Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
File: TRMSiBUQNXRBfKenBBLaOrO4RRE.mft (raw, json)
Hash identifier: uvkYPaY+JeBySW/XVBXjFYUrkE7yWyyeTg1gPFEE2Ss=
Subject key identifier: 97:0D:70:D9:3D:ED:9D:0E:A9:20:EC:3A:C5:95:33:1C:CE:F9:93:C9
Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
Certificate issuer: /CN=4d13128815103574417ca7a70412da3ab3b84511
Certificate serial: 01969D19BD667DD9BE1281317381C314878E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
Manifest number: 1526
Signing time: Sun 04 May 2025 21:00:31 +0000
Manifest this update: Sun 04 May 2025 21:00:31 +0000
Manifest next update: Mon 05 May 2025 21:00:31 +0000
Files and hashes: 1: RbRcN6wl0nEFVsWYx8c9XyFYSpY.roa (hash: BVR+Y8S7WJeuusRjWoFe5ZeYBx8jVE+CDBxd/rFYYkU=)
2: TRMSiBUQNXRBfKenBBLaOrO4RRE.crl (hash: A8dgh3bSf1/C2Q7e0x+X8iRZbRCFmHnG8ZYp1RTnwyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:19:bd:66:7d:d9:be:12:81:31:73:81:c3:14:87:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511
Validity
Not Before: May 4 21:00:31 2025 GMT
Not After : May 5 21:00:31 2025 GMT
Subject: CN=970d70d93ded9d0ea920ec3ac595331ccef993c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:a7:c6:da:7a:2a:60:ee:82:b7:e4:44:dc:
ba:bb:3e:7f:12:4f:55:fd:65:70:45:63:2b:69:e2:
97:58:cd:2d:31:be:64:fd:87:70:9b:69:9c:66:2e:
dd:58:0f:0a:42:49:f3:4d:01:af:c0:3f:6d:a0:80:
72:37:fd:fc:17:43:cf:4d:f1:ba:93:47:c7:8e:d7:
f7:c2:49:69:f1:93:63:94:08:87:c3:0a:90:88:a0:
78:ee:86:89:82:c3:de:be:b4:22:f9:7e:61:0c:a2:
51:e7:4d:0c:58:b1:e1:0f:bf:bf:89:80:01:e8:0b:
b3:f6:27:84:3b:9b:ab:ec:8a:c1:1c:22:29:1d:97:
4b:89:65:85:96:24:52:49:05:cd:cf:6c:c2:56:92:
fd:35:02:d8:6d:92:2b:d2:44:54:02:24:94:05:ae:
a1:14:fa:fd:d3:60:b6:dd:cd:2e:06:ad:17:7f:32:
c1:d5:68:e9:0b:19:f0:2d:5d:7c:37:17:bf:1c:bc:
d5:26:42:20:27:f0:7f:6c:8d:39:d5:c6:d5:9b:50:
79:98:b5:aa:4c:c2:3d:1b:7d:06:dd:c5:b3:12:05:
fb:ed:6e:6c:97:9c:3b:e4:e3:fe:e8:e6:39:be:99:
27:b5:01:cf:90:2b:6f:a5:88:dd:a8:38:ce:bb:78:
78:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0D:70:D9:3D:ED:9D:0E:A9:20:EC:3A:C5:95:33:1C:CE:F9:93:C9
X509v3 Authority Key Identifier:
keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0d:76:c4:95:cf:88:38:62:58:b8:21:15:86:81:93:5a:5b:
9d:66:78:a6:66:d7:2f:0f:be:69:8d:1d:83:8b:6c:10:08:fd:
3c:64:4b:02:6f:ec:87:f9:96:34:07:dd:9b:cf:8b:f3:c4:ee:
5e:de:ce:f2:10:e4:d0:3f:42:2a:00:f4:b4:3d:81:35:06:4b:
83:fb:3c:45:f2:65:81:5d:7a:be:70:ec:7c:00:15:8c:f9:d2:
23:41:47:28:26:c8:76:84:b7:71:e3:fe:d1:2e:89:28:ad:fe:
88:bb:24:c1:ef:af:2b:a7:5c:0d:26:0d:ea:f0:36:eb:22:a9:
96:78:e1:86:df:5d:8e:fd:d6:f8:35:b7:35:7d:fb:57:ca:bc:
2e:12:5d:73:20:10:71:7d:aa:46:94:9e:3a:8b:6f:87:25:e3:
0a:d5:4c:73:4b:ab:60:89:af:04:36:43:b7:9f:57:78:f4:bd:
e1:bc:e1:81:2e:b2:4c:c5:79:ef:d5:45:31:87:75:8e:07:17:
8d:b1:dc:75:ab:3f:94:d7:9d:ce:fc:73:28:5c:24:6f:65:ce:
6f:ca:68:61:eb:e8:44:82:c6:dd:9a:83:fb:cb:86:8e:3d:98:
a5:d6:df:c1:1a:a8:cc:2d:20:87:d7:e8:a8:af:5a:f7:5e:1b:
dd:01:b2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:50:44 2025 by rpki-client