Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
File: TRMSiBUQNXRBfKenBBLaOrO4RRE.mft (raw, json)
Hash identifier: QuhHvBE213/ml3OLlL+exVaTv5K/kOtkB1MAyI1a3LI=
Subject key identifier: CE:C8:B2:FC:55:CB:64:01:06:EE:0C:2A:B1:3F:01:86:29:E8:A2:A5
Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
Certificate issuer: /CN=4d13128815103574417ca7a70412da3ab3b84511
Certificate serial: 0199240D2643FE537C6F0566D7C0DCEC1B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 12:01:05 +0000
Manifest this update: Sun 07 Sep 2025 12:01:05 +0000
Manifest next update: Mon 08 Sep 2025 12:01:05 +0000
Files and hashes: 1: RbRcN6wl0nEFVsWYx8c9XyFYSpY.roa (hash: BVR+Y8S7WJeuusRjWoFe5ZeYBx8jVE+CDBxd/rFYYkU=)
2: TRMSiBUQNXRBfKenBBLaOrO4RRE.crl (hash: wrHda9hHLnmuJKu2Fqcg/EM6LIRVeQ3o+Y05/3b0gOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:26:43:fe:53:7c:6f:05:66:d7:c0:dc:ec:1b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511
Validity
Not Before: Sep 7 12:01:05 2025 GMT
Not After : Sep 8 12:01:05 2025 GMT
Subject: CN=cec8b2fc55cb640106ee0c2ab13f018629e8a2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c0:85:aa:13:58:3d:ea:66:d7:54:a3:53:77:
c5:12:42:d6:ee:6b:be:4f:db:8b:c3:8c:10:31:ef:
04:2f:98:87:b7:e8:4d:3b:bc:df:be:d9:97:77:35:
e7:b8:a7:21:9f:32:87:71:7e:dc:05:64:4a:09:63:
ec:a9:e5:02:06:2d:10:0e:12:56:3c:4b:49:d6:62:
9e:f4:28:e3:02:f8:5b:1b:25:77:a9:6d:7c:ec:66:
f2:cc:10:86:8a:e5:d1:9e:b0:4b:95:01:74:8e:a1:
67:5f:78:57:60:5e:42:f6:60:e2:92:c3:43:23:c0:
b7:02:be:bc:9a:17:d2:96:c2:9a:02:24:a3:60:c8:
90:16:4a:aa:37:7f:a2:00:da:93:43:f2:82:3d:e6:
95:92:82:40:44:72:26:5a:9f:d3:81:8b:c2:f2:13:
0e:e0:4e:f6:a4:9e:98:f0:eb:99:65:b8:0e:00:70:
c2:0b:71:99:09:3d:50:5a:e3:b5:da:5d:4d:37:23:
b1:bf:99:53:64:16:02:2a:5e:5b:1f:43:e6:8c:31:
39:f1:60:80:e0:56:87:c5:34:f5:71:e2:3a:65:fa:
b9:3c:42:ca:13:94:25:b7:2a:cf:49:ab:9a:66:aa:
28:69:13:cf:6c:c8:f5:04:a4:33:42:4f:58:77:32:
2a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C8:B2:FC:55:CB:64:01:06:EE:0C:2A:B1:3F:01:86:29:E8:A2:A5
X509v3 Authority Key Identifier:
keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2a:6b:cf:eb:bc:c9:cd:04:b8:0f:62:92:c0:20:51:73:83:
87:45:a1:30:35:22:b6:9b:95:ac:f3:8f:ad:f0:32:26:c8:60:
95:70:b2:f2:00:c6:da:16:19:a9:a7:3d:e9:00:14:11:2b:fb:
d0:ad:84:ff:7a:a0:5b:9b:1d:7b:58:87:bf:56:fc:d7:2f:95:
43:5e:43:af:14:c9:a5:86:e1:54:c1:78:97:d5:23:1e:73:d4:
6e:b8:55:50:57:b1:ab:8d:d3:ff:2f:82:3b:ef:60:78:9f:b9:
ab:6d:f6:96:42:41:df:aa:82:ec:38:3f:c6:65:44:58:ea:bd:
61:cb:d2:57:14:9f:58:01:be:e3:61:5f:3b:78:70:3e:a6:2a:
f5:a2:6f:23:f8:7f:c9:72:72:82:66:17:24:00:20:70:c5:d9:
51:90:c3:9f:67:55:f0:24:4a:9f:a4:5e:f0:c5:4a:61:db:0d:
f4:12:f5:4a:91:44:89:a9:f7:af:d5:31:99:7e:20:f0:c2:0f:
e1:93:31:00:43:34:bf:f1:60:a5:4c:32:27:e8:a1:36:7d:b3:
3d:7e:c1:38:56:ac:bd:b8:ed:d6:81:74:d2:f6:35:61:59:47:
a6:5f:3a:53:34:ab:9f:53:5c:ac:8a:dc:8a:26:65:86:2e:e7:
92:b6:35:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:16 2025 by rpki-client