Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
File: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft (raw, json)
Hash identifier: xHDM/NIIWyJ3JNgoFeTmMAuxY77C/vlKw8awJN0wJ2s=
Subject key identifier: 8C:AE:B9:20:96:E2:13:49:D4:25:A4:0C:B6:04:FB:D4:E0:F2:37:0E
Authority key identifier: 4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
Certificate issuer: /CN=4d1527d1839bf830360d71590134354e6d904697
Certificate serial: 019848F75C0DC2C8ED67F4C3BA65390AB794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 23:00:27 +0000
Manifest this update: Sat 26 Jul 2025 23:00:27 +0000
Manifest next update: Sun 27 Jul 2025 23:00:27 +0000
Files and hashes: 1: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl (hash: YN6gLTfDnsDhdRvEIQ0a7oDHLA0t5RwIQ59wrigthL8=)
2: a6Whh1qMHaCLz9si7bMkIx4xg1Y.roa (hash: R/Syehgq2eEOSio/8bhqr2YXvz+4Ke3qpd0G80XikQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:5c:0d:c2:c8:ed:67:f4:c3:ba:65:39:0a:b7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d1527d1839bf830360d71590134354e6d904697
Validity
Not Before: Jul 26 23:00:27 2025 GMT
Not After : Jul 27 23:00:27 2025 GMT
Subject: CN=8caeb92096e21349d425a40cb604fbd4e0f2370e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:a4:b5:ff:9f:c2:ac:c9:9c:f7:bb:04:2c:
e6:8f:fe:7d:60:ce:8b:8e:9d:9a:56:0a:54:31:1f:
55:e2:da:1a:2b:21:5b:61:6f:14:95:a3:af:86:8f:
c5:ee:16:77:75:6c:fb:02:ff:9d:61:f0:3f:d5:35:
74:8a:fd:96:60:1b:70:85:b1:f6:7f:f5:62:69:f3:
13:82:40:ee:b9:00:0c:99:ab:57:29:ad:96:29:aa:
ac:97:4a:5e:a7:89:63:e4:eb:8d:ec:1b:25:62:08:
6d:0b:54:75:16:0a:4b:5a:a1:58:dd:90:44:61:93:
2b:e0:a8:24:6b:e2:99:e2:5a:11:d5:62:b3:e9:20:
46:96:ab:03:ad:1a:81:53:c6:78:5e:c0:56:fb:62:
df:1f:9f:8f:3d:64:71:61:12:87:35:a1:81:61:f2:
70:de:16:ef:eb:f0:f5:9a:d6:ee:88:b8:7f:79:b7:
7e:c1:df:95:cf:a6:10:12:d7:f1:a4:07:bb:6d:6e:
8b:81:35:45:b8:73:f7:b5:ad:2e:72:99:a0:13:96:
04:79:30:3f:5f:76:7c:28:92:2d:68:6f:41:fc:57:
74:c7:7c:8b:90:82:c0:3c:da:24:99:2c:2a:e1:d3:
79:3d:b8:ee:e0:75:df:c8:b1:26:b7:cf:77:fc:01:
dd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AE:B9:20:96:E2:13:49:D4:25:A4:0C:B6:04:FB:D4:E0:F2:37:0E
X509v3 Authority Key Identifier:
keyid:4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ed:e7:f6:e0:8c:6c:29:c1:13:e1:6a:33:71:4a:04:42:bb:
cb:0e:7d:13:10:2c:08:61:86:66:f9:e8:66:8c:92:19:86:ff:
80:0f:f3:e2:f5:4b:3b:8a:4c:c3:7b:24:e8:20:d4:49:08:31:
e6:82:20:a6:25:68:68:8b:0d:ee:16:01:3c:cb:e4:5f:c1:54:
dd:e8:a4:14:db:10:e9:e1:4c:93:a8:71:18:ef:4d:99:f1:10:
af:c3:6b:7b:54:02:76:25:d6:a1:18:d0:97:77:27:ee:10:8f:
e9:a1:c6:6c:db:57:4e:ed:09:67:e3:65:b9:c8:f0:36:33:37:
cd:1d:b3:4f:5d:ef:b9:c4:26:19:66:12:71:0c:90:7a:c3:9f:
c6:7e:a2:45:21:10:34:57:f3:17:2f:f9:c6:b1:24:97:44:76:
23:00:22:f1:f3:5e:79:3f:61:ba:c4:15:de:36:3b:e7:9b:2c:
8f:b3:67:e8:2b:4d:0d:e4:07:8c:c7:0d:52:0c:03:c8:c9:63:
ff:62:1e:f3:76:f6:78:69:e3:a1:ce:3b:6e:c3:b2:76:d0:0f:
da:b4:d3:8d:48:da:91:d7:1e:1c:0b:96:19:e5:87:4c:6b:fc:
06:b9:dd:99:1d:b7:e7:b4:ad:59:9e:53:24:a3:41:a9:e1:9d:
ed:52:07:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:26:35 2025 by rpki-client