Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
File: t060sgvFlKwro6pa7zDnTiXhVuE.mft (raw, json)
Hash identifier: bUAjAbAqIl4IVBV/Gvsbg+9c+17hywjf/D2TXfaCams=
Subject key identifier: 39:88:C7:20:B2:3E:77:AC:16:83:DD:17:E0:22:BE:06:40:29:52:3E
Authority key identifier: B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
Certificate issuer: /CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Certificate serial: 0199FBEAA103189E02B3904D8639CC7BDEDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
Manifest number: 0B82
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: 96zfb_as6Uu1dQBioEPRjkMoH0A.roa (hash: ZbDgERbOZ82dnNJrpA+vEp4hFeMsEzejOuHoVOcv55k=)
2: t060sgvFlKwro6pa7zDnTiXhVuE.crl (hash: mRiPXmXh2QlRuaN2xWdrgUAHZHCuGu7ki6Er9ZEnXCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a1:03:18:9e:02:b3:90:4d:86:39:cc:7b:de:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=3988c720b23e77ac1683dd17e022be064029523e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e1:d1:ef:fe:ae:d7:11:78:40:ef:a2:25:76:
d2:64:c6:b1:11:70:0d:3e:0b:80:61:1a:f4:d7:91:
f4:02:c0:73:71:99:41:54:f6:23:da:88:96:69:11:
69:a5:71:d3:3b:f8:f5:8a:14:5a:4d:03:fb:7e:1f:
af:c7:1f:05:cf:91:fd:76:c2:e0:6e:7f:11:70:7f:
89:df:21:c3:7c:bd:46:e6:35:7d:5a:f1:0a:a0:cd:
e4:73:ad:f3:8e:6d:2a:11:d7:76:36:2f:20:d4:fa:
a5:13:7f:4b:6e:b4:e3:da:24:58:3a:2c:ab:55:89:
36:80:50:f8:76:36:06:c5:8f:ce:ec:8b:96:fa:e7:
ae:d3:af:8a:af:26:75:e7:c9:4a:fb:3f:71:d4:c5:
77:1a:ea:fd:f7:ac:18:87:24:e9:e5:62:03:1f:f1:
ca:cd:41:63:bc:46:3e:22:39:18:15:9d:ba:c4:52:
bf:5c:83:b9:f3:82:17:61:95:df:fd:b3:f7:f7:ec:
2e:05:b9:81:8f:9a:e1:88:f0:a0:19:e3:cc:c9:8d:
b8:f9:87:44:d2:ea:47:a4:92:90:bc:9f:92:45:fc:
5c:42:ce:3e:de:9c:e5:9d:bd:1b:94:84:ec:1b:33:
45:ab:b4:4a:85:06:71:bc:e2:06:a2:85:72:24:61:
64:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:88:C7:20:B2:3E:77:AC:16:83:DD:17:E0:22:BE:06:40:29:52:3E
X509v3 Authority Key Identifier:
keyid:B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:89:8b:2a:70:9e:43:04:47:54:9d:1c:58:ff:32:e1:44:d8:
7b:f4:e6:c9:15:50:b3:ed:ec:64:3e:b5:04:fb:22:b9:31:40:
8c:9a:29:f0:63:16:b3:13:b9:24:5b:a9:38:30:b4:0d:99:c3:
90:8e:88:46:bd:6b:8a:3a:46:98:e9:f0:a1:fc:8a:86:da:b9:
66:54:36:83:b1:0f:85:bb:73:f2:69:2c:8c:9e:db:8a:5f:83:
56:99:fa:4b:32:04:72:12:68:6b:08:1a:bb:00:3e:af:73:53:
d6:05:97:af:f2:c0:25:b0:de:3a:22:5e:b4:a5:b7:35:14:80:
8a:f1:d2:90:4a:7d:c8:af:67:17:da:c9:a2:12:90:e4:a6:a4:
66:ad:64:d9:26:aa:c4:73:38:68:cd:04:12:21:c6:ba:19:61:
62:07:5d:c6:94:4f:4c:ad:f0:84:d7:13:8e:5a:81:bd:a8:22:
59:ac:70:7d:8c:73:62:16:7a:da:e3:44:0e:b3:e8:67:8b:5e:
2f:38:bf:e6:de:76:80:f6:58:f7:1c:5c:d3:7e:fc:95:7c:5f:
64:64:4e:79:6f:fe:db:1e:7a:0a:c8:75:b0:f0:da:34:1c:27:
e9:6b:90:c9:4c:89:13:c1:05:32:32:1a:6b:8e:de:99:b4:4d:
de:15:bc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:28 2025 by rpki-client