Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
File: T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft (raw, json)
Hash identifier: sijHFZ3j88G5wVewPCcdBjBlysuXz5WaXXI+iBUaU5o=
Subject key identifier: 01:2E:19:3E:36:35:5E:A8:E4:79:83:04:06:5A:04:F2:46:2D:80:79
Authority key identifier: 4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
Certificate issuer: /CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Certificate serial: 0199FD34499C5EC93474A196668FEF604560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
Manifest number: 082C
Signing time: Sun 19 Oct 2025 16:01:26 +0000
Manifest this update: Sun 19 Oct 2025 16:01:26 +0000
Manifest next update: Mon 20 Oct 2025 16:01:26 +0000
Files and hashes: 1: O4ZnlVhhx3zd5V2McWkK5lXbTfU.roa (hash: 1/S6pfTZfcr0nY65o+eT5Gg2Gukw2uRx/s1OdeKWKmE=)
2: T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl (hash: D4x1so65V9lbnfjwgNY2dvRW08Iy1XYv2BfxXbgG3zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:49:9c:5e:c9:34:74:a1:96:66:8f:ef:60:45:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Validity
Not Before: Oct 19 16:01:26 2025 GMT
Not After : Oct 20 16:01:26 2025 GMT
Subject: CN=012e193e36355ea8e4798304065a04f2462d8079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:4a:48:c8:1f:03:c8:c1:e4:f6:c9:24:26:
ff:13:cd:60:82:2b:3b:5c:0a:a7:9a:e1:81:93:10:
f3:1c:6b:b9:b6:69:ec:27:05:85:f8:1b:88:ac:57:
2f:d8:c5:ff:f6:de:4b:96:14:b3:93:d0:0d:ea:ec:
41:99:79:49:b4:4b:ec:7a:e9:18:76:09:0c:c5:7d:
af:43:80:29:39:bb:f9:49:5c:db:c3:fa:cd:43:e0:
65:1d:94:23:53:62:a6:53:58:57:e7:24:60:71:ff:
38:44:6a:79:53:05:9a:3a:bd:2b:8b:7b:1f:35:54:
83:45:89:9b:12:b9:7e:20:c5:f9:4b:7d:19:9a:dd:
15:dd:de:4d:ad:a3:4f:39:42:47:a5:42:48:a4:a7:
13:8d:07:bb:66:3c:ea:95:9c:89:68:be:36:bb:1c:
81:79:c1:7f:1e:42:00:3a:2c:79:81:80:18:90:f3:
a6:b7:b2:14:46:d7:8b:e4:58:a1:bf:0b:e7:5e:63:
63:1e:41:c4:bc:1c:1c:b5:08:5b:43:8a:ab:16:3d:
ad:76:11:8c:d4:fc:59:82:68:62:ae:58:2f:df:ec:
a8:98:4d:4f:73:1f:6a:a5:3b:00:62:e3:fc:f4:ee:
72:ad:9a:0e:3e:48:09:7c:6b:00:f4:f1:e8:45:72:
3e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2E:19:3E:36:35:5E:A8:E4:79:83:04:06:5A:04:F2:46:2D:80:79
X509v3 Authority Key Identifier:
keyid:4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a9:3d:e1:66:cd:08:ba:8b:0c:f6:f3:c4:71:45:ca:ba:8f:
f8:28:8a:c5:0b:bf:4f:d6:88:07:3f:fc:5a:5a:2c:fb:9d:d7:
a0:e6:9a:7f:ff:b0:65:7e:1e:86:dd:a9:6b:b6:03:69:95:e0:
12:f9:e4:ca:15:68:70:b4:ed:03:e2:3c:db:9c:52:6a:10:2e:
d9:1d:31:e3:4c:2b:97:74:42:ce:7e:d0:04:09:d6:49:a4:cd:
ce:10:1c:a1:f6:3f:94:48:0d:d8:36:6c:b8:b9:ec:86:f0:c1:
0e:f0:78:af:73:a5:05:8c:6a:a7:55:0a:92:ef:98:3e:92:f5:
db:b1:98:09:93:48:ec:03:3c:c8:75:a0:e7:4d:82:22:01:1c:
5c:cd:28:7a:62:33:23:a2:99:89:25:cc:f7:53:9e:8c:e6:dc:
ec:a7:a1:be:27:98:a3:e3:4e:ba:15:da:2a:1c:3d:09:1c:35:
7e:64:cb:89:5d:d8:d3:84:e5:81:2b:ee:90:fb:d4:dd:f9:fd:
21:3f:2e:79:d7:6b:75:b6:56:26:49:e0:65:f9:0e:52:86:9c:
89:09:e0:4c:43:ac:42:76:f9:79:8f:73:7f:ae:44:80:3c:a8:
38:42:41:e1:77:73:51:a6:64:73:2a:26:dc:c6:6e:e2:62:8a:
5f:0c:09:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:14 2025 by rpki-client