Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
File: T893EF-VB1zlhdQn6XdU6PAHqLk.mft (raw, json)
Hash identifier: WLdVCRGPz9GvjyZorCKEnNKR+JdVx4k5QsYlrz47Da0=
Subject key identifier: 74:8C:C7:97:BF:0A:58:58:1A:3D:EE:E2:80:55:77:B3:B6:74:EB:CE
Authority key identifier: 4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9
Certificate issuer: /CN=4fcf77105f95075ce585d427e97754e8f007a8b9
Certificate serial: 0198D66152900DE000A4FC30D92B0ED58DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
Manifest number: 09AA
Signing time: Sat 23 Aug 2025 10:02:39 +0000
Manifest this update: Sat 23 Aug 2025 10:02:39 +0000
Manifest next update: Sun 24 Aug 2025 10:02:39 +0000
Files and hashes: 1: T893EF-VB1zlhdQn6XdU6PAHqLk.crl (hash: heQZ65mzCGVpDwS1C9WblXpnO1el/UJ5E2SE71yhXKg=)
2: T9LZjeWP7v9MjImSQxwCyXQEIjQ.roa (hash: ryZ/pHb+xQxL2NrfTWfDmvDfQVr6T5F6jZbDhNZwl/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:52:90:0d:e0:00:a4:fc:30:d9:2b:0e:d5:8d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fcf77105f95075ce585d427e97754e8f007a8b9
Validity
Not Before: Aug 23 10:02:39 2025 GMT
Not After : Aug 24 10:02:39 2025 GMT
Subject: CN=748cc797bf0a58581a3deee2805577b3b674ebce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:a0:35:d4:1b:82:b3:6a:34:f0:2d:fd:99:
67:fd:ab:38:7c:67:40:ab:31:33:77:c7:78:e7:44:
3e:0d:c5:84:d8:34:de:04:d9:03:e1:29:0b:8a:34:
04:f4:4e:77:91:29:18:6c:06:73:f6:1c:29:1e:14:
d3:5c:c9:55:c0:9a:2f:f0:59:27:93:07:79:63:6c:
ab:e1:54:23:60:3a:f0:cc:b9:ba:45:a1:a0:3f:4a:
72:89:52:12:db:73:b0:5c:8b:f4:24:8c:82:fe:49:
d5:5c:78:ba:41:8d:1e:4a:bd:b6:bc:9f:40:31:f0:
f3:a2:bd:3b:63:43:25:53:ed:09:da:cc:f4:f7:b3:
02:45:94:1d:39:8e:ba:29:e9:c9:76:57:f7:c4:fc:
8b:1f:a8:dc:04:60:61:ba:8b:61:1f:f8:82:68:ae:
a2:0f:a5:c3:2e:7b:e1:49:b0:fd:d6:41:f2:6b:3c:
1f:2c:55:65:17:2f:7d:b2:28:3a:9d:84:60:f8:82:
d0:ba:44:89:ac:e6:8d:d1:cd:08:9a:37:7b:f8:06:
96:c0:28:df:10:c8:76:b8:f4:eb:d8:bc:f4:42:ff:
fa:92:52:e8:38:f4:68:da:6a:d8:7b:bf:29:d4:d8:
c3:2f:0d:7a:b2:f2:e1:35:e8:c9:4f:65:22:6f:57:
9b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8C:C7:97:BF:0A:58:58:1A:3D:EE:E2:80:55:77:B3:B6:74:EB:CE
X509v3 Authority Key Identifier:
keyid:4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:27:65:bd:b4:98:33:03:1e:c7:e7:50:0d:cf:44:48:4b:c0:
55:37:ca:3c:16:00:8f:73:91:92:9f:73:8a:57:81:8c:d4:9a:
c5:74:8c:17:c7:6c:19:e5:97:d7:59:55:86:ce:d8:60:ff:08:
7a:36:82:38:01:77:da:b2:5c:2a:a7:74:e6:d3:8a:72:26:d7:
c9:e1:5f:3d:86:6f:84:ec:d0:33:91:87:94:d6:3e:2c:32:6c:
b5:08:d0:8f:13:5f:7a:b9:e6:ca:da:04:a1:c8:f5:32:3b:fb:
ed:bb:e8:8b:e9:8e:ae:c1:bd:f6:96:f3:2e:07:ee:91:84:89:
e1:ba:16:0a:fe:67:fc:64:a7:08:ca:29:82:f5:26:2d:4f:81:
45:54:28:1c:5d:48:1b:02:71:1d:6a:73:37:9f:41:71:c4:c1:
81:bc:2a:6e:50:14:7d:07:ef:77:ad:50:5e:5c:73:fe:1e:b8:
78:34:e0:12:90:dd:da:01:f2:a9:ee:e1:73:4f:24:e0:8d:91:
de:5a:6f:c8:08:d1:b2:bf:7e:79:fe:3f:b7:d2:af:0f:86:39:
a6:ab:1a:8a:a4:0a:e3:a6:d1:cb:91:df:51:0c:8b:82:f1:b0:
4b:ae:65:03:13:52:37:e8:52:e4:e3:f8:f6:4c:71:14:b3:1a:
5b:76:71:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:39:59 2025 by rpki-client