Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
File: _trmiRA5jJ2O51bhaCAd2eiYm1I.mft (raw, json)
Hash identifier: 5avoCA6DIW54on/Kzna0CnCz9YRVjCyyohKeWBt7gGg=
Subject key identifier: 27:1E:62:BE:76:B7:90:36:7E:B9:B0:68:7D:1D:8B:3E:11:1C:3C:D5
Authority key identifier: FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
Certificate issuer: /CN=fedae68910398c9d8ee756e168201dd9e8989b52
Certificate serial: 0199228CC22AD5D6E2C4536666BC886D462B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
Manifest number: 02E7
Signing time: Sun 07 Sep 2025 05:01:14 +0000
Manifest this update: Sun 07 Sep 2025 05:01:14 +0000
Manifest next update: Mon 08 Sep 2025 05:01:14 +0000
Files and hashes: 1: 3-rv1v1yCPrdYumYMOu8WdUJkO8.roa (hash: l7PMWmjBkZja+Bzzk9qkIiGKk5+PfjMuS142zfz0fP8=)
2: _trmiRA5jJ2O51bhaCAd2eiYm1I.crl (hash: V3JE1DiXmRqio3xkvRnp13uVnxOzXBHXhslbZq09xK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:c2:2a:d5:d6:e2:c4:53:66:66:bc:88:6d:46:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedae68910398c9d8ee756e168201dd9e8989b52
Validity
Not Before: Sep 7 05:01:14 2025 GMT
Not After : Sep 8 05:01:14 2025 GMT
Subject: CN=271e62be76b790367eb9b0687d1d8b3e111c3cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:49:d1:b7:e6:2f:d7:20:49:34:fc:f3:49:4e:
3f:55:68:eb:da:d0:e4:ad:6c:7b:7e:7f:ef:a7:65:
8a:06:57:d0:28:51:8c:b6:34:fb:90:84:45:59:6b:
3d:e8:fc:53:0c:0b:2c:c4:3e:78:d6:5b:1e:78:f7:
0b:47:39:52:39:b0:6c:0b:58:a0:bd:ed:86:04:f4:
d6:63:fb:a7:9d:88:22:8d:be:dc:26:38:c3:df:a0:
9d:b3:36:44:9c:df:62:0e:1b:4f:68:85:31:50:e3:
d0:98:e3:74:e7:91:55:aa:87:3c:f2:3f:75:16:4c:
d4:96:00:e9:28:3d:55:db:7b:04:0e:01:78:4e:7f:
87:6c:40:1b:48:fd:90:73:6d:5e:0a:fb:61:f9:f9:
74:43:6a:89:1d:b4:b4:c2:70:2c:83:95:03:5b:78:
8a:13:47:39:3d:28:62:02:09:87:63:c0:d4:f0:b2:
3f:26:2d:57:72:c9:74:94:92:37:9f:97:ef:94:37:
17:0f:d5:b7:00:24:7c:5a:0c:1c:14:56:6d:ae:bf:
9c:22:25:1b:11:35:c3:cc:a0:29:de:33:9a:0f:90:
11:a0:e4:0c:19:4e:ec:43:1a:75:05:8e:4e:ae:c1:
e2:c2:27:fb:08:e3:e3:72:fb:2c:51:58:68:b1:22:
75:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1E:62:BE:76:B7:90:36:7E:B9:B0:68:7D:1D:8B:3E:11:1C:3C:D5
X509v3 Authority Key Identifier:
keyid:FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0a:a9:dd:10:34:4b:b2:54:b7:28:0b:3d:25:9f:36:46:44:
86:c9:3d:a9:c8:00:1a:8b:28:49:f8:e8:d3:5c:6d:7f:cc:92:
ad:e8:e5:a2:66:54:39:75:4f:79:68:bf:b7:d7:a1:94:51:45:
bb:ab:24:54:8b:45:37:24:4b:3c:8b:7b:6e:6c:c0:49:3b:f9:
39:c7:57:c9:4d:38:ae:22:c7:54:51:7e:94:c4:31:5b:03:c9:
8e:9d:49:d6:f7:d2:55:de:15:80:91:f5:9d:00:fe:fe:5e:5c:
ff:98:79:0f:60:45:a6:a4:f1:35:07:24:1d:82:a3:54:b8:76:
d1:48:0f:7f:62:c5:57:2f:b3:ab:33:58:1f:d8:bb:c9:a4:d7:
64:11:f4:b3:6b:aa:ec:f8:d7:14:1a:83:69:da:b0:bd:62:ad:
60:bd:0c:94:64:be:c3:74:a2:ea:8b:2a:d9:2e:32:7b:f3:96:
9e:ce:b9:3f:27:53:1b:8b:b0:74:88:b7:fc:68:8f:74:f9:06:
b6:78:11:9e:2e:f8:29:e2:3f:8f:23:59:af:b7:dd:f7:da:41:
4e:e8:3c:d1:ff:f3:8d:c5:9a:47:ae:df:19:9a:af:f4:26:84:
79:99:bd:16:cb:cd:e4:16:80:92:cb:85:70:46:d7:e0:8e:2f:
ee:5c:ea:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:19 2025 by rpki-client