Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
File: t4OAtB43tXV9PU4u7N8G2TCnC50.mft (raw, json)
Hash identifier: wTsi1bsDl3D56YNNYa3NnyL5L0CpQxgNOeFtpkQiJZU=
Subject key identifier: E8:A9:7F:8C:48:F7:6D:2A:D0:EA:10:17:E7:57:A2:2F:80:A8:52:71
Authority key identifier: B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
Certificate issuer: /CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Certificate serial: 0199FAD82A5BA40CC489A3A7D5B512527563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 05:01:34 +0000
Manifest this update: Sun 19 Oct 2025 05:01:34 +0000
Manifest next update: Mon 20 Oct 2025 05:01:34 +0000
Files and hashes: 1: FFNfocwWW0AfwhIbyh5sOWKp-YQ.roa (hash: +IQV10jr/ct4eRg1uckgNvPR/qQ6+ipg5/BVGvg6xW8=)
2: t4OAtB43tXV9PU4u7N8G2TCnC50.crl (hash: Em25T75poEVZnbcbvQ4xq3iI4kQuFbIgXO+qN4CIX2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:2a:5b:a4:0c:c4:89:a3:a7:d5:b5:12:52:75:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Validity
Not Before: Oct 19 05:01:34 2025 GMT
Not After : Oct 20 05:01:34 2025 GMT
Subject: CN=e8a97f8c48f76d2ad0ea1017e757a22f80a85271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0b:51:8d:47:aa:f0:08:ae:df:46:15:ca:01:
d1:6c:83:a2:87:c7:04:c2:29:28:9a:fa:9e:fe:ac:
07:16:b0:8c:5c:b0:96:a2:8e:ea:c6:ef:74:26:d6:
61:27:c5:62:64:49:f6:95:9a:f2:1b:37:53:84:33:
cb:4b:63:39:06:08:8a:51:5e:cd:65:93:18:65:7e:
01:80:e5:f9:27:eb:af:2d:5e:8c:34:1d:41:c7:3f:
18:ce:42:a1:5e:d1:fc:c0:90:a9:99:74:dc:78:ec:
fc:4c:40:71:77:00:b4:cd:5c:91:06:44:86:ef:08:
11:25:f8:fb:8d:38:cf:30:c9:32:92:9b:42:1c:ac:
c4:9b:89:aa:ab:fe:58:97:5e:d7:aa:c9:fd:ec:8f:
38:9c:00:4b:1d:95:02:37:d4:ef:88:85:ca:a8:bb:
58:cc:d0:9d:f3:48:56:2e:69:df:ac:cc:d0:2f:ff:
c9:c4:03:c9:47:04:a7:b6:95:c8:1d:2c:69:2e:f7:
d3:de:af:2f:bf:f7:25:bf:32:44:0d:4f:99:31:da:
c3:64:d5:40:2d:bc:62:4c:48:f0:dd:33:e2:11:9e:
ba:2d:d8:1e:50:a6:89:b7:4d:f7:40:1f:5a:69:d6:
22:72:f7:a7:61:3e:ae:18:f0:6e:a7:02:b8:7e:35:
93:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A9:7F:8C:48:F7:6D:2A:D0:EA:10:17:E7:57:A2:2F:80:A8:52:71
X509v3 Authority Key Identifier:
keyid:B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:bd:bc:8b:3b:61:67:5e:2c:92:5d:59:b1:32:2c:9c:06:a2:
50:3f:3f:a2:7d:2e:16:a8:11:52:c2:48:7a:f3:8c:92:36:ad:
9c:d0:35:d7:66:60:a2:02:cd:1c:e6:de:af:5b:79:89:a5:82:
82:ea:70:40:e3:85:82:c0:26:7f:5c:7e:76:1b:cd:d4:e9:9a:
7a:93:28:d8:b5:e4:fb:6d:d2:2c:4f:af:ed:e9:27:aa:a9:4f:
f4:17:cb:c3:4f:40:80:ad:23:f6:80:0b:8b:8c:d9:71:a1:65:
ea:19:c3:f5:6a:62:00:7b:db:f6:ca:bb:0a:56:47:5d:4d:88:
b1:3f:bc:5a:7e:14:f9:4c:7e:d5:aa:32:7e:d0:98:52:41:92:
7a:3b:15:d7:00:1f:45:6c:4d:11:66:ea:4a:6c:dc:fa:1b:11:
b3:cb:7e:ab:07:92:c5:79:18:33:47:6e:46:61:2a:aa:e7:b4:
25:7b:ab:82:16:af:c2:7c:f7:32:d2:fd:55:7f:db:52:b9:49:
7d:68:88:d6:80:4c:74:63:d5:ca:70:04:59:76:44:bc:72:90:
63:38:83:19:82:da:1c:6e:e2:47:b2:2d:c5:5f:9b:93:3d:10:
99:c8:b3:40:79:0c:30:b4:74:4e:1e:14:c5:38:1a:c1:49:c3:
49:4f:a0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:42 2025 by rpki-client