:79:05:d2:d9:fb:63:7e:d5:b0:5b:a0:a2:
99:b5:7c:62:3d:fd:e4:84:25:23:25:4e:6a:4c:9c:
10:18:34:42:14:cb:22:b7:25:71:02:60:43:4e:c6:
ff:de:0a:f5:9d:76:46:e3:89:60:4c:f1:41:b7:06:
d9:a5:29:c4:e9:75:06:b3:73:07:c0:17:6a:04:1d:
54:91:1d:42:09:04:74:67:c5:01:1e:d5:b0:00:9f:
e1:58:3d:54:26:2c:4e:76:3f:7f:91:b7:25:d1:55:
a2:d9:ee:6d:e2:65:db:fe:b5:95:9f:46:1c:1b:ee:
9b:cd:ae:f4:f7:00:a8:4a:d3:03:d3:49:36:c5:9b:
cf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:25:B3:06:2E:F8:53:17:E7:45:6F:16:ED:A0:CC:6D:58:D0:FE:6B
X509v3 Authority Key Identifier:
keyid:4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:cb:85:61:eb:ec:f7:e5:1e:fe:43:50:24:07:4f:e2:8c:b6:
f7:29:5a:e4:d6:c9:57:43:34:a0:23:34:7d:b3:17:d6:d8:58:
6b:a0:16:d7:ae:66:8b:61:b9:b6:7e:25:7d:58:23:64:6f:39:
a2:ed:67:72:57:51:2c:ee:91:90:41:25:eb:f4:a6:81:b4:8f:
31:bf:a3:16:13:bd:c4:69:9e:52:11:0f:ba:cd:60:dc:f7:79:
69:d8:29:42:09:6f:0c:a0:09:9a:f8:a4:39:08:2b:58:20:31:
3d:bc:5c:58:e0:c1:47:9c:7f:b8:57:38:e8:ef:51:d6:a2:f4:
90:a9:dd:1b:66:5d:b2:b9:43:dd:e5:5e:cc:6c:59:91:2f:fd:
af:cb:0f:69:f9:a2:ff:4e:55:8c:9d:02:14:45:38:bb:09:78:
2f:b7:9b:67:e9:83:39:15:52:81:24:30:b0:69:03:0c:35:1d:
e0:df:c2:ad:20:24:73:97:3b:13:ec:e3:c0:57:0b:fb:b5:08:
70:ca:8b:dd:3f:0b:86:98:4b:19:76:f5:b5:38:90:55:64:b1:
bc:cc:b3:53:1a:87:fa:4a:47:58:97:4d:79:e9:f5:7b:02:5f:
52:36:d0:c2:ac:a4:4f:a5:30:da:91:fd:8e:b5:f2:de:4d:91:
45:1a:1c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:53:20 2025 by rpki-client