Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
File: _TrysG9KUBbg5avtGD9GXbFfQdU.mft (raw, json)
Hash identifier: t5fckz0SsSkv9ib/2RvVjuJD9FGB0gMWfJQNKgHNT2U=
Subject key identifier: 15:8B:41:7A:28:87:70:78:B1:0D:13:7B:BA:B9:C5:4A:31:A4:3F:C5
Authority key identifier: FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
Certificate issuer: /CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Certificate serial: 01976D069CAA2EE51889F4F874BB4E5B69AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
Manifest number: 0D82
Signing time: Sat 14 Jun 2025 06:00:39 +0000
Manifest this update: Sat 14 Jun 2025 06:00:39 +0000
Manifest next update: Sun 15 Jun 2025 06:00:39 +0000
Files and hashes: 1: _TrysG9KUBbg5avtGD9GXbFfQdU.crl (hash: KE6mKy8FY74ciAPa5j/fvumtK5z6So5vdAFnGGoVcpw=)
2: miFtnjs24Q4-RR01JpCMeAQD8WI.roa (hash: hNI7H2ayjIbmcGVqvenpoZ5nB2aID+7Eteg64XuKiJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:9c:aa:2e:e5:18:89:f4:f8:74:bb:4e:5b:69:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Validity
Not Before: Jun 14 06:00:39 2025 GMT
Not After : Jun 15 06:00:39 2025 GMT
Subject: CN=158b417a28877078b10d137bbab9c54a31a43fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:44:eb:7e:f3:8d:58:a5:60:6a:ff:39:66:
66:1c:e8:03:e4:4a:19:7c:59:8c:74:7f:8c:e6:51:
89:4f:55:b2:6a:4a:3a:7f:45:46:60:a4:5b:14:fa:
7e:de:ac:cb:04:93:62:a8:dc:93:f6:8a:87:8e:1b:
f4:07:b3:fc:04:80:fb:dc:57:37:9a:0b:08:48:3b:
34:80:a8:d1:ac:02:98:57:c2:99:e5:73:29:bb:e6:
f9:48:a4:17:be:dd:04:ca:a2:3b:8b:03:a5:95:30:
c0:56:78:4c:93:d5:65:8f:b7:8f:85:f9:5c:27:21:
e5:04:d1:11:26:e7:b2:19:d8:3f:0d:44:37:bd:16:
3d:59:86:9d:1d:59:9b:53:5a:c0:6c:6d:1a:0d:fa:
b2:ec:e1:08:39:76:3e:d7:99:ce:1d:60:0f:b2:75:
99:d8:f7:fc:e5:17:7d:fc:27:12:97:5b:6b:d8:28:
28:1b:bf:c1:d1:93:9f:4a:c8:23:d4:a2:10:c1:47:
42:a7:68:7c:81:48:19:5a:9b:d8:f1:0b:4d:3e:c3:
cd:7e:74:45:c6:07:be:c3:8f:52:a2:f1:2f:9b:53:
82:0b:8a:31:08:20:68:ca:d0:63:82:1c:40:0c:c7:
63:46:e8:6d:d6:2f:21:70:78:b8:ab:05:35:d4:a3:
f6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8B:41:7A:28:87:70:78:B1:0D:13:7B:BA:B9:C5:4A:31:A4:3F:C5
X509v3 Authority Key Identifier:
keyid:FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ef:23:2c:bb:49:47:b7:f7:e0:39:06:4c:37:9c:0b:80:e5:
f6:6a:26:da:e0:83:6a:c7:7f:74:1a:71:df:12:53:f4:79:86:
67:c0:32:2b:d2:93:83:95:da:bb:39:b1:00:ee:0d:1d:31:4f:
4f:be:77:dc:f3:b0:44:d0:80:e9:d1:ff:55:d8:7a:c2:66:38:
c7:7a:8f:e1:91:c7:f6:ff:28:2c:4d:8d:bc:21:15:81:b7:e1:
09:f1:48:aa:86:c7:e9:25:9a:20:c2:ed:f6:bf:45:bf:39:80:
db:a7:ec:95:b7:69:8d:53:0c:28:f3:d1:48:06:f3:06:6b:46:
57:87:a4:1d:86:f6:e8:c8:9d:49:fe:1e:6f:7a:c3:c5:e4:50:
4c:5e:b8:1d:23:4a:3c:7b:24:f1:d5:db:c6:e9:b3:7b:16:06:
fd:2c:66:70:b5:a3:2f:99:53:ee:74:25:fd:52:52:80:1e:ab:
a2:fc:4e:1b:d1:4d:73:d0:80:59:90:a2:26:43:fc:54:69:48:
da:49:c7:87:35:83:e7:a7:cc:ca:83:12:ad:ab:1a:30:8b:61:
f5:ef:90:7c:ed:1a:a8:cc:3c:68:21:a6:67:76:ea:d4:9b:39:
68:e1:56:c9:93:18:17:35:11:28:aa:88:08:43:86:e8:5c:c4:
d5:d7:da:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:18:33 2025 by rpki-client