Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
File: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft (raw, json)
Hash identifier: J4uA8KY/QAp/QP1DgyU8O6yorgyuZQSA0W1Pky6CpR4=
Subject key identifier: 36:74:07:78:95:17:2C:67:05:79:45:E0:48:AE:D7:37:33:80:3D:29
Authority key identifier: 4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
Certificate issuer: /CN=4d1527d1839bf830360d71590134354e6d904697
Certificate serial: 0199FF59A33078EC87AE470C3ED92EB5AB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 02:01:28 +0000
Manifest this update: Mon 20 Oct 2025 02:01:28 +0000
Manifest next update: Tue 21 Oct 2025 02:01:28 +0000
Files and hashes: 1: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl (hash: KMl0eZsg/BQkGjkoDPbsGSU+GoXhkFfUgsSNCVD1qY8=)
2: a6Whh1qMHaCLz9si7bMkIx4xg1Y.roa (hash: R/Syehgq2eEOSio/8bhqr2YXvz+4Ke3qpd0G80XikQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:a3:30:78:ec:87:ae:47:0c:3e:d9:2e:b5:ab:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d1527d1839bf830360d71590134354e6d904697
Validity
Not Before: Oct 20 02:01:28 2025 GMT
Not After : Oct 21 02:01:28 2025 GMT
Subject: CN=3674077895172c67057945e048aed73733803d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:86:73:07:b3:ff:ff:e8:97:8d:81:b8:17:f2:
14:45:70:e3:00:c3:a5:d1:cf:13:75:50:4e:8a:87:
44:0f:c2:f9:b8:d6:b3:19:ba:bc:4b:b6:5b:7a:6d:
5d:99:e3:70:ec:86:86:dc:9e:25:05:e4:ae:4c:7d:
33:7c:f7:66:51:e8:38:5e:9c:82:71:c5:df:b9:ce:
f1:6c:15:32:c3:41:21:db:df:26:72:6f:39:5d:67:
21:2b:20:0c:a5:cd:5b:10:9e:0c:40:95:50:98:42:
47:40:fa:02:34:ec:ee:8c:12:0d:06:3b:d0:8b:ae:
c5:6c:ef:18:10:8f:f8:3a:fd:8a:21:a4:0f:b3:4e:
a3:62:7e:f7:79:1b:79:b2:b4:89:94:81:be:6e:0a:
bf:41:81:1e:72:b3:c9:91:f0:f2:1a:2b:3b:06:a8:
50:b7:37:1e:05:32:cd:d5:18:b1:8d:8d:9a:25:f3:
a3:82:11:c9:1e:9e:05:02:ab:1d:9f:64:e5:b8:12:
4d:ad:94:7d:d1:58:11:8f:62:48:d6:94:89:6e:16:
04:7c:d5:6e:49:52:4c:67:2a:ed:3d:e0:14:0b:66:
f0:14:a6:49:d1:85:ec:43:01:79:47:1d:e8:8d:c8:
2e:63:34:99:6d:f3:1d:10:26:a7:b6:15:8f:30:ed:
7d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:74:07:78:95:17:2C:67:05:79:45:E0:48:AE:D7:37:33:80:3D:29
X509v3 Authority Key Identifier:
keyid:4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:23:52:0f:5e:39:39:ec:28:f0:41:97:22:d6:5e:b8:f4:12:
3c:0e:b1:be:41:29:f8:20:59:bf:36:a5:a7:6d:34:98:5f:c6:
07:82:8e:91:08:f4:3b:ab:67:00:85:4c:c5:78:cf:b6:1c:2a:
aa:b9:07:14:a9:42:99:f9:16:d3:2b:01:11:8b:51:59:f8:31:
01:78:5c:6d:9d:c2:c5:cc:4d:e1:e1:a1:da:bd:a5:fc:d7:3a:
4d:fa:0e:64:a9:4a:c2:18:6a:24:6f:36:c1:fb:cc:1d:2f:48:
31:86:1a:46:9b:62:64:1a:4a:9f:df:b3:6d:92:5c:e9:20:83:
32:ec:49:1d:c3:dc:33:07:cf:e5:4a:f3:60:a7:c4:80:ec:02:
1a:a7:10:47:af:31:8c:68:cf:de:53:b5:90:98:f4:d3:d3:0e:
8a:86:ab:c9:01:b2:45:e9:2f:b6:11:54:c1:60:ba:8b:19:81:
e8:75:8c:e7:91:99:00:a9:30:f1:3b:bd:b2:97:55:bf:75:de:
98:8b:93:56:fe:2d:03:23:70:63:f8:f3:88:42:71:47:b4:d9:
46:a1:48:91:5c:5e:4e:de:c4:54:95:87:fa:e9:22:bf:a7:65:
02:e7:a1:d2:54:22:06:ac:00:d1:e8:24:27:78:7c:91:53:83:
05:d0:fc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:13:27 2025 by rpki-client