Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
File: TRNilffzLmS-ePs5nrbRWuPpJjI.mft (raw, json)
Hash identifier: nMEhbYXwbJoKmFDD+PDRrc2LmpL+YrUac9FusOPd6aY=
Subject key identifier: 0F:52:E5:3B:17:5A:8B:3A:FB:9F:E9:61:20:A9:4B:65:D7:BE:C6:50
Authority key identifier: 4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
Certificate issuer: /CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Certificate serial: 019A50E3D2B9A87D435155AD18C6E98641B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 22:01:39 +0000
Manifest this update: Tue 04 Nov 2025 22:01:39 +0000
Manifest next update: Wed 05 Nov 2025 22:01:39 +0000
Files and hashes: 1: 0w6euFTp3UzxouPKJPAlF0GR1yI.roa (hash: alEYIZXZwAXSB7arGqSdzzPit/FWLiAkOyabJR5JGf8=)
2: 5ekL_VnxtRm7-caJUH4OelBy7bQ.roa (hash: C2pbDFwPGGpQ/WwmXSA+V7qxwJXZjh78LiDnuEJr7qo=)
3: TRNilffzLmS-ePs5nrbRWuPpJjI.crl (hash: fGq4951j1M7uLtzgoU2Z45AF2OEHhImntMFBV5O5d3U=)
4: m0L9XQnYVY6caI4raS3KgfN4us0.roa (hash: N3sU1FEe5n17DZBnmA+WMg+GZywEKpUuatIib1ejKHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:d2:b9:a8:7d:43:51:55:ad:18:c6:e9:86:41:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Validity
Not Before: Nov 4 22:01:39 2025 GMT
Not After : Nov 5 22:01:39 2025 GMT
Subject: CN=0f52e53b175a8b3afb9fe96120a94b65d7bec650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d9:a6:8e:c5:af:c5:04:1c:84:e9:97:4f:9b:
e0:75:04:b1:c4:db:bd:26:11:08:6e:dd:26:33:00:
94:a4:ef:89:9d:a1:87:10:e8:f3:a3:ff:aa:f9:5f:
a9:79:4b:a6:2b:c7:83:d2:39:1a:ab:06:a4:01:f6:
9f:f9:86:71:4e:32:1a:60:34:4a:19:67:8a:98:f8:
9a:22:2e:80:03:54:e2:50:5e:6e:e8:e7:7f:10:86:
66:68:90:31:ab:67:b9:08:c2:3e:5f:30:57:d6:f9:
4d:ab:d8:c1:4f:fd:ab:48:30:c8:fa:28:16:45:c4:
90:20:22:fa:e6:b7:4a:15:f6:74:6d:36:b3:43:b5:
79:6e:14:9c:51:b8:19:ca:61:d7:88:f5:43:e7:c1:
65:39:71:08:b4:44:48:a5:a4:90:6e:35:b1:07:b2:
ea:06:a1:80:db:88:6a:74:67:39:3d:d6:0f:89:23:
94:6c:60:40:e6:09:9e:09:5c:df:0d:85:06:ef:cf:
9b:12:66:09:a0:df:ce:e1:37:fd:50:ca:7e:81:d4:
73:a8:ae:6e:15:ec:d3:d2:44:23:fc:4d:64:b1:4a:
f6:44:10:0d:d6:25:3b:6b:c1:79:50:9b:b0:cc:0b:
9a:f0:bb:0f:e4:21:80:00:f2:dc:b2:e2:b3:f1:c4:
63:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:52:E5:3B:17:5A:8B:3A:FB:9F:E9:61:20:A9:4B:65:D7:BE:C6:50
X509v3 Authority Key Identifier:
keyid:4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:9a:cc:86:eb:9d:87:85:03:76:8f:af:94:7d:14:c1:a1:21:
6e:d6:53:1f:45:e6:f0:37:79:5a:e5:50:0d:83:32:59:20:68:
6c:a8:1d:1f:83:15:db:95:18:52:c4:c1:da:c3:e4:a2:1d:44:
07:72:88:53:9e:89:e0:32:5c:22:29:45:b3:4e:4d:fe:3b:e5:
84:0f:8d:a9:29:b5:39:80:96:2b:7c:69:22:89:0f:f2:54:56:
43:24:1e:b3:ca:bd:5c:ff:d4:39:35:36:0f:64:0d:63:de:a0:
ba:ac:44:82:be:1c:52:38:87:2e:ad:9b:b5:5b:52:94:60:38:
11:be:6c:69:fe:50:b8:ed:99:40:8e:8a:40:e8:3f:bb:ff:b9:
b5:ba:5c:92:49:2c:22:6e:95:90:a8:cc:d9:65:eb:0c:70:45:
af:f9:25:d5:8b:ca:49:70:fe:a4:b0:a4:69:19:70:41:a0:19:
d5:a9:31:31:3a:e5:da:34:d1:5d:dd:37:37:98:2c:a3:0b:5e:
e5:af:64:f4:98:35:f2:fb:99:a3:12:42:15:4d:97:00:13:d9:
b8:d9:3f:17:6f:fa:b4:20:ad:a9:34:90:b5:6f:9d:e7:98:ff:
c4:f6:7f:c6:54:ac:7d:c3:ea:11:10:4c:7b:eb:03:89:04:7f:
f2:6b:0b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:11:18 2025 by rpki-client