Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
File: t4zdv8dr2iagKeqAyJh3mHRfHwI.mft (raw, json)
Hash identifier: 2SemwVKHQSC2Hmj3oyU01CZT1aH/cvqBUgZrgcgVx5k=
Subject key identifier: 52:72:68:68:43:4E:8A:CA:5A:EE:FB:A8:09:BB:7E:6F:AD:8E:78:8D
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Certificate issuer: /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial: 0198D65F873637972167341E0188C6D78CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
Manifest number: 12FE
Signing time: Sat 23 Aug 2025 10:00:41 +0000
Manifest this update: Sat 23 Aug 2025 10:00:41 +0000
Manifest next update: Sun 24 Aug 2025 10:00:41 +0000
Files and hashes: 1: 4ZMkun0YVKsQhMtugX5PoEy0_rI.roa (hash: fKBmMFAsGdJAHOCtTHbLGukOIg/BNTMMvT6hLSCBWOk=)
2: 9SX4KosI9EGxvqBg-r1JnjKT0ZM.roa (hash: WqcTzSMCYbly9wYW2w55k/ugMgucEMXzGeFeea+G7IU=)
3: t4zdv8dr2iagKeqAyJh3mHRfHwI.crl (hash: ef89qnqa1+9MDxdn3LY+R7cRkuZf8Lxxh70zczI4JXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:87:36:37:97:21:67:34:1e:01:88:c6:d7:8c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Validity
Not Before: Aug 23 10:00:41 2025 GMT
Not After : Aug 24 10:00:41 2025 GMT
Subject: CN=52726868434e8aca5aeefba809bb7e6fad8e788d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:da:bb:de:49:c6:37:37:89:be:3b:35:cd:
10:b7:8a:45:ca:d6:f9:84:c2:d4:79:31:64:48:0e:
e2:85:10:66:97:e1:b2:2f:38:68:f2:46:e8:de:39:
7d:eb:44:41:a7:67:1f:75:21:b9:7d:78:98:ce:cd:
b6:b4:b2:bd:ab:28:84:6e:f7:c3:d6:95:6f:ce:34:
a9:93:0e:27:0b:18:f2:75:c5:3f:55:ca:54:fe:c8:
f4:21:76:87:76:a0:f6:41:3a:49:0f:b2:5b:7c:2b:
53:9e:6b:ef:ca:bd:18:c2:3b:22:51:62:80:fd:d9:
6e:91:fb:88:83:63:86:8e:4b:a6:0c:ae:27:c0:96:
e0:c7:62:67:e8:27:67:6b:be:7d:f4:e3:70:49:8a:
59:1f:34:9d:9d:39:41:a0:a3:52:b8:8c:61:74:39:
ec:0d:ca:22:18:98:ac:fa:c2:04:7d:8c:36:d5:6e:
ef:21:19:12:a3:2f:e1:76:f4:65:af:b1:1a:c5:d7:
0c:32:54:0f:6e:fc:08:9d:d7:1f:b5:27:e6:28:d1:
de:ac:6a:47:bd:70:90:7e:44:bd:71:aa:06:a8:0b:
00:05:9d:74:57:a8:ab:08:ff:a3:2e:b4:08:ca:c5:
99:e9:00:a0:74:ef:d8:04:bc:c5:96:58:ad:72:ed:
d7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:72:68:68:43:4E:8A:CA:5A:EE:FB:A8:09:BB:7E:6F:AD:8E:78:8D
X509v3 Authority Key Identifier:
keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fb:e2:2f:3f:a9:e0:fc:c9:2b:44:19:f6:a3:3f:89:74:f7:
9b:5a:00:19:0a:e9:b3:cb:b0:7f:05:d3:35:52:06:bd:9b:16:
88:60:a6:53:99:0a:29:27:c0:54:f6:35:f9:0d:2c:c1:b6:bc:
c5:b3:b4:19:27:0b:36:ac:0a:28:69:00:1b:30:72:9f:6a:f0:
39:e0:33:54:c3:88:74:18:d8:da:3f:08:06:67:67:83:08:ca:
aa:2a:3e:18:dc:c2:dd:fb:e1:9c:07:ef:7e:d9:d3:0f:6d:44:
f0:53:87:f9:b8:a6:98:e4:f9:c2:37:0c:a2:7f:9b:78:95:49:
58:2f:02:ef:cf:a2:21:59:7a:f8:94:86:f4:ee:fc:28:60:bb:
e4:f5:c8:7a:d0:74:ad:73:6e:af:2d:e2:c1:dd:98:44:f3:d2:
aa:b7:e3:c7:b0:29:1f:3f:f6:c9:dc:06:0d:10:76:06:47:ff:
a6:29:90:61:72:01:66:2a:bb:85:ad:c7:ad:8d:f0:fb:06:dc:
ea:29:c0:cb:0b:2d:b8:3f:10:37:3b:97:4f:4d:b5:6d:be:a9:
29:e0:c8:f9:23:79:3b:0b:b2:ca:be:2b:61:f4:f0:ca:88:d9:
58:ea:a2:c4:d7:42:f1:76:cf:1b:5f:e1:96:75:71:d0:d5:9d:
88:f3:9f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:37 2025 by rpki-client