Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
File: trJJosVixe29t1BY4mvXcBI-la4.mft (raw, json)
Hash identifier: PBb8bbmeR1051IYzplkzFS0GPw6/CMWJof1K93nDyUw=
Subject key identifier: C3:A9:95:6F:6A:84:A5:FD:26:D3:BC:80:01:58:F2:E9:4B:CC:82:D4
Authority key identifier: B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
Certificate issuer: /CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Certificate serial: 019A51F5D841E6A01410FAF1F0CB315CC1EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
Manifest number: 13A1
Signing time: Wed 05 Nov 2025 03:00:57 +0000
Manifest this update: Wed 05 Nov 2025 03:00:57 +0000
Manifest next update: Thu 06 Nov 2025 03:00:57 +0000
Files and hashes: 1: Tz7aM9m6dWZAHAxiGKhjTtjsp6I.roa (hash: 1/urxUwqVm4ILEtV4SR7woJSlB4+PTBY3yo3Lt2enUw=)
2: trJJosVixe29t1BY4mvXcBI-la4.crl (hash: 6bohJt8hmh8q1C1U/oK2dkqOO+/tf0RRXENB2F0703Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:d8:41:e6:a0:14:10:fa:f1:f0:cb:31:5c:c1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Validity
Not Before: Nov 5 03:00:57 2025 GMT
Not After : Nov 6 03:00:57 2025 GMT
Subject: CN=c3a9956f6a84a5fd26d3bc800158f2e94bcc82d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1d:93:f4:16:d6:b2:7b:a8:ab:af:5a:59:98:
e9:da:32:9c:59:74:75:e3:55:2b:9c:a8:92:fc:4d:
3c:a5:9e:50:15:f0:61:d7:ad:16:48:5a:8c:6b:95:
4d:3a:1f:a5:79:be:98:1f:44:de:a3:66:bc:2d:c3:
c2:84:c6:08:6e:74:fb:a5:2d:72:18:61:61:9c:87:
26:32:97:db:27:ab:d1:52:55:62:27:55:d9:1a:9c:
76:1b:f0:53:0b:b4:f4:54:c3:99:ac:57:04:52:fe:
03:80:97:47:e4:84:1a:40:fa:c5:bf:af:8f:c7:5a:
4c:96:7b:24:48:6c:fd:b6:eb:22:a6:6a:78:d1:4f:
9f:bb:d2:53:b4:cf:32:62:fb:ce:5f:08:2e:2e:a6:
8f:d5:72:1e:78:09:df:44:03:00:99:8b:92:cc:bd:
5f:95:13:5d:11:10:cf:4a:a0:1a:75:bd:a1:a2:7f:
fd:33:10:5c:6f:10:c0:46:c8:d6:3a:92:f3:01:4d:
a6:ad:75:f3:d5:fd:35:7b:66:4d:08:27:8d:e4:22:
15:c2:00:26:0c:8a:4f:36:8b:38:b9:88:3d:c4:5e:
cd:41:24:da:94:25:20:18:42:6e:7e:20:04:e8:e5:
a9:e3:ae:bf:9e:be:f1:4f:8d:91:e1:60:44:31:07:
c6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A9:95:6F:6A:84:A5:FD:26:D3:BC:80:01:58:F2:E9:4B:CC:82:D4
X509v3 Authority Key Identifier:
keyid:B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:96:15:78:72:77:d5:48:0f:6b:91:99:a5:0f:e0:72:87:67:
8f:ce:12:c1:2c:e0:b2:d8:61:e6:13:8f:c9:42:7a:df:98:e9:
d9:fb:10:d2:49:30:67:f3:c7:20:e8:fb:19:55:34:22:ea:c3:
40:d7:bf:32:78:85:7e:cb:ad:01:a7:88:27:99:9c:72:cf:0b:
d7:bc:18:0f:2d:3f:67:af:0d:84:01:a2:98:7b:a0:ea:dd:a8:
ca:b3:63:53:63:55:90:0d:a0:e1:97:4e:46:9a:f9:20:b6:a5:
79:17:35:c8:bb:57:a4:fc:2f:a2:65:47:18:74:c8:9f:dd:45:
c6:97:19:0d:90:44:9b:8c:5f:3d:39:84:93:f6:35:de:aa:a9:
c2:1d:a9:6a:a5:a9:a3:ff:2b:09:a9:c4:d7:78:6b:d4:cc:96:
27:74:d2:30:73:5c:ee:3d:94:8a:63:58:fd:d0:bb:d0:81:40:
8c:22:27:aa:c0:18:8d:52:ea:ba:66:84:5f:48:ad:55:60:dc:
d7:97:8e:94:12:ac:dc:ff:0d:e3:8b:ce:1e:6f:53:38:1d:ef:
53:d4:bd:bf:7a:31:bc:72:8b:d3:ad:6e:62:27:8b:7f:4b:1c:
da:8a:2c:58:d8:b0:af:5d:fd:20:d0:ac:1b:c6:87:f6:90:9b:
b2:7f:c3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:58:02 2025 by rpki-client