Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
File: TRDp1PSvuKTRuRnshZP0a6O7p_c.mft (raw, json)
Hash identifier: NG3VKLfLuCribYvxz5CK/CZn+ijUlt5emsvSLnmnCN8=
Subject key identifier: BA:1A:40:76:42:8F:B1:31:78:79:C7:29:CF:85:E5:28:08:40:4E:9B
Authority key identifier: 4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7
Certificate issuer: /CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7
Certificate serial: 019A51BF12ADFDC0D071DD918ACB69E79AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
Manifest number: 1410
Signing time: Wed 05 Nov 2025 02:01:07 +0000
Manifest this update: Wed 05 Nov 2025 02:01:07 +0000
Manifest next update: Thu 06 Nov 2025 02:01:07 +0000
Files and hashes: 1: KbSVDODyeN3kHoikV78WDWGb18w.roa (hash: oRCPK1YwXowGG8GKKm2eZqlzH0XvN6BREuS7mGHYkgI=)
2: TRDp1PSvuKTRuRnshZP0a6O7p_c.crl (hash: 9heeRIzeKNJ7LhiqsARXnHtxDe+xbET/+9egcCV4mmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:bf:12:ad:fd:c0:d0:71:dd:91:8a:cb:69:e7:9a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7
Validity
Not Before: Nov 5 02:01:07 2025 GMT
Not After : Nov 6 02:01:07 2025 GMT
Subject: CN=ba1a4076428fb1317879c729cf85e52808404e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:71:1a:02:77:00:d7:31:24:23:4f:e9:74:
cc:b8:9e:a6:60:da:33:dc:e4:fa:a4:48:45:c3:44:
16:46:19:fe:6d:fe:b0:2c:40:a5:b0:1c:3e:7f:3c:
8f:f5:8a:db:80:ab:cb:98:7b:f6:93:fb:57:8c:d1:
5d:d4:75:59:06:a2:3d:e5:3b:e3:07:6b:40:f1:6e:
05:1b:73:c1:0c:8a:8e:8c:b8:05:7e:9c:9c:62:e6:
e0:21:ee:d3:2d:35:fc:7a:70:70:64:e2:f3:03:2a:
83:72:8a:c4:46:c0:ef:3e:a2:d1:b2:c1:59:33:49:
ba:cc:63:72:fb:20:8a:5f:a0:61:8c:12:d8:28:1d:
c2:84:94:bc:77:d3:3f:87:3b:8c:a9:ed:f2:21:cd:
7e:a9:35:d9:17:0d:34:0a:a0:c4:8a:84:f7:c6:43:
51:0a:7c:c0:a2:16:b8:1a:db:e1:c7:d8:d2:14:1c:
db:aa:a6:dc:06:b4:d4:8b:e6:d7:39:28:88:3e:8e:
a7:d8:4d:1d:d6:07:8b:94:ef:ea:6f:78:ed:5c:e0:
af:18:80:95:ee:12:e1:9b:84:27:b2:05:05:20:0b:
8d:e1:6d:a7:e3:5c:20:db:25:fa:5d:db:a2:e7:a6:
cf:b5:32:aa:ba:05:b5:5b:52:e5:49:56:40:fd:ac:
a2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1A:40:76:42:8F:B1:31:78:79:C7:29:CF:85:E5:28:08:40:4E:9B
X509v3 Authority Key Identifier:
keyid:4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e4:d8:da:3f:5b:4e:44:a9:89:f4:24:63:dd:ac:12:16:8c:
92:29:6e:ba:c9:9a:9e:dc:17:b4:43:7a:52:67:59:0d:16:5b:
cf:90:53:fc:fb:e8:27:b0:f0:ea:c8:17:4a:32:e6:3c:76:5c:
c9:7a:42:56:51:14:6d:0f:ad:dd:a9:e9:d6:b1:a9:5a:fa:58:
d0:6e:86:a8:11:d7:e0:74:14:c7:d6:a6:3b:ad:af:13:5e:d9:
33:ff:07:c7:70:6e:87:ad:bd:af:ee:75:07:a6:54:85:87:17:
4d:0e:c7:41:fb:c2:a3:5a:2b:5a:6e:8c:25:81:da:91:24:a1:
d3:6e:e1:a5:10:7f:fd:83:54:98:0b:a8:52:3f:68:18:4f:ed:
6b:d2:7e:28:75:29:0e:1d:38:90:76:d2:52:cb:a5:81:b2:ba:
01:6c:82:77:de:3c:29:88:44:09:9e:53:6f:5f:67:1d:81:e8:
1e:ef:89:79:8d:67:b6:11:6f:da:83:e9:da:15:8b:4e:c3:a4:
1d:4b:04:05:86:50:75:3b:ab:41:b9:0d:a8:8e:00:0a:da:40:
8b:22:85:1d:99:a7:22:37:83:59:e2:1e:b9:57:05:39:d5:73:
ba:df:05:92:ba:79:be:ff:ff:ee:28:12:80:49:f0:03:e8:ff:
fa:58:39:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:25:35 2025 by rpki-client