Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
File: TRDp1PSvuKTRuRnshZP0a6O7p_c.mft (raw, json)
Hash identifier: 2DeVEqRlbBqstNKDlwGn28FuUH/UQ6kcjOwxbIeq808=
Subject key identifier: E7:25:31:15:2D:2A:6E:35:3D:3E:7E:A1:4B:8C:25:80:E8:2D:7D:1F
Authority key identifier: 4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7
Certificate issuer: /CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7
Certificate serial: 019A0290DFE59437670C4AF0CA071EBF6D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
Manifest number: 13E7
Signing time: Mon 20 Oct 2025 17:00:40 +0000
Manifest this update: Mon 20 Oct 2025 17:00:40 +0000
Manifest next update: Tue 21 Oct 2025 17:00:40 +0000
Files and hashes: 1: KbSVDODyeN3kHoikV78WDWGb18w.roa (hash: oRCPK1YwXowGG8GKKm2eZqlzH0XvN6BREuS7mGHYkgI=)
2: TRDp1PSvuKTRuRnshZP0a6O7p_c.crl (hash: PpiLGqpMHZmAZKsfgUdDoBb5XYtJ6ovNu2eWPsy9kb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:df:e5:94:37:67:0c:4a:f0:ca:07:1e:bf:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7
Validity
Not Before: Oct 20 17:00:40 2025 GMT
Not After : Oct 21 17:00:40 2025 GMT
Subject: CN=e72531152d2a6e353d3e7ea14b8c2580e82d7d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:d4:1f:64:e6:db:dd:bd:61:3f:c2:8c:a6:
96:4d:d9:54:7b:bf:f3:e7:d7:68:fc:f5:6c:01:04:
db:32:78:c4:c9:0b:cd:5f:3c:bd:f5:8e:00:d7:de:
c3:d1:d3:9f:d9:4f:d4:99:84:0b:d5:67:31:03:c7:
8d:e5:f2:c5:7b:63:26:05:03:da:a7:08:1b:3f:e7:
04:f4:c7:4e:ec:60:9e:28:0c:f6:a9:71:e3:42:22:
81:0c:ab:31:78:4f:05:3e:b4:ef:ec:61:79:f9:ff:
9f:ad:bc:ad:ca:cc:c3:83:77:84:73:43:6c:8a:71:
87:78:26:40:fb:78:10:8f:f3:74:72:79:e6:55:b0:
ff:0c:f8:ab:1f:f4:c1:bb:9b:0a:69:82:9f:a6:19:
10:b9:eb:e8:cf:4f:ff:e7:8a:08:b8:21:50:03:16:
0c:e0:12:d0:c7:90:17:6e:5b:b8:08:b6:af:13:29:
94:d3:55:1c:7a:0b:a3:6f:99:f8:bd:83:90:2c:66:
1e:30:fa:ce:f0:70:8f:fe:33:92:d3:15:99:9e:e6:
cc:fb:6d:bf:2a:c7:5b:05:cc:72:34:6d:3e:76:8a:
cd:cb:bf:ce:5a:71:c2:de:cf:6c:f3:26:1d:39:29:
d8:60:ec:dd:5b:10:3f:7e:83:04:eb:b6:fe:96:92:
a6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:25:31:15:2D:2A:6E:35:3D:3E:7E:A1:4B:8C:25:80:E8:2D:7D:1F
X509v3 Authority Key Identifier:
keyid:4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:06:b8:71:fb:81:79:8d:72:e2:29:94:c1:23:2c:5f:3a:9f:
8c:94:6b:ad:ba:cd:b5:39:61:ec:cb:23:74:84:21:e2:f2:77:
76:93:7b:ff:cc:e3:5f:67:3a:ca:d9:e1:b2:73:cb:76:8a:97:
ff:78:83:30:89:07:43:91:23:c2:f7:5f:11:9a:dc:b5:9a:f6:
6c:6d:83:b7:1e:e2:0d:c5:3d:aa:05:93:71:e3:0b:df:ca:f9:
ff:38:de:38:66:0f:a4:25:df:4d:7e:3b:d4:2b:69:ba:80:e3:
85:04:0f:bd:89:52:16:45:55:b3:73:81:fa:8c:95:4d:a3:0f:
24:01:1c:a8:97:14:28:89:71:b1:cc:3f:93:22:2a:a8:14:66:
73:de:ce:88:b1:00:9a:91:8a:13:6d:9d:2b:7e:61:b5:9b:d1:
0a:ef:5d:cc:bb:d2:bb:45:d2:58:1f:3d:04:88:86:08:c7:c6:
f7:df:93:a7:60:4f:bc:5f:76:0b:60:60:6d:30:d2:bf:a0:b1:
84:9b:b7:fe:4c:f6:0f:86:e7:1d:08:44:50:ab:6b:1a:10:7f:
19:4a:5f:1c:ee:ab:23:52:f6:88:ba:14:97:c1:2a:06:04:26:
38:60:6d:9a:66:83:ae:ad:9b:07:5f:33:e7:38:3e:7b:b1:65:
17:1d:d0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:42:16 2025 by rpki-client