Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
File: _TrysG9KUBbg5avtGD9GXbFfQdU.mft (raw, json)
Hash identifier: kaLJNpLG3hNcv+7+JQq4Aqzm1ioZwpIBppFZyTp3KPI=
Subject key identifier: 49:5F:28:E5:A9:FE:A0:33:8D:FC:42:FF:C1:AF:FB:65:81:BF:C1:0A
Authority key identifier: FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
Certificate issuer: /CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Certificate serial: 01992F35F587E3E7C350FEF14C6FBC4FC0AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
Manifest number: 0E6B
Signing time: Tue 09 Sep 2025 16:01:29 +0000
Manifest this update: Tue 09 Sep 2025 16:01:29 +0000
Manifest next update: Wed 10 Sep 2025 16:01:29 +0000
Files and hashes: 1: _TrysG9KUBbg5avtGD9GXbFfQdU.crl (hash: 9ant+raADOD++8Ra1mJkgOJiBVOVQ0JRD5P3+3Kbeh4=)
2: miFtnjs24Q4-RR01JpCMeAQD8WI.roa (hash: hNI7H2ayjIbmcGVqvenpoZ5nB2aID+7Eteg64XuKiJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:35:f5:87:e3:e7:c3:50:fe:f1:4c:6f:bc:4f:c0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Validity
Not Before: Sep 9 16:01:29 2025 GMT
Not After : Sep 10 16:01:29 2025 GMT
Subject: CN=495f28e5a9fea0338dfc42ffc1affb6581bfc10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bd:8b:bd:45:c6:4e:e5:9a:44:70:76:1f:32:
d9:00:e7:fe:f2:72:c8:44:ef:d7:ac:5b:80:ea:04:
32:ed:9a:e4:e4:31:1b:61:70:a6:cf:9d:17:c7:48:
b2:18:74:ea:11:1d:3a:1f:79:47:97:d7:41:09:b9:
dd:77:5c:a5:b1:81:26:e3:c4:21:b0:d5:e4:7c:ae:
13:76:a1:62:d6:7b:83:fa:e8:0c:b7:fb:f8:5d:d2:
97:9c:61:14:52:c0:07:c0:d3:06:ba:a0:83:14:1a:
60:77:a4:03:34:4e:5b:3f:c2:7e:fe:09:f5:99:57:
04:2d:8f:a7:bd:58:98:74:46:4d:e1:39:17:1e:63:
ba:16:c8:4a:6d:5e:8d:09:7e:6d:46:e5:fb:65:ed:
17:81:3e:1f:22:8d:65:4e:83:e4:ba:ff:df:99:5b:
58:1e:d4:08:c5:ca:09:7c:30:52:f4:54:60:a0:79:
f5:0c:e3:3b:91:2e:5f:63:fa:07:88:8f:80:be:26:
8b:22:c9:f7:50:b1:b5:3a:ea:dc:a8:99:4b:e2:b7:
8b:44:7e:d0:a9:7a:00:da:2c:ae:58:1c:ea:48:89:
36:fc:11:1b:8d:15:33:85:1f:52:4b:b8:d1:27:2c:
01:50:8f:c9:95:9e:6e:67:91:24:79:64:6e:d0:03:
ca:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5F:28:E5:A9:FE:A0:33:8D:FC:42:FF:C1:AF:FB:65:81:BF:C1:0A
X509v3 Authority Key Identifier:
keyid:FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:5f:5e:e3:eb:be:b0:62:61:d5:a3:00:c0:7e:0d:ee:47:d0:
b4:c6:db:ad:23:10:b9:7f:14:4d:c8:1f:d7:7c:f6:ea:e7:ba:
41:aa:32:e9:1e:ab:00:09:d8:6d:e9:f5:c5:58:1a:ba:ab:f1:
e8:ee:5a:05:15:49:12:20:39:51:a6:5c:37:10:5e:6f:11:fd:
e3:06:8d:32:57:89:96:ae:43:31:97:23:24:6e:3b:40:e4:92:
41:72:35:b5:d1:49:dc:84:64:be:54:f7:5d:f3:83:68:83:5b:
10:fa:b6:3b:17:cc:c7:3f:df:6f:33:02:9e:0f:d1:84:d9:ad:
56:73:b2:d2:01:b7:7b:74:dc:a4:8f:93:3f:ba:e3:e7:9e:7e:
86:0a:02:2e:d2:86:e8:4d:b5:af:9f:5b:84:c1:f4:fc:04:51:
35:e7:cc:5c:2c:1f:f4:b8:cb:39:b8:b4:13:ed:1a:ae:a3:2a:
05:1a:4c:41:f7:42:e0:4e:dc:5b:7c:56:77:4d:ce:fa:a4:d8:
be:f9:32:71:dd:7f:b8:1d:e9:46:80:43:d6:88:9e:bb:32:f9:
cd:0a:c1:7d:51:c5:f0:20:04:e0:ba:49:34:8a:53:a2:c0:0e:
04:3a:65:34:1e:26:3a:42:2e:0b:07:4c:cc:58:ae:a5:fb:ed:
4e:38:2b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 19:05:28 2025 by rpki-client