Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
File: TRNilffzLmS-ePs5nrbRWuPpJjI.mft (raw, json)
Hash identifier: 9ClD4ggKdyR1Nn5uPs4tecPVS31Onx778GyykyhMbSQ=
Subject key identifier: C4:75:BB:9B:9B:0C:59:41:A7:E1:81:54:24:EA:20:54:9F:BA:5E:84
Authority key identifier: 4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
Certificate issuer: /CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Certificate serial: 0198D473AAEE09E41517AD6055FB90306C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:03:26 +0000
Manifest this update: Sat 23 Aug 2025 01:03:26 +0000
Manifest next update: Sun 24 Aug 2025 01:03:26 +0000
Files and hashes: 1: 0w6euFTp3UzxouPKJPAlF0GR1yI.roa (hash: alEYIZXZwAXSB7arGqSdzzPit/FWLiAkOyabJR5JGf8=)
2: 5ekL_VnxtRm7-caJUH4OelBy7bQ.roa (hash: C2pbDFwPGGpQ/WwmXSA+V7qxwJXZjh78LiDnuEJr7qo=)
3: TRNilffzLmS-ePs5nrbRWuPpJjI.crl (hash: 4KC9945AOURZ/5tyIs/fbEnuoZpvbwEf18db7lf9h7Y=)
4: m0L9XQnYVY6caI4raS3KgfN4us0.roa (hash: N3sU1FEe5n17DZBnmA+WMg+GZywEKpUuatIib1ejKHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:aa:ee:09:e4:15:17:ad:60:55:fb:90:30:6c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Validity
Not Before: Aug 23 01:03:26 2025 GMT
Not After : Aug 24 01:03:26 2025 GMT
Subject: CN=c475bb9b9b0c5941a7e1815424ea20549fba5e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:b9:aa:61:2b:ae:6a:d0:fb:72:d4:d3:ed:
02:3e:c8:fa:29:d3:71:0b:65:54:7d:24:29:c6:32:
0f:7a:e5:45:b5:db:14:ff:08:47:d5:8b:4e:90:1b:
11:c8:24:ee:d9:7e:00:70:55:c1:e3:63:65:5e:f8:
a2:25:ca:b5:74:6e:81:d7:15:cf:43:79:05:11:c4:
7b:a5:0d:42:a9:88:19:ea:dc:7e:e7:2d:75:9d:19:
6d:d6:86:76:2b:6d:76:15:4d:e5:92:ad:6c:c4:8d:
b5:c6:08:62:e7:c4:00:67:2a:b7:7b:85:0d:4d:3e:
7a:2d:8e:25:5f:02:cd:b2:fc:af:fd:d1:2d:98:b3:
1d:65:ee:29:ec:d1:61:b4:06:b3:35:45:3a:bd:0f:
4c:25:96:6e:6f:2a:f9:24:0a:da:fc:e2:38:98:ab:
78:09:d7:73:05:3a:db:cf:33:e6:b1:4a:0e:c7:95:
e7:8b:77:70:dc:f4:95:7f:f4:dc:bb:ee:cd:c6:c3:
f5:eb:aa:22:b4:cf:38:32:63:fe:f6:17:41:92:79:
d1:2e:fe:51:6a:f4:68:13:18:e2:c3:9e:ca:8a:3f:
ae:c0:97:d1:66:c4:14:80:3f:45:bd:93:64:b6:e6:
96:0e:e0:d8:20:ff:bc:bd:5d:ea:5a:b7:dd:d8:c8:
6a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:75:BB:9B:9B:0C:59:41:A7:E1:81:54:24:EA:20:54:9F:BA:5E:84
X509v3 Authority Key Identifier:
keyid:4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3d:07:3b:3f:62:cf:dd:d9:05:84:98:1d:91:cb:d6:3f:c1:
88:b3:cc:0a:63:a3:a1:dc:6d:97:d2:a1:34:5c:29:f1:a2:c5:
fe:c2:a0:7c:03:d9:b2:e9:35:20:72:40:d7:c2:4e:e9:11:47:
38:04:00:8a:d3:38:42:a1:fe:5c:a7:4e:c4:20:28:fc:9d:38:
bc:1e:a2:4e:88:81:1e:a0:11:1f:7e:bc:a3:04:e5:f8:00:21:
99:76:1a:3c:8f:9b:29:78:34:d3:63:c6:79:33:38:86:1f:25:
e6:c6:a1:62:33:37:f4:17:ab:fa:3c:7d:a4:ea:55:19:14:b7:
75:42:fc:88:95:b2:17:a9:0a:e3:74:62:f0:3b:e4:35:47:02:
a1:d9:51:67:b6:32:31:94:e4:b5:d2:cb:ae:24:74:d0:7f:6c:
f3:94:5c:c9:f3:77:1c:d8:48:b1:48:c2:5a:06:cb:41:cc:e0:
f0:86:6f:9d:51:ba:8c:9d:78:e3:e0:10:5e:cf:85:f2:b5:9e:
c5:57:90:cc:a5:fc:f4:04:3d:96:9c:ad:59:b5:b6:ad:54:b3:
2f:d1:09:09:3d:29:b3:62:1d:e2:86:e7:48:aa:45:ed:96:4e:
f6:db:16:92:a7:cc:ed:51:8d:73:21:0a:28:06:f1:ca:16:13:
7a:d9:2c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:09 2025 by rpki-client