Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
File: tRQMX448e8JKGtTIQGQVJj62ur8.mft (raw, json)
Hash identifier: /Ee6F3F0WrCHJzBbCZ1g8rFNKB0XN8iJtOv1OocGMRg=
Subject key identifier: 0A:CA:48:DE:01:1E:E5:30:C5:32:FA:3A:47:91:A7:11:75:A9:D8:76
Authority key identifier: B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF
Certificate issuer: /CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
Certificate serial: 019932364B28533B71BDA60CEEAAD6AD7363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
Manifest number: 1435
Signing time: Wed 10 Sep 2025 06:00:42 +0000
Manifest this update: Wed 10 Sep 2025 06:00:42 +0000
Manifest next update: Thu 11 Sep 2025 06:00:42 +0000
Files and hashes: 1: tRQMX448e8JKGtTIQGQVJj62ur8.crl (hash: RUk6iyAr5rTYG+JMClzfPZ0APWVLMT2X/Qyo0lsnVII=)
2: vBSjooCv1VbYtFGvr_WsQil5zco.roa (hash: 9TpEuhk1/IC2lzmVZHygO3k9GcTIx0s6uCEc0lzgzlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:4b:28:53:3b:71:bd:a6:0c:ee:aa:d6:ad:73:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
Validity
Not Before: Sep 10 06:00:42 2025 GMT
Not After : Sep 11 06:00:42 2025 GMT
Subject: CN=0aca48de011ee530c532fa3a4791a71175a9d876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:3b:cf:4f:05:58:2f:cb:fb:8d:a1:cd:9a:
89:91:27:99:a1:89:a4:19:9c:3f:82:3a:1e:d3:24:
1a:f6:6e:31:58:0b:5f:24:0d:13:bc:52:4d:93:11:
80:1e:6a:ed:1b:8b:aa:74:ff:1f:4d:37:0d:22:82:
3d:a8:c3:29:d1:26:56:d4:f0:64:5e:61:d0:2b:7c:
fb:15:96:4c:49:6e:ae:22:ea:81:f0:74:22:ad:44:
61:e7:76:5f:41:d4:dd:28:64:1b:8e:e4:74:57:f7:
c3:00:d8:82:fb:ea:07:80:17:5b:12:7f:46:3d:ec:
e1:6a:fe:e0:13:18:fc:06:c3:76:ca:ca:92:9e:49:
e4:12:79:22:46:0e:9b:46:8c:93:63:62:0d:86:e9:
ab:8f:6d:5f:40:86:a4:af:e6:f0:b1:28:1d:dc:c6:
cc:19:87:9c:6d:cb:3a:71:e6:2d:38:60:5e:05:c0:
a4:06:d3:80:6d:e4:5d:61:da:9e:0c:2e:ac:d5:4e:
01:92:00:e9:d6:6e:40:67:09:3f:09:c7:0c:25:26:
c3:6c:3e:da:f9:1f:bd:5f:aa:3a:2e:4d:d0:22:52:
29:d9:5b:a0:4a:b6:0e:5e:13:60:7c:ad:41:96:d7:
00:17:fd:4c:cd:f1:81:1c:30:25:35:d9:fc:07:37:
43:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CA:48:DE:01:1E:E5:30:C5:32:FA:3A:47:91:A7:11:75:A9:D8:76
X509v3 Authority Key Identifier:
keyid:B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ff:61:df:cf:6e:e8:3a:60:ce:2a:af:2b:81:64:2d:ef:30:
4d:35:d1:39:b6:34:6c:85:c8:70:2e:0f:19:54:1e:b4:1b:8d:
67:ee:2c:69:5f:c3:ba:f6:09:5b:cb:e9:0b:b4:2e:4a:19:e3:
33:b3:ca:90:7a:a0:3f:30:38:0c:e8:dd:f0:a6:1a:55:eb:c9:
a6:ca:64:d6:c7:bd:57:83:bb:ab:e7:25:d7:63:e4:b8:aa:a2:
69:8a:d8:67:5c:67:06:23:cc:c0:1a:01:06:e2:66:2e:fa:13:
23:2b:19:5f:c0:83:b4:7a:9d:a8:c6:81:c8:9e:e3:fe:c7:15:
74:e6:7a:42:80:03:31:3b:d6:d0:f9:e0:38:f0:05:eb:b8:a8:
27:09:be:bf:d6:eb:6a:30:60:40:e2:38:b7:f1:0b:ab:94:a5:
9f:62:46:f9:76:e5:22:a3:f8:64:30:72:21:f9:d2:f0:76:e6:
07:04:6a:3c:22:43:6b:fe:b4:15:fa:2d:ef:a5:e6:cd:bd:12:
e2:23:bc:42:a1:60:7b:a0:90:a7:c5:e6:02:9a:db:8c:28:f9:
34:2b:1d:59:3b:59:6e:e2:a3:4a:76:a7:3d:a3:8d:8b:a3:f7:
b7:f7:34:40:a7:27:7d:e7:51:13:c3:f4:8f:dd:c9:c4:5e:c4:
52:79:c2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:20:46 2025 by rpki-client