Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
File: _trmiRA5jJ2O51bhaCAd2eiYm1I.mft (raw, json)
Hash identifier: p3Amgp6eIQugNQK3n+TxzoSPiXKU4Y5HVBNAUJLS9hw=
Subject key identifier: CB:F3:77:DA:EE:21:D2:AF:4D:48:A1:09:97:16:97:0A:70:C4:74:86
Authority key identifier: FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
Certificate issuer: /CN=fedae68910398c9d8ee756e168201dd9e8989b52
Certificate serial: 0196580181F100C8344056D4AD868CFCAD38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
Manifest number: 0175
Signing time: Mon 21 Apr 2025 11:00:15 +0000
Manifest this update: Mon 21 Apr 2025 11:00:15 +0000
Manifest next update: Tue 22 Apr 2025 11:00:15 +0000
Files and hashes: 1: 3-rv1v1yCPrdYumYMOu8WdUJkO8.roa (hash: l7PMWmjBkZja+Bzzk9qkIiGKk5+PfjMuS142zfz0fP8=)
2: _trmiRA5jJ2O51bhaCAd2eiYm1I.crl (hash: kU0Sc6oZh9dVMqKGY/sBJ2yG8FrxgUgjDwTo//m1Ebs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:81:f1:00:c8:34:40:56:d4:ad:86:8c:fc:ad:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedae68910398c9d8ee756e168201dd9e8989b52
Validity
Not Before: Apr 21 11:00:15 2025 GMT
Not After : Apr 22 11:00:15 2025 GMT
Subject: CN=cbf377daee21d2af4d48a1099716970a70c47486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:95:43:e4:4d:1a:32:b0:9a:87:ae:6d:73:
1d:6d:3e:0b:4e:f1:51:a7:ca:64:d5:bb:da:6b:0d:
24:4a:01:d6:c2:53:9e:ef:d4:60:33:c3:f2:6c:ba:
66:b9:bf:56:95:0f:ec:d5:68:43:a2:73:62:42:13:
82:f6:54:69:03:cc:4a:14:ab:6d:7d:de:60:5d:da:
e8:66:d6:f0:c7:fd:85:f0:b5:3e:61:02:e2:0a:7a:
48:67:68:90:ff:99:39:3d:2e:6d:c0:e8:43:7a:75:
15:95:6a:82:7b:82:42:c5:c9:6b:84:3a:09:60:80:
0a:43:77:c2:de:71:5f:0c:da:6b:27:fa:0a:8e:ef:
52:df:39:f0:5c:1c:b5:42:a3:ca:46:af:65:93:03:
1c:1a:7e:7c:c2:a1:9d:b1:46:1f:b4:6e:0e:40:50:
0e:6e:94:91:fc:88:5f:47:53:fb:c7:a8:46:39:cd:
8f:94:ea:72:a2:c7:c1:18:56:e0:27:49:d4:d4:aa:
5b:54:a8:b2:fc:a5:cb:79:ea:df:5d:a5:fe:ae:19:
b4:7c:a2:e1:08:12:05:cc:0a:e6:c9:ed:10:a0:a4:
96:b6:45:a7:2e:c1:73:95:83:1a:a2:c7:81:b5:51:
6e:3c:a6:6a:55:91:f2:91:03:53:0d:9c:f6:c3:a5:
63:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F3:77:DA:EE:21:D2:AF:4D:48:A1:09:97:16:97:0A:70:C4:74:86
X509v3 Authority Key Identifier:
keyid:FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a8:c8:f2:9e:be:82:88:2c:24:63:17:af:0a:8d:c6:c5:4f:
cd:a4:b9:51:46:84:66:66:67:2d:2e:91:9a:22:b1:48:d1:4e:
6b:03:4c:92:33:59:36:7b:5a:8e:70:4e:5d:83:56:1b:dc:3c:
62:d6:97:19:ae:15:e1:8c:2a:c9:53:96:21:75:ba:a0:c1:20:
90:3e:89:c3:ac:4b:6c:6a:b1:82:7b:70:08:75:d5:20:56:d6:
aa:0f:2c:ea:38:ce:ef:42:a6:4e:39:53:e5:24:6f:ce:9b:23:
bc:49:99:41:6d:19:26:98:1f:25:1f:cd:c1:14:97:df:68:9c:
a1:f4:7e:36:ff:42:09:d3:90:0d:24:00:09:78:b6:30:5a:f1:
64:4c:c9:db:10:ca:43:ec:ce:94:7b:48:b2:1c:e5:b3:9b:80:
55:c9:e8:4b:c6:5c:8b:3e:2f:61:56:d3:96:5a:bd:b5:87:74:
4b:aa:2f:1d:78:51:89:6c:f0:a3:b6:06:c8:51:7f:1c:2a:7c:
8e:b5:20:a5:01:af:14:19:db:99:a0:3c:46:5c:d3:24:85:38:
08:99:7a:13:0b:fe:9f:27:49:86:e9:66:f9:a9:51:e4:1c:99:
25:85:46:5a:1c:14:e5:f6:3f:72:91:49:3e:18:e3:39:cf:c8:
de:c3:26:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:12 2025 by rpki-client