Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
File: _trmiRA5jJ2O51bhaCAd2eiYm1I.mft (raw, json)
Hash identifier: iaar21p48PyAzc+1g6YRhtoRQpLsWhY+Yvr+wFPp8jk=
Subject key identifier: 15:AD:92:9D:32:26:73:F9:CD:5E:74:98:88:11:7A:D9:1E:51:3B:98
Authority key identifier: FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
Certificate issuer: /CN=fedae68910398c9d8ee756e168201dd9e8989b52
Certificate serial: 01968A3802866DD48CF7604BB6E0FF6EA4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
Manifest number: 018F
Signing time: Thu 01 May 2025 05:00:48 +0000
Manifest this update: Thu 01 May 2025 05:00:48 +0000
Manifest next update: Fri 02 May 2025 05:00:48 +0000
Files and hashes: 1: 3-rv1v1yCPrdYumYMOu8WdUJkO8.roa (hash: l7PMWmjBkZja+Bzzk9qkIiGKk5+PfjMuS142zfz0fP8=)
2: _trmiRA5jJ2O51bhaCAd2eiYm1I.crl (hash: k9HaH7fPx7x+AMkLmrHa2gbl4M2PAq5i1FxVMHTU7pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:38:02:86:6d:d4:8c:f7:60:4b:b6:e0:ff:6e:a4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedae68910398c9d8ee756e168201dd9e8989b52
Validity
Not Before: May 1 05:00:48 2025 GMT
Not After : May 2 05:00:48 2025 GMT
Subject: CN=15ad929d322673f9cd5e749888117ad91e513b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f0:e2:21:ce:b5:a7:21:76:a2:54:1f:27:c4:
38:b3:90:07:7b:e1:47:e7:0b:a9:f1:6d:88:ea:42:
d2:30:ea:d2:8d:b8:2f:71:d2:2a:8a:49:6d:01:d9:
c5:ab:31:fd:fc:02:89:5e:14:69:f9:62:e3:f9:f0:
a7:b1:08:a8:90:28:3d:78:cc:0b:a4:83:e0:7d:a5:
48:0c:74:d8:94:44:bd:f3:67:1a:56:e5:05:1e:53:
4d:25:e9:f0:83:fb:30:a4:d1:f9:8f:3a:f1:42:5a:
c9:0e:7c:58:ae:3b:1f:e9:28:43:a4:3b:e6:d3:8f:
1f:9d:80:29:00:87:78:4a:32:50:c1:d9:30:d1:5a:
28:f5:a1:db:1b:ba:ca:d9:3d:82:76:5e:e2:2a:5d:
0e:c5:79:f5:05:0b:72:43:2f:0e:e7:8e:29:a9:74:
c6:26:f8:13:25:6c:0c:1b:e2:ae:a1:ea:d2:b3:2e:
9b:e1:bc:6f:2e:ef:fd:4a:4e:60:69:cf:8a:d0:68:
f7:99:f5:dd:0c:7a:37:03:bf:2c:fc:06:8c:48:f4:
4a:f5:74:b9:30:33:98:8f:3c:f3:8d:ef:ec:bc:78:
e9:90:96:e0:6e:20:c0:2b:a6:df:8c:5a:d8:57:25:
19:db:31:5b:de:15:d6:41:2c:aa:6b:54:04:fb:d1:
ec:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AD:92:9D:32:26:73:F9:CD:5E:74:98:88:11:7A:D9:1E:51:3B:98
X509v3 Authority Key Identifier:
keyid:FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a2:44:87:7a:f1:60:a9:ac:a6:6e:bf:19:b5:69:12:25:4c:
90:69:1a:fb:a5:e7:ed:80:20:fd:ce:31:2c:66:95:bb:58:f2:
6e:07:6e:82:22:b3:d1:18:ce:87:16:96:c0:f2:81:47:47:b5:
d0:60:af:ff:0f:54:c4:a7:06:83:57:a0:64:dd:57:6c:02:8b:
7b:d3:a4:13:1a:a6:43:a5:ea:6d:e2:30:54:12:d7:57:21:b4:
82:e8:3f:e9:c4:ac:af:0c:57:a0:b1:d5:a7:9b:8b:b2:96:01:
44:df:0f:b9:eb:e3:d0:70:e1:f8:ff:24:8a:46:35:cd:77:b9:
73:0b:1b:6c:12:35:ad:4a:f3:1e:7e:18:c1:5e:e8:fd:8a:78:
fe:40:59:24:67:4f:b7:9a:e5:0e:65:04:5e:c8:31:16:d8:04:
81:83:18:bb:16:e4:b9:b8:89:b4:97:28:59:8c:5c:3f:77:31:
7c:38:d7:0a:3b:ff:2b:0e:89:82:b5:be:a2:c9:8c:46:d0:1a:
34:6b:7c:8a:ec:ee:72:f2:f3:89:1e:7c:9f:d1:5e:9d:fa:f3:
0d:bb:82:63:db:52:6c:09:b8:f6:78:48:b9:d7:43:48:5b:df:
13:48:2f:e9:68:c7:93:30:89:16:38:a9:eb:95:66:2e:97:7c:
74:a3:ca:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaKOAKGbdSM92BLtuD/bqS+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZGFlNjg5MTAzOThjOWQ4ZWU3NTZlMTY4MjAxZGQ5ZTg5
ODliNTIwHhcNMjUwNTAxMDUwMDQ4WhcNMjUwNTAyMDUwMDQ4WjAzMTEwLwYDVQQD
EygxNWFkOTI5ZDMyMjY3M2Y5Y2Q1ZTc0OTg4ODExN2FkOTFlNTEzYjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifDiIc61pyF2olQfJ8Q4s5AHe+FH
5wup8W2I6kLSMOrSjbgvcdIqikltAdnFqzH9/AKJXhRp+WLj+fCnsQiokCg9eMwL
pIPgfaVIDHTYlES982caVuUFHlNNJenwg/swpNH5jzrxQlrJDnxYrjsf6ShDpDvm
048fnYApAId4SjJQwdkw0Voo9aHbG7rK2T2Cdl7iKl0OxXn1BQtyQy8O544pqXTG
JvgTJWwMG+KuoerSsy6b4bxvLu/9Sk5gac+K0Gj3mfXdDHo3A78s/AaMSPRK9XS5
MDOYjzzzje/svHjpkJbgbiDAK6bfjFrYVyUZ2zFb3hXWQSyqa1QE+9HsCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWtkp0yJnP5zV50mIgRetkeUTuYMB8GA1UdIwQY
MBaAFP7a5okQOYydjudW4WggHdnomJtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3RybWlSQTVqSjJPNTFiaGFDQWQyZWlZbTFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ZjUzYTMtMjI2MC00MWIwLWEzNDEt
NTAwNDMyNTAxNzQzLzEvX3RybWlSQTVqSjJPNTFiaGFDQWQyZWlZbTFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81ZjUzYTMtMjI2MC00MWIwLWEzNDEtNTAwNDMyNTAxNzQz
LzEvX3RybWlSQTVqSjJPNTFiaGFDQWQyZWlZbTFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWaJEh3rx
YKmspm6/GbVpEiVMkGka+6Xn7YAg/c4xLGaVu1jybgdugiKz0RjOhxaWwPKBR0e1
0GCv/w9UxKcGg1egZN1XbAKLe9OkExqmQ6XqbeIwVBLXVyG0gug/6cSsrwxXoLHV
p5uLspYBRN8Puevj0HDh+P8kikY1zXe5cwsbbBI1rUrzHn4YwV7o/Yp4/kBZJGdP
t5rlDmUEXsgxFtgEgYMYuxbkubiJtJcoWYxcP3cxfDjXCjv/Kw6JgrW+osmMRtAa
NGt8iuzucvLziR58n9FenfrzDbuCY9tSbAm49nhIuddDSFvfE0gv6WjHkzCJFjip
65VmLpd8dKPKkA==
-----END CERTIFICATE-----
Generated at Thu May 1 15:27:21 2025 by rpki-client