Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
File: T7OopKDYxa4BqWlbBB7SxtApap4.mft (raw, json)
Hash identifier: Xo2ES8Ok32VcGlF8RIbQigqSUcpsWLHLoxW1HOVl22g=
Subject key identifier: F3:CC:D2:A9:9A:0D:80:A2:72:55:D7:9E:AE:F8:70:1B:C0:10:12:A8
Authority key identifier: 4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
Certificate issuer: /CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Certificate serial: 0199FBEA76FB3CF51A481EED3CD70F7376ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
Manifest number: 0DD8
Signing time: Sun 19 Oct 2025 10:01:10 +0000
Manifest this update: Sun 19 Oct 2025 10:01:10 +0000
Manifest next update: Mon 20 Oct 2025 10:01:10 +0000
Files and hashes: 1: T7OopKDYxa4BqWlbBB7SxtApap4.crl (hash: tQ1qNN7aLGsrnzq53vfi0kczD6MnbAHslSdsEp1k5W4=)
2: f56823CiqLOMuTriNLS3PUZ78yU.roa (hash: jqCq9kSPvKsgvdkfpEOf8qz0/6Off+XucTySJaLEm7M=)
3: zKhksjQURk5K1Dod96pBNAB3OII.roa (hash: gundq1JGdYbfKX8ieC3GIfS0gF7vi8HY0pmpJJSYlFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:76:fb:3c:f5:1a:48:1e:ed:3c:d7:0f:73:76:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Validity
Not Before: Oct 19 10:01:10 2025 GMT
Not After : Oct 20 10:01:10 2025 GMT
Subject: CN=f3ccd2a99a0d80a27255d79eaef8701bc01012a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ee:6a:0f:ff:61:5d:a4:9e:94:34:b5:aa:ce:
bf:b8:63:f9:d9:14:6d:04:2f:fd:ee:35:d2:e6:8c:
ed:06:9c:54:8a:94:00:60:ff:39:72:0f:8a:d2:99:
0f:87:7c:09:61:82:ef:1d:f3:eb:89:86:ac:3c:24:
b9:20:fe:87:ed:51:df:f0:6a:c4:30:2a:3f:6e:64:
3a:a1:a2:85:ee:13:b4:e0:08:05:cd:cc:7c:9a:15:
d2:a4:93:65:8c:ee:c7:95:cf:ba:df:ee:49:99:d7:
d2:b3:eb:57:69:d3:bd:5a:a3:b7:68:b8:c6:23:4c:
b3:7d:7e:e3:bb:f4:98:81:b9:11:bf:e5:89:c8:a5:
1d:c3:f3:8e:bd:ba:7c:82:8e:d7:d6:7e:dd:9b:bf:
5a:7a:a3:63:fb:1f:9c:9c:66:da:5d:3b:ed:cf:16:
9a:7a:d9:f8:a0:69:c9:ba:90:f1:f9:d5:27:5d:c0:
f3:98:d4:1b:ae:b9:16:df:68:93:92:e6:65:4f:ec:
f8:e8:1e:e9:64:09:93:de:ce:a0:a1:00:a6:de:10:
81:09:a0:6d:40:8d:1f:fb:85:6e:8c:72:9b:58:7d:
e9:b1:5a:e5:0a:61:28:96:4d:f7:16:e8:f5:ae:0a:
4f:b5:a5:dc:f2:53:c0:2b:32:e6:b4:60:76:c1:54:
b6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CC:D2:A9:9A:0D:80:A2:72:55:D7:9E:AE:F8:70:1B:C0:10:12:A8
X509v3 Authority Key Identifier:
keyid:4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:00:fa:32:d3:5f:50:9d:aa:1a:e4:ac:fc:03:1c:98:fe:6c:
38:9b:5c:c4:5b:e9:88:0b:25:c6:0d:ba:61:20:32:33:03:07:
d9:82:6b:b0:ee:31:77:ed:e2:da:ec:95:e8:12:88:ba:c5:02:
d9:b5:ac:45:96:8c:cb:78:47:18:b1:54:33:7d:f9:6a:63:51:
cd:76:bc:a8:1e:84:c7:39:a3:16:d3:09:13:07:14:e5:01:76:
ee:c4:fc:a4:61:ce:7e:62:3f:a5:51:2c:6b:cf:9e:29:f7:20:
6f:04:ac:27:e5:ac:be:26:e1:e3:48:6e:b0:c4:11:c7:bf:9f:
46:90:53:63:cc:1e:58:5c:d2:4e:80:2c:a4:bf:77:27:69:ce:
5b:ed:31:64:fa:3c:ee:0d:18:11:e2:3e:c3:c4:f8:c2:0e:3d:
04:de:2d:05:f9:76:57:e7:2d:32:a9:c7:95:cd:1d:9a:ed:e7:
83:6e:a5:77:d4:24:fc:13:86:79:62:9d:da:ff:e2:94:bd:2b:
0b:23:76:0a:ea:57:ae:cf:ed:fa:14:34:d4:66:28:53:f7:c4:
30:89:fc:ff:17:23:91:8c:1f:6e:d3:1c:8b:38:d2:fc:0e:fd:
5c:9c:76:3c:1d:0d:51:96:40:11:75:ee:1d:ab:6c:db:24:dd:
86:a8:f7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:16 2025 by rpki-client