Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
File: T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft (raw, json)
Hash identifier: qQzT7a0SCSx49YDPgfOYpncUeOby4p6gRdGAqz7GIMs=
Subject key identifier: 57:A9:03:3A:4D:AD:89:85:8C:05:D1:4D:10:51:DB:7E:DA:88:96:7F
Authority key identifier: 4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
Certificate issuer: /CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Certificate serial: 0199FC58E112A9828A9007D5C233EAD62B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
Manifest number: 038D
Signing time: Sun 19 Oct 2025 12:01:47 +0000
Manifest this update: Sun 19 Oct 2025 12:01:47 +0000
Manifest next update: Mon 20 Oct 2025 12:01:47 +0000
Files and hashes: 1: S0SO0HyBkdo3a_iLFGbpFh-3688.roa (hash: 4aaFEmUhkZXusyFZ1zN2v+eLcgATutmFWhO+KpO/kig=)
2: T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl (hash: tmNzS6TEbtVwwASyxVRK8xjhRgMXnfwMNhMfg7WsiU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e1:12:a9:82:8a:90:07:d5:c2:33:ea:d6:2b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Validity
Not Before: Oct 19 12:01:47 2025 GMT
Not After : Oct 20 12:01:47 2025 GMT
Subject: CN=57a9033a4dad89858c05d14d1051db7eda88967f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:aa:4d:1a:64:14:22:5a:cb:be:6a:e0:1c:6b:
9c:7d:e6:b3:8d:e1:dc:37:28:11:ed:91:58:34:e2:
93:1c:7b:9e:f2:ba:1f:f9:28:05:d9:ab:a5:9e:08:
25:4f:82:2a:50:b2:df:3f:cd:06:ef:74:cd:a6:e2:
4a:27:1c:43:cd:3c:54:13:62:51:a8:50:62:4e:6f:
bc:0a:0c:e3:f7:91:55:59:4a:a5:34:3d:62:51:6b:
20:3b:1e:f1:e9:b9:0b:2b:76:a7:16:ce:39:99:e9:
1b:32:bf:7d:47:6d:8b:9c:e9:f1:78:e6:88:f9:a3:
18:2c:52:1b:6b:5b:8d:4d:81:06:5a:e0:8f:a1:5b:
14:85:b3:4a:8d:ae:23:cc:4a:fc:ea:1f:04:6f:49:
1c:9e:d0:91:be:94:4f:13:19:6f:77:c1:d3:df:52:
d1:31:ef:09:a5:17:30:f9:3b:26:6d:2d:43:5f:83:
76:38:74:5e:87:bc:48:f5:a5:39:13:35:93:a2:e4:
1c:91:cb:3d:5c:fd:c4:97:7b:3c:ba:01:f0:bb:63:
75:bd:2b:11:12:98:0a:a4:d7:cb:30:f8:e8:52:28:
f3:cf:26:78:cc:dc:a8:9a:d1:ba:d3:d1:27:36:f8:
85:7d:c8:0f:d5:f5:f9:e7:f3:22:8f:f6:10:75:20:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A9:03:3A:4D:AD:89:85:8C:05:D1:4D:10:51:DB:7E:DA:88:96:7F
X509v3 Authority Key Identifier:
keyid:4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c9:34:7f:8b:3d:1d:53:46:bc:02:d4:db:8e:16:68:80:d2:
c1:25:98:71:74:09:7e:42:02:7c:04:ae:7f:cf:ab:ed:b2:5c:
75:b2:37:f4:43:94:6a:cb:19:b2:a9:c6:e8:88:bf:4b:86:17:
aa:2d:7a:99:68:dc:8d:03:7a:0c:eb:22:99:ea:4c:4b:98:36:
d0:63:9e:21:fb:f3:70:e3:95:57:70:eb:bf:cf:3f:15:5f:41:
28:ad:da:95:76:42:09:84:1a:9e:c5:62:9a:6b:d3:3e:76:80:
c2:67:27:71:53:58:4d:e6:a8:8e:6f:95:bf:98:08:4a:f6:1d:
b7:09:d7:5e:c4:76:b5:f5:8d:3c:20:79:45:e0:b8:37:72:6d:
eb:fb:ce:5e:c7:29:85:b4:0c:8a:74:c5:f1:3d:64:3d:23:9c:
a2:5c:28:65:c8:fb:b3:aa:81:cc:30:96:2a:7a:0c:cb:80:c8:
21:11:74:35:d6:9e:04:68:73:1a:9a:af:56:1a:25:0e:82:09:
ee:ee:1d:e8:c3:53:13:f1:86:2b:5d:48:97:f9:ea:a9:df:28:
ed:b5:b5:4b:2d:41:68:cc:b8:cc:7c:87:9a:28:2e:d8:b7:95:
fa:2d:51:67:63:f8:e5:cc:6a:b5:e7:45:09:77:4a:c9:e0:03:
95:b0:0b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:32 2025 by rpki-client