
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
File: _trmiRA5jJ2O51bhaCAd2eiYm1I.mft (raw, json)
Hash identifier: 5icWlRRuJbi7SDxDlwZ+IADTMBxect4lTseOBUPuP9I=
Subject key identifier: FB:9F:78:56:58:8E:E5:2C:4E:F5:30:1A:B8:9B:82:82:B6:67:31:52
Authority key identifier: FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
Certificate issuer: /CN=fedae68910398c9d8ee756e168201dd9e8989b52
Certificate serial: 01987E668DAE987FBC00C7706509C779F9E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
Manifest number: 0292
Signing time: Wed 06 Aug 2025 08:01:46 +0000
Manifest this update: Wed 06 Aug 2025 08:01:46 +0000
Manifest next update: Thu 07 Aug 2025 08:01:46 +0000
Files and hashes: 1: 3-rv1v1yCPrdYumYMOu8WdUJkO8.roa (hash: l7PMWmjBkZja+Bzzk9qkIiGKk5+PfjMuS142zfz0fP8=)
2: _trmiRA5jJ2O51bhaCAd2eiYm1I.crl (hash: CDGAdca/P/DpwJvAbvnJ1ZPzpozBQDdOLIvVeBinpl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:8d:ae:98:7f:bc:00:c7:70:65:09:c7:79:f9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedae68910398c9d8ee756e168201dd9e8989b52
Validity
Not Before: Aug 6 08:01:46 2025 GMT
Not After : Aug 7 08:01:46 2025 GMT
Subject: CN=fb9f7856588ee52c4ef5301ab89b8282b6673152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:7f:56:1c:05:f0:96:f8:0f:8a:d5:cf:ab:
aa:71:60:64:7e:c9:16:a6:ff:8c:a9:c4:6d:85:2c:
c7:a7:1c:39:69:47:0a:64:fb:fc:34:1f:d7:53:83:
19:55:0a:af:14:ed:37:d6:c9:5a:ca:56:4e:8e:93:
97:8f:de:17:e4:07:35:e7:7e:b1:be:7a:58:4a:b5:
32:ce:03:75:4b:25:5e:f5:3d:79:a1:fc:55:a0:8d:
f7:02:ea:f5:c3:ee:06:e2:5b:72:48:96:ca:87:ca:
f9:d1:e5:d6:a5:47:b1:7e:c1:8d:84:e3:86:dc:e8:
79:89:16:3f:b0:08:93:87:81:d1:aa:1c:ca:97:4f:
3f:20:fe:15:e4:01:0e:4c:91:f4:41:38:32:b3:40:
33:bb:9b:72:e6:c8:3b:56:49:00:76:ba:87:63:8a:
81:a4:d8:e3:9e:1a:b3:42:65:54:ea:3b:a5:2f:54:
49:f4:76:c4:1f:4e:97:dc:b4:43:79:85:64:7c:35:
53:58:22:09:15:aa:1b:c4:84:53:65:5e:cd:20:12:
41:27:bf:d6:39:5e:87:08:cd:45:10:a0:df:5c:52:
76:e6:94:d7:7f:e8:c0:3d:86:ee:74:d3:88:9a:f2:
94:b9:c1:42:92:4c:59:6a:c6:a0:30:ec:82:0b:43:
92:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9F:78:56:58:8E:E5:2C:4E:F5:30:1A:B8:9B:82:82:B6:67:31:52
X509v3 Authority Key Identifier:
keyid:FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4a:5d:aa:1b:19:5d:0f:2f:ed:05:fe:22:d4:01:b0:d3:b9:
1f:3b:c7:3b:8f:8f:bd:c8:7d:51:71:bb:f7:77:1e:45:32:10:
03:89:5e:76:9e:4c:14:9a:b9:4a:eb:80:6d:a8:70:54:25:d7:
f6:76:4b:16:68:c4:4d:c3:ae:6f:5d:a3:c7:c5:6d:c9:00:bb:
46:d3:07:6f:ba:f8:fc:c7:9b:6a:e8:d6:2f:5a:92:3d:78:cf:
7b:da:dc:9c:39:42:8a:92:0d:48:ef:d9:c6:e3:10:db:57:ba:
d3:a7:15:4d:07:79:22:d2:43:9c:e1:8f:d2:46:f9:3b:f3:0d:
e2:2f:3b:25:5d:71:e9:2a:72:27:17:95:43:b6:fb:7f:d3:77:
dd:3e:0c:98:ca:dc:22:e5:07:21:be:bb:b9:0f:22:c1:f5:97:
ad:24:94:25:cc:d2:84:cf:ee:b6:a6:13:f4:ae:5d:c3:2e:25:
70:c1:45:7a:38:b2:db:70:c2:8e:c8:08:33:b7:d0:b4:54:7c:
da:67:57:25:f3:88:5e:34:0b:f6:b0:03:85:61:0f:b5:d2:65:
ab:62:f1:f3:b1:36:37:72:0c:d6:88:37:72:36:05:f6:4e:70:
31:1a:b1:0e:db:a0:30:6e:88:7f:48:dc:2d:fc:8b:8a:06:05:
c7:3c:54:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:08:22 2025 by rpki-client