Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
File: tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft (raw, json)
Hash identifier: y5RIC/RxO+DqvfO1WSXyywH3+9K6FI9tpvIF+j6haKE=
Subject key identifier: A1:C1:5D:D7:4E:74:08:D9:8D:61:B1:C4:F3:42:48:56:A1:F1:26:3F
Authority key identifier: B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95
Certificate issuer: /CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95
Certificate serial: 019A72CAB2CC371D3D00695FD38D6FDD892B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
Manifest number: 126E
Signing time: Tue 11 Nov 2025 12:01:17 +0000
Manifest this update: Tue 11 Nov 2025 12:01:17 +0000
Manifest next update: Wed 12 Nov 2025 12:01:17 +0000
Files and hashes: 1: gOpessaE3KR3BE7y4M-QryrS1Ks.roa (hash: YdF4inQqBoygiKj6DuoyGUjs1/73Ha+wGsnO74e4IH4=)
2: tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl (hash: 6g0KaxD+xmKw3DToOY02QAfnGjjFftR2FoC/Tvs8FRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:b2:cc:37:1d:3d:00:69:5f:d3:8d:6f:dd:89:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95
Validity
Not Before: Nov 11 12:01:17 2025 GMT
Not After : Nov 12 12:01:17 2025 GMT
Subject: CN=a1c15dd74e7408d98d61b1c4f3424856a1f1263f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cc:01:51:8d:bf:c1:7e:96:bb:1a:53:c3:b8:
92:bc:72:68:af:10:c2:75:c8:c2:6d:55:0d:a4:24:
d8:37:65:f3:66:37:5f:e6:96:18:57:6e:e9:58:9d:
ce:d2:4e:8b:5e:29:3c:c1:e4:c4:8b:47:5a:d7:9d:
01:d8:4a:43:e2:d0:48:8c:a8:94:6e:55:f2:7d:6c:
51:16:ca:37:02:b6:63:66:83:45:fa:03:c7:c7:7c:
29:36:83:3f:ae:37:88:05:bc:1f:c6:41:4f:da:e0:
46:a7:ed:df:00:8f:c7:1d:32:46:6a:b0:50:bb:2e:
90:ee:fd:09:88:38:a6:72:e7:f5:26:5a:66:28:d2:
c8:b7:0c:21:2e:7b:c8:d4:a7:c9:b3:4a:a8:e1:48:
05:1b:05:32:9e:c5:18:fc:24:3b:7c:5d:76:af:3d:
2f:42:d3:d6:0f:58:67:29:f9:39:b1:1a:3f:64:cf:
57:ee:65:0f:e0:c5:3d:97:c6:fe:55:4b:83:de:15:
5f:a8:10:92:b2:c4:12:80:8d:83:dc:1b:2d:08:f1:
19:0d:e1:83:9c:82:57:ef:e1:75:e4:8d:ee:9b:3c:
81:d0:2b:bf:c7:04:ac:78:ea:09:1e:f6:32:24:04:
18:09:62:f7:2c:ac:3e:c3:75:d3:06:89:55:c0:0e:
e5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C1:5D:D7:4E:74:08:D9:8D:61:B1:C4:F3:42:48:56:A1:F1:26:3F
X509v3 Authority Key Identifier:
keyid:B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:05:2c:92:97:24:31:28:ef:b5:65:45:f2:97:cf:cd:8e:73:
6a:9c:2b:e2:f4:6e:4b:e9:40:81:f0:f8:ee:63:b1:32:9b:85:
ef:a8:09:ae:a1:01:4b:43:f3:c9:69:c7:6f:79:46:e0:97:5e:
2f:9b:6d:10:b7:f9:50:b3:31:8a:fb:bc:72:0e:c6:8f:8d:06:
69:43:f5:62:af:c7:29:e7:93:0d:3c:80:61:aa:b7:ed:4d:22:
d6:20:49:49:8d:f3:fd:07:db:50:a5:72:54:49:8d:19:f6:a5:
ac:d0:12:e9:2e:b6:bd:70:e3:c0:bb:70:5a:c0:f8:b9:86:6f:
ea:73:94:b9:6c:3e:34:de:ed:08:c2:b0:fc:8b:4d:16:89:df:
62:67:74:db:15:16:83:d2:50:0a:bf:71:2c:a5:49:62:7d:b0:
a8:23:a3:98:46:06:b8:94:60:e0:c8:c9:a2:8d:01:e2:a4:b5:
c3:4e:47:dc:5e:f4:82:3f:24:4b:34:b6:9c:24:d6:ed:ec:41:
bc:14:a8:38:9f:ef:51:7d:85:3e:30:1d:04:b3:e2:86:3b:a8:
97:59:31:6f:d3:3e:d2:51:aa:f4:cb:7d:65:e7:a5:54:04:5c:
5a:c7:13:cd:1f:84:58:0a:98:e5:d1:50:64:2e:af:28:18:d6:
0d:8d:b1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:45 2025 by rpki-client