Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft
File: TRCb5Q1A4ys9UW_B63LqsyxeC84.mft (raw, json)
Hash identifier: VuDemR1wEuzT8gkmS7s4ihnmnRWWcoHXuVSXAgRC1ik=
Subject key identifier: 48:E4:66:06:B3:81:15:A4:0F:77:3C:0C:42:D0:A8:E7:A5:B0:5B:E9
Authority key identifier: 4D:10:9B:E5:0D:40:E3:2B:3D:51:6F:C1:EB:72:EA:B3:2C:5E:0B:CE
Certificate issuer: /CN=4d109be50d40e32b3d516fc1eb72eab32c5e0bce
Certificate serial: 019A71EE6AA78979C0A307E21915DFE95EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft
Manifest number: 0214
Signing time: Tue 11 Nov 2025 08:00:41 +0000
Manifest this update: Tue 11 Nov 2025 08:00:41 +0000
Manifest next update: Wed 12 Nov 2025 08:00:41 +0000
Files and hashes: 1: TRCb5Q1A4ys9UW_B63LqsyxeC84.crl (hash: 7sQ25qqteG9IGTeNL8eG5Ts2cBffoeeSkCOdYmlRRIE=)
2: _ysqE-Sv0fTgw_gy8qUtBvX43Zw.roa (hash: XDdFm9ijjrDqLsWMBsXWF0Txzhfv7gyIMnkn7RG7zb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:6a:a7:89:79:c0:a3:07:e2:19:15:df:e9:5e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d109be50d40e32b3d516fc1eb72eab32c5e0bce
Validity
Not Before: Nov 11 08:00:41 2025 GMT
Not After : Nov 12 08:00:41 2025 GMT
Subject: CN=48e46606b38115a40f773c0c42d0a8e7a5b05be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:82:1a:25:0c:2b:f3:e5:75:72:e3:fa:62:2b:
7e:37:6c:5b:b7:9d:a9:d0:64:a7:9d:6f:a7:7f:bb:
49:20:06:04:13:07:15:aa:12:ab:bd:14:35:cb:46:
1f:4f:b2:f0:6a:ca:9d:ed:d2:45:65:0c:c1:d8:31:
af:d7:f4:d6:74:16:08:28:fc:70:ef:79:85:a4:40:
a4:30:20:b9:09:80:08:11:65:12:5e:99:f2:3d:bd:
24:b8:16:80:f1:99:c6:d2:29:be:d9:75:e6:d3:c2:
ae:5e:35:e2:ea:a3:86:63:47:ad:48:19:29:1d:2f:
17:be:7d:15:85:1f:18:3b:fd:76:b6:e7:a2:7d:33:
e3:87:c2:a0:08:e8:c8:86:3d:5b:ed:de:ae:71:08:
f9:8f:9e:87:64:39:7a:5a:8c:9d:99:0e:e2:89:e8:
8a:83:5c:68:ea:48:8a:e9:ed:5b:b1:74:27:27:61:
fa:c7:dc:a0:59:a7:6d:01:3f:24:b2:b2:1f:eb:2b:
b8:ef:e8:e2:63:e8:d1:ed:a7:4e:b9:0e:3e:76:05:
4c:96:64:a2:15:74:b1:ed:98:44:ad:fc:d8:11:15:
b5:4a:f8:62:b5:d6:22:d1:65:58:38:29:0d:68:f2:
24:c3:fa:b7:a0:12:ff:af:06:e0:f0:c5:c6:75:3a:
f8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E4:66:06:B3:81:15:A4:0F:77:3C:0C:42:D0:A8:E7:A5:B0:5B:E9
X509v3 Authority Key Identifier:
keyid:4D:10:9B:E5:0D:40:E3:2B:3D:51:6F:C1:EB:72:EA:B3:2C:5E:0B:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:cd:9f:8c:9f:00:37:c6:3d:8c:e0:99:52:ad:e5:71:09:4e:
3a:36:0c:22:ad:45:7e:a3:e4:d7:b3:a7:e5:9e:d0:dd:d6:16:
d3:8b:a8:62:82:dc:58:6a:b6:29:85:12:0d:ae:94:23:5d:b0:
b3:95:fb:56:ae:dd:22:33:8c:68:71:f0:96:e4:64:7c:fa:62:
4f:05:15:2a:bd:e1:45:9d:35:48:66:82:7b:73:22:69:86:7c:
03:ba:63:73:2c:a1:e5:2d:7f:8d:da:e7:38:de:9e:d0:bb:2b:
7a:73:03:a6:e8:f5:4a:ea:dc:ba:e0:25:76:e3:fb:b9:68:01:
6b:28:c6:57:d9:84:9c:65:93:e1:d9:1e:3c:f0:75:a3:5f:46:
2a:ff:8d:75:a9:2d:67:da:bd:9d:e7:d7:bf:50:9c:1c:a7:20:
ab:b4:fb:dc:75:e8:e5:61:67:fc:54:ed:0e:1f:63:45:71:55:
fc:5b:73:82:49:51:65:90:43:a3:6e:c5:05:b5:ff:c3:b1:d4:
f6:68:7f:96:65:83:55:f8:bc:5a:7f:37:39:67:db:91:a7:a9:
44:b3:90:9a:27:18:52:05:84:4a:fc:3c:87:c1:57:01:c4:a0:
dc:1e:66:4c:9b:fa:6f:2e:1c:07:bc:1c:a8:42:ce:19:4c:6e:
49:40:c4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:44:18 2025 by rpki-client