Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
File: TRMSiBUQNXRBfKenBBLaOrO4RRE.mft (raw, json)
Hash identifier: N/aqacm3v5YBtuTqYRK1jgc3IbRVsgFG9oMg8Phhipk=
Subject key identifier: 26:70:46:6C:55:A8:00:58:F6:9A:2C:E4:B4:B8:2F:48:75:AD:E8:D3
Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
Certificate issuer: /CN=4d13128815103574417ca7a70412da3ab3b84511
Certificate serial: 01964DEC6D149F4225A2AB4B6BE3E1BF0C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 12:01:02 +0000
Manifest this update: Sat 19 Apr 2025 12:01:02 +0000
Manifest next update: Sun 20 Apr 2025 12:01:02 +0000
Files and hashes: 1: RbRcN6wl0nEFVsWYx8c9XyFYSpY.roa (hash: BVR+Y8S7WJeuusRjWoFe5ZeYBx8jVE+CDBxd/rFYYkU=)
2: TRMSiBUQNXRBfKenBBLaOrO4RRE.crl (hash: 2IYBln6LVNPSGgZEly9j9Ijreq32as0DrulcxiCCDN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:6d:14:9f:42:25:a2:ab:4b:6b:e3:e1:bf:0c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511
Validity
Not Before: Apr 19 12:01:02 2025 GMT
Not After : Apr 20 12:01:02 2025 GMT
Subject: CN=2670466c55a80058f69a2ce4b4b82f4875ade8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:52:52:6a:e7:bc:f4:88:09:2d:6e:b7:8c:0c:
d1:88:17:ec:39:57:eb:8e:c1:d6:f6:3d:81:cb:f7:
a9:2f:d6:d7:ad:76:f9:f9:bf:aa:78:39:15:cb:59:
c6:9f:75:37:60:5e:47:e5:ee:0c:a4:6c:98:cd:99:
d7:6f:0e:3b:60:5c:94:e7:e9:b3:36:d4:7a:02:70:
97:e1:48:c7:f5:2c:73:3a:d6:3d:20:ad:7d:dc:2d:
59:9f:68:7c:58:32:a1:bf:ba:67:34:86:12:97:b6:
5b:f9:62:f6:78:12:34:1d:25:33:9e:c5:eb:b8:f3:
5d:7b:77:c1:4a:c3:77:fc:84:f4:d0:07:02:e2:45:
9d:39:27:c4:d0:63:57:3d:36:59:8e:4c:37:0f:a2:
6f:a7:60:79:98:c4:b6:22:49:da:94:ec:0e:3e:5b:
b5:7f:72:79:03:fc:1b:16:40:3b:da:6e:d3:16:f1:
4f:44:3d:50:d4:35:fb:70:2b:2f:19:62:c8:e4:61:
45:6b:3e:ea:50:8c:22:be:43:f3:03:74:ae:4d:fb:
d3:44:23:06:c8:d7:3f:0b:0c:9c:be:c7:e0:b8:17:
e3:4b:da:81:ed:d7:61:4a:48:b9:89:a3:74:46:2a:
21:33:87:02:8c:bd:3b:85:1f:b1:0b:a1:dc:a7:9e:
15:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:70:46:6C:55:A8:00:58:F6:9A:2C:E4:B4:B8:2F:48:75:AD:E8:D3
X509v3 Authority Key Identifier:
keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d5:28:17:45:6e:03:97:b1:ed:4f:c9:ba:ab:b6:17:44:f9:
4c:5f:d5:e6:5b:4f:03:a6:52:57:5c:88:78:a2:a8:57:79:34:
d5:1e:48:ca:87:cb:2c:17:cf:60:2f:38:27:7a:d2:d4:07:42:
dc:c6:52:48:5e:a4:cd:e4:9d:c0:a7:9f:66:7c:a4:a5:f6:c3:
1b:fa:8e:16:3d:6e:9b:32:7a:2b:2b:5a:cf:29:44:99:da:d7:
6b:b9:4a:1e:45:81:a1:b5:c0:ab:a1:ea:0f:ec:00:12:b9:2f:
16:14:37:04:91:e9:d1:d8:48:14:63:83:2f:be:9f:25:89:be:
0e:b1:e6:e7:54:41:c6:89:a2:cd:c2:7d:41:fd:08:4f:78:ef:
06:a6:fa:e1:56:3b:fe:df:0b:09:b1:7b:5c:4f:92:07:76:28:
36:90:73:9e:d2:ab:e9:de:76:c6:b9:f1:16:e1:88:f3:80:79:
1e:e4:d2:b6:87:2b:fd:c1:5c:a6:23:a9:04:77:9c:c6:2a:18:
a3:ec:4c:d2:65:3a:d7:a4:aa:c3:3b:6a:62:ba:92:df:5f:4e:
3d:23:4d:cd:1f:de:94:98:09:5f:0f:57:ba:9e:76:5c:d6:57:
15:6d:ce:d7:2b:a7:ab:f0:cb:19:ca:75:82:20:49:c4:02:93:
e3:aa:42:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:17:07 2025 by rpki-client