Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
File: TrwmqzTIMZdDMt05mo5W6aqbe4U.mft (raw, json)
Hash identifier: YNgv0WF/828jDer9VXtYaSWwru8/LtZJMXvg9Jlb08M=
Subject key identifier: 20:C5:A5:30:E3:96:E3:0B:EB:56:2D:F2:FE:0B:FF:22:32:7C:F4:51
Authority key identifier: 4E:BC:26:AB:34:C8:31:97:43:32:DD:39:9A:8E:56:E9:AA:9B:7B:85
Certificate issuer: /CN=4ebc26ab34c831974332dd399a8e56e9aa9b7b85
Certificate serial: 019A725CFABEE479F9957C2E62928277BC40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
Manifest number: 5B
Signing time: Tue 11 Nov 2025 10:01:27 +0000
Manifest this update: Tue 11 Nov 2025 10:01:27 +0000
Manifest next update: Wed 12 Nov 2025 10:01:27 +0000
Files and hashes: 1: TrwmqzTIMZdDMt05mo5W6aqbe4U.crl (hash: kIjLK5sW7FrwbvncAhjB9vSQ0bUZJy3Hcl9V2P/OhtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:fa:be:e4:79:f9:95:7c:2e:62:92:82:77:bc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ebc26ab34c831974332dd399a8e56e9aa9b7b85
Validity
Not Before: Nov 11 10:01:27 2025 GMT
Not After : Nov 12 10:01:27 2025 GMT
Subject: CN=20c5a530e396e30beb562df2fe0bff22327cf451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:02:4d:1a:8b:c7:24:0c:77:07:f5:3a:60:
52:ff:d6:8a:e6:a0:7a:4a:a7:1f:e1:28:f0:b3:cb:
2f:d4:8b:3a:75:22:cf:41:59:d5:6d:60:49:e0:2f:
03:6c:89:31:b4:a5:3b:31:b5:d9:a6:29:34:e8:34:
89:e2:2a:f5:a1:18:ea:9e:f4:99:c7:16:c0:83:40:
d5:e6:bb:a8:e1:b2:8e:35:f1:e0:d8:a5:88:19:9e:
4b:d7:87:fc:f4:02:7b:ca:86:85:f8:77:53:24:fe:
cd:f6:ac:27:0c:d5:27:ed:6e:f2:39:2b:c1:8d:76:
45:c4:8a:55:45:69:4f:be:aa:30:26:c2:ca:8c:b2:
f9:87:29:77:28:86:18:03:0b:0b:ef:3b:8b:42:1d:
1c:1a:79:c0:0e:cf:31:83:16:3a:bf:92:c6:7b:c7:
75:1c:53:1e:2f:c8:db:1a:52:a0:28:5c:11:df:10:
14:b0:ea:bd:9b:d8:b1:cb:17:e1:74:2f:97:3e:e7:
43:8f:89:6a:18:10:ed:f7:df:0a:84:6c:ec:da:76:
af:a7:c1:df:47:ff:02:ee:b2:a6:1f:dd:28:1c:c5:
d0:38:46:f2:6c:b1:79:2e:26:45:9e:b4:36:81:dd:
26:5a:e9:70:00:38:9b:81:11:86:49:e4:e8:8e:9f:
97:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C5:A5:30:E3:96:E3:0B:EB:56:2D:F2:FE:0B:FF:22:32:7C:F4:51
X509v3 Authority Key Identifier:
keyid:4E:BC:26:AB:34:C8:31:97:43:32:DD:39:9A:8E:56:E9:AA:9B:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:22:ed:25:68:83:50:b1:bb:25:29:b2:5b:80:0f:d9:30:21:
25:84:a3:35:48:63:14:09:0b:72:99:6c:15:64:cb:c1:35:71:
76:82:c6:9f:05:8c:1c:91:6e:34:0b:60:56:f7:8d:07:35:d8:
4d:69:e2:2f:e3:9b:26:8b:41:a6:15:74:fb:0e:19:a3:7f:e0:
b8:12:64:8b:1c:4f:0e:4f:1a:9f:21:d1:b4:36:e8:4b:b1:49:
07:f0:fa:0c:31:bb:26:55:ee:99:0e:6b:dd:a8:53:a2:fc:0d:
7a:3a:24:c5:d6:8e:31:38:5a:de:02:6c:8b:a9:bd:e5:fc:14:
88:3a:74:d0:fd:59:fd:40:a6:d2:5c:ce:a5:ee:76:b1:c1:18:
78:fb:b0:67:28:50:8a:3e:3b:c7:f9:9f:5c:c5:ce:95:e1:be:
03:29:79:d7:26:97:21:b3:cd:34:8c:21:b3:8a:a4:77:86:4e:
e9:55:d2:1b:9d:0e:72:75:98:25:be:e9:08:4f:d4:8b:38:c3:
e5:7c:91:0d:59:b9:1a:95:99:ed:bf:de:8c:36:b6:0f:aa:19:
a0:9f:2f:19:a7:27:42:cd:cc:93:6d:39:a8:4d:d1:6d:08:44:
54:f3:a7:d9:04:80:5c:0f:22:1d:d9:2e:ea:a4:58:62:d3:8c:
e6:f4:aa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:06 2025 by rpki-client