Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
File: TRMSiBUQNXRBfKenBBLaOrO4RRE.mft (raw, json)
Hash identifier: ryC/r+R9MSTy9MIRlukbV4s5mxq048GjH8fFtsDxKJ0=
Subject key identifier: D5:35:E8:F8:92:F9:0F:F5:7B:BD:98:11:D8:E8:D1:45:FD:1A:C6:9B
Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
Certificate issuer: /CN=4d13128815103574417ca7a70412da3ab3b84511
Certificate serial: 0198D6CD9B16CDE8755584F5C5C238B4DCB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 12:00:55 +0000
Manifest this update: Sat 23 Aug 2025 12:00:55 +0000
Manifest next update: Sun 24 Aug 2025 12:00:55 +0000
Files and hashes: 1: RbRcN6wl0nEFVsWYx8c9XyFYSpY.roa (hash: BVR+Y8S7WJeuusRjWoFe5ZeYBx8jVE+CDBxd/rFYYkU=)
2: TRMSiBUQNXRBfKenBBLaOrO4RRE.crl (hash: pY6Tj5KEvCL3yTsuZDv4LPO5VQO9V38QsxJ8vVELa08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:9b:16:cd:e8:75:55:84:f5:c5:c2:38:b4:dc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511
Validity
Not Before: Aug 23 12:00:55 2025 GMT
Not After : Aug 24 12:00:55 2025 GMT
Subject: CN=d535e8f892f90ff57bbd9811d8e8d145fd1ac69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:68:ac:7c:c3:45:9f:b7:76:5a:15:f6:6e:
6c:bb:19:1b:66:86:d4:6f:9d:b0:2b:82:bc:a7:0c:
97:56:21:fb:cf:bb:d5:01:51:43:43:49:1e:5a:67:
a0:61:03:09:1a:ad:a8:18:61:b8:3c:eb:f2:6a:3a:
68:77:8d:8a:49:d6:07:a9:bf:44:4f:dd:16:e2:74:
d9:99:8d:b1:3a:63:20:e6:f2:60:95:b0:27:ee:a3:
d1:11:e2:e0:27:fd:45:60:2b:07:72:aa:9b:8d:7d:
2d:fb:0e:ed:11:e8:24:fd:71:8e:d3:69:6f:4d:7c:
4b:95:38:b1:8d:af:59:9c:85:de:4b:7c:44:e5:fb:
72:8d:40:e3:16:94:7b:99:6b:4f:3a:06:d0:79:8f:
64:8f:d4:2c:e5:be:71:1d:39:53:a2:85:8e:94:53:
7a:13:0e:0b:d9:c3:63:6f:8c:2a:d7:4c:a5:1e:fb:
2f:aa:6e:51:d8:ee:30:8c:0e:ed:05:84:2a:71:7f:
b0:3d:8f:f8:34:1e:33:ec:0b:8f:9c:38:7c:9b:60:
37:a0:e2:05:29:b9:45:d2:33:80:cf:cf:89:10:92:
a5:a6:3a:79:0b:f1:d1:3e:13:16:f7:a5:8a:87:f0:
39:47:f8:62:40:70:21:13:a9:5f:06:de:dd:2e:6f:
67:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:35:E8:F8:92:F9:0F:F5:7B:BD:98:11:D8:E8:D1:45:FD:1A:C6:9B
X509v3 Authority Key Identifier:
keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:66:83:17:ca:be:a8:e4:8b:50:1f:ab:c7:1c:92:be:c5:d7:
f8:2e:29:12:a0:35:16:c8:0e:cf:3b:4d:d8:39:56:0f:12:71:
e0:24:1f:63:b9:00:b4:57:42:97:28:fb:96:78:c7:aa:a5:d5:
05:bf:05:57:d0:d6:40:93:84:34:f7:12:71:9f:cb:f4:55:20:
95:b7:8f:09:5e:f5:39:e4:49:e6:fa:3f:8e:e8:cf:c9:82:0c:
ab:61:1f:98:25:48:cd:9e:34:a7:4e:37:f1:b5:b7:e7:32:5a:
10:e7:c8:6f:af:d7:71:c5:31:6a:57:d3:d0:dc:50:7c:95:5b:
1a:4b:32:9b:a2:f0:63:20:71:c7:ba:e5:cd:88:2d:04:21:c8:
51:ad:83:7e:1f:44:17:be:7d:ef:f4:ad:f0:6c:eb:6f:1b:67:
18:f4:e4:c4:1e:85:4b:98:13:ee:f6:95:de:37:90:bf:0f:1c:
7f:8b:28:8c:1d:6d:29:4d:ef:3a:87:96:8d:13:db:51:7b:89:
b4:f1:25:82:e8:16:b4:c6:b2:f3:81:d8:2b:68:2d:73:49:8f:
66:a8:de:a9:c6:8b:57:8e:35:8c:6e:35:05:79:3a:fd:bd:75:
a7:91:b7:78:68:37:fd:95:5e:f4:2d:2a:d8:9c:d3:b0:e7:98:
ee:46:cd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:46:50 2025 by rpki-client