Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
File: t4zdv8dr2iagKeqAyJh3mHRfHwI.mft (raw, json)
Hash identifier: tLvebaYmEFV1WYu5NlZhvdM4tZpzBFg06NOd8fmPqG4=
Subject key identifier: A3:E0:2D:8F:7A:5B:4B:59:7B:C9:CE:38:0E:9B:8B:36:71:4F:8D:E1
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Certificate issuer: /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial: 0199FBEBDE14C62973967CDF3CB54281E778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
Manifest number: 1396
Signing time: Sun 19 Oct 2025 10:02:42 +0000
Manifest this update: Sun 19 Oct 2025 10:02:42 +0000
Manifest next update: Mon 20 Oct 2025 10:02:42 +0000
Files and hashes: 1: 4ZMkun0YVKsQhMtugX5PoEy0_rI.roa (hash: fKBmMFAsGdJAHOCtTHbLGukOIg/BNTMMvT6hLSCBWOk=)
2: 9SX4KosI9EGxvqBg-r1JnjKT0ZM.roa (hash: WqcTzSMCYbly9wYW2w55k/ugMgucEMXzGeFeea+G7IU=)
3: t4zdv8dr2iagKeqAyJh3mHRfHwI.crl (hash: Y909SKLPg7lORS2qd6OwQfYXnBArn7c+BOjNWTQwMSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:de:14:c6:29:73:96:7c:df:3c:b5:42:81:e7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Validity
Not Before: Oct 19 10:02:42 2025 GMT
Not After : Oct 20 10:02:42 2025 GMT
Subject: CN=a3e02d8f7a5b4b597bc9ce380e9b8b36714f8de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:44:92:ee:5f:92:e9:75:29:2e:85:eb:d8:61:
e6:21:bf:bc:4b:e9:fe:f6:5a:d7:12:8a:fd:58:71:
28:03:44:ba:33:2f:04:cf:77:04:ee:42:0d:89:36:
23:4c:de:ca:0c:d6:5d:fa:0a:ff:71:ed:5f:63:ca:
54:7b:39:9c:cd:4b:cb:e7:6f:32:44:dc:80:bf:bd:
6a:35:66:2f:40:ac:8a:cb:52:c7:ce:42:33:22:67:
d6:fb:dc:a0:83:29:80:26:e5:c6:fa:14:97:5e:aa:
69:c4:1e:70:3c:2a:64:5f:09:0e:1e:d2:14:11:dd:
9c:b9:4b:1f:50:bb:11:fc:ee:4f:97:0c:f3:b7:93:
dc:41:6a:61:3f:09:f4:60:7e:fa:fe:42:bd:c9:70:
39:f2:1c:33:dc:2f:a9:05:bf:4a:88:98:c7:4a:fb:
02:c2:96:a5:6f:12:39:58:eb:f5:3c:d7:67:76:23:
df:82:a5:14:b8:7a:bd:6e:f1:c0:24:23:dd:97:62:
c4:da:85:44:37:8b:1a:ab:26:92:9d:21:7b:34:78:
27:3a:cb:b2:64:d5:a9:61:90:2d:a5:f7:65:f2:cb:
1f:cb:2e:f9:96:bd:5f:20:ab:2a:96:f8:b1:6a:9a:
ab:b0:4e:73:b5:95:8f:f1:28:52:e8:cf:a2:9e:ad:
6c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E0:2D:8F:7A:5B:4B:59:7B:C9:CE:38:0E:9B:8B:36:71:4F:8D:E1
X509v3 Authority Key Identifier:
keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:70:f5:25:d2:13:78:b7:98:4f:15:1f:0d:d2:b2:2c:03:05:
1f:80:7a:cd:d9:de:70:af:51:62:76:13:11:ee:49:fc:8b:0c:
a2:d3:04:c3:71:46:fc:57:64:9f:eb:3d:6a:c2:f3:00:05:1a:
d8:3e:6e:23:4c:91:b1:73:90:d6:2b:67:d6:2d:8b:cd:69:be:
67:b7:5f:e9:83:a8:ff:35:3f:b8:b2:1d:97:0c:1b:1c:50:0c:
08:d1:ce:54:87:f4:18:6b:4c:f3:37:b1:a7:ef:1a:80:30:32:
0e:a6:c0:e4:96:38:02:75:bb:f6:bd:b9:97:b2:20:09:32:29:
67:45:76:aa:c8:ac:7b:bb:94:41:89:77:ea:8d:33:98:d0:a8:
a8:cb:ab:29:81:c1:04:08:fd:ec:f1:e3:19:8e:fb:ea:2f:84:
3b:db:1d:a3:68:69:2a:d2:c9:77:6a:fd:ec:4f:1e:58:a2:44:
a1:0d:e2:ef:fd:fb:a0:5b:f0:8e:6e:42:1c:62:07:c6:bf:e2:
31:7a:0b:b6:49:75:b5:99:82:b4:3c:f5:9b:33:6a:75:8b:e4:
74:c1:66:e1:f6:b3:a5:53:d0:9a:a3:2d:62:67:46:43:92:aa:
35:e4:66:0c:60:80:bd:76:6f:06:93:ed:53:d2:1d:9a:28:0d:
5a:3f:25:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:38 2025 by rpki-client