Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
File: t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json)
Hash identifier: mzgR7z5b47V0Nj9H2gPvRyWcbM8ex/XCtR8t6S7Y5Uc=
Subject key identifier: BE:93:14:54:FB:25:B5:5E:D8:BC:50:DB:AA:B0:2D:2D:E9:4E:EC:77
Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
Certificate issuer: /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Certificate serial: 0199FD343356E72FB41F5C46CA39BEE251A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
Manifest number: 100C
Signing time: Sun 19 Oct 2025 16:01:20 +0000
Manifest this update: Sun 19 Oct 2025 16:01:20 +0000
Manifest next update: Mon 20 Oct 2025 16:01:20 +0000
Files and hashes: 1: qRT-_MhiSov-WJNuRCh-o1ABg_w.roa (hash: Sgwzeb8jM4K/wZC25rDRhN0A8vnEn9LK1zNCxvWZ1iA=)
2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: XZEyXEFXF0/oy87i+8Ls+Sz8xfXUgipknuNQW4ghB9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:33:56:e7:2f:b4:1f:5c:46:ca:39:be:e2:51:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Validity
Not Before: Oct 19 16:01:20 2025 GMT
Not After : Oct 20 16:01:20 2025 GMT
Subject: CN=be931454fb25b55ed8bc50dbaab02d2de94eec77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cc:d8:db:bd:02:e9:bc:17:cf:55:b4:ed:43:
a1:82:14:f9:c4:56:04:29:6f:bf:bc:65:4a:28:51:
7b:dd:44:d6:e2:8e:ca:8e:9e:95:07:91:25:36:0f:
38:85:98:e3:2d:a8:d4:f5:7a:9b:64:35:84:fe:0f:
4a:7a:d4:8c:fc:f9:e5:f3:6e:66:a7:a8:5f:2a:49:
4c:ba:70:83:9e:e2:6d:52:5c:bf:bb:a6:df:6f:12:
be:af:72:e5:4c:a5:ca:3e:2a:32:d4:71:d7:15:78:
f9:7d:33:5d:87:d1:06:b7:6a:9d:6f:ad:91:35:ae:
0c:f5:40:39:30:23:bf:ea:27:6b:23:d7:48:fb:a6:
25:e8:76:7f:ba:90:08:48:1c:48:3c:7c:d5:f8:8d:
6e:7a:59:4f:83:29:7d:e0:dc:05:44:39:7b:d5:b1:
15:ca:1c:bc:ec:37:d6:7b:46:bf:db:96:9f:d9:6b:
64:84:d6:1d:db:3f:8d:78:63:9c:d2:3d:87:88:f3:
be:af:38:4a:d5:65:83:68:dd:58:ec:16:f2:5a:c1:
c9:32:68:63:53:46:43:f8:85:cf:9e:70:33:9e:de:
68:b3:5b:c5:41:be:c5:fb:db:44:ce:b5:ab:a2:52:
dd:78:a8:81:24:20:31:61:6b:0b:e9:b5:00:8c:54:
f3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:93:14:54:FB:25:B5:5E:D8:BC:50:DB:AA:B0:2D:2D:E9:4E:EC:77
X509v3 Authority Key Identifier:
keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:31:72:55:c8:b5:83:4c:31:17:45:c5:42:27:92:8e:ca:7b:
43:14:f0:95:e1:ff:70:84:af:ae:e2:65:2e:39:c6:31:5b:82:
b0:bd:2b:ee:55:a7:96:02:b2:0a:c9:fe:9c:0c:51:10:ba:6d:
70:06:01:94:b8:e7:9d:72:25:a5:9a:5b:79:3e:72:c8:14:09:
b6:24:7f:b6:02:7d:98:13:a4:3e:63:32:57:02:bc:20:9e:dd:
d0:1a:2f:6c:1e:cd:52:66:f6:60:04:0e:5c:e6:76:91:31:f5:
8e:fd:46:29:4f:77:b4:85:64:dc:95:01:fb:b3:95:c0:51:26:
94:0a:25:07:b4:35:3e:50:91:9f:cb:ea:59:25:70:bc:a0:07:
ca:c2:b0:65:05:40:ca:73:a1:39:9b:60:a1:fd:48:2e:44:bf:
ac:36:e5:2a:8a:8a:37:bc:25:9f:41:2f:da:a0:32:05:8f:48:
ec:e0:77:4f:fc:61:f4:37:b8:c7:22:2c:5a:49:50:7d:62:37:
2f:b7:13:a6:38:d2:6c:e2:93:b7:71:b6:3c:d1:e0:f8:f2:15:
cb:8a:e2:68:05:cb:89:3b:80:c3:62:b3:80:5f:f4:4c:e7:0c:
5f:44:bc:0b:c8:71:23:f1:58:f3:e5:30:43:2d:ea:dc:f4:67:
8b:4b:5e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:06:44 2025 by rpki-client