Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
File: _TrysG9KUBbg5avtGD9GXbFfQdU.mft (raw, json)
Hash identifier: 42jFmcGlSFD3rUwx0b+gd47YZWdD5Pp/kMs5zQ9SAvE=
Subject key identifier: 83:BF:31:C5:CD:CA:7E:80:E7:AB:C9:4C:91:79:06:BC:B4:36:10:CC
Authority key identifier: FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
Certificate issuer: /CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Certificate serial: 019885451CC221DFC39877D52049D4A87237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
Manifest number: 0E13
Signing time: Thu 07 Aug 2025 16:02:35 +0000
Manifest this update: Thu 07 Aug 2025 16:02:35 +0000
Manifest next update: Fri 08 Aug 2025 16:02:35 +0000
Files and hashes: 1: _TrysG9KUBbg5avtGD9GXbFfQdU.crl (hash: MgKas1boyvCjpdOZA/2np5f61GXcbEu4gS3c7pzZ7OM=)
2: miFtnjs24Q4-RR01JpCMeAQD8WI.roa (hash: hNI7H2ayjIbmcGVqvenpoZ5nB2aID+7Eteg64XuKiJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:45:1c:c2:21:df:c3:98:77:d5:20:49:d4:a8:72:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Validity
Not Before: Aug 7 16:02:35 2025 GMT
Not After : Aug 8 16:02:35 2025 GMT
Subject: CN=83bf31c5cdca7e80e7abc94c917906bcb43610cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:01:07:9b:11:50:c8:58:5c:6b:78:26:62:bf:
c5:8f:2c:7e:e6:a8:98:bd:41:7e:fc:35:82:07:17:
ec:92:15:7f:07:83:76:c2:8f:e9:32:db:10:20:8b:
0b:00:66:4d:fb:34:d0:92:ce:39:64:34:e8:51:3b:
bf:90:e9:9f:44:06:96:c6:84:86:43:ed:40:b7:e9:
5c:a9:24:87:69:08:a8:67:f0:f3:27:20:40:ee:a5:
cd:29:dd:f2:ec:04:7c:96:6c:e5:d3:ef:59:a2:6d:
cc:1a:48:ff:91:65:3b:cf:3a:5a:2a:1e:f3:a2:f7:
1c:06:f2:12:7b:2a:df:1c:85:57:14:b6:c7:c9:8f:
ca:43:f7:78:35:ad:df:b2:1f:59:1f:0f:8c:d2:26:
77:88:dc:d2:48:31:53:b8:a2:48:ab:cb:cf:cd:f0:
7e:96:bb:bc:48:48:51:71:6c:1c:87:23:b2:cd:3d:
32:35:89:35:73:35:15:ae:15:a5:f7:f4:4a:f4:5b:
8a:51:f8:be:a6:d7:a7:1c:44:cf:df:d8:c3:58:5c:
7f:13:fa:27:5a:36:b6:77:eb:07:51:7d:cc:87:a0:
1e:b7:c5:14:f9:fa:05:61:9d:10:51:8b:e0:96:28:
16:c7:59:ac:9b:e1:d4:4a:3e:a8:f2:4f:d9:54:6a:
c9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BF:31:C5:CD:CA:7E:80:E7:AB:C9:4C:91:79:06:BC:B4:36:10:CC
X509v3 Authority Key Identifier:
keyid:FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:2e:31:75:5a:3e:96:4a:e0:47:4d:3f:b7:b0:de:50:67:5c:
f6:e6:7f:a3:ea:87:7c:6b:ae:90:b7:dd:f3:52:f7:5f:3b:69:
55:a8:7e:53:8e:9e:1e:6c:15:68:0b:be:74:cd:15:ec:73:ef:
a6:bf:07:7b:6a:2c:1c:22:93:b4:d9:47:5e:5c:79:ee:6e:0b:
8d:92:64:b4:64:fa:15:35:c8:fb:af:65:5e:a1:f8:cb:29:f0:
2c:d7:92:b1:7f:ac:98:be:a3:1c:07:6b:eb:29:9a:af:15:cb:
0e:4c:b7:ef:d6:ae:ce:1e:be:ed:66:86:01:bd:64:dc:87:5e:
d4:fc:fc:0f:e9:98:0b:72:a6:4a:0c:1f:fa:0a:b0:dc:a2:5d:
73:5f:ac:a4:eb:0b:bc:d7:ad:ee:41:9c:63:07:3b:3f:84:bd:
82:7c:10:2c:d7:5b:ff:a8:dc:fa:41:7f:bb:47:96:e6:af:ad:
2e:9c:f9:af:9c:5a:1c:d4:04:35:ad:fb:a3:31:03:12:0e:18:
6f:73:bb:e1:95:ae:b9:72:16:d6:0c:a4:bb:65:b4:f3:e3:97:
bb:8e:71:ec:e7:56:a8:af:37:0f:33:97:1f:47:7c:df:ba:ea:
29:ab:a3:f2:ea:24:6b:7a:a0:84:eb:fd:ca:7f:8a:6c:83:2a:
fe:cc:1e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:07:19 2025 by rpki-client