Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
File: T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft (raw, json)
Hash identifier: qxEwzAZ3oJmJul/Oe2E1a5t9z1aX7J4qSY6PrO2rHis=
Subject key identifier: 8E:3F:A8:0D:A6:28:FD:32:B2:10:D4:F9:1E:5C:67:1A:5C:B9:E9:E5
Authority key identifier: 4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
Certificate issuer: /CN=4fbb63df06de00c843da63977349595471e51a26
Certificate serial: 0199FD6AE34701F7E49BE0F840F289F2D77B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 17:01:04 +0000
Manifest this update: Sun 19 Oct 2025 17:01:04 +0000
Manifest next update: Mon 20 Oct 2025 17:01:04 +0000
Files and hashes: 1: T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl (hash: L/yHlnPyDCkwJ0ByTrsXVV/nggdmDTf+gGkaSl1yjug=)
2: qMVYOgqIzk9KMROylZiVtF-t3Zc.roa (hash: xqIRDpc2sFOdr1/l4Pzbo0nNaeEXShJ8C0GuGpTGneI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e3:47:01:f7:e4:9b:e0:f8:40:f2:89:f2:d7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbb63df06de00c843da63977349595471e51a26
Validity
Not Before: Oct 19 17:01:04 2025 GMT
Not After : Oct 20 17:01:04 2025 GMT
Subject: CN=8e3fa80da628fd32b210d4f91e5c671a5cb9e9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:74:e8:f8:40:13:ff:12:67:4b:2d:e4:00:82:
c1:76:83:1f:c1:b2:b1:b3:14:b9:49:a1:9f:d4:ae:
02:64:96:fa:d4:02:8e:f7:c9:53:9f:17:29:39:53:
42:f7:92:94:9c:c9:0d:40:21:45:29:bf:35:d0:19:
8f:63:4c:5f:09:cc:11:75:0a:04:2c:c9:26:67:a8:
98:6f:a7:6d:6e:27:36:f1:62:57:e1:c2:cb:64:5f:
74:70:26:a9:8f:6e:d2:41:29:2a:8b:ad:8f:a7:2a:
0a:d7:34:d4:a7:b2:8d:e2:f6:43:2b:9a:7a:a5:96:
6d:68:fe:4f:2a:7c:e5:32:38:c7:44:45:63:6c:4f:
b2:75:e8:45:45:be:41:3e:31:04:80:3e:46:d2:d6:
cc:c0:a6:e6:dc:96:e8:72:bb:3e:f4:15:a9:fa:a0:
ac:02:1f:dc:65:06:d2:e1:ca:c4:4a:3f:02:d1:1a:
f6:cf:57:be:8e:9e:1b:69:78:10:ad:34:5b:14:6a:
ef:44:f6:5e:86:96:2b:a1:a0:42:0d:0d:c9:47:fd:
e5:d1:4f:c0:b2:b0:e5:e4:a1:12:4f:1a:21:50:8c:
77:30:00:b4:13:53:00:61:7a:88:18:6d:8f:c3:8a:
46:ba:2d:97:b7:80:72:d8:9f:04:0b:11:6a:46:39:
0d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3F:A8:0D:A6:28:FD:32:B2:10:D4:F9:1E:5C:67:1A:5C:B9:E9:E5
X509v3 Authority Key Identifier:
keyid:4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:48:16:a0:a0:79:db:aa:ed:b5:7f:fa:9e:d4:c2:d3:fa:b7:
00:16:5e:e0:ce:67:47:29:20:8f:d4:fb:70:bc:68:c9:1a:c8:
8b:68:ee:4a:7f:9d:fe:0d:a3:a9:14:a7:44:8c:15:09:9d:e7:
5a:34:6d:25:65:88:cd:e7:97:26:ca:72:6d:80:76:ef:60:57:
81:1b:6a:cc:51:90:1a:ed:7a:b6:2c:95:cf:e2:c6:7c:f4:1c:
d7:e7:67:f4:c7:01:ff:34:3c:92:80:b7:1d:c1:de:22:53:50:
47:c1:86:68:e6:09:70:c4:98:2b:dc:ba:31:5f:ee:5f:58:0a:
40:73:7b:3e:38:02:3f:74:c1:88:dc:2d:b5:26:3e:00:6e:75:
3f:9b:e7:da:bd:f6:dc:27:bc:40:4b:e3:47:50:2f:b3:9c:f7:
ef:96:81:c7:54:91:06:c6:28:ec:c1:b4:e0:47:10:56:c4:ea:
e9:d5:60:f3:23:26:c3:24:f8:83:7a:e3:6c:21:10:7d:e9:8e:
4b:ac:6f:37:db:10:af:f8:3a:20:b4:dd:06:03:f5:0f:89:b4:
5f:63:c5:cd:18:52:e6:a8:3e:fb:6d:d0:9c:7c:9d:89:d5:df:
8f:c3:59:28:56:1a:16:fe:82:8a:ec:a1:d0:4e:db:a7:ea:bb:
f3:5a:2c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:12 2025 by rpki-client