Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
File: t4SM0jk8F4NlegV3erMV45jrsj8.mft (raw, json)
Hash identifier: nNl2/BA4m6J6bJmgiicu8crcq7UP+yC8zRxaqdfIlf8=
Subject key identifier: E1:01:E2:4A:1A:90:12:92:AA:E8:0C:9F:DF:AA:E0:7A:BB:F0:F3:69
Authority key identifier: B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
Certificate issuer: /CN=b7848cd2393c1783657a05777ab315e398ebb23f
Certificate serial: 0198D73B227444B3708F0507A6593C4F6B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
Manifest number: 072A
Signing time: Sat 23 Aug 2025 14:00:33 +0000
Manifest this update: Sat 23 Aug 2025 14:00:33 +0000
Manifest next update: Sun 24 Aug 2025 14:00:33 +0000
Files and hashes: 1: pTPPFKoFJuWdMRGvxA7E4jX80_c.roa (hash: HeJcd3mD5OFJbnZMPOd7wMALaLnR8ioIMvdpAeeFOz0=)
2: t4SM0jk8F4NlegV3erMV45jrsj8.crl (hash: m8P/79nYSn0rhwEmGjvoOoiMA/+gB6467Xx3TOlU/58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:22:74:44:b3:70:8f:05:07:a6:59:3c:4f:6b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7848cd2393c1783657a05777ab315e398ebb23f
Validity
Not Before: Aug 23 14:00:33 2025 GMT
Not After : Aug 24 14:00:33 2025 GMT
Subject: CN=e101e24a1a901292aae80c9fdfaae07abbf0f369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:7f:a3:c9:d4:45:59:d4:86:64:f6:da:4f:
66:48:e1:7d:ca:b3:6e:a6:7f:b8:09:94:88:84:a8:
ec:70:dd:a9:e0:3c:55:aa:75:5d:80:bc:12:11:14:
d2:2e:db:14:4e:cc:5b:29:8c:3e:cf:c8:2f:ee:1a:
57:98:67:9e:68:60:cf:90:d0:16:1a:26:95:98:65:
8d:0e:73:4f:63:cf:b1:28:8c:88:fe:a9:3f:9e:77:
de:bd:98:ad:7d:61:f6:59:ea:0e:b7:7c:e1:8f:85:
70:c4:32:98:d5:f0:96:c2:29:60:12:cf:2d:47:fa:
5a:16:44:59:d2:10:61:fa:2e:9c:2a:79:d8:39:56:
09:bd:d3:17:4c:30:c5:c8:17:ab:50:8b:78:c4:bd:
c2:8c:a7:02:c6:79:85:b9:dd:1e:56:ff:43:4f:03:
ed:88:5a:81:ea:57:80:29:28:fa:c4:64:11:9f:3e:
b3:49:1c:82:d4:a1:76:79:6b:9d:03:07:06:de:0a:
8f:16:e6:d0:9e:6b:8e:ef:35:20:4a:04:19:79:07:
de:5f:72:cc:ac:3c:6c:f0:d0:f3:ee:81:cb:ba:d4:
25:0c:ab:47:3d:bf:b4:8f:6d:cf:9a:72:a2:88:d8:
7a:0e:ed:f8:83:2f:d6:8c:e7:11:31:0b:4b:8a:e8:
0f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:01:E2:4A:1A:90:12:92:AA:E8:0C:9F:DF:AA:E0:7A:BB:F0:F3:69
X509v3 Authority Key Identifier:
keyid:B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6b:c8:30:b5:83:e0:08:18:7e:ea:42:46:b3:d1:a0:91:9e:
43:3b:24:d9:70:a6:c6:11:8b:36:f1:67:be:10:56:83:9f:30:
50:53:80:37:5a:dd:58:8c:08:98:03:c9:0b:f2:de:6e:77:ab:
b0:05:69:0e:2d:20:78:4e:19:49:dd:5c:24:79:18:17:fc:1a:
04:a2:10:0b:89:a7:2e:86:65:a4:59:c5:55:7e:f2:38:5e:8a:
05:f0:d5:26:9a:99:71:93:6f:fc:15:1a:0a:f2:60:80:e5:04:
65:bc:a9:c6:cf:1c:8d:dd:68:b6:a7:aa:88:d8:a8:74:0e:a7:
64:10:97:c7:84:09:43:0b:c2:61:cf:87:70:ef:f5:b5:ca:be:
3e:bb:37:fa:c0:d9:19:18:17:d1:1e:97:f6:63:79:ec:d3:fe:
57:d9:ba:d6:3b:67:e5:42:7d:7a:02:e9:75:f1:92:76:65:ee:
74:c6:ac:e4:4f:ab:42:68:3f:b3:c2:dc:30:92:f7:e3:85:21:
98:ce:a8:70:07:67:59:43:d2:91:96:b7:97:40:2e:30:45:d5:
1c:2b:47:f4:3d:ba:a9:97:39:6a:a5:15:fb:5d:4a:5d:98:69:
72:e6:58:1f:dd:f8:07:48:43:f2:5d:d7:b8:71:d3:cf:3b:a6:
41:3c:98:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:45 2025 by rpki-client