Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
File: TRNilffzLmS-ePs5nrbRWuPpJjI.mft (raw, json)
Hash identifier: M7b2ttjXknM1CkKdKqxydZ+sLesahuAX/4uuPd0E/rs=
Subject key identifier: 2D:8F:25:72:F0:9A:2E:70:26:07:A5:83:57:A7:72:2A:C2:DD:11:55
Authority key identifier: 4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
Certificate issuer: /CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Certificate serial: 0199FDD8B66B3389771E6CC304A3ECC0D18A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:01:02 +0000
Manifest this update: Sun 19 Oct 2025 19:01:02 +0000
Manifest next update: Mon 20 Oct 2025 19:01:02 +0000
Files and hashes: 1: 0w6euFTp3UzxouPKJPAlF0GR1yI.roa (hash: alEYIZXZwAXSB7arGqSdzzPit/FWLiAkOyabJR5JGf8=)
2: 5ekL_VnxtRm7-caJUH4OelBy7bQ.roa (hash: C2pbDFwPGGpQ/WwmXSA+V7qxwJXZjh78LiDnuEJr7qo=)
3: TRNilffzLmS-ePs5nrbRWuPpJjI.crl (hash: QSRvJe6u18Xi4yRiND0wNu0QeGr9Tu46fKGIinzLkmE=)
4: m0L9XQnYVY6caI4raS3KgfN4us0.roa (hash: N3sU1FEe5n17DZBnmA+WMg+GZywEKpUuatIib1ejKHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:b6:6b:33:89:77:1e:6c:c3:04:a3:ec:c0:d1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Validity
Not Before: Oct 19 19:01:02 2025 GMT
Not After : Oct 20 19:01:02 2025 GMT
Subject: CN=2d8f2572f09a2e702607a58357a7722ac2dd1155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:4a:e2:00:d5:81:fe:12:9a:ce:6e:15:6e:
35:3e:8d:24:9e:9e:51:a4:96:f7:40:c8:08:89:f0:
45:24:8d:80:24:2f:19:8f:91:4f:dd:3a:10:22:a6:
36:c7:37:0a:72:f7:50:5a:28:36:81:ad:1e:0c:ee:
61:43:28:22:86:4c:f9:fe:95:22:98:97:ba:95:eb:
ac:60:f0:df:c5:4d:81:c1:86:b9:e6:44:9c:fb:db:
db:7d:4d:09:17:a0:53:61:40:4b:4a:0c:ba:01:2c:
96:9e:7f:f0:d4:3a:26:45:f6:6e:d1:4e:b8:c8:d1:
e2:bf:45:fa:2a:f1:8f:22:92:b9:76:eb:7b:bc:15:
de:da:e6:ff:79:16:dc:c9:21:62:d0:d8:5a:33:09:
77:59:8a:1c:82:e7:0d:32:cb:59:cc:6b:b7:06:f1:
b5:03:e9:e8:07:b7:81:e9:2d:54:f9:6c:cd:95:17:
3f:0a:2d:8a:a3:61:b1:a7:2e:b3:84:c0:9f:09:e5:
61:1f:14:ea:c9:c2:99:3a:b8:d6:7f:3d:af:1a:2e:
96:67:d1:dc:97:7a:e5:3e:8e:8e:e4:3c:13:79:26:
80:10:18:fb:89:46:09:d7:31:2c:c6:50:29:90:f3:
89:95:80:d0:5b:6e:9c:51:49:48:78:34:ab:a0:6c:
d7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8F:25:72:F0:9A:2E:70:26:07:A5:83:57:A7:72:2A:C2:DD:11:55
X509v3 Authority Key Identifier:
keyid:4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:f5:c4:e5:29:7a:b2:58:0c:a5:b8:4d:5b:e2:86:79:2e:3a:
4f:9b:c6:49:14:4d:ff:65:8a:e1:fc:85:d1:6e:15:c5:f4:de:
3a:b3:18:9f:34:98:6f:ad:e0:02:1a:b4:c5:56:82:b3:2e:8c:
ba:f4:c0:55:fd:74:2b:69:42:1d:1d:ea:01:82:d5:73:09:5b:
a9:04:63:7d:48:f5:32:09:0b:ea:6e:f5:55:52:69:06:dd:a6:
ac:b1:3c:c8:b8:a8:d8:dc:19:ad:f1:43:52:de:a4:22:1c:de:
c8:53:9d:8e:18:46:3f:dc:8a:cb:9e:80:0f:42:e1:66:2c:c9:
33:be:0f:78:5b:ec:79:63:dc:89:42:07:a8:ee:63:5e:87:13:
a2:52:05:c4:fa:e4:02:a2:4e:79:b2:38:aa:56:17:85:42:aa:
6f:fc:44:49:36:6b:e4:9a:e5:35:c3:a0:84:79:70:7b:20:04:
b4:1d:bc:7a:56:74:3d:ae:55:3f:97:81:f4:ab:4e:fc:03:36:
ad:9a:0b:79:16:81:96:4c:3c:81:01:78:30:26:bd:d1:67:97:
85:dd:6a:1e:f7:72:b8:01:82:7e:ad:60:1c:33:5a:8b:45:90:
cd:22:e8:c8:2e:e6:4b:65:31:f5:91:54:48:0f:9f:61:3c:37:
63:fe:8a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:34 2025 by rpki-client