Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
File: TRDp1PSvuKTRuRnshZP0a6O7p_c.mft (raw, json)
Hash identifier: MeLm+6oULVogDmuemTwKX/oj4QF5OxEB+Up8Vwlutj4=
Subject key identifier: 58:FD:40:5A:22:CD:78:48:15:E1:A0:89:EA:43:E4:D6:43:28:7F:43
Authority key identifier: 4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7
Certificate issuer: /CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7
Certificate serial: 019A27425D88B2DCF4D37CD5C69DEA1403B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
Manifest number: 13FA
Signing time: Mon 27 Oct 2025 20:00:51 +0000
Manifest this update: Mon 27 Oct 2025 20:00:51 +0000
Manifest next update: Tue 28 Oct 2025 20:00:51 +0000
Files and hashes: 1: KbSVDODyeN3kHoikV78WDWGb18w.roa (hash: oRCPK1YwXowGG8GKKm2eZqlzH0XvN6BREuS7mGHYkgI=)
2: TRDp1PSvuKTRuRnshZP0a6O7p_c.crl (hash: qsTnlRY6ABmaxK639MaZCConTY5Q+7Yi6loZKhAOXfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:42:5d:88:b2:dc:f4:d3:7c:d5:c6:9d:ea:14:03:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7
Validity
Not Before: Oct 27 20:00:51 2025 GMT
Not After : Oct 28 20:00:51 2025 GMT
Subject: CN=58fd405a22cd784815e1a089ea43e4d643287f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6a:d4:5a:d7:3e:7c:9f:ed:f2:80:f8:2c:0b:
2a:36:b8:3d:28:c7:d4:2a:17:90:a8:9a:b3:16:67:
09:92:85:51:58:51:2a:03:65:1f:cd:86:af:90:61:
0e:0a:68:dc:bb:bd:ef:e9:d9:96:e5:66:ff:08:8c:
c8:2e:fa:13:5d:ad:72:69:6d:5c:35:86:dc:41:f8:
71:88:63:9c:b2:03:39:2c:95:48:23:d6:88:13:e0:
0c:02:a9:30:e0:e8:5a:5f:33:85:98:25:ff:df:77:
f1:94:5e:64:cb:04:93:92:bb:cb:50:8f:35:40:0e:
ca:4f:62:d2:2d:f8:be:9f:18:a1:ec:06:4e:eb:6f:
77:2f:de:0c:49:3e:c2:94:ac:44:d3:8c:46:21:a9:
60:03:e2:17:26:69:00:d5:4e:ba:a9:c6:b1:2c:0a:
d3:dd:66:27:7d:8a:47:30:b0:d8:b7:10:cb:6c:67:
f9:9c:8e:47:0e:6a:21:7e:7d:04:41:b0:45:11:d7:
2a:84:c3:da:04:f0:6f:41:7c:b1:49:14:ac:43:44:
ba:7d:b1:1c:a5:fa:39:9d:38:43:05:f9:e0:0c:82:
1c:11:7e:5d:53:ab:52:f2:e1:4c:7f:4c:41:3c:4f:
3f:6e:c8:c0:a6:9a:e3:10:e0:cb:41:f0:e9:22:8b:
58:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FD:40:5A:22:CD:78:48:15:E1:A0:89:EA:43:E4:D6:43:28:7F:43
X509v3 Authority Key Identifier:
keyid:4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:54:bb:ca:18:68:5e:b2:3f:be:4b:7d:32:8e:f8:86:f5:ee:
37:cd:83:a7:35:66:40:a9:d0:a2:f6:74:db:74:1a:79:9e:b7:
3a:27:8b:85:a3:8f:33:55:fc:cb:1a:ef:e2:6b:56:cb:dc:3a:
db:58:68:d4:32:9e:62:02:12:fa:00:90:80:c9:3b:e5:35:51:
2e:14:7f:5b:45:69:03:05:df:fb:f1:b5:a6:8e:49:81:c9:0d:
e2:ec:af:4e:d7:73:79:3e:27:79:35:03:1f:ae:24:1f:6b:36:
dc:9b:ba:1c:c8:47:ac:58:aa:58:e0:30:cf:34:ee:cd:9e:30:
3f:2b:b7:38:7c:bd:c2:dc:b1:b3:dc:b2:fe:86:af:8c:76:07:
db:b4:b1:8c:f6:3d:4d:d8:18:42:86:58:c2:23:18:3a:13:07:
8b:82:07:bd:ca:13:78:51:17:e0:3c:66:ac:05:97:36:8a:06:
8a:c7:19:10:e8:69:b8:d8:a6:ac:5f:79:64:22:54:87:4d:9c:
b7:2c:69:6e:08:92:2f:43:d7:2c:27:86:df:a1:01:a5:e7:10:
49:ee:39:bb:98:77:27:a6:d1:90:71:e6:83:15:b6:27:14:f1:
62:80:18:c9:c3:90:19:5f:ef:00:24:85:47:81:9f:3b:b2:47:
0e:15:4a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:04:59 2025 by rpki-client