Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
File: trcm8FkrUE5yMwX2e6tRR9TqaW0.mft (raw, json)
Hash identifier: o0gXT5aCJVMg/mdKFJXfJn5K+T4By6/Tap39wCxw9Ek=
Subject key identifier: 3A:A5:52:1C:01:AE:E0:4F:84:4E:50:C5:A6:F3:D1:50:3C:CB:27:47
Authority key identifier: B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D
Certificate issuer: /CN=b6b726f0592b504e723305f67bab5147d4ea696d
Certificate serial: 019A4F2B9E170675860348154BF523145BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
Manifest number: 0A4D
Signing time: Tue 04 Nov 2025 14:00:49 +0000
Manifest this update: Tue 04 Nov 2025 14:00:49 +0000
Manifest next update: Wed 05 Nov 2025 14:00:49 +0000
Files and hashes: 1: _oI-Lkb0IuWy-UHIoAbDqvwfl1s.roa (hash: mRZXCcW1ghBXMTwSw7NYgVRMYeyGjl4gH8juqLCzVks=)
2: trcm8FkrUE5yMwX2e6tRR9TqaW0.crl (hash: gGrfhsv4lesmR8qKowyr2IScfY5nkcVQI/9ZZ0P09D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:9e:17:06:75:86:03:48:15:4b:f5:23:14:5b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b726f0592b504e723305f67bab5147d4ea696d
Validity
Not Before: Nov 4 14:00:49 2025 GMT
Not After : Nov 5 14:00:49 2025 GMT
Subject: CN=3aa5521c01aee04f844e50c5a6f3d1503ccb2747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:99:23:dd:b6:fa:c3:7d:b8:10:eb:2f:3a:
3a:41:c9:21:3e:44:ca:86:ab:3e:33:0e:fa:d7:68:
c1:d0:ba:e7:c5:42:40:a9:d0:a0:9d:69:0f:e2:4b:
73:ec:c6:e8:63:d2:70:75:8e:e5:3f:8e:0b:ae:fc:
d7:a3:c0:de:00:5c:82:5f:af:e0:c4:f3:2a:50:de:
cd:f0:ce:8d:8d:4e:45:bb:ab:04:be:bb:1c:ef:9c:
17:88:5d:5b:5e:f8:bd:38:ce:ec:0a:0a:93:55:da:
79:d8:3c:c9:76:3f:da:de:c2:16:cb:1b:ae:23:4f:
09:f7:e5:5c:41:b5:54:73:98:a1:87:b9:92:72:f2:
c0:63:45:47:50:ef:65:4b:81:21:d9:48:22:ad:27:
ce:60:c2:23:a1:da:24:00:dd:60:db:ac:6c:f5:f8:
4e:2e:17:ac:62:db:e8:ef:35:ac:b2:65:77:4a:57:
6c:0e:2d:0a:f9:21:86:86:88:75:de:72:5a:97:4c:
09:ed:1e:83:17:d8:72:6c:d1:78:f7:a5:a7:34:8f:
4c:2e:3a:85:7d:2b:d1:13:82:bc:f9:e1:bb:6a:87:
cb:ee:d2:c4:8c:75:b0:04:b5:2e:00:6b:ce:de:06:
3f:44:14:dd:9e:74:24:e3:16:53:dc:80:dd:6a:41:
b4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A5:52:1C:01:AE:E0:4F:84:4E:50:C5:A6:F3:D1:50:3C:CB:27:47
X509v3 Authority Key Identifier:
keyid:B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:da:fe:f3:70:f9:ba:d9:58:45:9f:05:c3:6e:59:f1:d3:47:
32:ae:50:80:43:87:d1:25:8d:29:cf:56:2b:96:28:ca:2d:41:
09:cf:43:0a:b8:5d:26:ad:d2:7a:fb:68:38:0a:a9:90:11:cd:
ab:d9:dd:39:ef:60:d4:31:df:dc:1a:2d:0d:36:16:66:09:b5:
61:7c:7c:07:7f:f3:c9:7c:5a:d5:2f:7b:7f:c7:7d:e8:75:d9:
66:86:c4:bd:72:61:32:d9:d2:28:03:e3:87:b9:bb:6a:86:1a:
09:fb:65:20:86:a9:ec:24:2f:ca:f5:e5:bc:51:8a:ca:a7:7e:
c8:5c:fc:27:35:4b:7d:2f:53:7b:c7:d1:6f:b1:ad:0c:40:d2:
7f:90:0a:84:41:06:64:67:91:52:4a:ef:60:b7:44:d3:60:c2:
dd:6d:a8:a7:60:59:d2:f0:e8:22:98:7d:28:45:c1:ab:8c:55:
63:63:65:58:6b:96:56:0e:b8:f1:94:5a:b5:d6:72:63:fc:eb:
75:c9:8c:66:32:48:66:78:e9:76:5e:1c:a3:ed:70:50:76:93:
7f:eb:89:2a:aa:4d:3e:d2:36:21:f2:b5:da:80:54:2a:72:42:
92:88:3e:74:21:43:65:09:ae:f0:1a:ec:1c:08:fc:65:3c:e2:
5e:71:59:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:24:00 2025 by rpki-client