Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
File: tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft (raw, json)
Hash identifier: rCCDNIRWWB2vy381s+PqCq2L7njC5JbCC6TMVhPBzsw=
Subject key identifier: 8F:D3:AB:13:2C:FB:53:BA:AD:58:DD:94:CD:2A:A7:6D:59:46:4B:32
Authority key identifier: B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95
Certificate issuer: /CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95
Certificate serial: 019922FAD6878A171BC77BC96AC351E40DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
Manifest number: 11C0
Signing time: Sun 07 Sep 2025 07:01:28 +0000
Manifest this update: Sun 07 Sep 2025 07:01:28 +0000
Manifest next update: Mon 08 Sep 2025 07:01:28 +0000
Files and hashes: 1: gOpessaE3KR3BE7y4M-QryrS1Ks.roa (hash: YdF4inQqBoygiKj6DuoyGUjs1/73Ha+wGsnO74e4IH4=)
2: tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl (hash: UdsRGZN1uHWpezUihE8Z+rI1iZr3LJ5IykhX35ek4lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:d6:87:8a:17:1b:c7:7b:c9:6a:c3:51:e4:0d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95
Validity
Not Before: Sep 7 07:01:28 2025 GMT
Not After : Sep 8 07:01:28 2025 GMT
Subject: CN=8fd3ab132cfb53baad58dd94cd2aa76d59464b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a9:00:88:31:60:56:31:ee:90:3f:78:23:a8:
d3:78:e3:f4:a7:1b:63:38:b0:51:c2:28:e3:8b:d9:
f7:93:8b:7c:b7:70:9e:8a:3c:d3:44:6a:c9:37:ff:
84:7e:6d:23:1b:c1:01:67:11:d3:30:82:f4:23:03:
da:3a:e4:be:4f:06:79:3d:79:10:53:5c:aa:73:0f:
74:94:1e:29:7d:dd:0d:6f:ab:8f:55:05:db:18:51:
9e:6f:37:e1:66:47:bf:40:88:74:2d:63:01:59:0c:
bc:eb:e8:88:b0:28:e9:1a:b2:bc:a0:c4:b1:43:c1:
1b:1d:ea:71:09:90:dd:78:c0:7d:2f:60:6a:40:de:
2c:43:50:2d:90:6c:2c:80:ca:ce:60:ab:a5:b1:3a:
52:19:07:55:36:c8:3d:ff:cd:73:fd:a3:a5:39:b7:
9a:1a:b5:45:70:43:6c:8b:b8:4f:28:b2:a1:ef:28:
b8:be:3b:e7:10:09:40:4f:1a:cd:7a:39:c5:90:6a:
58:04:c2:7c:a9:14:bf:3f:c7:0d:40:71:e7:bc:a1:
c9:de:f8:5e:0f:54:92:f0:4f:97:91:26:69:1c:81:
5c:1e:66:39:0f:7e:62:8e:27:5b:2b:88:59:10:3e:
b1:8c:3f:1d:9a:70:80:85:ef:5e:24:7a:ba:c4:6b:
85:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D3:AB:13:2C:FB:53:BA:AD:58:DD:94:CD:2A:A7:6D:59:46:4B:32
X509v3 Authority Key Identifier:
keyid:B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:3e:62:45:a3:fd:73:73:23:8b:ca:ec:52:c7:04:0b:72:84:
d2:79:b3:d8:20:6a:c6:e9:ef:ce:b0:ae:a0:4c:7a:f7:ae:4d:
9b:a2:8e:04:df:5b:31:c5:c4:b7:51:cf:34:0b:83:e2:d9:ec:
61:ce:18:4c:63:a3:77:22:3a:17:bc:e4:2a:7c:c9:a4:68:ce:
5a:f4:e2:df:d0:aa:b5:71:72:46:24:9e:ec:b3:3b:73:2f:cf:
03:17:1f:17:2b:0d:65:eb:cf:62:98:3c:ad:d2:c7:ed:af:5b:
51:56:35:62:a1:72:74:b4:b8:9b:97:d2:82:14:06:b2:24:7f:
46:78:47:da:7e:25:99:da:0d:3c:c5:5f:1e:90:97:9d:2c:6c:
d5:34:8e:1a:da:58:e2:ba:fc:e3:b5:2d:0d:e5:72:85:01:04:
13:42:aa:82:37:56:de:46:9b:4c:84:18:17:e5:23:cb:ed:8b:
02:e4:89:c7:da:78:40:5a:7f:04:73:80:bc:cd:cc:43:0f:4f:
4e:c2:a6:76:1c:c9:53:fd:70:2c:e4:ab:cc:23:c9:c5:25:29:
79:7d:bd:b7:bf:e6:8c:c1:91:3d:c1:be:25:1c:03:4e:c7:65:
62:c7:48:de:e0:36:f9:bc:60:c1:fd:75:c6:91:50:30:d8:30:
f6:a5:4f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:02 2025 by rpki-client