Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
File: T7EQS7paPx3dLe67o0gZGfT5YaQ.mft (raw, json)
Hash identifier: ntLVjYfuBGso7gFj+mx38JDbhomS1xbMCAvxbdYp65o=
Subject key identifier: 99:8A:CC:C4:5D:72:4D:6B:0E:A5:4F:E0:BE:26:EB:EA:77:55:6E:9A
Authority key identifier: 4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
Certificate issuer: /CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Certificate serial: 0199FCC64A6AFEC9434271F2234E879BDB96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
Manifest number: 10DD
Signing time: Sun 19 Oct 2025 14:01:17 +0000
Manifest this update: Sun 19 Oct 2025 14:01:17 +0000
Manifest next update: Mon 20 Oct 2025 14:01:17 +0000
Files and hashes: 1: PHtHgmSOY6QlNjsIyECg_KW7ZYU.roa (hash: cSzW9+Tdn6riD70yyykVu3Jxk7SzmVYuL8aIL6ZeXmM=)
2: T7EQS7paPx3dLe67o0gZGfT5YaQ.crl (hash: 7rh7tCz3LnJIXXXP8Ni8OdoLGATcIxwpEdRSsZPhzMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:4a:6a:fe:c9:43:42:71:f2:23:4e:87:9b:db:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Validity
Not Before: Oct 19 14:01:17 2025 GMT
Not After : Oct 20 14:01:17 2025 GMT
Subject: CN=998accc45d724d6b0ea54fe0be26ebea77556e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:7e:b2:aa:f9:9b:90:b8:d6:ef:f8:4d:b7:
f9:b2:6c:44:05:1c:42:80:21:d7:84:d8:0b:b2:2d:
0d:7d:d8:98:3e:2d:96:69:be:d4:68:72:81:96:bc:
f7:6a:44:c7:67:b2:32:80:e2:01:a9:a4:c6:0d:97:
a0:6f:9f:45:c3:1f:e6:c0:bf:21:b8:72:d0:ee:fe:
6e:f1:8f:e2:6f:00:15:52:6b:cf:4b:03:22:7a:ff:
a1:ec:f4:b8:6a:ea:53:4f:9d:d8:e5:83:97:5d:21:
de:61:bf:c6:db:17:c2:db:ef:26:ce:12:c1:e5:28:
65:a7:8d:19:42:4f:a9:db:72:1a:46:6e:69:18:24:
ba:5a:b5:c7:9b:b1:95:02:d6:55:30:2e:4f:b5:bd:
f1:39:4f:94:4a:74:b1:52:29:e8:80:72:0c:9c:5d:
41:1b:87:6d:bb:e5:09:e4:66:99:83:e2:3d:2d:1d:
0c:79:69:62:52:dd:f6:8c:4b:22:1d:1c:89:c8:89:
9b:c8:3e:a0:1b:1a:50:ca:16:61:20:e7:70:f7:bb:
3f:d5:ec:2d:d0:00:df:9c:51:eb:72:b8:bc:7c:c3:
56:53:1e:ae:1b:e3:a4:7a:7b:95:99:00:8e:6a:d5:
94:4d:4a:0b:b0:73:60:fa:bc:78:c5:97:8a:87:55:
e3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8A:CC:C4:5D:72:4D:6B:0E:A5:4F:E0:BE:26:EB:EA:77:55:6E:9A
X509v3 Authority Key Identifier:
keyid:4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:a7:73:61:80:d4:22:8a:53:60:ee:0a:97:22:41:39:34:f7:
08:ca:2a:58:db:3b:c0:a1:15:b2:61:3c:0a:3d:4b:e8:d9:96:
46:b6:ab:3a:ed:cf:ae:2e:29:7c:e3:6f:08:49:8a:0e:9a:b5:
3e:35:6e:73:1b:7b:e6:41:8d:74:67:1d:51:e9:6f:b4:53:34:
6d:a1:65:31:dc:2b:e6:68:b9:c7:f6:4c:17:b4:df:d2:9d:6f:
95:17:08:de:73:b2:32:8b:88:86:4c:85:a9:97:8d:36:58:21:
5a:08:ee:28:7c:89:51:79:03:b1:ee:b9:9a:e7:9d:3b:f4:5b:
67:80:b7:87:49:ff:db:c7:fc:da:ac:5e:24:02:a4:22:3d:5f:
8d:ab:9c:3f:bb:36:23:97:df:55:58:a7:c4:cf:db:a9:f9:98:
1d:f4:2a:15:5d:d8:bd:33:35:fe:1c:27:fb:f7:11:e6:7c:84:
41:1a:f9:ed:f4:8a:9a:c9:84:57:58:f0:29:b6:fb:cd:ef:76:
b4:ed:37:2a:66:09:2b:0b:1b:be:71:9d:ce:ca:d4:93:91:0f:
26:bf:41:c5:3c:ed:cd:f6:02:ae:21:06:fc:1c:e5:c3:f1:e1:
33:cf:0d:7f:b6:30:1b:1d:52:2f:18:a8:6c:0d:5d:70:21:fb:
da:83:55:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:35 2025 by rpki-client