Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
File: trJJosVixe29t1BY4mvXcBI-la4.mft (raw, json)
Hash identifier: 7Lw1RfTcvzQiO783M3ObFJU4DCo9YjKel+WyfvDHwhU=
Subject key identifier: F6:EA:A6:A1:E0:55:90:4D:E6:E2:D1:42:8B:91:CC:9B:F7:39:32:55
Authority key identifier: B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
Certificate issuer: /CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Certificate serial: 019A0A81090A6CD6C703CF7A8690E72FBC18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
Manifest number: 137C
Signing time: Wed 22 Oct 2025 06:00:19 +0000
Manifest this update: Wed 22 Oct 2025 06:00:19 +0000
Manifest next update: Thu 23 Oct 2025 06:00:19 +0000
Files and hashes: 1: Tz7aM9m6dWZAHAxiGKhjTtjsp6I.roa (hash: 1/urxUwqVm4ILEtV4SR7woJSlB4+PTBY3yo3Lt2enUw=)
2: trJJosVixe29t1BY4mvXcBI-la4.crl (hash: 7DiBEAq4oXcwGpd7lhzuusVlKiTrYDtziai0grLPIxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:81:09:0a:6c:d6:c7:03:cf:7a:86:90:e7:2f:bc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Validity
Not Before: Oct 22 06:00:19 2025 GMT
Not After : Oct 23 06:00:19 2025 GMT
Subject: CN=f6eaa6a1e055904de6e2d1428b91cc9bf7393255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f6:8d:c6:b6:45:b6:65:58:4e:68:f7:b4:cf:
fe:9a:4a:4c:5c:96:df:a5:77:4d:c9:02:4f:88:cd:
fe:c4:31:ca:22:71:b7:8d:92:bd:a2:19:a6:10:5f:
e2:8f:ae:d2:4f:a2:f4:40:d0:48:17:1c:32:6d:0d:
da:59:07:f5:7d:3b:74:3b:91:15:96:3c:80:c4:07:
44:fc:39:f4:dd:44:02:fb:b6:ad:a9:c5:dc:72:41:
4f:fc:f3:00:78:f6:61:8a:66:3e:6a:a7:9f:a5:94:
69:8a:64:57:91:90:73:95:69:80:7b:db:97:1c:5d:
1f:81:fc:cd:98:bf:00:5b:9d:40:4c:c6:b4:1f:2e:
e7:9f:db:97:3b:f8:38:f9:60:b3:13:5b:12:a8:20:
81:0b:12:b3:02:a2:a2:69:3f:bd:be:7a:32:6e:1f:
73:fb:22:0c:5d:68:64:c7:fb:9a:ed:94:08:9e:1a:
79:86:f2:53:09:17:1b:dc:33:a5:eb:f4:ab:23:62:
34:aa:1f:66:76:f6:19:64:43:11:3a:05:22:78:26:
75:8a:2f:4f:5b:2f:dd:77:ea:9c:6b:91:71:ee:7f:
b1:e2:7e:03:40:41:7c:79:38:73:27:2a:96:f7:74:
2f:72:7f:53:48:7a:e8:db:28:90:5d:fd:2b:d0:1d:
dc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EA:A6:A1:E0:55:90:4D:E6:E2:D1:42:8B:91:CC:9B:F7:39:32:55
X509v3 Authority Key Identifier:
keyid:B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:02:3a:12:a0:1e:cc:7a:85:ec:2a:cc:e4:1b:ea:0d:8f:52:
23:22:87:53:75:2f:24:1c:2a:2d:99:8a:6b:cd:4b:cc:8e:f8:
f1:f4:c3:a2:b2:a6:a8:89:e6:73:24:2f:6f:de:52:d7:a3:5e:
0e:31:53:1b:62:cd:5c:3b:23:c7:82:58:50:76:45:83:30:fe:
7c:56:45:6a:cf:b8:cb:f3:ec:a1:cf:08:30:1e:0b:30:ee:a1:
d1:88:1b:dc:bc:ab:86:7c:0b:6e:b9:c1:1c:03:cb:25:c2:3b:
46:ef:20:4f:ca:29:f3:a6:01:bc:dc:7f:41:ab:16:e1:e3:7a:
c4:86:9a:6c:f7:5f:3c:3f:8c:17:a7:a4:72:2f:5f:fd:d3:bc:
a8:cd:a1:4f:03:e7:1a:7b:5e:60:cf:d7:0f:5e:a7:ab:ed:8e:
5b:f0:6d:c6:00:14:3d:62:e1:10:58:28:37:e9:5d:5a:aa:8a:
7e:63:7a:f0:e2:79:63:7c:0e:af:9e:71:61:46:d7:0c:58:b6:
4e:b7:26:f1:6a:d4:0d:64:90:a3:1f:5e:37:7e:40:41:73:cf:
7b:fc:b2:35:0c:12:a0:86:ee:3e:34:4d:96:c8:e0:5b:1f:0c:
19:45:c8:08:2a:97:ba:a4:d2:d0:49:82:b4:ce:e4:44:62:e9:
a9:8b:73:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 15:10:49 2025 by rpki-client