Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
File: TrwmqzTIMZdDMt05mo5W6aqbe4U.mft (raw, json)
Hash identifier: n/vDWoi9T1u0rnl2owdvzf2ge1Cwp5VwQ+hC1dN2i1U=
Subject key identifier: 02:68:A7:AE:41:99:93:93:38:6F:32:59:BB:BF:4F:04:AD:DA:5F:94
Authority key identifier: 4E:BC:26:AB:34:C8:31:97:43:32:DD:39:9A:8E:56:E9:AA:9B:7B:85
Certificate issuer: /CN=4ebc26ab34c831974332dd399a8e56e9aa9b7b85
Certificate serial: 0199FAA0EA8C71001C6D0C9EE5ACA5208322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
Manifest number: 1D
Signing time: Sun 19 Oct 2025 04:01:13 +0000
Manifest this update: Sun 19 Oct 2025 04:01:13 +0000
Manifest next update: Mon 20 Oct 2025 04:01:13 +0000
Files and hashes: 1: TrwmqzTIMZdDMt05mo5W6aqbe4U.crl (hash: gUOZvmNt93Wb0Vn0gt3T5MGBYmEcEJqbbf68q1OqoKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:ea:8c:71:00:1c:6d:0c:9e:e5:ac:a5:20:83:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ebc26ab34c831974332dd399a8e56e9aa9b7b85
Validity
Not Before: Oct 19 04:01:13 2025 GMT
Not After : Oct 20 04:01:13 2025 GMT
Subject: CN=0268a7ae41999393386f3259bbbf4f04adda5f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:f6:29:36:e6:7e:9b:22:51:71:83:94:e9:
ed:8f:f3:7a:9b:b2:6d:2f:62:d5:05:f6:04:38:a3:
a8:e6:06:b4:1b:ca:ed:b7:cf:22:f7:40:f2:6b:7c:
e6:e7:07:3d:d2:c2:e3:25:7e:65:a9:88:e1:f8:eb:
79:b4:93:c4:9c:b3:ce:4b:dd:dc:fa:69:57:03:5d:
c2:74:62:8c:68:e2:e0:6d:03:20:60:3c:c4:68:d7:
bf:ba:95:3b:7d:d0:b3:5d:c0:f1:49:4e:1a:cd:83:
12:62:6c:33:26:6b:00:b8:ac:7b:19:05:90:62:e9:
45:ed:b7:e4:98:a2:80:76:78:77:aa:3e:48:da:87:
15:a9:24:a9:dd:c3:a9:65:0b:53:26:68:91:3a:d3:
c3:6f:f5:05:72:28:07:a5:6c:b9:20:e8:5e:c0:58:
84:7e:63:bb:a5:4c:2f:86:fd:b1:5c:c7:62:67:48:
5c:32:4e:60:9d:3a:71:5a:84:a4:e1:f4:07:8a:96:
0d:bd:9b:57:58:ce:1b:82:61:e9:fe:6c:7f:21:6a:
da:1d:0a:46:4b:e4:00:bb:bd:46:86:b3:2c:8c:f1:
2d:55:1e:75:35:e7:e9:67:01:92:00:23:46:28:bb:
e8:ca:81:bf:5d:64:2d:8e:c8:91:32:d4:12:6c:b9:
12:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:68:A7:AE:41:99:93:93:38:6F:32:59:BB:BF:4F:04:AD:DA:5F:94
X509v3 Authority Key Identifier:
keyid:4E:BC:26:AB:34:C8:31:97:43:32:DD:39:9A:8E:56:E9:AA:9B:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e5:1f:3e:6e:5b:83:f4:45:9f:f4:fc:1f:be:9b:d2:73:b9:
12:2d:c4:c9:b9:36:84:3a:7a:8f:23:5e:ee:96:15:25:a6:19:
54:4f:55:a2:bc:57:e4:6a:99:e0:b5:9d:c3:2a:be:67:f2:5c:
84:05:22:e3:ff:90:65:36:f0:9d:f7:42:3d:63:e1:11:2b:6e:
d0:61:e9:f7:f6:74:b8:e0:71:94:67:f7:b0:f2:18:85:06:16:
09:6b:a9:ac:cb:06:c2:a9:2c:00:e8:54:28:78:7c:88:e1:fc:
3e:8b:e0:65:35:e8:52:63:55:eb:b8:ba:c7:fc:92:4f:21:f4:
be:84:08:ea:9e:40:df:02:03:52:7a:aa:dc:87:41:9c:55:e7:
55:2d:68:e3:ad:bc:3e:91:37:e3:7c:3e:e4:2e:26:d4:53:d5:
35:b2:9b:73:c3:8f:63:87:2a:7e:ef:d3:1e:b9:15:d6:94:92:
db:52:d7:5a:88:68:f2:b8:81:53:63:e8:5c:17:12:ca:06:4a:
66:06:dd:71:a9:3e:9a:78:dd:6e:5d:dd:51:28:29:79:4b:ca:
3f:97:71:f3:2c:c5:59:0a:68:02:89:b2:99:92:d6:35:d3:24:
52:8c:c6:fb:b1:7e:5e:fa:4a:1f:35:55:fd:18:46:e8:b1:65:
c3:89:62:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:35 2025 by rpki-client