Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
File: tRu6i9P6566CScnEYWi6kAI9sZQ.mft (raw, json)
Hash identifier: BE4oGygGGDYujaLjiIFbcr/zfVLx2R+2iwHjyou3MBc=
Subject key identifier: 26:28:27:86:77:C2:98:EC:54:F0:02:69:9E:27:8C:A2:E1:2C:32:60
Authority key identifier: B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
Certificate issuer: /CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Certificate serial: 019A4F627B7A2F626563DFE4E707E2531E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 15:00:45 +0000
Manifest this update: Tue 04 Nov 2025 15:00:45 +0000
Manifest next update: Wed 05 Nov 2025 15:00:45 +0000
Files and hashes: 1: tRu6i9P6566CScnEYWi6kAI9sZQ.crl (hash: 9oS0OuoV+4LyCxUoJK6RaXJYA4RUMPgnVDCwGi5cE+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:7b:7a:2f:62:65:63:df:e4:e7:07:e2:53:1e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Validity
Not Before: Nov 4 15:00:45 2025 GMT
Not After : Nov 5 15:00:45 2025 GMT
Subject: CN=2628278677c298ec54f002699e278ca2e12c3260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:96:d9:dd:bd:1f:9b:56:3f:33:36:d2:c9:
ea:a9:ea:92:3a:e0:d3:bb:e1:f1:8e:01:5f:20:d7:
c1:1e:53:55:4b:56:8f:1e:9b:fd:ae:d2:45:a6:4d:
53:2c:8a:f5:a3:a7:1e:f8:2b:44:79:75:05:f4:ae:
72:eb:1c:34:3e:63:f2:e7:79:78:e0:72:c9:6f:3c:
71:5a:c5:07:8b:68:ff:8b:b4:02:a6:a5:97:0b:2f:
b1:2d:31:c0:ba:8d:c2:9c:9d:a5:8c:f3:bb:4e:12:
b9:0a:20:29:c9:2e:2b:67:67:4d:c8:8f:e5:a6:91:
75:53:a8:55:5d:84:5b:d5:16:91:30:86:6e:79:ea:
49:1e:d9:a6:62:a2:de:a8:5f:d2:4d:aa:29:91:90:
e1:9f:40:f0:e0:d8:00:0d:de:e7:9f:c3:73:13:2a:
8e:4e:47:9d:0a:e6:89:42:de:d3:cc:31:5e:2b:8a:
78:4b:1e:2c:45:0d:45:ac:f0:a6:b5:e6:58:ab:cc:
e5:d3:71:50:d9:fc:00:a5:b0:5f:95:6b:f7:30:7c:
fd:82:93:1a:a0:ab:d9:09:24:44:53:c1:5d:28:2f:
c8:6e:74:73:2c:c1:d3:02:6a:f5:99:24:94:c3:e8:
ff:0c:9a:bc:07:17:d9:6c:ee:f1:15:b5:5c:21:ce:
99:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:28:27:86:77:C2:98:EC:54:F0:02:69:9E:27:8C:A2:E1:2C:32:60
X509v3 Authority Key Identifier:
keyid:B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3d:99:72:f0:da:4e:d9:d3:fd:d8:13:20:c8:0e:bd:41:4d:
ff:ea:82:6d:b2:22:9e:66:7e:73:75:23:1c:8a:a6:2a:cd:11:
78:41:a8:91:fd:75:21:50:e4:9a:3a:d4:5f:83:74:0b:73:dd:
ad:02:08:1f:9b:09:95:00:83:73:8e:66:dc:bf:58:df:22:85:
b5:29:c8:99:04:e7:2b:4d:12:ec:ab:1e:5d:ae:71:2e:c5:26:
ee:ad:80:11:76:55:22:a3:cc:1b:db:6b:81:6e:4a:6e:07:c4:
28:bc:c9:95:46:6b:26:05:60:95:ad:f2:05:1e:93:f2:e3:75:
e3:2f:80:47:66:c6:15:03:00:c1:73:1e:57:72:cb:e7:97:6c:
45:22:4f:be:09:c0:8e:fd:e3:16:bc:17:52:df:a6:32:f3:5a:
71:dd:d8:5e:03:23:d3:97:03:3c:c6:16:d5:0d:e9:83:cb:0a:
3e:c0:71:8e:fb:fb:33:7a:06:e3:1f:43:24:68:99:09:ac:32:
a2:d2:27:72:92:e9:29:cc:92:a4:89:70:6b:07:d2:0d:10:b2:
05:83:f4:9f:1d:f2:6f:b1:14:17:18:5c:47:84:f2:46:4f:65:
d2:ae:7a:ea:b4:ab:fa:cf:a6:b0:c5:aa:ad:bf:6c:28:86:e9:
18:b6:cd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:49 2025 by rpki-client