Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
File: T32IU5OzK17uOgv0M44Pqu88dTw.mft (raw, json)
Hash identifier: rTgNnGFIPTBopBzU7CRkC7YBd0sG5UU8/O+0jn7KhLg=
Subject key identifier: 13:CB:2E:F5:15:73:21:EC:3C:0A:5B:11:91:DA:A2:81:C2:C0:99:F0
Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
Certificate issuer: /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Certificate serial: 0198D473E57F85E1A7AB63F7676C329325EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
Manifest number: 1417
Signing time: Sat 23 Aug 2025 01:03:41 +0000
Manifest this update: Sat 23 Aug 2025 01:03:41 +0000
Manifest next update: Sun 24 Aug 2025 01:03:41 +0000
Files and hashes: 1: K_MyGvHR4IdSBZBjdPl8MukbNFk.roa (hash: HrMHQD3uVG8sdR811mtsQpZxidNNmctDC5Taskmcc7A=)
2: T32IU5OzK17uOgv0M44Pqu88dTw.crl (hash: dVJbMA9R4tdBjTfUd/cuaaZlBtElj76RFA5ReS1GQ2o=)
3: qt5f6XAHUjkOK9CEjEv3rd6845Q.roa (hash: JhK1mHuSEOx5aV2MrmFZp4Cs5i5KltcCemHPpXmD5pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:e5:7f:85:e1:a7:ab:63:f7:67:6c:32:93:25:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Validity
Not Before: Aug 23 01:03:41 2025 GMT
Not After : Aug 24 01:03:41 2025 GMT
Subject: CN=13cb2ef5157321ec3c0a5b1191daa281c2c099f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:63:1e:8d:ee:3e:60:70:2d:6f:cb:7d:11:d1:
41:f5:8c:ca:fa:68:40:7d:fa:52:92:41:f6:f7:f0:
1b:cf:83:d4:b6:64:a3:0c:7c:2e:e2:20:97:4b:c3:
b8:aa:ee:03:b0:e3:58:b3:29:3c:b0:2b:d7:03:64:
bd:53:41:68:65:8d:d0:c4:39:68:c5:63:59:9c:6d:
eb:bb:7e:2c:d0:f4:07:cb:83:8a:b9:40:18:c2:05:
c6:b1:ff:2b:5f:0a:6b:78:27:c1:04:c5:e6:28:28:
e6:bc:ad:ba:51:6a:1c:84:ad:2e:ec:97:c3:09:a8:
34:3a:e4:7c:8e:40:08:79:c6:59:af:2b:c2:60:34:
a4:23:fa:8e:91:1f:a7:77:07:35:9a:62:3c:36:fe:
2d:78:a4:03:b5:d9:9e:20:15:0c:36:7b:42:65:4e:
bb:13:bb:cd:ba:37:06:f0:59:bb:00:ef:26:7a:82:
92:1d:4d:7f:1d:24:91:7c:07:8d:ff:fe:32:76:47:
19:0a:b7:37:4c:4b:8c:42:4e:04:f7:25:2a:61:6e:
6d:c0:b2:4a:87:c9:69:60:47:47:a0:be:fc:96:a3:
26:da:98:3c:3e:0f:7a:12:81:f4:da:36:05:63:bd:
8e:5c:14:15:a5:34:de:13:f1:5f:87:8e:67:70:5e:
9b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CB:2E:F5:15:73:21:EC:3C:0A:5B:11:91:DA:A2:81:C2:C0:99:F0
X509v3 Authority Key Identifier:
keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:08:1f:48:10:e2:92:29:1f:88:49:c1:0d:2f:e2:be:64:5f:
37:6f:8d:08:06:4d:f4:56:30:e8:34:48:b7:ad:1f:e7:02:9f:
78:fe:dc:a4:48:71:64:f9:f1:db:25:0b:44:24:5f:a6:aa:92:
bc:c2:0c:e5:b9:25:86:ed:ef:e2:3d:e6:b8:a6:ee:0a:b7:5f:
37:87:2f:65:9f:5a:25:a8:24:6c:d6:37:c5:75:0e:05:8e:f8:
15:27:3f:82:32:cc:09:1e:5f:da:60:19:72:81:ce:a7:79:bb:
6b:be:42:33:f3:70:8c:03:80:4d:a9:0d:9a:70:3f:ce:de:2e:
01:72:aa:a5:83:05:ce:b3:68:ec:45:54:88:08:d4:87:90:4f:
a4:82:19:2b:0e:dc:70:07:2e:61:b8:cf:e7:0b:e1:08:40:f6:
d0:ea:27:21:ac:45:4b:7c:81:6e:ee:71:16:eb:14:f8:07:a6:
11:47:82:9d:5c:ca:96:0d:32:27:3a:9f:ea:02:63:2f:d7:09:
97:37:f0:48:59:63:b5:bc:ef:80:b0:66:bf:28:22:4c:c3:31:
cb:bf:99:71:dd:c9:2d:27:e4:f7:72:60:ba:bc:32:36:a8:5f:
dd:11:fe:39:48:81:fb:c1:33:65:49:a9:1d:8d:5d:31:ce:72:
7d:f2:d5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:25 2025 by rpki-client