Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
File: _trmiRA5jJ2O51bhaCAd2eiYm1I.mft (raw, json)
Hash identifier: yRAj/VQR3BzCyafxvuyelA6958S9aGOnz1ImsZ0yEcM=
Subject key identifier: CF:7A:1D:A4:AB:FA:67:F3:FF:DC:C5:4F:CD:AE:A7:DD:37:00:7B:B6
Authority key identifier: FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
Certificate issuer: /CN=fedae68910398c9d8ee756e168201dd9e8989b52
Certificate serial: 0197B77C50F2208DFF8EE6F54505106964CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
Manifest number: 022B
Signing time: Sat 28 Jun 2025 17:01:06 +0000
Manifest this update: Sat 28 Jun 2025 17:01:06 +0000
Manifest next update: Sun 29 Jun 2025 17:01:06 +0000
Files and hashes: 1: 3-rv1v1yCPrdYumYMOu8WdUJkO8.roa (hash: l7PMWmjBkZja+Bzzk9qkIiGKk5+PfjMuS142zfz0fP8=)
2: _trmiRA5jJ2O51bhaCAd2eiYm1I.crl (hash: S/Nn/IwoQnN+yUp8OazKnfEt2tG0qO1WSOmcxq1aorM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:50:f2:20:8d:ff:8e:e6:f5:45:05:10:69:64:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedae68910398c9d8ee756e168201dd9e8989b52
Validity
Not Before: Jun 28 17:01:06 2025 GMT
Not After : Jun 29 17:01:06 2025 GMT
Subject: CN=cf7a1da4abfa67f3ffdcc54fcdaea7dd37007bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:8c:bf:0f:25:fa:86:15:89:02:4b:28:5b:
69:45:6b:b8:40:4c:1a:1c:e0:1e:d6:8a:de:db:38:
34:1f:f2:bc:2a:fb:63:ed:21:d5:b9:49:b1:92:3a:
de:be:e0:12:be:db:22:36:45:f2:3d:8a:d2:53:38:
d8:f4:3f:ae:fe:6a:70:9c:dc:15:ac:01:6f:d3:a2:
65:54:73:e2:9f:6f:2f:a6:29:e2:36:16:54:6e:b9:
d0:4b:52:e7:00:26:97:9b:c3:b2:4b:b6:a3:20:04:
fa:3b:29:6d:fc:11:8b:b6:fc:b2:53:22:78:c2:09:
59:ca:eb:48:00:d4:1f:fd:b8:d8:6f:db:f4:44:b5:
6f:36:b5:56:7d:a4:46:e0:39:8e:f4:8b:b9:97:3c:
da:83:e4:3b:6b:f3:42:ca:b4:91:95:55:63:ce:4f:
1c:5a:d6:c2:10:7d:6a:2a:83:f1:1d:55:11:95:1d:
fc:d6:0a:e6:24:10:98:5b:e6:32:1a:e0:39:a2:3a:
46:bc:16:c0:1d:31:ba:2c:7c:ca:33:c1:1c:99:ca:
2e:e9:41:1c:3d:55:0e:e3:b7:89:d6:cb:4c:c3:a0:
49:5e:f7:c2:05:08:cc:69:92:39:52:99:01:dc:80:
84:57:cc:29:bb:a0:e7:6a:d3:95:47:c5:d7:cd:4a:
8d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7A:1D:A4:AB:FA:67:F3:FF:DC:C5:4F:CD:AE:A7:DD:37:00:7B:B6
X509v3 Authority Key Identifier:
keyid:FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f9:03:a8:64:b1:80:61:a9:7c:69:26:b1:18:f7:0d:17:60:
81:07:11:b8:68:50:01:49:bb:4f:71:4f:d0:87:2b:c4:a2:e9:
2c:7a:1d:99:c3:14:c8:53:8f:94:5c:a1:80:b5:9c:69:ef:1e:
6a:11:ce:90:26:5f:22:7d:f5:1f:18:b1:f5:dc:25:e8:75:d6:
5d:06:e8:31:43:3e:89:7b:61:df:bd:88:b2:7e:1e:71:1b:48:
e0:28:52:cb:ec:be:66:e4:f4:5a:3a:51:5a:81:21:f4:33:16:
7c:3e:45:58:3f:55:8b:3a:eb:be:f8:a1:75:83:11:a9:dd:f3:
f2:ad:c9:b6:ca:e5:e3:65:1b:92:6f:30:9a:b6:bc:d4:08:b8:
b2:6f:f6:a5:af:69:d5:80:8c:42:f5:ec:37:98:43:f3:b0:a7:
36:fb:84:73:76:39:29:d0:a4:ab:18:21:5e:e4:35:ef:e4:79:
d8:f0:52:a0:6b:de:d8:0f:b4:63:f3:87:11:30:d2:46:c5:cb:
63:b5:6d:be:45:02:c0:a6:50:fd:20:09:4d:6c:a5:6a:1e:f9:
4f:f1:23:33:c5:44:44:28:76:1f:15:60:c1:37:75:49:b3:5d:
f7:ae:45:a5:37:da:a8:82:12:0f:48:15:4b:f9:1e:47:c2:55:
10:55:8a:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fFDyII3/jub1RQUQaWTPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZGFlNjg5MTAzOThjOWQ4ZWU3NTZlMTY4MjAxZGQ5ZTg5
ODliNTIwHhcNMjUwNjI4MTcwMTA2WhcNMjUwNjI5MTcwMTA2WjAzMTEwLwYDVQQD
EyhjZjdhMWRhNGFiZmE2N2YzZmZkY2M1NGZjZGFlYTdkZDM3MDA3YmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXGMvw8l+oYViQJLKFtpRWu4QEwa
HOAe1ore2zg0H/K8Kvtj7SHVuUmxkjrevuASvtsiNkXyPYrSUzjY9D+u/mpwnNwV
rAFv06JlVHPin28vpiniNhZUbrnQS1LnACaXm8OyS7ajIAT6Oylt/BGLtvyyUyJ4
wglZyutIANQf/bjYb9v0RLVvNrVWfaRG4DmO9Iu5lzzag+Q7a/NCyrSRlVVjzk8c
WtbCEH1qKoPxHVURlR381grmJBCYW+YyGuA5ojpGvBbAHTG6LHzKM8Ecmcou6UEc
PVUO47eJ1stMw6BJXvfCBQjMaZI5UpkB3ICEV8wpu6DnatOVR8XXzUqNzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM96HaSr+mfz/9zFT82up903AHu2MB8GA1UdIwQY
MBaAFP7a5okQOYydjudW4WggHdnomJtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3RybWlSQTVqSjJPNTFiaGFDQWQyZWlZbTFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ZjUzYTMtMjI2MC00MWIwLWEzNDEt
NTAwNDMyNTAxNzQzLzEvX3RybWlSQTVqSjJPNTFiaGFDQWQyZWlZbTFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81ZjUzYTMtMjI2MC00MWIwLWEzNDEtNTAwNDMyNTAxNzQz
LzEvX3RybWlSQTVqSjJPNTFiaGFDQWQyZWlZbTFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArvkDqGSx
gGGpfGkmsRj3DRdggQcRuGhQAUm7T3FP0IcrxKLpLHodmcMUyFOPlFyhgLWcae8e
ahHOkCZfIn31Hxix9dwl6HXWXQboMUM+iXth372Isn4ecRtI4ChSy+y+ZuT0WjpR
WoEh9DMWfD5FWD9VizrrvvihdYMRqd3z8q3Jtsrl42Ubkm8wmra81Ai4sm/2pa9p
1YCMQvXsN5hD87CnNvuEc3Y5KdCkqxghXuQ17+R52PBSoGve2A+0Y/OHETDSRsXL
Y7VtvkUCwKZQ/SAJTWylah75T/EjM8VERCh2HxVgwTd1SbNd965FpTfaqIISD0gV
S/keR8JVEFWKZQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:10 2025 by rpki-client