Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
File: T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft (raw, json)
Hash identifier: vcI/VbKaetEBgaA1pPL5l92MWseqz06VUmk77aSsKuU=
Subject key identifier: A3:6A:73:06:B8:27:14:68:E9:F6:07:13:AB:E0:3F:98:0A:95:3A:40
Authority key identifier: 4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
Certificate issuer: /CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Certificate serial: 0198D4E0B2FE26E3541DB4338C525905657B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
Manifest number: 02F4
Signing time: Sat 23 Aug 2025 03:02:32 +0000
Manifest this update: Sat 23 Aug 2025 03:02:32 +0000
Manifest next update: Sun 24 Aug 2025 03:02:32 +0000
Files and hashes: 1: S0SO0HyBkdo3a_iLFGbpFh-3688.roa (hash: 4aaFEmUhkZXusyFZ1zN2v+eLcgATutmFWhO+KpO/kig=)
2: T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl (hash: Mg7Q+zUH/oBMtKh4gOhGU+QrVeKU6fawqvc56Jem3Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b2:fe:26:e3:54:1d:b4:33:8c:52:59:05:65:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Validity
Not Before: Aug 23 03:02:32 2025 GMT
Not After : Aug 24 03:02:32 2025 GMT
Subject: CN=a36a7306b8271468e9f60713abe03f980a953a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:df:c4:3b:33:f2:79:77:46:de:63:df:e5:
ad:cd:8f:2e:42:2a:c0:9a:44:6a:de:36:f8:13:01:
2b:a0:eb:f1:51:85:91:df:94:29:f7:07:fe:5f:d1:
28:84:27:1a:d6:5f:4e:b7:dc:6e:69:18:80:da:18:
06:be:53:91:2c:43:2c:be:4c:f8:09:84:4f:63:ca:
c8:20:14:3b:f1:96:f4:48:96:6c:a2:30:44:62:b7:
d7:bc:09:e4:af:7a:0a:a6:4a:34:94:85:31:13:74:
e0:99:e5:22:7e:48:8a:52:8d:28:f1:67:c1:b7:e5:
5f:95:c1:5e:26:1c:b3:3a:c2:23:41:60:01:56:0c:
57:60:c0:60:d9:9d:8b:7c:7a:bb:35:5e:ff:8b:1b:
74:7d:92:2a:bd:eb:e5:2d:7f:24:38:9c:67:93:84:
40:b4:92:23:d5:07:b8:d2:70:8c:6a:1a:e3:b3:61:
0f:5e:74:77:f7:ed:ed:43:fd:fe:95:cf:80:fb:8e:
40:3a:78:8a:e4:76:c0:70:bd:17:11:33:50:8c:eb:
63:f9:02:7b:84:f9:c5:9d:00:df:14:28:60:33:a3:
d4:f5:e8:58:f2:93:56:94:7d:92:e8:fc:1b:e9:6b:
8a:e2:93:0e:fd:a1:9b:ad:70:e9:70:45:c4:9c:fc:
a9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6A:73:06:B8:27:14:68:E9:F6:07:13:AB:E0:3F:98:0A:95:3A:40
X509v3 Authority Key Identifier:
keyid:4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2b:86:75:88:f7:f4:c5:6d:fd:3d:83:d6:a2:5f:fb:fa:cd:
ea:11:55:5c:b7:e0:fd:60:ef:fc:12:00:94:8a:c8:3b:9a:ca:
61:4e:8c:34:97:33:c9:5c:48:f2:21:74:60:a4:3c:99:2a:53:
85:bc:aa:25:0a:f0:10:23:63:56:c3:55:c2:3d:e7:50:33:32:
86:de:d1:bd:f5:ac:c4:34:67:a0:a1:08:60:3c:8c:0b:ee:44:
bd:5f:c2:8b:b5:cc:6b:4e:11:f7:9b:4a:e1:cd:b0:14:00:a5:
ea:4e:c5:80:38:5e:ac:21:f4:a7:db:ae:b0:43:e0:1c:b6:43:
b8:d0:e5:33:33:13:a1:6c:2f:2c:91:b6:ed:60:e6:1b:30:8e:
e7:14:c3:43:18:02:5b:b1:96:a8:4b:0f:c2:58:00:f1:48:8c:
2e:9b:6f:b4:e9:44:64:19:7d:27:dc:c2:29:22:ec:94:68:d7:
00:43:b8:e7:e0:ee:64:42:58:3c:af:fa:97:31:7c:3a:1c:17:
f5:ad:11:92:7f:27:2c:e5:4d:e7:36:41:9c:f4:46:42:67:eb:
b7:d8:13:41:96:bf:7a:bc:e2:f1:a2:f6:7f:57:d0:57:9c:18:
78:f5:54:54:1b:c8:ed:87:d6:62:c6:cf:22:21:94:3f:99:05:
26:d1:7b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:56 2025 by rpki-client