Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
File: trcm8FkrUE5yMwX2e6tRR9TqaW0.mft (raw, json)
Hash identifier: NlIHHVCEW3Ijs4ikC4d9FRyKw/2OCwqeqi99akmqypI=
Subject key identifier: EB:AB:CD:45:58:5E:C1:6F:79:D8:80:B0:C8:3B:C6:9C:FD:D6:8F:10
Authority key identifier: B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D
Certificate issuer: /CN=b6b726f0592b504e723305f67bab5147d4ea696d
Certificate serial: 01987418BA0DC898DA75B7D8529E6B49A6B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
Manifest number: 0957
Signing time: Mon 04 Aug 2025 08:00:34 +0000
Manifest this update: Mon 04 Aug 2025 08:00:34 +0000
Manifest next update: Tue 05 Aug 2025 08:00:34 +0000
Files and hashes: 1: _oI-Lkb0IuWy-UHIoAbDqvwfl1s.roa (hash: mRZXCcW1ghBXMTwSw7NYgVRMYeyGjl4gH8juqLCzVks=)
2: trcm8FkrUE5yMwX2e6tRR9TqaW0.crl (hash: YSOeOu24EyuhJ9C43w82mPWbFeXK/6TJnoVAORJxdUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:ba:0d:c8:98:da:75:b7:d8:52:9e:6b:49:a6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b726f0592b504e723305f67bab5147d4ea696d
Validity
Not Before: Aug 4 08:00:34 2025 GMT
Not After : Aug 5 08:00:34 2025 GMT
Subject: CN=ebabcd45585ec16f79d880b0c83bc69cfdd68f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:9a:07:2e:73:9f:aa:f7:01:55:54:bb:63:
90:6b:42:91:e9:23:83:be:93:08:64:e3:e2:56:c5:
50:48:76:1c:96:de:fb:d3:d1:84:37:d9:b7:05:1a:
89:15:bb:be:8b:fb:02:99:f4:ad:de:50:9f:4e:33:
d9:39:71:41:c7:e7:f1:36:2b:95:fb:96:ff:64:0b:
f2:9c:43:37:74:95:f1:05:34:fc:f8:97:dd:3c:cd:
b6:cc:b8:eb:77:4c:0f:47:78:57:b5:c5:3f:9f:e2:
fa:5d:7a:5d:8e:d5:c1:4b:89:d8:bd:fb:72:c9:40:
38:00:d8:3d:ab:53:31:03:db:65:66:3e:6c:0e:0a:
7c:2d:c1:a9:e1:99:c5:f1:07:76:78:52:28:b7:57:
77:1b:fc:03:cf:16:91:f8:22:9a:20:65:d6:6c:f7:
b4:43:dd:94:a8:9b:e3:a6:60:09:d6:c0:0a:33:2e:
65:86:c1:78:90:ed:ff:fc:87:32:90:20:12:48:92:
f6:d1:8c:49:3d:f9:da:58:0a:b2:a2:e0:1e:29:8a:
37:d9:2e:62:ce:47:4f:3f:f2:a4:bf:c2:c4:8a:2d:
04:b5:44:5c:b1:2c:1d:bf:e3:9b:d3:c3:b1:f5:46:
27:a8:58:72:cf:3a:48:a9:76:af:21:15:5f:c9:e3:
bd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AB:CD:45:58:5E:C1:6F:79:D8:80:B0:C8:3B:C6:9C:FD:D6:8F:10
X509v3 Authority Key Identifier:
keyid:B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:79:ec:13:76:ce:73:ca:64:a2:fe:1a:36:c3:e7:a4:42:79:
4d:02:81:ff:9c:8b:60:aa:3e:54:8c:ed:a1:33:4a:65:e2:18:
b5:16:37:60:10:1e:2d:ed:b7:ba:d1:70:41:aa:e7:7e:0a:6a:
0e:62:32:ad:b0:f0:20:4e:f3:01:86:5f:31:2f:dc:ed:45:b6:
46:c4:0a:94:09:43:98:47:b8:87:9d:fd:fc:20:74:41:82:72:
a5:bd:66:c0:cd:c1:b8:bf:ad:b3:f2:06:b8:92:e1:71:45:87:
21:f8:1e:94:89:fe:8c:0f:3b:aa:9f:29:31:75:aa:82:0e:be:
67:e2:c5:40:20:45:d0:4c:c1:e2:25:b5:52:2c:d7:31:35:b6:
5c:92:9e:d2:ec:75:25:5a:4a:dc:d5:c3:67:cc:48:69:df:f4:
4b:8d:11:4a:7c:86:ec:19:c5:c0:a9:eb:72:13:76:ea:c0:78:
96:a8:9f:8c:76:c3:8f:69:b6:11:73:39:17:20:34:f1:13:a2:
cb:58:b3:30:12:bb:0d:2c:2b:be:3a:c8:74:aa:5d:16:8f:f6:
31:24:a3:b9:16:74:ee:9e:c5:b5:bc:9c:55:5a:c3:b5:aa:ae:
81:08:98:da:1b:7d:9d:9d:f0:fa:c5:4e:be:41:6f:c7:75:b5:
a1:6f:f2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:25 2025 by rpki-client