Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
File: _TrysG9KUBbg5avtGD9GXbFfQdU.mft (raw, json)
Hash identifier: 65UgJr6LlfA1ckcqyxtxwCOECcxhTpIoJdH0oGSL9dA=
Subject key identifier: 5D:0A:CA:65:1F:AB:42:51:B6:78:87:49:5A:30:96:55:C8:C7:AE:D2
Authority key identifier: FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
Certificate issuer: /CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Certificate serial: 019A26662E881484D6D05D97B542D8CBB1F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
Manifest number: 0EEB
Signing time: Mon 27 Oct 2025 16:00:21 +0000
Manifest this update: Mon 27 Oct 2025 16:00:21 +0000
Manifest next update: Tue 28 Oct 2025 16:00:21 +0000
Files and hashes: 1: _TrysG9KUBbg5avtGD9GXbFfQdU.crl (hash: uvda8E816o9gC9VOIDe50Fs+p7NNZEoy5AwZPNK0I3g=)
2: miFtnjs24Q4-RR01JpCMeAQD8WI.roa (hash: hNI7H2ayjIbmcGVqvenpoZ5nB2aID+7Eteg64XuKiJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:2e:88:14:84:d6:d0:5d:97:b5:42:d8:cb:b1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Validity
Not Before: Oct 27 16:00:21 2025 GMT
Not After : Oct 28 16:00:21 2025 GMT
Subject: CN=5d0aca651fab4251b67887495a309655c8c7aed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5a:2e:bd:b1:5f:55:d1:f3:27:24:55:d4:67:
a1:8f:97:c5:e8:fe:e6:dc:0b:78:52:62:d3:f8:4c:
d9:3d:74:26:4f:ca:24:72:42:09:0d:42:29:57:d7:
62:ec:56:14:d4:38:44:86:bf:58:c8:81:b5:ae:2f:
47:4d:3c:64:8b:0f:2b:61:10:08:12:cf:9d:68:0f:
ff:34:24:d5:5f:ad:f1:a0:1a:89:39:91:7d:d9:59:
8c:08:08:f0:86:21:84:0f:c0:5c:29:c4:45:26:f5:
ae:aa:bc:84:e0:86:63:dd:15:e7:b5:1b:7f:f6:c3:
36:5e:bb:1a:c0:9b:de:c1:28:58:dc:29:ee:d1:1d:
94:50:2a:b6:6b:8a:ac:80:a4:4b:8a:c2:ac:1e:a6:
bc:df:96:41:5f:94:fa:2c:31:38:75:9b:66:34:43:
78:9d:8b:56:63:75:d5:95:7e:d7:66:dd:a7:f8:f9:
4b:fc:77:d3:7d:0f:85:5a:e6:c2:20:1c:6d:a7:93:
c2:21:7f:5b:4e:df:a9:61:5e:fd:d7:67:36:56:33:
96:1d:4d:f2:65:7c:a5:49:fe:9f:0c:54:32:cd:f8:
68:fe:a1:e5:c4:12:3d:58:4c:0e:37:40:6d:4b:07:
11:a0:57:ee:63:32:96:7c:8c:27:b4:73:59:af:11:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0A:CA:65:1F:AB:42:51:B6:78:87:49:5A:30:96:55:C8:C7:AE:D2
X509v3 Authority Key Identifier:
keyid:FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:69:39:e7:82:a0:d0:34:ca:02:d4:71:4b:cd:99:fa:94:48:
91:e3:67:76:b5:ea:cf:f8:9a:ec:58:03:73:e8:af:8b:ae:9b:
29:1c:68:01:b1:be:99:41:39:a0:f7:16:d8:55:bb:4f:2c:b0:
58:18:41:7b:61:da:66:4b:78:b0:c8:6c:cf:75:16:24:b0:44:
07:24:2a:16:71:cc:75:26:c7:4f:d8:7c:ff:6e:18:23:e8:81:
32:2a:54:48:6d:76:83:a0:da:84:65:7b:c0:df:84:8c:21:b3:
27:33:82:f7:90:c1:a2:0a:1b:a7:3c:46:23:0c:bc:39:76:c1:
a7:78:1c:d3:39:53:7a:ac:0b:bf:60:84:3b:a1:cc:67:d9:77:
a4:25:38:f3:69:e0:f1:27:90:47:06:b9:6f:de:18:61:44:0a:
34:af:f2:81:6d:b3:78:cb:62:7e:f1:83:e4:eb:aa:a7:dc:66:
5a:0a:15:c1:64:5c:b9:2e:ef:6f:ea:45:1a:c6:c4:4a:63:4e:
bb:19:f3:64:22:b8:a1:c7:6e:03:fb:9c:6f:b4:8f:40:fd:1b:
d2:24:60:a5:95:2c:f8:08:a4:1e:95:a5:ac:ad:a8:df:eb:5b:
27:d9:e9:e9:68:72:04:90:fe:5a:85:7c:bc:6f:7a:3f:10:26:
7c:30:3a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:34:34 2025 by rpki-client