Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft
File: T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft (raw, json)
Hash identifier: eKTz9uHsiG2TUe75fwk2hxzxuRYX76QJO/u7qkes+6I=
Subject key identifier: 84:16:DD:96:AF:CF:BD:18:AB:26:86:27:D0:4E:ED:70:38:7C:56:24
Authority key identifier: 4F:40:1D:C1:3E:50:E9:CC:3D:42:D9:13:EA:65:B1:55:4C:95:A5:48
Certificate issuer: /CN=4f401dc13e50e9cc3d42d913ea65b1554c95a548
Certificate serial: 0198D66155919DF14D3E1FB54195A3BAD708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft
Manifest number: 020A
Signing time: Sat 23 Aug 2025 10:02:39 +0000
Manifest this update: Sat 23 Aug 2025 10:02:39 +0000
Manifest next update: Sun 24 Aug 2025 10:02:39 +0000
Files and hashes: 1: NgWmbAJgungmvuD2b4lhPyG9HS4.roa (hash: t3vC0+4VBb5wCcDlMDg2W8fzOL4JtbOA3CytBK/gjwA=)
2: T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl (hash: IsoUPU2RKbJiUT5iB3EsZ4CsLz72x+OmVQ7zt3H2hAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:55:91:9d:f1:4d:3e:1f:b5:41:95:a3:ba:d7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f401dc13e50e9cc3d42d913ea65b1554c95a548
Validity
Not Before: Aug 23 10:02:39 2025 GMT
Not After : Aug 24 10:02:39 2025 GMT
Subject: CN=8416dd96afcfbd18ab268627d04eed70387c5624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b5:36:1a:76:57:37:70:c1:31:10:63:ca:45:
3c:b3:59:9a:fa:d3:75:55:90:07:64:16:db:f8:c6:
9c:d2:07:fd:01:33:6c:31:c4:b2:9a:b7:74:68:22:
98:dd:5f:77:a4:fb:31:9a:f8:24:01:0d:26:7c:7a:
f3:bc:be:2b:42:0d:78:55:af:71:e6:24:ea:0a:6f:
09:74:29:c7:3a:83:49:4e:63:15:9c:4e:f0:f7:7e:
40:e5:b5:20:2d:78:7c:4f:12:89:68:a5:bf:33:0c:
2d:fc:43:25:47:67:25:e1:9f:a4:30:de:4f:c9:3c:
5b:c1:fc:c3:71:20:df:6f:35:b3:5c:d3:1f:da:a4:
96:46:e3:51:5c:8f:37:d1:e4:5d:bf:1a:d2:68:78:
8a:50:b8:50:68:db:36:6d:95:b6:94:89:b0:ef:b0:
0e:8e:54:cd:13:66:03:ae:27:6e:79:53:1d:0c:87:
32:b3:b2:6b:a2:77:7a:4e:3d:4f:8e:4a:2a:73:d7:
8c:24:f2:ed:fe:44:00:64:e7:5e:14:0d:7a:16:c5:
e5:8a:a4:99:fe:cf:bb:68:61:9a:73:7c:c9:48:2e:
41:36:96:0f:78:77:68:f5:37:9b:20:35:e9:34:c1:
b0:35:55:d6:9f:58:1f:31:f5:be:b1:d2:dc:41:41:
64:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:16:DD:96:AF:CF:BD:18:AB:26:86:27:D0:4E:ED:70:38:7C:56:24
X509v3 Authority Key Identifier:
keyid:4F:40:1D:C1:3E:50:E9:CC:3D:42:D9:13:EA:65:B1:55:4C:95:A5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e8:87:66:47:ef:30:6a:5d:c4:25:d7:38:3b:19:3d:a6:1d:
fb:9f:10:f5:88:c1:13:66:3a:2c:bf:59:c4:57:27:c0:82:1e:
9e:bf:dc:24:b7:1d:a4:a7:89:0d:43:45:be:1a:4a:68:08:e8:
53:f5:5b:8d:08:05:82:ab:ea:4a:8e:1f:28:56:de:e1:6e:c4:
7e:54:33:7b:9f:a3:9a:84:98:b5:ee:81:6f:94:ce:0c:9d:88:
8b:17:3d:b3:c5:ae:36:02:20:c9:d7:4f:a5:30:fd:b9:f2:72:
76:a5:cb:dc:94:d5:bf:d4:33:2b:81:69:7a:a0:e6:ce:3a:3f:
8d:b5:69:f9:ab:90:ed:17:8c:32:93:64:fd:c0:1b:ce:60:26:
5a:f1:ef:a2:7c:69:c4:ac:50:cd:01:35:a3:b3:52:b6:cf:67:
b3:59:9d:b0:bb:b3:34:90:61:fd:a3:fc:70:c2:50:18:a3:8d:
8a:50:62:ff:bd:90:2e:ce:31:33:02:1b:7f:0e:79:ba:7a:47:
a9:41:86:8e:af:7c:85:67:12:72:86:4e:f6:58:2e:b3:66:bb:
09:7e:ce:a5:14:4c:46:0f:84:e2:7b:e5:9d:61:4c:8f:cf:a5:
54:cb:10:c7:db:37:ba:05:28:bd:bb:21:a2:6b:71:7f:b4:ea:
a5:df:70:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:58:33 2025 by rpki-client