Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
File: T4R35WnR19YPBGmnzIp_R0YDm7c.mft (raw, json)
Hash identifier: nhW+bJEs4e0yQi46eLDEyFtuElckhHP1CLBa+9v+sJA=
Subject key identifier: CF:76:79:4B:DF:50:24:3E:23:D2:43:8C:99:09:AB:B5:DB:2F:50:1A
Authority key identifier: 4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
Certificate issuer: /CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Certificate serial: 0199FBEAC7BE3654A5937968D1653780805F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
Manifest number: 1346
Signing time: Sun 19 Oct 2025 10:01:31 +0000
Manifest this update: Sun 19 Oct 2025 10:01:31 +0000
Manifest next update: Mon 20 Oct 2025 10:01:31 +0000
Files and hashes: 1: 9sTlJL6XI1F8_6pTnGvYUoHPjLc.roa (hash: p/q9OdpuOMeCTpoZABPBjgzLHhfpzMbQS5v48+zxKpQ=)
2: T4R35WnR19YPBGmnzIp_R0YDm7c.crl (hash: 9E4LdMOf9ktHOaS4zcNqQTpFSW1k0rhRoM0R/FUfSdU=)
3: ob104eCQJ_C_ID7VnPR1GOcDcA8.roa (hash: 0O8ntyVniHu4kxwME5VY5LDqj4fbOYlq5O01qeomItA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c7:be:36:54:a5:93:79:68:d1:65:37:80:80:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Validity
Not Before: Oct 19 10:01:31 2025 GMT
Not After : Oct 20 10:01:31 2025 GMT
Subject: CN=cf76794bdf50243e23d2438c9909abb5db2f501a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:fc:d0:64:38:a3:e5:00:0c:5e:38:5b:36:
40:60:53:ac:22:b9:cb:1f:3c:67:67:3c:45:fb:e2:
77:09:d3:0f:ad:34:8b:dd:64:d2:5d:52:3e:be:4a:
d9:6a:90:a2:56:c4:b0:f8:02:e5:35:72:89:cd:71:
bc:7c:6a:d7:a8:00:d3:99:62:28:5c:72:93:a4:19:
47:a6:34:66:bc:93:01:7a:48:1c:c8:9f:74:df:43:
ef:70:b4:d9:17:48:1f:73:41:2c:fe:a2:58:e8:41:
78:42:41:af:f2:c5:08:15:b3:bc:e9:00:bc:d8:61:
e7:e0:35:89:48:91:57:1f:7e:d5:a6:d5:4b:30:d0:
93:64:e2:6c:ce:e3:65:0b:7e:b1:b7:d9:f2:b1:a7:
55:a9:12:94:ce:68:c2:c0:9c:76:ea:2b:0b:41:18:
0a:51:e8:61:47:31:7c:e4:af:ba:3c:5a:d7:f2:8a:
bd:c7:12:7b:81:a7:c6:9b:c1:36:3b:96:aa:7b:93:
0b:74:a5:3f:c6:46:2d:88:3d:65:71:88:0b:67:cd:
19:69:7f:e4:ac:c9:4c:fd:9f:55:30:b2:a9:14:c6:
e9:e0:76:7d:29:b0:a0:8a:f8:11:fe:c8:05:4d:d1:
a2:a8:91:a1:01:36:4d:81:64:d7:b6:16:60:2e:60:
92:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:76:79:4B:DF:50:24:3E:23:D2:43:8C:99:09:AB:B5:DB:2F:50:1A
X509v3 Authority Key Identifier:
keyid:4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3d:db:11:82:b1:d3:c4:a5:e2:f6:76:5c:9d:9a:f0:a8:e0:
e7:24:c2:e7:ef:7c:63:d1:29:1c:1f:c2:39:be:98:cd:f9:32:
47:b7:84:fc:5f:83:e4:1a:23:8f:3d:76:78:da:4a:c0:1c:bc:
90:dc:19:93:64:81:83:1d:fd:6d:cd:d5:94:70:08:f1:ce:0b:
b1:de:25:73:e8:b2:0e:b0:b1:14:83:77:96:a0:c0:de:cb:2b:
45:02:88:8d:18:16:ba:f9:e7:2f:64:af:0c:e4:54:b8:39:59:
e6:8d:6f:cc:08:4e:26:94:10:3c:80:70:b8:91:3f:92:9d:49:
a2:04:40:09:fc:df:a2:f8:e8:ea:94:51:e7:da:17:f8:7a:ba:
bd:47:10:6d:05:db:24:e3:77:aa:26:d7:ba:e7:31:9a:20:47:
65:ae:ac:26:cb:b6:90:fe:d9:77:8e:e4:3a:90:65:35:61:71:
4e:be:2d:02:f3:da:c3:1e:e5:76:0c:f8:2e:4f:f2:5d:68:a4:
b3:e4:b8:b7:7c:ef:3d:84:fe:ee:6a:3c:37:a3:6f:a5:45:98:
8a:da:75:29:45:5f:8c:9b:f8:ca:53:71:64:29:e1:26:a1:4e:
94:a5:7b:05:be:74:70:52:90:ae:57:a9:9a:40:6c:5d:86:e1:
8c:d0:fa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:59 2025 by rpki-client