Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
File: T43nLlAGr221URXhtwkyAjzuy6Q.mft (raw, json)
Hash identifier: yFCjc/AxxKVnGgi9ZRR4WxZJ579C1t2JpqXdP14qTjg=
Subject key identifier: A3:3F:2A:8A:96:2C:EA:27:A1:35:7D:1E:30:F5:E3:D3:30:AC:6B:3E
Authority key identifier: 4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
Certificate issuer: /CN=4f8de72e5006af6db55115e1b70932023ceecba4
Certificate serial: 0199FBEAE7AD42E0273A453943F3D57C496C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
Manifest number: 04A3
Signing time: Sun 19 Oct 2025 10:01:39 +0000
Manifest this update: Sun 19 Oct 2025 10:01:39 +0000
Manifest next update: Mon 20 Oct 2025 10:01:39 +0000
Files and hashes: 1: 703xyqVyusyMnwZMJe3nVMGXbZM.roa (hash: g0R5Z6NA0XZMjcQp8vVCKtZsmnZp9WjEptEiQEcWRL8=)
2: T43nLlAGr221URXhtwkyAjzuy6Q.crl (hash: Deb9qBvn2jbKNQ1L0q4Q4haFiMDB+zOalmasL6uZfmk=)
3: xHkLuYRtCrVGpuLnGhaks3lRnwA.roa (hash: oO+aRb9k9iEUfToXswGXJDHCnfvH4Pcnu65Wu7dUdc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e7:ad:42:e0:27:3a:45:39:43:f3:d5:7c:49:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8de72e5006af6db55115e1b70932023ceecba4
Validity
Not Before: Oct 19 10:01:39 2025 GMT
Not After : Oct 20 10:01:39 2025 GMT
Subject: CN=a33f2a8a962cea27a1357d1e30f5e3d330ac6b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:da:b0:9d:f1:69:2f:38:70:f7:bf:bc:9b:
33:16:e4:4e:ce:69:39:fc:25:01:13:d8:2c:81:e6:
0f:aa:de:85:16:db:99:7d:7c:93:8a:e8:89:26:32:
46:f0:b8:29:43:98:39:e5:18:8c:f4:c5:19:d7:20:
c3:79:b3:ed:d0:c5:b3:af:27:ab:0a:86:cb:5a:c6:
64:1a:9a:2e:0c:79:f6:63:d6:c0:3a:67:5a:b5:d0:
11:69:d5:44:db:26:ed:10:55:03:1f:88:9a:5f:26:
bd:37:ea:73:82:e6:8f:a6:6b:42:69:24:67:1b:38:
f9:ea:d6:43:a3:4d:a7:78:59:cd:29:aa:de:fe:7b:
8d:b7:ad:7e:c6:23:09:72:a7:b1:33:04:a5:b7:74:
d9:d5:4e:ba:f6:bb:ab:c8:05:43:7d:c2:e8:06:91:
32:53:f6:3c:b6:c7:63:ad:d0:d3:8a:27:30:0d:6d:
51:4d:a4:d7:39:d3:20:75:66:52:4c:06:f3:7f:77:
ca:1c:d4:0d:9d:67:53:ce:4a:67:5b:37:8c:54:4e:
06:d2:e3:4a:20:06:d0:a0:7f:9b:56:3f:de:0d:b1:
17:55:e2:b5:db:5b:bd:cf:4d:45:d0:07:41:48:64:
c9:95:30:bc:70:ee:71:2f:1e:e7:78:59:78:1d:23:
bf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3F:2A:8A:96:2C:EA:27:A1:35:7D:1E:30:F5:E3:D3:30:AC:6B:3E
X509v3 Authority Key Identifier:
keyid:4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:aa:88:31:be:f0:a1:cb:2b:ad:04:61:b2:c1:54:31:a6:d5:
c0:cf:74:4b:e1:2d:ce:a7:3f:91:84:15:a4:fa:1e:38:60:3e:
c8:e5:44:a3:49:f1:5a:e5:dd:91:d1:44:ab:2e:f7:d5:38:4e:
c9:0d:27:09:9a:c0:59:a7:24:10:8c:8d:a9:96:af:d2:c9:51:
ee:67:62:3d:f7:c8:f9:06:99:d5:03:f1:08:6f:32:9f:5a:0e:
41:6d:e9:1f:f4:90:ec:c8:90:bd:03:b0:86:e0:08:86:22:82:
33:db:c4:06:05:23:4a:f9:78:fb:6c:5b:33:12:40:16:48:70:
29:84:62:6c:42:4d:f6:8e:30:c4:81:13:0c:31:59:ff:c2:9e:
a4:be:18:24:71:ad:5d:44:9b:58:c0:0a:81:54:25:5c:68:27:
b0:f1:a6:21:de:b5:24:36:93:49:d0:9e:41:04:78:93:20:31:
cc:6a:4b:09:d0:65:f8:03:73:96:d3:2f:2f:3a:62:33:25:c4:
2e:42:58:61:5e:cd:11:08:30:da:03:3b:11:ec:a0:f6:2d:83:
9b:ed:bc:e1:a3:eb:19:81:fb:59:22:a3:13:c8:72:77:17:18:
ae:96:ac:2e:70:6d:76:1c:9b:34:12:46:d1:f0:3e:07:c0:dc:
69:91:d2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:51 2025 by rpki-client