Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
File: tRQMX448e8JKGtTIQGQVJj62ur8.mft (raw, json)
Hash identifier: AyjMiWWaxg3V1A0y3tUa8nPxiP8vTxas5dZY7F8L5d8=
Subject key identifier: 16:E6:2F:96:2D:30:69:01:99:62:C2:7F:60:6E:13:F8:7A:35:00:17
Authority key identifier: B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF
Certificate issuer: /CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
Certificate serial: 019A21ADD12CEC23674C3EA55A106D3826A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
Manifest number: 14B1
Signing time: Sun 26 Oct 2025 18:00:30 +0000
Manifest this update: Sun 26 Oct 2025 18:00:30 +0000
Manifest next update: Mon 27 Oct 2025 18:00:30 +0000
Files and hashes: 1: tRQMX448e8JKGtTIQGQVJj62ur8.crl (hash: HNcXrTc96bN0cBfUDxmv9B7siXUe5R6fFZaMnIlw/+w=)
2: vBSjooCv1VbYtFGvr_WsQil5zco.roa (hash: 9TpEuhk1/IC2lzmVZHygO3k9GcTIx0s6uCEc0lzgzlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:d1:2c:ec:23:67:4c:3e:a5:5a:10:6d:38:26:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
Validity
Not Before: Oct 26 18:00:30 2025 GMT
Not After : Oct 27 18:00:30 2025 GMT
Subject: CN=16e62f962d3069019962c27f606e13f87a350017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:13:81:00:5c:84:08:a6:3e:62:17:d6:b3:df:
f5:43:11:d4:df:45:b9:b2:93:68:91:c5:12:20:a6:
c8:32:11:03:28:bc:9c:c9:d7:9d:fe:95:a9:bb:17:
6b:ad:06:ff:8d:57:52:69:b8:09:d2:b6:2f:f3:b3:
4d:4f:da:1c:cf:88:06:af:78:4f:6d:86:36:61:1b:
fa:f0:34:e9:a1:c4:25:96:1a:9e:77:af:ab:3e:a6:
44:60:43:a6:b5:84:54:75:c5:23:e0:ed:59:28:9a:
ff:4d:45:44:27:2a:88:3a:71:44:1e:e7:b6:76:01:
00:ad:1a:95:9f:c7:d1:bb:f7:5d:37:cf:f9:c6:e1:
48:2c:fe:47:55:99:aa:5e:d6:38:d3:55:cb:05:e2:
a7:12:85:fa:19:a4:4c:94:64:5e:e6:f0:ca:6a:2f:
01:51:06:cb:8a:46:48:7e:9f:1b:ec:c1:18:43:95:
76:27:06:cb:d1:c7:6e:4e:11:4b:c7:16:79:ad:9f:
05:e1:23:aa:68:9a:d3:d2:cf:24:07:82:d0:77:61:
1f:39:79:78:95:2c:0c:8e:7e:38:5a:b3:c6:b5:bb:
1d:6f:a2:51:07:69:07:8f:39:15:10:cd:4f:29:49:
8c:cb:ee:5b:62:36:f5:22:a0:94:df:a5:d9:66:c2:
f4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E6:2F:96:2D:30:69:01:99:62:C2:7F:60:6E:13:F8:7A:35:00:17
X509v3 Authority Key Identifier:
keyid:B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:ac:95:46:c6:6b:d9:92:75:bf:87:21:10:4f:a3:cb:61:07:
20:a1:da:d2:6f:b6:ee:da:f5:52:c1:54:e3:c0:91:af:40:31:
83:1d:b2:95:7e:73:20:35:f4:8b:fa:c5:3b:fa:dc:85:31:64:
16:1a:03:14:5a:10:ee:12:5a:47:de:08:f6:37:d9:f1:ee:ae:
5c:fb:37:9a:1d:3e:33:32:86:86:8a:77:a6:5c:a1:b6:e2:54:
54:c3:98:6c:77:a1:b6:7b:f0:75:d7:ce:f3:60:f4:e8:21:ef:
9c:f2:92:c4:7b:c8:f7:5c:4c:0f:d8:f8:04:1b:ab:6d:90:21:
87:48:55:c0:58:5e:f5:06:d9:34:e8:7f:c0:c1:1c:a4:33:e7:
81:75:64:95:35:ea:45:ab:fe:cf:1c:fb:ce:b3:b5:08:06:f7:
1b:61:53:54:af:9f:71:73:98:03:a8:54:e9:87:5e:b8:2f:c8:
4d:89:d3:7d:a6:31:dc:7a:97:7d:e1:5d:2f:d1:94:0b:44:f6:
81:97:94:20:41:fc:2e:64:6e:25:3d:4b:72:91:46:2c:0b:46:
bd:bc:bc:38:7f:97:09:4d:f5:44:f7:2f:7f:db:5d:b6:25:28:
0f:4c:1c:4f:09:93:de:8a:8d:bc:1b:68:eb:95:45:76:7e:e5:
de:cc:58:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:45:48 2025 by rpki-client