Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
File: trcm8FkrUE5yMwX2e6tRR9TqaW0.mft (raw, json)
Hash identifier: VxB4sewy3CMeCqH1Ob+gQt4QHzF3wNrDYM0KCY/e9iE=
Subject key identifier: D4:64:1F:CE:C5:15:F6:41:53:EE:AE:22:AA:3B:BF:BD:6C:F6:68:04
Authority key identifier: B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D
Certificate issuer: /CN=b6b726f0592b504e723305f67bab5147d4ea696d
Certificate serial: 0197771CCAB34830C015719BC4E8119C8DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
Manifest number: 08D4
Signing time: Mon 16 Jun 2025 05:01:04 +0000
Manifest this update: Mon 16 Jun 2025 05:01:04 +0000
Manifest next update: Tue 17 Jun 2025 05:01:04 +0000
Files and hashes: 1: _oI-Lkb0IuWy-UHIoAbDqvwfl1s.roa (hash: mRZXCcW1ghBXMTwSw7NYgVRMYeyGjl4gH8juqLCzVks=)
2: trcm8FkrUE5yMwX2e6tRR9TqaW0.crl (hash: x9eDClOlyrbMHShf0P5ibOmS+02cJ7k6V1ZtfPTz+j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:1c:ca:b3:48:30:c0:15:71:9b:c4:e8:11:9c:8d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b726f0592b504e723305f67bab5147d4ea696d
Validity
Not Before: Jun 16 05:01:04 2025 GMT
Not After : Jun 17 05:01:04 2025 GMT
Subject: CN=d4641fcec515f64153eeae22aa3bbfbd6cf66804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:55:e9:1c:e1:84:19:c4:7c:54:a3:1a:59:dd:
f4:29:db:1b:c5:0c:ac:b9:85:ae:b9:d8:e7:a6:97:
34:c9:12:c4:bb:55:02:92:7a:da:04:c9:f8:34:82:
40:d2:b7:eb:66:cd:9a:05:a2:23:b6:9d:bd:87:e1:
d0:be:44:10:f1:43:df:f1:c2:6f:17:6f:a5:19:58:
57:38:3b:4c:f5:0c:0e:55:ad:8c:05:80:7f:f5:60:
00:7d:ad:de:14:72:0d:d0:39:8f:10:33:03:ba:15:
46:e3:c7:d9:3b:7c:d8:75:a2:1c:e6:a1:08:fd:ff:
02:88:94:ad:bf:63:51:36:a9:a3:9b:87:cc:ac:3b:
c4:e5:fc:ab:57:63:a5:a9:79:3b:57:15:de:aa:80:
f6:75:1d:ec:fd:48:1f:23:94:3e:46:fa:b9:e1:dd:
6b:f4:9e:78:31:f3:19:b2:47:43:36:72:40:00:ef:
6e:2b:94:1b:d7:bf:86:f8:53:77:8b:b0:e5:e2:1e:
3e:13:ce:8a:15:56:6c:28:78:6c:8a:42:c7:b8:c3:
94:25:c1:e0:1d:0e:52:4e:85:f5:54:12:e5:6a:98:
d2:a4:2f:97:dc:c3:b5:4a:55:12:e9:a5:ed:6e:5a:
2b:14:7a:ed:d7:7f:05:39:38:13:7b:b6:ba:c9:06:
45:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:64:1F:CE:C5:15:F6:41:53:EE:AE:22:AA:3B:BF:BD:6C:F6:68:04
X509v3 Authority Key Identifier:
keyid:B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:de:69:6f:3f:2e:d1:da:83:88:e1:a0:68:25:8c:ae:80:24:
ae:2b:e5:0f:08:cd:a0:46:02:ca:e8:e5:e6:54:87:b9:4b:9a:
01:ac:5c:be:6e:86:2e:96:15:5e:c4:f2:9a:cd:02:f3:88:76:
d2:2b:8d:3c:d1:2f:7f:c8:28:e1:ee:13:77:9d:41:0f:84:2f:
c8:2a:3f:cc:a4:b3:4d:38:9d:ba:7b:35:0d:8a:de:4f:43:44:
a5:01:a3:28:ab:cd:a9:39:75:b2:67:93:d4:23:f1:1d:86:78:
b9:93:ff:0d:33:0f:a1:1b:fc:00:d1:a7:57:03:52:b6:72:42:
20:dc:ed:5b:85:f5:57:87:81:2b:85:cf:d7:e6:06:05:57:fa:
36:fb:d3:f1:bf:17:d2:be:54:24:cb:5c:23:45:d0:ad:ff:38:
6b:05:6c:3e:72:59:d2:32:3a:cd:eb:cc:ab:1e:a0:88:8f:90:
5d:67:74:35:b7:df:13:42:d9:ed:f2:c9:3d:e2:15:30:03:e1:
c9:20:ed:ba:f1:69:7d:40:b8:da:da:63:ef:b1:85:1b:e9:ac:
17:69:1a:e3:b2:ef:63:c9:ae:c1:a5:fd:01:96:dd:9d:3d:d4:
0a:c1:05:2e:e2:fb:29:27:8c:5b:ca:28:16:3f:11:8f:ee:10:
42:04:f7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:13:01 2025 by rpki-client