Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
File: _trmiRA5jJ2O51bhaCAd2eiYm1I.mft (raw, json)
Hash identifier: iJz3MWiklVEwGAzzfldUdl1yKnmdjMmEu7EoB5uIU1k=
Subject key identifier: C2:49:CA:01:38:9D:CC:8E:0F:9E:5B:7C:A6:EE:BF:C9:A0:1A:12:62
Authority key identifier: FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
Certificate issuer: /CN=fedae68910398c9d8ee756e168201dd9e8989b52
Certificate serial: 019A7293D43FA696DB16BC767DB1C1A9CBFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
Manifest number: 0395
Signing time: Tue 11 Nov 2025 11:01:21 +0000
Manifest this update: Tue 11 Nov 2025 11:01:21 +0000
Manifest next update: Wed 12 Nov 2025 11:01:21 +0000
Files and hashes: 1: 3-rv1v1yCPrdYumYMOu8WdUJkO8.roa (hash: l7PMWmjBkZja+Bzzk9qkIiGKk5+PfjMuS142zfz0fP8=)
2: _trmiRA5jJ2O51bhaCAd2eiYm1I.crl (hash: 18r4gCnxAkqIw9gNutVf+sD05PoYeD4UatPnuksakDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:d4:3f:a6:96:db:16:bc:76:7d:b1:c1:a9:cb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedae68910398c9d8ee756e168201dd9e8989b52
Validity
Not Before: Nov 11 11:01:21 2025 GMT
Not After : Nov 12 11:01:21 2025 GMT
Subject: CN=c249ca01389dcc8e0f9e5b7ca6eebfc9a01a1262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:25:77:98:ca:fe:67:02:f8:fe:8a:8a:73:3f:
2e:a2:90:c9:8a:4d:99:2c:35:c8:90:5a:42:58:dc:
26:78:5b:3a:c4:e5:47:e1:e0:51:9e:14:9e:fc:11:
40:76:f2:1d:92:d3:a5:3a:f2:1f:01:1c:c9:1e:d7:
a1:ee:57:01:33:14:bf:f3:70:c7:5c:81:21:1d:96:
ae:b1:0e:de:3c:a2:51:8f:d2:61:90:1b:18:40:67:
3d:80:02:15:9c:0f:c8:d1:5b:b4:82:95:f5:dd:84:
3d:5f:24:11:14:e0:e7:2b:12:a0:73:1c:04:f1:be:
13:ca:b7:ae:80:6a:6b:e0:b1:e5:16:a0:03:04:49:
e7:70:e3:86:18:79:b4:58:e0:57:aa:50:21:36:f2:
42:bb:8b:e6:81:22:10:75:ae:bb:93:3b:31:6e:bd:
46:68:a7:f3:d9:86:3f:94:21:f1:b5:20:28:10:2d:
af:d0:96:44:41:84:99:e5:44:ed:40:bd:bf:47:58:
93:6b:24:ca:a3:f2:e0:d8:52:a3:c3:ba:b5:b0:14:
88:bf:68:17:e0:57:89:6d:5a:81:62:63:1c:17:61:
f0:92:c9:42:a3:1e:3f:27:52:2b:63:80:91:3f:91:
87:43:3b:03:22:a4:96:b7:17:a2:12:fa:9a:9d:c5:
c0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:49:CA:01:38:9D:CC:8E:0F:9E:5B:7C:A6:EE:BF:C9:A0:1A:12:62
X509v3 Authority Key Identifier:
keyid:FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6b:50:24:19:8b:6e:e2:bc:1b:84:cb:70:06:2c:45:dc:57:
b9:75:d7:8d:08:b5:9a:ee:87:31:1a:15:4c:ea:3a:c3:46:aa:
ec:6c:ee:67:b9:8a:02:12:1f:9c:41:1b:d6:2e:62:20:66:eb:
cc:ff:39:01:77:37:7d:f3:6e:35:77:8e:97:29:eb:f1:bc:de:
b5:27:6f:b8:f9:fc:1c:4d:01:f8:a9:e1:c3:97:e4:7b:da:b5:
8e:a5:10:b4:94:5c:01:11:73:e1:b5:07:43:0c:84:bc:c6:b7:
4e:8a:f6:26:33:c6:f4:3a:6f:d5:1c:94:87:d9:5e:8a:99:12:
d4:0a:e0:61:b1:b3:f3:89:fb:00:73:44:40:09:27:5e:0f:15:
28:cf:14:a0:d9:2b:42:2f:01:15:b5:6e:38:03:6c:81:73:10:
24:bc:9d:e7:76:da:88:9f:2f:09:b8:56:3e:c6:06:b0:36:b7:
64:07:f7:46:07:2c:67:f1:f5:cf:bd:b8:5f:fc:0e:d4:08:f8:
44:cf:b7:59:c9:85:f6:d0:10:a0:3f:ab:4f:c3:ee:ad:0a:5b:
4d:75:b2:1a:90:e1:67:1f:2a:a0:85:4d:77:de:dc:5d:08:69:
36:df:f9:3b:0b:da:02:e4:a5:2c:f4:0f:27:30:af:6b:8d:9f:
3f:5f:8c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:27 2025 by rpki-client