
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: F4fjAGUCMEWR7KOGvFb6qNNwpv2q1PfTmY8A3dEARJU=
Subject key identifier: EC:20:24:D8:DA:47:EC:57:27:38:A3:45:1D:35:E6:00:D0:EB:7B:5F
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 0199FC8F6FA60052AE4694047DD99F7362B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0C36
Signing time: Sun 19 Oct 2025 13:01:22 +0000
Manifest this update: Sun 19 Oct 2025 13:01:22 +0000
Manifest next update: Mon 20 Oct 2025 13:01:22 +0000
Files and hashes: 1: 6b2ERBxknPAevOnYxSvxzu95eG8.roa (hash: 3kiDbks8aSmKxwaOLs+GDp7zBcCi628ZZOq/BNMJfnI=)
2: NOOroZsnjsQfsZH4dRjzbuju0Hk.roa (hash: Zg6ieQb4LhmgSd9bfRqKPOaZLXbcVzG7102ETjzQ1ro=)
3: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: dOOGN/wRP4sC1E09kOnwxySdeKV/Su7TeV6jfSrRSXc=)
4: auS9-c0NKZclAN6n9ZeMxPqllbY.roa (hash: jmic3pbI/PzbYEfrYr0mHzcn9EBC12zQGVngarCFUoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:6f:a6:00:52:ae:46:94:04:7d:d9:9f:73:62:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Oct 19 13:01:22 2025 GMT
Not After : Oct 20 13:01:22 2025 GMT
Subject: CN=ec2024d8da47ec572738a3451d35e600d0eb7b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:42:44:f8:85:64:eb:73:6a:12:8b:b2:33:5e:
d6:ba:70:2b:04:c9:df:c5:bb:fe:24:13:29:22:c6:
aa:c8:c4:e2:40:dd:d2:e5:82:30:76:56:3e:57:69:
3c:50:2b:0b:96:63:80:c0:e8:f0:ba:33:3e:73:7b:
52:42:e2:07:df:9d:eb:52:87:bf:37:37:4f:19:48:
7e:26:e2:1b:94:c6:7c:be:1c:b4:a3:21:53:81:d0:
1b:2f:e4:09:bc:26:fe:89:81:fc:ca:bd:a9:bc:04:
50:98:50:6f:90:fc:00:ec:70:52:11:91:2e:93:61:
09:ef:09:94:9a:ab:e4:9a:0d:1d:9f:e8:11:fd:ba:
b9:c4:8b:c6:cd:71:65:85:2f:01:f0:4d:67:2b:c8:
3e:60:5f:3d:5b:66:91:dc:b5:0b:92:dc:5b:55:0e:
21:06:53:b6:ff:ee:51:68:b5:d6:a9:28:92:df:35:
69:f9:23:2f:9b:fd:aa:72:84:98:69:09:ec:61:aa:
4d:a5:17:19:e1:4b:13:95:a5:68:79:09:fc:8f:a1:
ae:98:05:a2:c4:90:7e:93:2a:4b:b7:da:c3:f9:73:
01:6c:9c:fd:43:ee:89:a8:47:d2:fd:c8:f6:53:de:
04:1e:14:1f:dc:f8:7e:54:2f:17:33:75:a1:84:1c:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:20:24:D8:DA:47:EC:57:27:38:A3:45:1D:35:E6:00:D0:EB:7B:5F
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7e:ce:a9:21:14:9d:83:cb:cf:90:7a:b1:f0:a3:0f:a8:a3:
f3:4c:24:8b:7b:38:73:7d:d0:d0:c1:01:d8:d0:a6:b3:d4:8f:
13:25:c1:59:e1:6c:6b:b2:85:df:99:5c:2c:67:c8:06:d8:b1:
c1:2c:cd:be:fb:6f:1c:38:07:34:0d:ab:41:97:6c:65:91:7a:
c9:6c:99:4f:fe:07:d4:56:8a:a7:6b:5a:cf:a4:72:04:3e:23:
67:1d:5e:91:bf:b0:e0:af:0c:7d:fa:95:43:e1:bb:2b:60:e6:
85:96:2c:d2:4b:fd:ac:9e:95:dd:7e:ba:d2:a8:3b:86:fe:86:
8f:ed:3f:17:67:fc:a7:cd:db:27:bb:dc:27:68:d8:a8:a9:55:
8a:d5:b1:5e:b1:98:11:4e:3e:0a:56:4e:fb:90:14:ef:dd:da:
8b:87:fa:62:47:0a:6c:69:84:39:37:02:21:b0:db:b6:ae:4b:
d4:9a:92:91:d8:0b:66:c4:32:9b:ca:82:e7:f1:ad:1f:39:7b:
95:67:3c:e8:33:c8:f3:b2:dd:3e:d2:d5:0d:18:fc:58:e8:41:
e6:f7:b0:f2:67:df:a7:f2:fb:ac:08:8e:30:93:97:55:f9:6f:
0f:f1:99:38:45:36:23:dd:c9:a9:aa:37:3e:fa:79:e8:5a:ef:
16:2b:05:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:00 2025 by rpki-client