Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
File: TRMSiBUQNXRBfKenBBLaOrO4RRE.mft (raw, json)
Hash identifier: +/yZpSnvDrStDBMoY179JEcbfFqjnBeDFC3mM0AEV7E=
Subject key identifier: D5:D8:34:09:67:AF:BA:0E:F9:86:8A:0D:C6:C6:C2:FA:04:26:F0:39
Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
Certificate issuer: /CN=4d13128815103574417ca7a70412da3ab3b84511
Certificate serial: 019A307C04925B81AA5ED526238291BFA2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
Manifest number: 1700
Signing time: Wed 29 Oct 2025 15:00:25 +0000
Manifest this update: Wed 29 Oct 2025 15:00:25 +0000
Manifest next update: Thu 30 Oct 2025 15:00:25 +0000
Files and hashes: 1: RbRcN6wl0nEFVsWYx8c9XyFYSpY.roa (hash: BVR+Y8S7WJeuusRjWoFe5ZeYBx8jVE+CDBxd/rFYYkU=)
2: TRMSiBUQNXRBfKenBBLaOrO4RRE.crl (hash: +o0OF9/4v3RFj53iZdKEuVYpLEzgLrjbpcnfawGzUYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:7c:04:92:5b:81:aa:5e:d5:26:23:82:91:bf:a2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511
Validity
Not Before: Oct 29 15:00:25 2025 GMT
Not After : Oct 30 15:00:25 2025 GMT
Subject: CN=d5d8340967afba0ef9868a0dc6c6c2fa0426f039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e1:c3:ca:c0:d5:85:9f:88:25:ec:5a:5e:b0:
62:7c:7b:ee:10:d8:6e:b0:89:79:8c:ef:5d:7a:af:
28:58:cf:b3:28:bf:74:89:35:47:e4:10:4f:46:cf:
68:d2:8b:35:ee:40:57:f5:44:64:7a:68:54:ef:17:
25:fe:a1:36:bc:97:57:25:95:29:b7:f8:6a:78:25:
59:2e:06:58:79:7c:0d:4b:74:f9:fe:93:78:fd:e5:
29:54:be:b3:09:4d:a0:30:57:9f:23:92:c4:4c:18:
35:09:44:b6:7f:8a:38:82:1b:3b:c0:7f:04:01:6b:
1f:a9:b8:bd:5d:9c:8e:fc:23:77:d7:1f:1d:b9:33:
0f:c8:0d:4b:c1:87:8b:8c:3c:78:d4:bd:82:55:9c:
cf:85:61:1d:a3:64:4a:f6:37:c4:ef:c1:5a:d5:83:
3c:c7:37:93:84:b1:10:8d:5a:f0:97:38:7e:82:95:
93:11:39:0e:e3:a6:e8:52:e5:e7:6a:56:b2:8c:3d:
d0:ec:55:a2:79:20:7a:44:ec:29:47:a0:ad:5d:62:
c9:70:a8:1b:62:5d:37:4d:0f:c6:b9:2e:01:b2:fb:
77:e2:c5:3e:15:6a:85:4b:3a:45:a7:89:a6:ff:fd:
71:ea:fa:a0:c6:d6:ec:c8:31:42:66:1b:a5:9e:4d:
2d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D8:34:09:67:AF:BA:0E:F9:86:8A:0D:C6:C6:C2:FA:04:26:F0:39
X509v3 Authority Key Identifier:
keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:16:40:67:8d:a3:03:fd:0d:75:57:b1:28:c1:04:22:03:06:
39:28:f2:a6:aa:0a:7b:ad:67:0f:82:a8:03:d8:c8:8f:e2:c6:
0d:0c:ec:29:6c:62:67:c2:e2:1c:92:8c:b3:4e:5a:50:20:ed:
d5:81:06:4a:6c:b6:23:72:05:6a:33:b5:36:85:df:4f:a5:9c:
88:4b:aa:24:4a:9a:95:a1:a5:19:df:15:57:09:bc:bf:35:bb:
13:be:f1:45:7e:8b:5b:2d:ec:6d:14:38:ef:02:da:81:d0:99:
7b:0c:d6:49:0f:fc:de:c1:e4:04:fd:1c:90:df:9b:a9:1d:f4:
83:13:dc:06:d5:47:40:ca:63:77:37:c6:96:46:04:49:db:13:
4a:75:61:78:90:1d:6f:b3:bd:ca:42:5c:ab:f2:fb:96:f3:fa:
52:2e:6e:01:60:c7:f9:b1:5b:fa:3f:11:0f:81:0a:52:56:33:
4d:76:2a:b8:a2:2f:83:d9:3d:c7:92:1b:f9:89:d8:93:a7:bf:
91:c9:1f:df:fd:06:b8:8a:37:f4:d8:c9:54:0c:dc:6a:8c:bf:
a3:27:5b:ab:61:93:8f:07:ac:8b:6b:f1:c6:4a:a2:b4:23:47:
24:f8:6f:06:7d:a2:85:98:b9:cb:5d:8c:66:47:83:80:e1:0a:
ee:4b:7f:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZowfASSW4GqXtUmI4KRv6LrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMTMxMjg4MTUxMDM1NzQ0MTdjYTdhNzA0MTJkYTNhYjNi
ODQ1MTEwHhcNMjUxMDI5MTUwMDI1WhcNMjUxMDMwMTUwMDI1WjAzMTEwLwYDVQQD
EyhkNWQ4MzQwOTY3YWZiYTBlZjk4NjhhMGRjNmM2YzJmYTA0MjZmMDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OHDysDVhZ+IJexaXrBifHvuENhu
sIl5jO9deq8oWM+zKL90iTVH5BBPRs9o0os17kBX9URkemhU7xcl/qE2vJdXJZUp
t/hqeCVZLgZYeXwNS3T5/pN4/eUpVL6zCU2gMFefI5LETBg1CUS2f4o4ghs7wH8E
AWsfqbi9XZyO/CN31x8duTMPyA1LwYeLjDx41L2CVZzPhWEdo2RK9jfE78Fa1YM8
xzeThLEQjVrwlzh+gpWTETkO46boUuXnalayjD3Q7FWieSB6ROwpR6CtXWLJcKgb
Yl03TQ/GuS4Bsvt34sU+FWqFSzpFp4mm//1x6vqgxtbsyDFCZhulnk0tTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXYNAlnr7oO+YaKDcbGwvoEJvA5MB8GA1UdIwQY
MBaAFE0TEogVEDV0QXynpwQS2jqzuEURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mYWZmYzItOTUxNy00ZDE4LTg5OTMt
ZjU1ZWE0OGNlNzVhLzEvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9mYWZmYzItOTUxNy00ZDE4LTg5OTMtZjU1ZWE0OGNlNzVh
LzEvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhZAZ42j
A/0NdVexKMEEIgMGOSjypqoKe61nD4KoA9jIj+LGDQzsKWxiZ8LiHJKMs05aUCDt
1YEGSmy2I3IFajO1NoXfT6WciEuqJEqalaGlGd8VVwm8vzW7E77xRX6LWy3sbRQ4
7wLagdCZewzWSQ/83sHkBP0ckN+bqR30gxPcBtVHQMpjdzfGlkYESdsTSnVheJAd
b7O9ykJcq/L7lvP6Ui5uAWDH+bFb+j8RD4EKUlYzTXYquKIvg9k9x5Ib+YnYk6e/
kckf3/0GuIo39NjJVAzcaoy/oydbq2GTjwesi2vxxkqitCNHJPhvBn2ihZi5y12M
ZkeDgOEK7kt/Lw==
-----END CERTIFICATE-----
Generated at Wed Oct 29 19:23:27 2025 by rpki-client