Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
File: t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft (raw, json)
Hash identifier: A3roC/SrV+vNiP/27oL5GD543SS/uGt4MWnlRnG9ocg=
Subject key identifier: 9E:1A:A3:7F:97:A7:5D:51:0F:BE:8D:0E:F1:00:62:16:52:BE:0B:F2
Authority key identifier: B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
Certificate issuer: /CN=b79de9458d190e634329f9df1503b5222c1624ee
Certificate serial: 0199FBEC11F38A8E32FD159CB85C25117328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
Manifest number: 08F2
Signing time: Sun 19 Oct 2025 10:02:56 +0000
Manifest this update: Sun 19 Oct 2025 10:02:56 +0000
Manifest next update: Mon 20 Oct 2025 10:02:56 +0000
Files and hashes: 1: 33E6U-90LI21C0lkTnzQ6VfaiXI.roa (hash: t0pnwqLcy2OtfvtukL13J3l3uzKc9VJEEKWY4aTDjS8=)
2: KTNKEz9B68iNvMGQpqql8Umd6Rg.roa (hash: 4c3WZli6HrqpP5XT4I7aYzD+h8A8/oNoRJSDq9oByhk=)
3: t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl (hash: aTJL/BhJXlxSgEGxlRn+TICp3YXfaORWBUKJK9BlAYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:11:f3:8a:8e:32:fd:15:9c:b8:5c:25:11:73:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79de9458d190e634329f9df1503b5222c1624ee
Validity
Not Before: Oct 19 10:02:56 2025 GMT
Not After : Oct 20 10:02:56 2025 GMT
Subject: CN=9e1aa37f97a75d510fbe8d0ef100621652be0bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:e3:46:77:82:3a:72:fd:1d:1c:e5:c6:83:
db:cc:5a:49:ce:75:4d:23:d2:ae:84:d6:7f:96:55:
26:c7:e8:0a:26:8a:89:c5:92:da:66:fe:7a:db:75:
0c:11:92:3e:85:16:c0:e9:2c:48:f1:e3:5b:8d:62:
b8:02:d1:1b:2b:94:36:60:3b:ab:4c:5e:fd:e7:c9:
4a:8d:3b:4c:76:f4:0d:ce:08:cf:66:b2:84:88:a2:
93:1b:93:80:00:28:9b:fc:4a:cc:c3:da:ab:34:22:
37:fc:10:f7:09:4d:5b:57:d0:13:96:a6:0c:fe:72:
fe:94:d8:e2:cd:e5:06:75:11:6a:63:37:cf:5c:ce:
38:36:32:65:83:a2:49:13:ce:16:f2:52:e9:8f:44:
e2:c7:42:e1:3e:16:93:79:4c:c2:b1:0d:02:5f:0e:
86:90:70:a1:8b:59:dd:b3:84:c9:d8:65:c5:07:60:
78:74:00:c9:ee:2f:ab:39:18:07:61:bd:4c:f6:3a:
dd:f1:3d:da:2d:43:a7:f2:c9:ea:dc:d0:9e:f1:0e:
d6:ad:b5:8b:d6:f4:3f:26:93:c4:b3:07:2c:7b:84:
06:fd:97:b3:a3:0d:85:b6:d7:0a:4a:b5:d8:f7:c8:
8b:27:9f:80:93:2b:3c:9f:5a:b1:d9:ab:ad:4f:63:
e8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1A:A3:7F:97:A7:5D:51:0F:BE:8D:0E:F1:00:62:16:52:BE:0B:F2
X509v3 Authority Key Identifier:
keyid:B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6d:b9:27:61:66:4c:87:4d:79:7f:93:b3:d8:d1:91:7c:df:
97:02:cd:b2:44:dc:42:42:88:ac:e1:66:71:23:5a:d7:3c:dd:
c7:fa:c2:02:67:df:96:73:d5:12:f8:4d:f3:0a:98:68:96:d0:
d6:67:63:78:91:bb:f4:55:59:fb:07:9b:f8:81:ec:eb:64:84:
ac:78:51:41:e6:99:26:12:2e:09:20:0a:31:16:8b:69:cf:7d:
db:76:1d:69:8e:3d:e2:8b:98:fe:b3:b3:a1:80:80:47:83:bd:
01:5e:27:2c:e0:fd:25:19:83:aa:c5:bd:78:19:80:7f:67:d0:
85:68:75:0d:03:0d:6c:b8:18:73:81:33:75:07:9e:97:66:21:
c7:9b:32:59:2e:3f:28:38:54:79:8d:27:27:b2:2c:6b:f6:6d:
3d:7c:4e:02:b8:7c:5a:fd:3f:5e:e5:09:3a:f2:00:d1:4d:ea:
e9:cb:13:ef:fe:36:08:3b:2c:50:bf:f9:d6:da:d2:e7:db:b0:
3d:54:35:ff:37:b3:03:2c:ce:01:f9:0b:a8:50:db:42:3d:49:
90:63:4e:86:ce:2a:eb:2d:0d:3e:3a:ea:31:49:9d:bc:aa:87:
1d:45:49:a1:b7:54:bc:f7:88:83:38:5c:f2:9e:58:9b:60:4d:
22:a3:27:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:43 2025 by rpki-client