Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
File: tRQMX448e8JKGtTIQGQVJj62ur8.mft (raw, json)
Hash identifier: oW+BpsZlLJk+FL28jOJMn42wh0vZAqe2UQlhbNsL+s4=
Subject key identifier: 2A:F2:1F:4E:09:15:7A:0F:AD:A2:EF:E9:A3:66:20:56:CA:C8:AF:1C
Authority key identifier: B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF
Certificate issuer: /CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
Certificate serial: 01984A77DD0FDA098EC353C5B854FD1384BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
Manifest number: 13BD
Signing time: Sun 27 Jul 2025 06:00:26 +0000
Manifest this update: Sun 27 Jul 2025 06:00:26 +0000
Manifest next update: Mon 28 Jul 2025 06:00:26 +0000
Files and hashes: 1: tRQMX448e8JKGtTIQGQVJj62ur8.crl (hash: 7QEomGwKcz49fuv3FF0Fpt++2c/bITlGVHEzzTdfQbA=)
2: vBSjooCv1VbYtFGvr_WsQil5zco.roa (hash: 9TpEuhk1/IC2lzmVZHygO3k9GcTIx0s6uCEc0lzgzlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:dd:0f:da:09:8e:c3:53:c5:b8:54:fd:13:84:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
Validity
Not Before: Jul 27 06:00:26 2025 GMT
Not After : Jul 28 06:00:26 2025 GMT
Subject: CN=2af21f4e09157a0fada2efe9a3662056cac8af1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:95:0b:aa:57:5e:8b:a8:52:c6:73:f8:41:df:
65:29:d5:2a:be:32:75:d4:37:b3:70:6c:7f:56:c6:
06:ee:15:96:ba:bd:19:02:5a:04:c9:91:8b:ae:5e:
f0:b3:ca:34:2c:cc:4a:c8:d2:b0:dc:03:84:19:1f:
8d:28:3a:d7:05:35:13:69:b8:72:48:7b:f3:01:f2:
a5:03:9c:0c:a0:88:4f:34:19:ae:f4:c9:01:bd:54:
1b:b3:d4:63:77:97:8d:35:1e:3f:73:2c:b1:57:f5:
a1:2c:a8:5f:02:0a:f3:5d:44:78:7b:f2:32:2b:2d:
12:c8:38:be:92:ae:64:36:ed:87:18:b5:0a:e8:fb:
79:67:65:f7:34:fb:e2:94:d0:13:50:40:99:3a:98:
be:45:6a:46:f8:85:ad:0f:20:f5:3f:ab:ac:64:df:
69:bb:e3:a8:cc:06:f8:91:da:94:52:45:e8:c7:73:
12:f4:dc:f5:92:d0:d0:06:5b:da:f5:64:a9:16:37:
5f:c3:f5:fc:55:99:dd:21:5d:16:31:29:70:48:37:
43:ef:c0:7b:c6:e4:53:c1:66:58:df:55:95:31:26:
a0:87:6f:a3:42:33:20:4f:ce:5b:8b:70:79:8a:52:
1a:2b:0c:79:3f:d6:24:54:f6:2c:6e:49:81:4e:2d:
5c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F2:1F:4E:09:15:7A:0F:AD:A2:EF:E9:A3:66:20:56:CA:C8:AF:1C
X509v3 Authority Key Identifier:
keyid:B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:93:1f:cb:85:a9:8d:0c:db:82:0f:8a:c6:93:77:6c:65:c2:
33:09:53:08:2e:48:d0:2e:88:79:2e:a4:57:9b:ef:b5:bf:af:
a0:54:ae:f9:55:36:26:fd:19:36:c3:6d:65:25:4a:77:8e:cc:
2b:e7:66:ed:a9:f6:59:1f:db:9d:cf:9f:11:59:b1:ef:a6:a3:
d2:49:c2:b6:f9:24:c9:87:5f:34:5e:56:4d:92:1f:bd:06:dc:
54:b5:85:d3:34:d3:f1:4c:16:97:0e:43:e7:e7:ac:93:86:39:
50:3e:ed:7d:32:da:6d:fd:8e:21:b8:e8:27:5f:49:be:40:8c:
cf:9d:55:a6:f6:5f:39:5e:e8:d4:3e:f1:c2:8a:55:2d:ef:20:
17:74:fb:90:c5:8d:95:98:f9:23:90:b0:26:2e:a6:39:3f:f2:
9f:43:63:38:01:62:59:8d:4c:c2:58:c1:31:f9:8a:31:0c:4a:
10:8b:5b:95:70:e6:04:eb:1b:30:26:54:88:75:24:9f:20:88:
27:5f:48:11:89:9a:46:65:4b:57:20:59:81:f6:22:ee:2d:c7:
7c:70:7c:27:07:0d:31:09:68:a9:ea:6e:f7:21:25:f7:e8:e0:
3c:83:21:30:85:b4:da:c1:a9:53:6b:94:60:10:4d:10:b0:22:
80:88:c3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:21:10 2025 by rpki-client