Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
File: TRDp1PSvuKTRuRnshZP0a6O7p_c.mft (raw, json)
Hash identifier: FneX24uSDUZClPTumixLXObueCjz+erUI8tNloxBBiE=
Subject key identifier: 72:D6:52:86:08:6D:F0:DE:5E:B2:D0:15:77:55:45:97:07:82:7C:10
Authority key identifier: 4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7
Certificate issuer: /CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7
Certificate serial: 01984A4141E72101FB44ECABD0D2AD8C78CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
Manifest number: 1303
Signing time: Sun 27 Jul 2025 05:00:47 +0000
Manifest this update: Sun 27 Jul 2025 05:00:47 +0000
Manifest next update: Mon 28 Jul 2025 05:00:47 +0000
Files and hashes: 1: KbSVDODyeN3kHoikV78WDWGb18w.roa (hash: oRCPK1YwXowGG8GKKm2eZqlzH0XvN6BREuS7mGHYkgI=)
2: TRDp1PSvuKTRuRnshZP0a6O7p_c.crl (hash: EDzVDMLWFShy/MpOf8mh9RaZ2dl1my6f2A/5ueejz4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:41:e7:21:01:fb:44:ec:ab:d0:d2:ad:8c:78:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7
Validity
Not Before: Jul 27 05:00:47 2025 GMT
Not After : Jul 28 05:00:47 2025 GMT
Subject: CN=72d65286086df0de5eb2d0157755459707827c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:62:75:0c:9f:b5:bb:47:b0:13:3f:52:3a:e1:
5b:cb:6c:fa:8e:47:e8:3e:70:40:63:33:4a:db:8c:
72:08:78:ed:4f:41:e4:e7:5a:f9:25:3a:68:c0:4f:
9a:11:a2:ee:90:0e:72:c0:52:16:72:7f:d5:d2:65:
40:14:7f:9f:c1:74:62:06:4b:58:57:66:0e:07:d4:
de:06:88:c1:ed:e5:77:02:a6:bb:59:a9:85:ed:d1:
37:cb:78:26:43:70:3a:64:2a:5c:ed:11:70:34:db:
d8:53:60:6a:7a:1e:93:7b:d2:4b:de:51:8d:7e:43:
81:33:af:59:00:2c:38:11:cc:10:c3:2d:10:ce:df:
78:af:d5:ae:08:98:e6:05:34:43:2d:1e:23:08:77:
32:06:b0:8a:8e:70:a9:a2:a3:82:2a:41:21:7e:8b:
76:76:c2:4f:4a:ff:e8:bf:e3:e5:d2:9a:6b:65:d4:
ea:72:49:ac:f1:c6:e1:6c:4d:04:36:25:db:54:f7:
a0:db:ca:b8:7e:0a:b8:04:33:56:ad:97:ab:8e:c5:
8c:5b:33:db:5d:1d:3a:a9:60:1d:68:60:98:6c:68:
b3:ea:53:10:8d:62:fd:b9:29:65:49:b3:71:95:0d:
f5:94:f0:6e:7d:2e:b8:37:d3:c4:1c:5a:ee:df:86:
a9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D6:52:86:08:6D:F0:DE:5E:B2:D0:15:77:55:45:97:07:82:7C:10
X509v3 Authority Key Identifier:
keyid:4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ee:d9:9d:fe:98:0a:8e:e0:47:73:97:aa:51:f5:16:5f:44:
9b:9c:f0:1e:cf:49:11:49:77:b9:f1:bd:9f:3c:c0:4d:66:01:
a2:5f:ad:38:ff:19:7b:6d:9f:98:b8:e7:23:07:c9:ab:d5:47:
16:fa:fe:65:d9:9d:7f:ef:bd:71:9f:55:5e:98:0d:69:43:15:
ea:34:0a:60:6f:0a:9f:dc:77:06:8d:7e:4d:ec:29:1e:35:03:
7f:a9:9e:b0:11:31:f4:20:11:11:a0:4e:7d:ad:45:3d:83:89:
a5:54:38:76:bf:91:fd:c9:d3:d4:9d:a7:98:0c:d8:b9:89:ff:
82:89:ad:05:a7:34:d6:61:35:1e:50:16:c9:43:cc:5f:27:a0:
ce:0f:1c:ed:0e:f1:8f:6d:80:18:01:61:b6:d7:34:5b:96:b4:
e3:2e:49:a0:22:ec:d7:ce:55:87:ba:5a:28:74:2c:55:20:91:
0b:22:a6:6c:d7:b5:26:e4:6f:e5:7c:53:0b:93:08:66:88:86:
00:5a:19:2c:26:0b:2f:2d:04:93:8b:77:e9:d7:86:0e:da:b2:
45:88:5d:93:cd:e1:aa:48:00:9f:89:cd:e4:05:c0:38:8c:35:
05:42:e1:0b:69:41:3f:8b:72:29:c1:db:25:dd:2d:df:34:d7:
6b:2d:14:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:23:12 2025 by rpki-client