Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
File: trcm8FkrUE5yMwX2e6tRR9TqaW0.mft (raw, json)
Hash identifier: pArhwZ2kB3gU+hbuv2sgNM93KTVFOhIKlJAdCNEScuE=
Subject key identifier: A0:F4:D5:42:AE:D2:20:BA:26:96:46:BD:E5:C6:14:B6:6D:B0:57:BD
Authority key identifier: B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D
Certificate issuer: /CN=b6b726f0592b504e723305f67bab5147d4ea696d
Certificate serial: 019A71EECA958B652841D490DF09DE20DE98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
Manifest number: 0A5F
Signing time: Tue 11 Nov 2025 08:01:06 +0000
Manifest this update: Tue 11 Nov 2025 08:01:06 +0000
Manifest next update: Wed 12 Nov 2025 08:01:06 +0000
Files and hashes: 1: _oI-Lkb0IuWy-UHIoAbDqvwfl1s.roa (hash: mRZXCcW1ghBXMTwSw7NYgVRMYeyGjl4gH8juqLCzVks=)
2: trcm8FkrUE5yMwX2e6tRR9TqaW0.crl (hash: p9Vqh23VhkSWxNLBYREsIUmy9AekTlKdnBTo71poXK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ca:95:8b:65:28:41:d4:90:df:09:de:20:de:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b726f0592b504e723305f67bab5147d4ea696d
Validity
Not Before: Nov 11 08:01:06 2025 GMT
Not After : Nov 12 08:01:06 2025 GMT
Subject: CN=a0f4d542aed220ba269646bde5c614b66db057bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bb:3e:3e:09:c3:c6:04:ed:48:d7:f7:f7:f0:
c6:99:4f:76:60:dc:ec:f0:a6:f7:ce:81:a3:b6:75:
4d:31:d2:11:39:6f:af:be:28:11:1f:72:46:9c:26:
f8:56:ee:42:7f:ee:36:88:ee:ea:3c:27:45:31:51:
96:f2:55:55:cd:1b:6a:5e:18:f2:05:46:af:4c:0d:
f2:10:d2:97:1f:13:58:24:6b:31:3d:d0:2f:2f:68:
b8:1c:f6:88:72:2d:02:4b:1c:56:6b:56:f7:7c:77:
bd:12:69:ac:cb:ff:19:b7:4d:18:48:ef:78:bf:13:
f3:3a:83:c4:56:7b:d3:fb:6a:f1:e0:5a:e5:fc:20:
da:b3:4d:96:a9:d1:d9:c6:06:82:a6:f9:82:10:cf:
a8:2e:c7:21:a3:25:f7:25:36:c7:ae:49:0d:fb:72:
45:03:1d:71:8a:3c:ee:08:61:6c:e8:f6:3a:1f:c0:
e0:1e:4b:87:f6:ad:53:bc:c4:3f:7c:23:b2:12:3c:
bd:67:75:d4:b7:d2:98:74:9e:10:bb:a3:17:24:51:
a8:b9:d2:4e:cb:02:ca:93:06:66:d5:a8:15:29:1f:
de:dd:ed:e5:df:03:1f:f6:87:9f:19:c8:cd:da:ec:
bf:d5:81:98:d6:57:8c:6d:cb:d6:e1:af:2d:c7:31:
d9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F4:D5:42:AE:D2:20:BA:26:96:46:BD:E5:C6:14:B6:6D:B0:57:BD
X509v3 Authority Key Identifier:
keyid:B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:db:f2:3f:38:5c:34:94:0b:a0:4e:69:da:84:95:0f:2c:df:
ef:bf:83:b9:b2:fb:66:8b:85:71:48:22:3f:82:59:95:a7:e2:
f5:12:6b:86:b5:66:ac:f9:54:d2:4b:8d:0b:59:d7:5f:b9:e5:
dc:32:c6:89:fd:52:7a:3a:05:ce:29:3b:9c:12:ef:5c:a8:d1:
98:94:dd:c0:89:0c:b7:b1:1e:81:40:e6:36:c4:4a:42:19:e5:
2a:8e:d2:1c:8e:fe:fa:d8:98:0c:14:ec:74:69:03:48:e3:f7:
84:00:81:4b:ea:cb:09:36:86:94:f1:80:8d:10:77:0c:4e:41:
23:cf:32:78:a2:84:cf:4e:68:88:39:0e:2a:1c:86:5c:d0:f8:
2d:ed:9b:fe:c8:a4:ee:54:69:2a:51:3d:5a:e0:e5:ad:f5:ec:
a1:6e:56:ad:7b:e1:9f:04:2e:9f:2a:45:38:b0:6e:78:f0:62:
2d:18:70:e0:e9:1b:3c:22:33:a8:92:e3:03:56:3b:ce:9b:ee:
68:72:23:99:2d:15:e9:01:04:2b:c1:e7:e9:b5:15:6b:b1:e1:
40:0d:57:11:d8:42:d0:ad:5e:03:90:09:03:8b:c9:22:e7:39:
e8:d1:4d:25:55:6b:69:02:7d:cf:22:5c:13:27:2e:49:5f:12:
18:29:d6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:53 2025 by rpki-client