Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
File: _trmiRA5jJ2O51bhaCAd2eiYm1I.mft (raw, json)
Hash identifier: l4bhqD5TwW9WTwdx5p/RCBcQh7zdviRUjs2xOBrzIVM=
Subject key identifier: 3C:FB:45:BE:2A:F6:15:8A:9E:E3:7A:DD:D4:EC:FB:3A:BD:3A:81:88
Authority key identifier: FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
Certificate issuer: /CN=fedae68910398c9d8ee756e168201dd9e8989b52
Certificate serial: 019A4DE216591AE0A84D67C0385876749666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
Manifest number: 0382
Signing time: Tue 04 Nov 2025 08:00:53 +0000
Manifest this update: Tue 04 Nov 2025 08:00:53 +0000
Manifest next update: Wed 05 Nov 2025 08:00:53 +0000
Files and hashes: 1: 3-rv1v1yCPrdYumYMOu8WdUJkO8.roa (hash: l7PMWmjBkZja+Bzzk9qkIiGKk5+PfjMuS142zfz0fP8=)
2: _trmiRA5jJ2O51bhaCAd2eiYm1I.crl (hash: eDdIdS+gB43IJbq6Uuhm2e/pAeTGyOUKs2Str5YLKVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:16:59:1a:e0:a8:4d:67:c0:38:58:76:74:96:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedae68910398c9d8ee756e168201dd9e8989b52
Validity
Not Before: Nov 4 08:00:53 2025 GMT
Not After : Nov 5 08:00:53 2025 GMT
Subject: CN=3cfb45be2af6158a9ee37addd4ecfb3abd3a8188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:62:21:8d:59:21:aa:3a:6d:fe:04:f6:d6:
67:f7:5a:36:e8:ed:ed:40:84:55:5b:06:f0:17:38:
83:19:da:5b:8f:21:3b:e2:1c:2a:6d:c9:01:9c:38:
77:0c:52:9b:31:91:02:40:a4:9c:d4:26:0e:07:04:
37:ea:61:6f:3c:91:74:fc:6b:21:be:cf:05:92:fd:
a6:04:9c:c3:aa:f5:79:5e:18:12:ec:ae:79:d2:d0:
82:35:81:f3:0d:9a:4e:cc:00:99:9a:54:cd:ca:ee:
a5:cb:aa:0f:29:90:33:58:44:05:64:e7:55:43:af:
a1:fd:0f:96:43:1f:50:ba:6e:01:6e:08:ff:35:8b:
c8:10:7b:97:56:22:21:bd:a0:ff:bc:70:a8:88:ed:
44:92:b3:e1:d2:97:01:6a:da:48:bf:2f:be:17:16:
f8:ec:8f:4d:09:ea:db:9c:35:9e:a7:3c:10:68:a5:
f3:4c:92:e6:b1:53:10:f1:b7:1b:28:92:2b:c3:3f:
e7:3f:11:fe:81:75:8c:1c:f0:64:49:d3:f3:95:98:
54:03:79:67:7f:25:97:3f:fe:2d:db:00:61:1b:db:
ef:11:4c:6e:13:1d:5f:85:be:c4:af:08:da:c0:52:
dd:c8:52:ac:c3:71:69:85:f8:3d:bc:b1:be:e5:ef:
39:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FB:45:BE:2A:F6:15:8A:9E:E3:7A:DD:D4:EC:FB:3A:BD:3A:81:88
X509v3 Authority Key Identifier:
keyid:FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:90:02:0a:9b:74:40:d4:f4:23:ef:b5:e5:bd:07:34:b0:bc:
e1:51:4c:5a:00:29:26:2f:ea:a0:c9:4d:54:d0:77:79:89:b7:
12:a2:f1:d0:25:09:36:90:ef:fc:33:08:04:f6:fb:32:d7:79:
23:c7:a0:10:0a:f1:47:6b:da:51:0f:98:98:66:ff:5f:41:85:
6b:c3:63:41:91:6e:34:06:ff:ee:eb:17:a1:3b:ba:aa:75:e5:
6d:0c:32:48:f8:30:13:e8:07:50:d8:83:f1:9c:31:f2:44:59:
1a:b3:06:fd:98:7f:de:74:8a:28:82:c8:10:67:70:c1:e3:0b:
db:84:5c:24:42:07:51:a0:09:22:05:07:fa:dc:7a:1e:dd:81:
42:8a:ed:6f:d2:26:9c:dc:15:f6:35:03:17:db:b3:7c:e8:4c:
d2:ef:71:da:9b:cb:b5:69:fc:49:90:b9:31:b7:a2:a4:68:d9:
a2:74:d2:ff:7f:00:42:d8:a2:08:14:81:a4:b4:c1:69:ce:4e:
47:56:4a:a6:39:e7:30:a9:c2:59:2d:df:38:ab:1f:e4:49:87:
dc:b9:a3:cf:34:8a:02:9c:26:4b:31:8b:7d:c6:eb:f1:0a:08:
18:b9:16:8f:67:ec:b5:c3:ff:ee:b7:2f:01:55:0c:cd:ff:e2:
19:e8:5d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:44 2025 by rpki-client