Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
File: _trmiRA5jJ2O51bhaCAd2eiYm1I.mft (raw, json)
Hash identifier: a7vrYULoRl6jl3LVPBQhpF2HkUr/7Rs2tvlO54tLNx0=
Subject key identifier: 06:5A:87:39:AB:7A:7F:AD:CD:EE:5C:16:80:DD:C5:69:52:F8:16:BE
Authority key identifier: FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
Certificate issuer: /CN=fedae68910398c9d8ee756e168201dd9e8989b52
Certificate serial: 0199FCC679E6099CC7798CC4D5B3F351206A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
Manifest number: 0358
Signing time: Sun 19 Oct 2025 14:01:29 +0000
Manifest this update: Sun 19 Oct 2025 14:01:29 +0000
Manifest next update: Mon 20 Oct 2025 14:01:29 +0000
Files and hashes: 1: 3-rv1v1yCPrdYumYMOu8WdUJkO8.roa (hash: l7PMWmjBkZja+Bzzk9qkIiGKk5+PfjMuS142zfz0fP8=)
2: _trmiRA5jJ2O51bhaCAd2eiYm1I.crl (hash: h4jKqAOO1bbr+ujsVAog7DOYE1gTCcz5nunAa6sYTmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:79:e6:09:9c:c7:79:8c:c4:d5:b3:f3:51:20:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedae68910398c9d8ee756e168201dd9e8989b52
Validity
Not Before: Oct 19 14:01:29 2025 GMT
Not After : Oct 20 14:01:29 2025 GMT
Subject: CN=065a8739ab7a7fadcdee5c1680ddc56952f816be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:36:59:74:3c:47:a1:52:d5:70:55:37:01:e7:
f2:0b:56:4e:94:35:96:9b:1d:ef:0c:d1:b8:88:25:
de:ad:63:ef:73:f5:cb:78:d0:b6:75:69:89:97:8c:
2c:02:40:f2:12:79:73:a6:b8:fe:d9:b5:95:94:e6:
3f:19:d2:9c:92:c9:c3:f4:3b:8d:62:46:c2:c6:3f:
f5:af:61:41:e1:01:17:1a:ec:86:d8:2a:64:c3:8e:
aa:a6:c7:a6:3a:e0:8e:4c:b9:e6:f5:e3:a0:8f:67:
d7:73:e4:cf:13:5c:2e:cb:85:28:ea:0c:60:9a:b1:
78:cf:d7:0e:35:26:26:7c:07:2b:e7:fe:fe:10:0e:
2f:ad:74:ae:e3:3c:3f:20:a6:b8:d5:17:e9:dc:ea:
93:1b:2b:0a:06:d2:f8:f1:ba:7a:30:5e:fa:97:c3:
41:6d:19:43:89:7c:fe:2d:4d:f7:77:f4:19:56:83:
4a:ff:73:5c:8a:a6:94:f1:c5:5b:a2:b3:81:ee:98:
c1:8b:68:60:8c:4b:3c:ca:42:ea:d8:4c:83:a2:5a:
89:d9:8d:6c:b5:e4:9b:56:d0:13:36:b2:17:75:0c:
48:d9:18:f5:17:e1:33:3f:04:d7:67:24:a7:a0:24:
16:c8:8e:b7:c3:bf:94:83:0a:f7:9f:79:08:06:4c:
1b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5A:87:39:AB:7A:7F:AD:CD:EE:5C:16:80:DD:C5:69:52:F8:16:BE
X509v3 Authority Key Identifier:
keyid:FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:86:cf:f8:cc:8b:1d:93:67:74:c9:3e:88:5e:7c:ae:33:46:
ea:36:a0:8c:72:7a:50:af:45:79:aa:f7:97:57:5c:26:cc:80:
70:45:bf:fd:34:f2:75:7c:77:fe:ac:97:8a:17:f5:04:aa:e8:
98:df:ad:a6:31:57:a3:a5:af:6c:d1:1b:1e:44:69:12:64:10:
6f:a1:d7:96:a6:1e:fb:bd:50:71:fa:c6:43:19:da:24:c1:35:
8b:bf:4e:17:eb:d3:3f:66:19:1c:cb:19:9e:16:2d:0d:b2:18:
05:9e:82:88:64:b6:40:10:fd:89:0a:b9:95:6d:f5:87:eb:03:
0e:6f:3b:f7:c3:f0:4e:e1:43:4d:1a:9d:97:16:dc:15:93:78:
e0:3e:74:42:ce:4e:bc:47:a3:6a:f1:bc:0a:95:d2:bb:3c:5f:
ab:38:f0:81:29:79:e5:82:6c:5e:4e:d3:aa:1e:96:68:4b:90:
4d:6d:0d:02:59:e6:e5:10:dc:d1:f6:2c:22:65:0d:7a:e4:c6:
72:c2:e6:46:24:de:ca:c6:f3:77:bf:76:96:f7:d1:b3:a2:4c:
a4:72:59:99:12:69:f7:33:aa:c9:b7:0f:a8:56:64:09:db:1d:
b9:ef:0e:46:52:ba:6d:a8:11:a2:9b:f5:df:b0:1f:85:6a:28:
d4:11:a8:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xnnmCZzHeYzE1bPzUSBqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZGFlNjg5MTAzOThjOWQ4ZWU3NTZlMTY4MjAxZGQ5ZTg5
ODliNTIwHhcNMjUxMDE5MTQwMTI5WhcNMjUxMDIwMTQwMTI5WjAzMTEwLwYDVQQD
EygwNjVhODczOWFiN2E3ZmFkY2RlZTVjMTY4MGRkYzU2OTUyZjgxNmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDZZdDxHoVLVcFU3AefyC1ZOlDWW
mx3vDNG4iCXerWPvc/XLeNC2dWmJl4wsAkDyEnlzprj+2bWVlOY/GdKcksnD9DuN
YkbCxj/1r2FB4QEXGuyG2Cpkw46qpsemOuCOTLnm9eOgj2fXc+TPE1wuy4Uo6gxg
mrF4z9cONSYmfAcr5/7+EA4vrXSu4zw/IKa41Rfp3OqTGysKBtL48bp6MF76l8NB
bRlDiXz+LU33d/QZVoNK/3NciqaU8cVborOB7pjBi2hgjEs8ykLq2EyDolqJ2Y1s
teSbVtATNrIXdQxI2Rj1F+EzPwTXZySnoCQWyI63w7+Ugwr3n3kIBkwbFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZahzmren+tze5cFoDdxWlS+Ba+MB8GA1UdIwQY
MBaAFP7a5okQOYydjudW4WggHdnomJtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3RybWlSQTVqSjJPNTFiaGFDQWQyZWlZbTFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ZjUzYTMtMjI2MC00MWIwLWEzNDEt
NTAwNDMyNTAxNzQzLzEvX3RybWlSQTVqSjJPNTFiaGFDQWQyZWlZbTFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81ZjUzYTMtMjI2MC00MWIwLWEzNDEtNTAwNDMyNTAxNzQz
LzEvX3RybWlSQTVqSjJPNTFiaGFDQWQyZWlZbTFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4bP+MyL
HZNndMk+iF58rjNG6jagjHJ6UK9Fear3l1dcJsyAcEW//TTydXx3/qyXihf1BKro
mN+tpjFXo6WvbNEbHkRpEmQQb6HXlqYe+71QcfrGQxnaJME1i79OF+vTP2YZHMsZ
nhYtDbIYBZ6CiGS2QBD9iQq5lW31h+sDDm8798PwTuFDTRqdlxbcFZN44D50Qs5O
vEejavG8CpXSuzxfqzjwgSl55YJsXk7Tqh6WaEuQTW0NAlnm5RDc0fYsImUNeuTG
csLmRiTeysbzd792lvfRs6JMpHJZmRJp9zOqybcPqFZkCdsdue8ORlK6bagRopv1
37AfhWoo1BGoyg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:51 2025 by rpki-client