Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
File: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft (raw, json)
Hash identifier: uOh6zc7KBzg5hO4dPrL/tG18y8m95wle4/DSTYxV6Y4=
Subject key identifier: E0:27:EC:0D:30:DE:E7:A4:04:20:D8:AE:66:A3:A4:AA:8D:F2:82:59
Authority key identifier: 4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
Certificate issuer: /CN=4d1527d1839bf830360d71590134354e6d904697
Certificate serial: 019A0AEEFBFDF377CB6A9469E4F7A1F19511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
Manifest number: 16EB
Signing time: Wed 22 Oct 2025 08:00:25 +0000
Manifest this update: Wed 22 Oct 2025 08:00:25 +0000
Manifest next update: Thu 23 Oct 2025 08:00:25 +0000
Files and hashes: 1: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl (hash: XhoAowiYhIym+7Sa5xVIFyWc1jdlEK2kkmgjxXnunBs=)
2: a6Whh1qMHaCLz9si7bMkIx4xg1Y.roa (hash: R/Syehgq2eEOSio/8bhqr2YXvz+4Ke3qpd0G80XikQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:ee:fb:fd:f3:77:cb:6a:94:69:e4:f7:a1:f1:95:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d1527d1839bf830360d71590134354e6d904697
Validity
Not Before: Oct 22 08:00:25 2025 GMT
Not After : Oct 23 08:00:25 2025 GMT
Subject: CN=e027ec0d30dee7a40420d8ae66a3a4aa8df28259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:5c:a2:d6:82:3d:46:fc:03:d5:10:f9:bf:
be:a0:60:70:3b:43:54:ca:07:58:d0:9f:59:f6:61:
da:9f:b6:d1:9e:b5:a4:6d:ce:e8:68:5a:ac:9d:b0:
20:ad:e3:86:37:da:1d:16:3d:05:a4:f9:df:b9:89:
56:8f:8b:ba:25:31:48:22:33:4d:88:34:bf:96:9e:
5f:27:2d:90:40:9a:b1:b2:6e:0a:2f:ec:76:24:0c:
f9:fe:e6:d7:7d:7b:9a:61:25:6a:96:04:8c:69:1d:
e8:e1:6a:55:3b:b1:01:67:c2:46:00:7b:4c:36:04:
0e:04:9b:94:ef:ac:e6:08:dd:ea:ab:e6:67:00:52:
1c:84:0a:c9:f0:9c:1a:8d:b3:c0:e2:7a:4e:35:15:
64:a0:98:ac:5b:e2:df:86:ee:ed:3c:70:f5:5a:6a:
df:d8:ab:f1:58:35:ad:f9:56:42:93:2b:7f:33:8d:
80:15:3c:68:78:67:92:a1:e8:28:fb:02:55:c2:b5:
87:fc:c9:90:65:d1:83:c9:e6:9c:f4:a8:d2:43:b4:
c4:af:e4:59:78:ba:55:1f:96:c2:e7:2e:3d:94:5f:
82:8b:3b:0a:d6:70:21:d4:09:b9:af:70:a6:78:57:
65:09:a9:e8:81:ba:d3:ef:85:55:f2:69:cb:10:8c:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:27:EC:0D:30:DE:E7:A4:04:20:D8:AE:66:A3:A4:AA:8D:F2:82:59
X509v3 Authority Key Identifier:
keyid:4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ef:1f:da:e2:43:10:b8:a1:e3:ad:74:ca:34:e5:6d:d4:5c:
21:91:3d:ec:13:03:5a:64:22:76:71:65:31:82:ce:a3:69:91:
b0:e5:a5:e3:be:1c:d1:4f:e2:cf:79:3c:45:41:2c:01:e8:f0:
7d:d5:94:a1:cb:e2:4e:1c:34:d5:20:5f:04:f4:2c:3f:38:31:
c0:d4:4a:86:4d:c1:26:3e:50:60:46:1b:1a:57:57:fe:4e:24:
ed:33:ca:2c:08:d3:7a:f7:68:80:08:bb:d7:b1:97:f0:65:70:
05:f5:71:a3:d7:32:c0:32:bc:1d:51:4e:51:04:99:3b:17:8a:
d2:bc:6c:9f:7a:97:66:e2:8b:34:ba:82:e1:9b:4f:0c:b8:5d:
0a:29:e2:ed:34:c9:b9:d1:0e:76:f8:9e:32:53:b2:53:e8:3f:
55:df:70:b0:d9:ca:92:1f:f4:1d:74:06:11:65:d4:b3:10:c0:
45:0a:31:82:29:70:e0:8e:f8:c9:81:0e:a7:90:ce:e5:f5:11:
26:c1:71:a0:82:54:58:34:f1:33:e5:43:13:3f:2d:36:a4:8a:
07:de:f1:1a:ba:b7:b3:c2:f7:72:3a:23:f7:eb:f1:fe:95:fe:
06:b2:73:b9:cd:52:b5:f3:cb:71:9f:c7:70:8b:5d:9c:0d:a9:
80:65:fb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 17:44:54 2025 by rpki-client