Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
File: TRMSiBUQNXRBfKenBBLaOrO4RRE.mft (raw, json)
Hash identifier: aEne6U+wPCXHgJXH4tV4tqkJ4moJevqaPLLeYNHu1uI=
Subject key identifier: FE:6A:6B:B6:79:75:92:B0:49:57:99:24:E4:10:93:08:E1:AA:68:6A
Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
Certificate issuer: /CN=4d13128815103574417ca7a70412da3ab3b84511
Certificate serial: 0197B70F37897C90D537C8BE1B5F853C7DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 15:01:57 +0000
Manifest this update: Sat 28 Jun 2025 15:01:57 +0000
Manifest next update: Sun 29 Jun 2025 15:01:57 +0000
Files and hashes: 1: RbRcN6wl0nEFVsWYx8c9XyFYSpY.roa (hash: BVR+Y8S7WJeuusRjWoFe5ZeYBx8jVE+CDBxd/rFYYkU=)
2: TRMSiBUQNXRBfKenBBLaOrO4RRE.crl (hash: xZQ0FP4NAPqnxcrpeFwpb3YJukPmCHp2X8a5Q0zLbMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:37:89:7c:90:d5:37:c8:be:1b:5f:85:3c:7d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511
Validity
Not Before: Jun 28 15:01:57 2025 GMT
Not After : Jun 29 15:01:57 2025 GMT
Subject: CN=fe6a6bb6797592b049579924e4109308e1aa686a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f4:68:52:a0:3f:e7:ae:39:45:3e:b7:fd:3e:
b1:3f:96:c1:2e:b6:40:f7:c4:01:86:5e:01:39:97:
98:bf:bc:b7:d8:6b:09:e0:fd:5c:a5:62:d4:48:03:
37:25:e9:17:d1:67:54:94:18:be:83:e9:97:13:4d:
fd:8a:88:3e:a7:58:1e:3d:68:36:c1:09:d0:68:2d:
f5:2b:90:57:a6:80:f2:aa:69:07:06:f5:30:8c:8c:
e5:e6:f7:31:a5:53:1a:da:92:74:33:f0:99:96:e7:
04:2d:0b:ce:3b:b0:46:0d:a5:42:9a:ed:3f:57:9f:
bc:9e:7c:fa:f9:72:75:52:d4:25:74:76:11:17:de:
1d:94:ed:f8:e3:bc:4c:c8:96:4f:67:a7:7e:c0:ad:
f6:1f:5a:f2:2e:de:d8:06:57:94:df:6a:35:e6:38:
f7:2b:74:53:97:c9:04:95:42:e7:f7:05:50:c3:ed:
20:d6:28:3f:e8:10:a5:94:2b:54:44:31:1c:7a:a1:
36:d8:46:d5:03:b2:f5:9d:79:7d:b3:a2:06:3e:50:
0e:6f:ab:24:82:71:3c:ad:c9:c5:f0:41:df:33:2a:
b8:b3:22:00:7e:6c:5e:ce:24:f4:14:18:e2:ae:6d:
15:93:35:ac:f3:47:c6:3d:70:45:0c:a0:65:4b:91:
66:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6A:6B:B6:79:75:92:B0:49:57:99:24:E4:10:93:08:E1:AA:68:6A
X509v3 Authority Key Identifier:
keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d6:b2:0b:b9:1a:0d:47:ef:48:dc:dc:27:2c:ed:1c:75:88:
55:04:7a:75:85:d6:87:7c:f1:0f:de:5f:86:a3:c6:84:cf:60:
00:ba:33:8c:b9:89:dc:c3:08:b8:f7:24:03:86:35:ff:35:28:
1b:c1:d0:11:93:fe:7a:7f:a8:11:52:88:af:b9:52:84:3d:04:
cf:f2:d5:6a:b4:ab:f8:cd:93:3f:15:94:9e:67:45:47:47:02:
ce:36:fc:6b:6e:cb:75:8a:2e:8f:5e:a8:f2:4a:4f:2b:a0:32:
f5:4f:74:14:d2:e9:bf:28:5c:03:2e:1a:56:f1:c5:68:eb:27:
80:1a:b7:b9:a6:be:df:8c:3a:c2:07:22:87:d3:98:6c:85:51:
ea:a1:c9:a3:ea:e5:a1:78:76:1b:b6:39:7a:ac:bd:27:4a:33:
bb:9b:82:23:0f:8f:49:2e:c7:82:66:a8:6d:dc:55:1d:34:ec:
a7:58:87:67:ef:d0:75:dd:9b:00:9a:8d:ee:b6:2f:b4:01:0c:
af:71:7b:3e:a2:c2:ed:ad:91:fb:68:79:36:10:af:43:18:6b:
8a:56:0e:1f:90:e2:e0:3a:f0:d7:fc:ea:1e:48:de:58:39:16:
a7:7b:fd:20:ad:79:5f:b3:1a:62:f5:1c:aa:d3:17:33:49:43:
0a:89:20:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:25 2025 by rpki-client