
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
File: T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json)
Hash identifier: 4cwyeClb+wB2i3e6h1yQokptzkRLVIuQ5HE+9HGxX+g=
Subject key identifier: E9:68:80:72:86:55:8F:C3:5C:14:B2:80:A2:0C:C9:F8:BE:6F:4B:30
Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Certificate serial: 0199FBEBD19517F8F9BF3E3F81E13F700348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
Manifest number: 1239
Signing time: Sun 19 Oct 2025 10:02:39 +0000
Manifest this update: Sun 19 Oct 2025 10:02:39 +0000
Manifest next update: Mon 20 Oct 2025 10:02:39 +0000
Files and hashes: 1: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: DD6AIFgwR7Mf1RrfXApvYo5bPjv7RLDqJLvZg6gkCrM=)
2: ZowTG3oT7jR7fyuFs8EJsOqQnDk.roa (hash: BeTzHEyDuFcWSVUJFUf815UpcdMSl9Ku2ZGRMNQ+8lo=)
3: oN_HXrNwEKHWNOBeBXWLmMaedS8.roa (hash: EF1LIVK1qYYVxrGAD02d8UOfG8Hm02T8nbZi/iaVNaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d1:95:17:f8:f9:bf:3e:3f:81:e1:3f:70:03:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Validity
Not Before: Oct 19 10:02:39 2025 GMT
Not After : Oct 20 10:02:39 2025 GMT
Subject: CN=e968807286558fc35c14b280a20cc9f8be6f4b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:16:63:92:e0:f5:ee:5b:ee:6e:67:dd:5f:af:
94:0d:a6:81:06:b5:25:ce:4a:20:a9:78:3a:5b:c2:
c5:54:b4:8d:a8:e0:01:59:42:10:bd:ed:24:73:8d:
6c:30:d9:64:22:17:d2:20:e1:42:52:2f:82:07:fe:
c9:d3:54:ae:34:04:1f:cd:a5:54:4b:98:8f:46:68:
7e:91:ff:29:72:68:88:ee:f9:2d:2c:f5:94:6b:30:
d8:a0:f3:17:64:5b:c7:c6:53:20:1c:57:b3:51:73:
41:fb:1a:9a:0d:8e:1d:8d:a4:cf:c8:a1:97:16:e7:
13:a3:f1:52:43:fd:e5:31:79:99:05:8b:df:5e:0a:
2f:3a:ee:49:0d:3f:2f:69:e6:0f:70:fe:b7:16:cd:
f7:90:60:f9:fc:1c:c1:c8:bc:c0:dc:fc:b2:6b:25:
87:36:54:ba:49:d2:34:45:b1:f6:58:a4:67:9c:f5:
a2:23:bf:04:7b:13:1e:d2:bc:1a:26:29:a1:5d:17:
c1:76:09:66:95:22:13:53:8f:dd:c7:0c:7f:ad:00:
c4:1f:18:42:c8:fb:8c:1b:f0:05:bf:52:58:7f:ff:
6a:84:4a:d6:58:3f:01:7e:49:37:be:9c:a7:fb:0a:
92:b5:af:8d:2f:d0:ee:a0:d1:bc:d3:7b:a7:b1:d3:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:68:80:72:86:55:8F:C3:5C:14:B2:80:A2:0C:C9:F8:BE:6F:4B:30
X509v3 Authority Key Identifier:
keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:77:2b:67:f6:fa:c7:78:0e:c3:97:f2:da:67:f0:07:ef:81:
69:c3:0e:9c:22:f8:1c:02:76:eb:c5:8e:9e:2f:47:18:9d:6b:
5e:f5:57:ac:ea:e9:0b:51:ad:ff:43:09:8a:d7:8c:a2:bf:b0:
c1:ef:32:e3:26:b7:95:ab:6c:b1:11:7a:29:a6:3e:c6:29:2e:
2e:5c:b0:e2:17:6d:83:32:06:4b:ab:de:f7:ee:06:de:27:e3:
71:f7:55:18:6a:a9:b2:72:fc:f5:b2:d9:4e:a7:d4:2b:d3:94:
79:b8:3e:43:b6:a4:4e:7b:f9:e9:62:d9:cc:5c:dc:8e:e0:48:
04:b9:89:7b:48:c7:be:b7:89:6e:89:62:2c:c0:cf:a2:7b:67:
35:64:90:86:7e:ce:71:94:2c:80:eb:a4:2f:74:b0:f9:73:39:
b4:29:aa:d3:95:f9:ea:3e:05:a2:a5:6d:f8:e4:35:eb:66:01:
64:6c:b9:cb:5b:1f:64:1b:9b:fd:f7:eb:7b:5c:ed:b6:bf:9a:
fc:a2:5d:d1:eb:8d:d1:a8:70:f2:81:6c:f2:0c:41:3a:e6:fd:
e8:57:ed:12:4d:21:b2:b5:3f:39:12:b8:d8:c4:80:fb:d4:fb:
1f:d5:ab:b3:41:c7:7e:39:55:50:24:94:5d:89:5b:cd:86:bc:
bf:52:df:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:10 2025 by rpki-client