Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
File: TRNilffzLmS-ePs5nrbRWuPpJjI.mft (raw, json)
Hash identifier: 4heRB/uTX0WCWY4xPJ6EkrtRNtXSG8BT/gOBa448F14=
Subject key identifier: DB:D1:4F:69:38:EB:EB:B5:DA:88:5F:8D:1A:F2:D8:A1:48:07:CA:2C
Authority key identifier: 4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
Certificate issuer: /CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Certificate serial: 0197B6A185CE3D0782A7AF35E6CD5F23E7A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:08 +0000
Manifest this update: Sat 28 Jun 2025 13:02:08 +0000
Manifest next update: Sun 29 Jun 2025 13:02:08 +0000
Files and hashes: 1: 0w6euFTp3UzxouPKJPAlF0GR1yI.roa (hash: alEYIZXZwAXSB7arGqSdzzPit/FWLiAkOyabJR5JGf8=)
2: 5ekL_VnxtRm7-caJUH4OelBy7bQ.roa (hash: C2pbDFwPGGpQ/WwmXSA+V7qxwJXZjh78LiDnuEJr7qo=)
3: TRNilffzLmS-ePs5nrbRWuPpJjI.crl (hash: dfHPhMw+w3mjuMIvw7btEJLT/xgS8jUDtwqdJF8hpKw=)
4: m0L9XQnYVY6caI4raS3KgfN4us0.roa (hash: N3sU1FEe5n17DZBnmA+WMg+GZywEKpUuatIib1ejKHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:85:ce:3d:07:82:a7:af:35:e6:cd:5f:23:e7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Validity
Not Before: Jun 28 13:02:08 2025 GMT
Not After : Jun 29 13:02:08 2025 GMT
Subject: CN=dbd14f6938ebebb5da885f8d1af2d8a14807ca2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:9b:40:08:c6:95:fd:56:d0:44:51:88:2b:
2b:d1:24:c9:67:f0:4f:38:58:ac:d0:d1:5b:bc:78:
9e:52:6d:94:5c:26:96:b6:b5:a9:c0:0f:e7:77:40:
75:c6:d7:4d:f2:ca:aa:59:97:b3:17:26:87:e7:5e:
ef:c0:2f:a2:d5:a4:f3:73:f2:94:1b:6b:54:8c:17:
a1:04:57:b1:45:42:ce:0f:cb:47:7d:7f:0f:c7:8b:
2d:5f:e6:45:78:52:ca:8f:80:df:e8:a9:04:a1:2b:
3e:91:95:be:70:d8:6a:61:b7:0c:6e:63:f2:dd:1d:
fd:a6:2a:e2:2f:4e:12:21:95:e5:32:f7:14:34:44:
02:eb:a7:6b:82:f1:44:3f:14:fc:ae:82:c8:33:dc:
9c:d8:62:99:b7:cc:50:38:af:56:18:5c:4e:66:25:
d1:f0:77:0d:42:b2:20:98:7c:18:5f:20:0c:a7:1b:
59:8c:c3:4b:1c:34:7b:5b:5e:f2:5a:69:fe:50:40:
2f:58:55:69:34:f4:22:25:a4:7f:e9:71:55:96:e4:
a5:d4:ae:c1:f4:c4:e9:85:16:dd:04:dd:76:90:8b:
80:a4:2a:5b:5c:d0:69:68:42:bc:73:d2:8b:20:0e:
73:91:40:02:4c:5d:ff:b1:16:b2:26:91:70:c5:72:
cb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D1:4F:69:38:EB:EB:B5:DA:88:5F:8D:1A:F2:D8:A1:48:07:CA:2C
X509v3 Authority Key Identifier:
keyid:4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ac:e7:64:02:b2:00:8b:17:a8:f9:15:67:9d:fe:7e:10:42:
26:9f:62:15:6c:d1:4c:49:51:63:fb:32:99:52:99:90:8f:5d:
72:a4:24:24:2d:05:24:c7:a3:03:b3:75:e9:40:02:b2:70:43:
c1:c0:f1:dd:86:04:8e:11:4a:73:5e:f7:6d:b2:b5:e0:5f:b4:
5f:7f:60:3f:26:85:dc:02:a8:50:ba:b3:a4:16:45:33:02:65:
47:21:6e:f3:05:08:0f:89:86:2f:82:5b:5b:98:a2:95:d8:11:
e1:43:e4:bb:bc:b0:bb:7a:77:3e:ab:10:b9:a7:1e:e9:dc:3f:
f0:44:da:1e:b6:ec:74:4e:47:f3:0b:05:e1:0b:d3:29:3b:a3:
d8:b8:49:8e:ba:08:53:bd:31:54:b0:09:f0:2d:25:0c:42:9a:
f8:ec:15:3f:a4:2e:94:d6:de:61:c5:7a:d8:6b:c1:3b:07:ba:
9e:8f:23:be:b8:78:41:df:4c:dc:72:52:ea:b7:5e:7b:12:29:
de:79:35:a6:a0:9f:7f:5a:d2:e5:e7:02:73:95:31:1b:63:26:
e7:58:22:29:b6:68:09:48:8d:4d:c6:a6:de:d4:36:b7:29:83:
d5:70:59:c4:1d:d3:31:e2:14:88:4f:9b:9f:e7:3b:c0:63:f7:
cb:20:20:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oYXOPQeCp6815s1fI+enMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMTM2Mjk1ZjdmMzJlNjRiZTc4ZmIzOTllYjZkMTVhZTNl
OTI2MzIwHhcNMjUwNjI4MTMwMjA4WhcNMjUwNjI5MTMwMjA4WjAzMTEwLwYDVQQD
EyhkYmQxNGY2OTM4ZWJlYmI1ZGE4ODVmOGQxYWYyZDhhMTQ4MDdjYTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGubQAjGlf1W0ERRiCsr0STJZ/BP
OFis0NFbvHieUm2UXCaWtrWpwA/nd0B1xtdN8sqqWZezFyaH517vwC+i1aTzc/KU
G2tUjBehBFexRULOD8tHfX8Px4stX+ZFeFLKj4Df6KkEoSs+kZW+cNhqYbcMbmPy
3R39piriL04SIZXlMvcUNEQC66drgvFEPxT8roLIM9yc2GKZt8xQOK9WGFxOZiXR
8HcNQrIgmHwYXyAMpxtZjMNLHDR7W17yWmn+UEAvWFVpNPQiJaR/6XFVluSl1K7B
9MTphRbdBN12kIuApCpbXNBpaEK8c9KLIA5zkUACTF3/sRayJpFwxXLLGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvRT2k46+u12ohfjRry2KFIB8osMB8GA1UdIwQY
MBaAFE0TYpX38y5kvnj7OZ620Vrj6SYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFJOaWxmZnpMbVMtZVBzNW5yYlJXdVBwSmpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNDQzMzAtNWQzYi00NDc5LThiMTAt
MmJiN2ZkZDVmNzI4LzEvVFJOaWxmZnpMbVMtZVBzNW5yYlJXdVBwSmpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iNDQzMzAtNWQzYi00NDc5LThiMTAtMmJiN2ZkZDVmNzI4
LzEvVFJOaWxmZnpMbVMtZVBzNW5yYlJXdVBwSmpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6znZAKy
AIsXqPkVZ53+fhBCJp9iFWzRTElRY/symVKZkI9dcqQkJC0FJMejA7N16UACsnBD
wcDx3YYEjhFKc173bbK14F+0X39gPyaF3AKoULqzpBZFMwJlRyFu8wUID4mGL4Jb
W5iildgR4UPku7ywu3p3PqsQuace6dw/8ETaHrbsdE5H8wsF4QvTKTuj2LhJjroI
U70xVLAJ8C0lDEKa+OwVP6QulNbeYcV62GvBOwe6no8jvrh4Qd9M3HJS6rdeexIp
3nk1pqCff1rS5ecCc5UxG2Mm51giKbZoCUiNTcam3tQ2tymD1XBZxB3TMeIUiE+b
n+c7wGP3yyAglg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:24 2025 by rpki-client