Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
File: TRMSiBUQNXRBfKenBBLaOrO4RRE.mft (raw, json)
Hash identifier: h8PmtvDz9TDNzW96kUFa3Ajbi8PC2FxIRdVSiU5QW48=
Subject key identifier: 31:A4:50:7D:11:6A:34:89:7F:5F:46:C1:D9:D2:B9:06:A3:27:06:0C
Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
Certificate issuer: /CN=4d13128815103574417ca7a70412da3ab3b84511
Certificate serial: 01974AE8ACC4A74A2FC1B47AA1099ADF86A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 15:00:51 +0000
Manifest this update: Sat 07 Jun 2025 15:00:51 +0000
Manifest next update: Sun 08 Jun 2025 15:00:51 +0000
Files and hashes: 1: RbRcN6wl0nEFVsWYx8c9XyFYSpY.roa (hash: BVR+Y8S7WJeuusRjWoFe5ZeYBx8jVE+CDBxd/rFYYkU=)
2: TRMSiBUQNXRBfKenBBLaOrO4RRE.crl (hash: OQBJIM/YGxZDFr49gTXZkll4bWsfKLpZSq8oyS7h7X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:ac:c4:a7:4a:2f:c1:b4:7a:a1:09:9a:df:86:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511
Validity
Not Before: Jun 7 15:00:51 2025 GMT
Not After : Jun 8 15:00:51 2025 GMT
Subject: CN=31a4507d116a34897f5f46c1d9d2b906a327060c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:1b:45:26:f2:9c:b8:db:da:6f:41:a8:96:
53:d5:78:59:bd:f0:0b:89:e7:bf:eb:04:74:2b:66:
d6:b1:1b:da:43:e6:1b:f2:df:e0:ad:74:b8:8d:21:
22:e0:c0:c7:94:83:74:6b:c0:5a:13:6e:ac:ed:08:
b1:8f:0c:c6:4d:65:80:46:88:af:87:1c:02:ac:f8:
69:59:09:df:8d:42:72:51:95:ba:76:bc:7f:20:78:
78:28:89:cb:e0:15:28:20:70:6a:c0:50:d6:32:fa:
92:fb:af:e2:d0:18:83:d3:cf:c8:f5:70:b7:26:57:
8d:c6:93:65:ad:0e:e7:20:e1:cc:8c:e7:5d:12:85:
7d:96:7a:03:5e:7e:47:45:60:8f:81:a7:a9:58:ea:
f3:c0:31:05:17:32:54:53:65:0e:02:98:fb:4b:93:
b5:48:e8:3a:04:45:d8:8e:9c:b3:16:9b:6d:af:36:
f8:c2:63:1e:f0:43:53:11:2c:a3:72:d6:f2:09:f6:
5f:37:4e:fb:2d:6a:0e:f3:ce:b3:05:90:89:47:28:
19:f1:48:5e:85:25:df:7c:0a:b2:2b:de:60:e9:21:
75:da:f1:17:92:6f:05:df:e9:65:6a:2b:33:55:5c:
f5:3f:fe:5b:a7:82:ed:c6:c8:ae:1a:a8:4d:d0:65:
76:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A4:50:7D:11:6A:34:89:7F:5F:46:C1:D9:D2:B9:06:A3:27:06:0C
X509v3 Authority Key Identifier:
keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:24:10:0a:58:19:5f:e8:e7:00:42:4c:44:a2:93:c5:b0:d5:
2a:7d:ad:2a:85:e1:49:eb:fb:c0:11:96:b9:e4:5d:5f:d3:77:
83:73:b0:23:39:a4:84:4e:6d:d1:23:83:42:a0:b7:f4:3e:fe:
6b:bc:d6:99:fd:49:6b:1a:f0:55:c1:d0:b7:a0:86:95:67:71:
23:33:1a:95:b5:67:be:e3:37:c2:df:a8:76:e7:53:2e:9a:d6:
32:cf:29:59:fd:a5:46:2a:05:80:12:34:ca:14:c9:50:88:c6:
ae:00:9e:12:62:99:a0:53:ef:57:07:0a:01:3c:f9:87:84:4c:
b0:4b:50:6d:21:ab:92:02:29:fd:96:f2:b9:d6:b1:4a:fa:98:
67:ff:af:ce:56:ed:fc:96:7a:c2:67:f9:a9:48:80:d9:e1:92:
15:b8:bc:fa:bb:09:ca:17:45:87:a3:38:99:bf:92:f5:41:ea:
aa:49:84:ff:d2:83:ba:70:d2:ed:4e:84:37:51:28:ed:2e:10:
40:40:9a:c8:ab:58:c0:87:71:0c:3c:34:f0:34:e4:a7:9b:55:
23:ca:7d:46:47:a0:c2:81:84:a6:86:ab:81:23:82:88:7d:0e:
ba:8b:af:fe:c7:1a:58:57:50:05:9d:a0:44:ac:ce:1c:73:9f:
b8:c9:04:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6KzEp0ovwbR6oQma34ahMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMTMxMjg4MTUxMDM1NzQ0MTdjYTdhNzA0MTJkYTNhYjNi
ODQ1MTEwHhcNMjUwNjA3MTUwMDUxWhcNMjUwNjA4MTUwMDUxWjAzMTEwLwYDVQQD
EygzMWE0NTA3ZDExNmEzNDg5N2Y1ZjQ2YzFkOWQyYjkwNmEzMjcwNjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjUbRSbynLjb2m9BqJZT1XhZvfAL
iee/6wR0K2bWsRvaQ+Yb8t/grXS4jSEi4MDHlIN0a8BaE26s7QixjwzGTWWARoiv
hxwCrPhpWQnfjUJyUZW6drx/IHh4KInL4BUoIHBqwFDWMvqS+6/i0BiD08/I9XC3
JleNxpNlrQ7nIOHMjOddEoV9lnoDXn5HRWCPgaepWOrzwDEFFzJUU2UOApj7S5O1
SOg6BEXYjpyzFpttrzb4wmMe8ENTESyjctbyCfZfN077LWoO886zBZCJRygZ8Uhe
hSXffAqyK95g6SF12vEXkm8F3+llaiszVVz1P/5bp4LtxsiuGqhN0GV2CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGkUH0RajSJf19GwdnSuQajJwYMMB8GA1UdIwQY
MBaAFE0TEogVEDV0QXynpwQS2jqzuEURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mYWZmYzItOTUxNy00ZDE4LTg5OTMt
ZjU1ZWE0OGNlNzVhLzEvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9mYWZmYzItOTUxNy00ZDE4LTg5OTMtZjU1ZWE0OGNlNzVh
LzEvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyQQClgZ
X+jnAEJMRKKTxbDVKn2tKoXhSev7wBGWueRdX9N3g3OwIzmkhE5t0SODQqC39D7+
a7zWmf1JaxrwVcHQt6CGlWdxIzMalbVnvuM3wt+odudTLprWMs8pWf2lRioFgBI0
yhTJUIjGrgCeEmKZoFPvVwcKATz5h4RMsEtQbSGrkgIp/ZbyudaxSvqYZ/+vzlbt
/JZ6wmf5qUiA2eGSFbi8+rsJyhdFh6M4mb+S9UHqqkmE/9KDunDS7U6EN1Eo7S4Q
QECayKtYwIdxDDw08DTkp5tVI8p9RkegwoGEpoargSOCiH0Ououv/scaWFdQBZ2g
RKzOHHOfuMkENA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 20:38:15 2025 by rpki-client