Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
File: TRDp1PSvuKTRuRnshZP0a6O7p_c.mft (raw, json)
Hash identifier: KyTQu+nGAHS7h6SbOqMDsesZIHMkCWI397l+FEqGLtM=
Subject key identifier: 97:56:82:86:9D:D5:04:90:60:67:A8:47:9B:06:9B:83:14:46:5C:3C
Authority key identifier: 4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7
Certificate issuer: /CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7
Certificate serial: 019931FF479A26E0BEBCABA4EA5D68D0C403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
Manifest number: 137B
Signing time: Wed 10 Sep 2025 05:00:37 +0000
Manifest this update: Wed 10 Sep 2025 05:00:37 +0000
Manifest next update: Thu 11 Sep 2025 05:00:37 +0000
Files and hashes: 1: KbSVDODyeN3kHoikV78WDWGb18w.roa (hash: oRCPK1YwXowGG8GKKm2eZqlzH0XvN6BREuS7mGHYkgI=)
2: TRDp1PSvuKTRuRnshZP0a6O7p_c.crl (hash: VN4X9EU5frGQTiNlrAsOsGZ+WhBKr8zCTpKUagcNYS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:47:9a:26:e0:be:bc:ab:a4:ea:5d:68:d0:c4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7
Validity
Not Before: Sep 10 05:00:37 2025 GMT
Not After : Sep 11 05:00:37 2025 GMT
Subject: CN=975682869dd504906067a8479b069b8314465c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:ed:ff:f7:2f:49:89:35:96:3f:32:61:71:
fb:95:92:5f:0a:6c:3f:04:89:bc:27:46:07:9a:86:
07:7b:58:fe:b2:4d:74:d8:a3:9f:dc:a5:92:84:0f:
3f:b2:da:ba:14:82:ee:04:10:7a:54:e3:2b:01:a7:
3e:56:87:1e:2a:46:50:46:fc:9d:0f:c6:45:67:55:
8a:a6:d6:3b:b2:be:02:9d:f5:f8:16:fa:50:39:e5:
e5:58:04:66:b7:97:72:d3:e6:78:8e:ec:26:60:2b:
0a:07:97:e4:a1:f9:7b:2b:24:51:83:56:2c:50:21:
c9:f3:b2:1a:38:71:0a:53:9e:96:2b:64:2e:42:05:
a8:cf:c8:79:8e:f4:93:06:32:dd:71:03:57:ab:9a:
09:1e:96:eb:03:8a:7b:60:09:c0:ae:a5:21:ae:c8:
11:2a:e9:7e:06:d6:90:c0:79:35:37:ca:0a:42:a7:
f2:e0:25:7a:5a:c1:d3:59:51:46:08:1c:5e:1b:d9:
aa:e6:24:7b:d7:cc:12:7a:8b:ab:0d:95:e5:4a:4d:
ba:d8:d1:0f:d4:4d:90:4a:9c:4d:a7:f8:ac:8d:4d:
9c:29:6d:8d:14:19:c3:6a:e0:70:11:a0:83:a2:3f:
ca:a6:f5:f8:ea:d4:dc:f9:08:b5:92:a0:1d:92:13:
23:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:56:82:86:9D:D5:04:90:60:67:A8:47:9B:06:9B:83:14:46:5C:3C
X509v3 Authority Key Identifier:
keyid:4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:1a:8e:e2:54:d8:f0:ff:35:8f:4d:a0:3d:f6:a2:6f:73:5b:
cf:5b:9e:91:e5:74:64:17:33:3b:40:35:34:9b:19:d3:8c:ae:
64:58:e8:c8:2b:40:95:73:81:b5:81:34:6a:dd:90:5b:e5:0e:
19:c3:ec:ac:99:30:a1:3d:b3:52:5b:61:b0:69:dd:fd:15:bb:
b8:4e:a5:57:ce:c8:3d:36:88:02:12:2c:9c:4d:21:8c:a9:b0:
31:ae:e9:9d:69:b1:fe:00:c3:5b:b9:05:58:39:a3:59:69:e6:
bf:51:38:11:6c:a1:a7:f8:d3:80:19:ed:9b:d2:5b:d9:c5:d3:
a1:22:be:97:e5:c2:ee:a7:37:9c:69:78:5e:ce:fa:86:68:ac:
94:03:3d:75:29:4e:5e:77:87:e3:0d:0e:1d:cb:c0:54:04:75:
e6:d2:90:31:7b:50:78:97:9a:79:b6:cd:f5:87:9a:8f:aa:8a:
39:bb:d7:09:b3:4c:b2:4e:08:06:f4:75:00:bf:fc:f4:e4:21:
b6:d2:6e:38:26:65:34:97:69:01:96:9f:c4:15:2e:c5:c2:4b:
be:dc:59:da:95:81:8f:25:3c:b9:eb:9c:76:8b:69:73:b1:16:
b6:73:fe:26:5a:bd:c5:56:c3:79:a9:85:91:38:ae:24:e5:6f:
83:81:38:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:22:08 2025 by rpki-client