Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
File: T7OopKDYxa4BqWlbBB7SxtApap4.mft (raw, json)
Hash identifier: ESvrs14UdB2sw8KlDJQmYWx186D0kboKHVyZy0SkNnE=
Subject key identifier: D7:21:D3:80:0D:84:DF:42:31:DD:19:73:58:EC:1E:9D:8A:6C:9D:EA
Authority key identifier: 4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
Certificate issuer: /CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Certificate serial: 0198D66101BAA988048FB043D4E540091201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
Manifest number: 0D40
Signing time: Sat 23 Aug 2025 10:02:18 +0000
Manifest this update: Sat 23 Aug 2025 10:02:18 +0000
Manifest next update: Sun 24 Aug 2025 10:02:18 +0000
Files and hashes: 1: T7OopKDYxa4BqWlbBB7SxtApap4.crl (hash: QolycPtdQf+TVGw/dyCcPmoxCHTrjfLrdu1JobOncE8=)
2: f56823CiqLOMuTriNLS3PUZ78yU.roa (hash: jqCq9kSPvKsgvdkfpEOf8qz0/6Off+XucTySJaLEm7M=)
3: zKhksjQURk5K1Dod96pBNAB3OII.roa (hash: gundq1JGdYbfKX8ieC3GIfS0gF7vi8HY0pmpJJSYlFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:01:ba:a9:88:04:8f:b0:43:d4:e5:40:09:12:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Validity
Not Before: Aug 23 10:02:18 2025 GMT
Not After : Aug 24 10:02:18 2025 GMT
Subject: CN=d721d3800d84df4231dd197358ec1e9d8a6c9dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:75:75:9a:36:c1:9b:ee:f3:d3:2a:e9:4f:84:
c8:91:18:61:55:bf:d7:81:e0:f1:88:e2:b9:0d:11:
2d:56:1a:1f:76:62:9a:82:32:42:2d:0f:c2:2f:e7:
f1:15:3d:80:41:81:94:45:78:a5:63:9b:a6:53:88:
11:71:e6:7a:68:1b:74:47:76:ec:17:a3:73:80:0b:
f3:bc:bb:ba:14:46:69:50:14:fd:f9:e3:46:63:ee:
14:ae:f5:78:5b:39:67:bc:aa:98:ca:ae:04:5b:c4:
63:87:9f:06:e5:47:17:1c:77:b1:73:a3:fa:bf:63:
37:53:4c:45:68:2e:c7:60:9d:2a:24:68:30:ed:29:
a1:96:92:42:23:93:85:b7:f7:37:db:99:99:ae:31:
ee:58:c2:e4:3c:62:04:ac:e5:17:7f:60:7b:b7:04:
42:94:da:88:2d:95:29:8f:6d:1f:58:c2:6d:a4:7d:
99:eb:37:c4:11:9f:bd:db:bf:d2:cb:80:c2:0e:ff:
8c:ca:a0:31:4d:1b:94:ab:f3:7a:ed:14:b8:c0:27:
ac:50:e4:b8:2a:a3:82:3b:ca:bc:12:28:5b:0f:f6:
ea:f9:1c:4f:77:74:65:da:96:5b:da:29:c1:53:4d:
ca:41:41:9c:55:a8:39:0d:56:50:a7:88:96:71:bf:
c3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:21:D3:80:0D:84:DF:42:31:DD:19:73:58:EC:1E:9D:8A:6C:9D:EA
X509v3 Authority Key Identifier:
keyid:4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:67:fb:9a:2c:0e:e0:6f:2d:cc:b1:60:6b:26:14:5e:0c:dd:
7e:9c:aa:ef:d0:31:bb:8a:89:55:d0:f8:00:86:bb:2d:59:32:
b9:ee:f2:5d:13:f7:fc:c2:9b:b8:db:8c:29:0a:ff:68:da:0c:
1b:a1:3e:ed:98:a0:41:c1:2e:77:d0:27:04:cb:2b:4a:6b:a8:
47:e3:4c:18:a3:96:63:1f:6e:91:7b:f7:12:6e:46:88:1c:00:
59:44:f6:8d:e3:6c:65:23:82:10:c8:8e:b3:57:54:e1:88:52:
91:b2:fc:fa:18:38:43:8f:cc:23:2b:38:e4:d7:fe:55:2a:8a:
21:d6:9e:44:12:ac:07:f8:ae:27:36:9d:01:5d:b2:1f:e3:8c:
09:12:b3:9b:79:6d:20:92:e0:60:2d:42:17:19:f4:c7:fd:cd:
f8:9d:0b:52:52:3b:ff:e8:52:a5:a9:b0:71:8f:bf:c4:c7:26:
39:19:4d:b4:d5:95:d6:00:b7:73:bd:c9:30:80:69:61:89:ad:
a4:df:8c:ce:b1:0d:9f:9f:62:a2:49:c2:c2:7a:6a:84:ca:e8:
82:a9:2b:65:dd:58:55:77:5b:28:81:b0:69:a9:94:8d:c9:9f:
79:a1:f0:cb:f9:98:39:31:77:79:e3:52:16:bc:b6:c4:6d:27:
9f:b0:04:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:51:24 2025 by rpki-client