Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
File: _TrysG9KUBbg5avtGD9GXbFfQdU.mft (raw, json)
Hash identifier: M4ogf6wQK2b4Wi2tyMKiy7nL4vQwNa8pJufshWs2T+Y=
Subject key identifier: 53:FA:EC:AE:67:30:FD:5E:3B:99:31:9F:36:FF:25:98:C8:5C:1A:73
Authority key identifier: FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
Certificate issuer: /CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Certificate serial: 0199FBEB6B22DA1B3B6F48F4215688A153E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
Manifest number: 0ED5
Signing time: Sun 19 Oct 2025 10:02:13 +0000
Manifest this update: Sun 19 Oct 2025 10:02:13 +0000
Manifest next update: Mon 20 Oct 2025 10:02:13 +0000
Files and hashes: 1: _TrysG9KUBbg5avtGD9GXbFfQdU.crl (hash: gDcvYrTCG8jUfILNQgfgbhB4sRZ6N4/y5zuypZtfqLE=)
2: miFtnjs24Q4-RR01JpCMeAQD8WI.roa (hash: hNI7H2ayjIbmcGVqvenpoZ5nB2aID+7Eteg64XuKiJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:6b:22:da:1b:3b:6f:48:f4:21:56:88:a1:53:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Validity
Not Before: Oct 19 10:02:13 2025 GMT
Not After : Oct 20 10:02:13 2025 GMT
Subject: CN=53faecae6730fd5e3b99319f36ff2598c85c1a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:92:8c:a3:98:94:36:c4:0c:c3:6a:57:03:
4a:48:c2:f6:b1:17:e1:a4:7b:15:79:38:31:06:e0:
24:09:53:fe:07:7b:7b:97:0d:c7:1e:88:8b:31:44:
82:32:fb:07:f3:93:a3:ed:15:1f:78:24:9b:aa:e5:
5f:8e:02:8f:d2:cc:2f:32:a8:79:ed:8d:70:ff:08:
fd:24:e7:e4:cd:4e:76:fe:28:9a:27:8c:10:76:ea:
3f:8a:4a:a5:95:11:e3:18:8c:0f:d2:dd:c9:12:2a:
c0:1d:c2:0c:49:dd:d6:0f:9d:e5:6c:1d:b1:fe:1a:
da:81:38:8b:e9:5e:84:30:d4:45:52:5e:de:7f:09:
8e:6b:cb:1a:ec:85:1f:fa:0a:98:9e:91:b1:7a:6c:
a9:33:1e:24:2b:cc:94:42:9c:62:af:0c:e4:85:46:
1c:5d:3f:ad:f6:7a:2e:cd:83:c7:8a:c1:97:e4:67:
1a:68:2b:57:8e:70:34:99:24:e4:1d:e5:b5:70:91:
25:45:74:04:eb:b1:b7:2d:2a:07:da:fc:a5:e5:b3:
09:82:53:d6:91:d2:bd:82:4c:49:69:f1:2d:2e:72:
dc:ac:a6:19:38:c5:ba:04:49:8f:73:9b:01:54:49:
75:d9:99:a3:16:a6:2d:bd:6a:86:63:a5:0f:e7:44:
b1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FA:EC:AE:67:30:FD:5E:3B:99:31:9F:36:FF:25:98:C8:5C:1A:73
X509v3 Authority Key Identifier:
keyid:FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8a:1e:d9:42:69:5a:5c:0d:87:3c:e7:4a:92:33:c2:8c:78:
f8:7f:9d:6b:60:0f:e9:a0:3e:68:12:05:7e:23:5e:5e:f0:54:
de:e2:55:4c:b3:20:22:b7:f6:7a:f4:f0:65:c1:d2:30:5b:25:
4e:51:3f:16:11:c8:c7:f1:bd:72:c9:e7:58:1b:b3:e9:90:39:
91:12:51:a9:d4:d8:8e:be:ae:9d:f7:1d:20:2c:f5:73:09:ce:
e2:63:af:3c:82:dd:1b:46:d5:ee:34:24:11:86:96:4b:f8:4a:
1e:82:92:7d:cd:07:fa:4d:68:d3:30:5c:ed:15:44:da:29:4c:
be:f1:5f:91:dc:12:11:3a:4c:9c:f9:f7:48:a3:8d:22:2d:fc:
04:5e:30:97:15:59:37:16:85:cd:52:44:6e:2b:1c:f7:f6:7d:
a0:58:cf:88:0c:a8:b4:cf:8b:82:d7:dc:6d:9b:09:3e:a9:46:
5d:1c:e9:8b:09:95:49:83:06:ca:bb:a1:84:cf:83:1d:41:bd:
ed:b8:8b:00:ad:09:50:04:75:69:ee:31:23:65:44:9f:43:82:
51:f9:ac:5f:0f:8b:92:d6:59:a5:fd:36:80:aa:4b:5b:b2:b2:
7b:4b:62:71:db:0f:fe:48:10:39:97:e4:be:cf:6d:21:fd:06:
5a:72:6f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:27 2025 by rpki-client