Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
File: T7ZXbs2iUkbfcNenLhz_-tiI6js.mft (raw, json)
Hash identifier: xTyC8JcQ2wBlDVu/ja37GBz3yPC4HXPE0j1yQ2jeNoY=
Subject key identifier: 79:4D:E5:BC:83:80:A0:38:82:EC:B8:56:34:95:FC:49:83:07:10:A8
Authority key identifier: 4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
Certificate issuer: /CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Certificate serial: 019A01479652AA99C421BAC642F01EE95081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
Manifest number: 0687
Signing time: Mon 20 Oct 2025 11:00:59 +0000
Manifest this update: Mon 20 Oct 2025 11:00:59 +0000
Manifest next update: Tue 21 Oct 2025 11:00:59 +0000
Files and hashes: 1: T7ZXbs2iUkbfcNenLhz_-tiI6js.crl (hash: HNhgNlHv/MrU4pz/RIkCnqqxo6q5TjvPlR7SlJDwbMg=)
2: q0JCtn0ymXJ_44Fp2RsnS-aL5Os.roa (hash: ol9vwFP2kye7kweAuJ86LI17vpYzbBP1gC/LI4vVUEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:96:52:aa:99:c4:21:ba:c6:42:f0:1e:e9:50:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Validity
Not Before: Oct 20 11:00:59 2025 GMT
Not After : Oct 21 11:00:59 2025 GMT
Subject: CN=794de5bc8380a03882ecb8563495fc49830710a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ac:69:bb:46:66:5a:b0:d4:ef:f3:c1:e0:d0:
48:52:8f:98:65:5c:9d:df:69:38:1d:55:06:d9:d9:
6d:f5:3a:0a:5c:30:5f:b7:a3:b8:b3:46:df:3f:40:
1c:71:4b:17:cb:9f:f7:7b:49:d5:00:03:7b:0e:f9:
bc:3a:e0:ce:66:f4:7e:9a:5c:1d:3d:30:6f:cd:4a:
3a:c3:51:60:12:a8:ff:b5:30:fb:6c:b3:21:2c:b9:
4c:6e:2d:db:13:82:4d:59:3d:16:f1:ea:b4:b9:68:
47:89:7f:cb:9e:4c:8b:47:ce:93:f1:19:33:ed:95:
a7:4d:27:45:ef:1a:c8:7d:69:e5:5c:d7:c4:ef:8d:
9a:1e:18:1b:bc:c5:3b:44:46:3c:fe:04:59:1b:42:
d4:47:02:71:c8:72:3c:ed:93:0c:59:d4:fa:43:47:
da:06:a0:bb:ec:fc:b0:86:09:c0:59:c9:0e:87:70:
1c:a4:75:e4:2f:7c:87:d1:fd:c4:a7:0b:48:bc:98:
9e:df:18:0a:3c:72:72:78:99:4b:4b:d9:a0:b0:02:
9c:f5:48:a9:c4:23:4f:86:5b:d0:c2:66:f7:d9:7c:
8c:81:a7:95:c1:d5:ef:5d:ca:ac:cc:c7:26:94:2e:
1f:83:88:67:2e:d1:7b:47:c4:0b:16:d1:e2:f3:ec:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4D:E5:BC:83:80:A0:38:82:EC:B8:56:34:95:FC:49:83:07:10:A8
X509v3 Authority Key Identifier:
keyid:4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:da:c4:e6:98:0d:4b:d0:e4:54:6e:58:0e:96:be:70:8b:15:
ff:d0:36:a5:2d:83:03:23:d7:cb:79:1f:8f:2e:ed:30:cf:eb:
49:24:e5:ec:6c:c9:aa:ad:5d:81:63:b6:28:7a:2b:bf:73:e4:
73:0b:9b:ad:59:5d:3a:a3:ae:f4:d8:f5:83:76:5d:64:3f:a0:
fa:21:c4:fb:61:61:c0:c9:33:ce:e3:c5:53:ca:16:4f:5c:62:
81:1a:f0:9c:ba:ce:23:63:5b:71:c3:56:a9:dd:a4:df:7e:31:
81:9f:59:e1:b2:e9:76:05:c4:4e:20:e2:77:74:fb:1f:b4:12:
eb:3a:56:66:bd:b2:89:7a:4b:f0:6f:3d:e0:b6:14:3c:dd:57:
0d:88:5b:40:fe:22:cf:b6:00:77:7b:e9:0c:59:90:fb:12:d4:
44:02:fb:71:c8:48:4a:0a:ee:22:5f:a8:cd:4f:de:26:9c:78:
c5:ac:94:2c:d1:41:15:84:8c:67:9e:77:cc:ad:32:39:7b:af:
ad:9c:0e:ac:9e:9b:8e:93:ac:fa:59:15:1d:ae:d8:18:74:c3:
c7:42:2e:bc:bc:18:fa:8e:a8:12:5d:72:cf:28:e2:30:24:79:
65:c7:92:ff:81:d9:75:d4:da:85:fd:3c:a4:a0:38:2c:6d:c9:
1c:15:37:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:15:30 2025 by rpki-client