Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
File: T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft (raw, json)
Hash identifier: fp6tfi4EjR0zlHuulhXHcGLU0g43rnYEMTdRmZg13F4=
Subject key identifier: 4C:9F:DC:5B:75:8F:2D:E1:4F:FC:95:80:6D:CE:F9:44:22:06:B4:CF
Authority key identifier: 4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
Certificate issuer: /CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Certificate serial: 0198D5BC00948C0D9E8CC694EB61E830B60B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
Manifest number: 0793
Signing time: Sat 23 Aug 2025 07:02:04 +0000
Manifest this update: Sat 23 Aug 2025 07:02:04 +0000
Manifest next update: Sun 24 Aug 2025 07:02:04 +0000
Files and hashes: 1: O4ZnlVhhx3zd5V2McWkK5lXbTfU.roa (hash: 1/S6pfTZfcr0nY65o+eT5Gg2Gukw2uRx/s1OdeKWKmE=)
2: T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl (hash: WAeJXaLRAWQzCMipFu3cU/BPNX/j+kaXZN18kjS1xjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:00:94:8c:0d:9e:8c:c6:94:eb:61:e8:30:b6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Validity
Not Before: Aug 23 07:02:04 2025 GMT
Not After : Aug 24 07:02:04 2025 GMT
Subject: CN=4c9fdc5b758f2de14ffc95806dcef9442206b4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cf:ce:9e:9a:8c:c3:32:b3:0a:3f:30:86:b2:
46:1e:07:34:97:37:56:5b:39:a6:e9:05:8f:15:1e:
2e:1b:a8:92:a6:66:72:fa:f1:55:f2:3d:03:a5:46:
90:27:44:65:66:9f:ce:f6:63:6b:a7:56:29:ad:f7:
15:5c:28:c4:3a:43:56:75:a7:3d:76:87:79:19:ba:
b7:0d:41:87:8e:ec:ba:80:56:e4:ab:a8:12:2c:a6:
ee:08:71:25:1a:37:a4:6b:72:9c:de:25:ed:48:6e:
08:c9:5e:40:65:b6:06:45:1c:10:12:20:7f:e8:73:
53:f1:48:41:43:1d:a0:d3:9e:09:50:6f:c3:77:6b:
f2:16:45:f8:e4:74:e3:ca:9b:6b:2b:2f:85:10:10:
ab:53:1c:e5:55:a6:28:8d:33:bf:fb:03:96:9b:70:
57:09:de:bd:2e:88:c9:6c:75:57:97:0c:c5:65:f5:
c1:92:16:40:93:11:2f:0e:05:a7:08:dc:f0:ed:a7:
b8:ca:2a:c0:eb:10:e6:2a:7c:42:ae:85:53:9f:b1:
e3:4a:23:60:76:e4:02:09:85:43:80:be:01:fe:c8:
7b:2e:43:d5:49:95:52:5b:c8:be:22:1b:c6:0a:f3:
54:9b:86:94:4b:e4:fd:47:ac:26:e1:2c:fa:0a:a2:
52:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9F:DC:5B:75:8F:2D:E1:4F:FC:95:80:6D:CE:F9:44:22:06:B4:CF
X509v3 Authority Key Identifier:
keyid:4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:04:0e:c8:9b:85:99:95:25:51:71:08:3a:8f:63:b5:07:27:
bf:2e:18:14:03:8c:b2:47:28:0e:fe:e7:5a:2a:a4:6d:99:cf:
2c:18:5c:e6:e6:3b:a2:18:86:00:58:9a:c7:85:6b:f4:52:6f:
ab:fe:a9:ea:35:d4:f2:38:67:92:46:ef:d9:24:9b:98:ca:f8:
2d:d8:be:c7:03:74:fb:16:18:f1:6d:6c:77:01:a8:98:90:b5:
a7:61:7d:ca:c7:b2:24:77:43:03:33:37:61:e5:34:cf:df:32:
d4:0f:9e:cf:6e:26:0d:95:bf:02:46:01:99:23:8a:15:ee:e6:
43:eb:ee:4f:02:12:6d:01:3c:98:ee:c8:25:de:ff:31:51:bd:
a1:57:59:cf:67:f3:d5:cd:b2:e2:46:42:01:9e:c0:52:82:8b:
ca:a3:83:31:95:7d:85:c1:aa:69:92:59:b3:29:20:af:21:04:
c1:ce:33:75:19:d2:a4:eb:fc:26:4b:73:cd:0c:2e:33:7d:cd:
ef:0c:75:87:04:bb:0f:fe:d5:1b:f4:a3:7d:91:4b:da:16:f5:
23:73:3f:74:b3:8c:70:66:b3:e0:f7:04:e2:9f:3d:08:82:80:
fb:3f:e6:b2:dd:1d:f7:ab:aa:2f:ef:a0:9b:ef:66:34:97:cc:
4f:24:bd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:50 2025 by rpki-client