Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
File: TRNilffzLmS-ePs5nrbRWuPpJjI.mft (raw, json)
Hash identifier: E6Tt2S8oPlkQ/Nyqj6Pzji6xgkhsEyNS+PcSGyoZq+g=
Subject key identifier: ED:18:A2:89:2A:D5:68:B5:FF:67:D3:25:F8:23:3D:9A:E9:F5:28:60
Authority key identifier: 4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
Certificate issuer: /CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Certificate serial: 0199FFC7583C12F8A5720FD2632EB6576A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 04:01:18 +0000
Manifest this update: Mon 20 Oct 2025 04:01:18 +0000
Manifest next update: Tue 21 Oct 2025 04:01:18 +0000
Files and hashes: 1: 0w6euFTp3UzxouPKJPAlF0GR1yI.roa (hash: alEYIZXZwAXSB7arGqSdzzPit/FWLiAkOyabJR5JGf8=)
2: 5ekL_VnxtRm7-caJUH4OelBy7bQ.roa (hash: C2pbDFwPGGpQ/WwmXSA+V7qxwJXZjh78LiDnuEJr7qo=)
3: TRNilffzLmS-ePs5nrbRWuPpJjI.crl (hash: FwWtEsZgRiv14PVnsWOSFnodA4y0CuYwWcBevgh7fIQ=)
4: m0L9XQnYVY6caI4raS3KgfN4us0.roa (hash: N3sU1FEe5n17DZBnmA+WMg+GZywEKpUuatIib1ejKHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:58:3c:12:f8:a5:72:0f:d2:63:2e:b6:57:6a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Validity
Not Before: Oct 20 04:01:18 2025 GMT
Not After : Oct 21 04:01:18 2025 GMT
Subject: CN=ed18a2892ad568b5ff67d325f8233d9ae9f52860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a2:83:53:1e:77:4e:b8:01:4c:3d:1a:23:0d:
88:fc:67:90:bc:79:c5:ad:d4:5e:a1:57:9d:f4:56:
30:81:56:72:97:4b:c6:0e:cc:a6:dd:df:b6:a1:07:
2f:3c:bb:93:d2:93:72:67:45:e4:b6:47:92:d1:1f:
de:cc:89:81:45:16:c6:ab:ff:d2:79:41:0f:69:ec:
84:3a:d8:85:92:c1:22:0a:c7:6e:62:92:03:29:2f:
ee:33:0a:78:8c:6a:ca:09:6b:84:af:4e:4e:3c:3a:
8a:20:b3:42:b3:1b:81:cd:71:42:b7:ea:d2:09:2b:
c2:59:7f:e0:11:27:ad:1c:e5:98:cb:92:4a:99:c2:
fb:a9:aa:86:4b:3e:f4:e9:b8:d9:9e:df:05:ed:18:
82:eb:92:a8:e0:55:51:21:b1:cb:b7:7e:d0:91:ea:
3d:41:a5:4a:01:f6:3a:95:e4:2f:bf:1c:9f:8b:77:
5b:a9:0f:51:c1:5e:73:61:5f:45:fd:1c:92:47:5e:
29:5a:99:86:6e:d1:64:5a:cf:46:f4:fa:f9:64:54:
74:88:54:7b:45:61:55:41:2a:4d:fb:63:b2:b8:e3:
28:c1:9f:91:01:99:48:16:2f:30:33:e3:1f:ff:ca:
e0:f3:c7:69:93:1c:2e:5b:e2:e7:d8:8d:6d:7e:07:
4b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:18:A2:89:2A:D5:68:B5:FF:67:D3:25:F8:23:3D:9A:E9:F5:28:60
X509v3 Authority Key Identifier:
keyid:4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ed:f4:34:dd:4e:af:b8:97:77:10:0b:3e:4b:a6:03:62:a6:
cf:6e:60:a4:66:a1:a5:23:59:60:46:d3:0c:e2:6a:a0:7c:33:
e5:8e:b6:95:85:86:8b:2d:7f:55:aa:e6:b0:66:68:77:27:f4:
86:e2:a4:a7:ec:b9:bb:bb:66:d1:85:a8:ce:0b:a6:6d:c6:37:
c2:f8:c7:96:16:a9:2d:44:c2:f4:3f:07:2c:35:84:12:6a:ba:
d1:5a:55:ba:3b:e3:bc:b2:6e:39:db:6c:11:28:4e:01:31:90:
9c:2f:c3:26:ca:92:b5:fb:55:00:cf:3d:ab:c0:7f:dd:b2:7b:
48:90:e4:02:ca:55:84:88:29:c8:2e:9f:ca:04:f3:4f:82:bd:
b8:25:b2:d4:16:c5:b4:15:a6:d9:26:2a:15:97:09:57:52:71:
98:b0:99:d2:e5:8e:d1:5c:99:50:97:1f:b7:3b:74:07:fd:d5:
3f:66:0f:dd:ec:39:76:0d:da:7a:95:b2:1e:57:69:39:31:f3:
d7:9d:42:9d:ad:08:f6:f9:cb:4b:7f:80:3e:44:fc:4f:9e:67:
ef:f0:4f:20:76:d9:1c:89:0b:79:b1:cc:31:3a:b8:e8:85:9d:
7a:9e:b1:91:60:41:db:7f:3f:43:43:68:50:2f:45:dd:dd:71:
ea:ff:d6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:17:21 2025 by rpki-client