Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
File: TRNilffzLmS-ePs5nrbRWuPpJjI.mft (raw, json)
Hash identifier: WqtX/jgRglQUYql+M248aSGWOgbIyoD5LUadxPVMq5w=
Subject key identifier: 6F:07:8A:A3:3D:CE:5F:82:C4:5C:DC:BA:B1:60:AC:9B:31:08:90:55
Authority key identifier: 4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
Certificate issuer: /CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Certificate serial: 019879AE2A5E1D89A99BEC805DE3459AB830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 10:01:53 +0000
Manifest this update: Tue 05 Aug 2025 10:01:53 +0000
Manifest next update: Wed 06 Aug 2025 10:01:53 +0000
Files and hashes: 1: 0w6euFTp3UzxouPKJPAlF0GR1yI.roa (hash: alEYIZXZwAXSB7arGqSdzzPit/FWLiAkOyabJR5JGf8=)
2: 5ekL_VnxtRm7-caJUH4OelBy7bQ.roa (hash: C2pbDFwPGGpQ/WwmXSA+V7qxwJXZjh78LiDnuEJr7qo=)
3: TRNilffzLmS-ePs5nrbRWuPpJjI.crl (hash: BvHwqnyjMEmX1HceGayTc2SFCB2fH0vS61FCtK8w9Zs=)
4: m0L9XQnYVY6caI4raS3KgfN4us0.roa (hash: N3sU1FEe5n17DZBnmA+WMg+GZywEKpUuatIib1ejKHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:2a:5e:1d:89:a9:9b:ec:80:5d:e3:45:9a:b8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Validity
Not Before: Aug 5 10:01:53 2025 GMT
Not After : Aug 6 10:01:53 2025 GMT
Subject: CN=6f078aa33dce5f82c45cdcbab160ac9b31089055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:84:fd:5c:bf:11:f9:c0:9f:4c:07:33:aa:dc:
c5:a1:69:56:b9:d4:e1:62:49:6d:f3:2b:20:0c:3e:
aa:9f:51:be:84:b3:a1:c4:5a:cf:f0:20:9f:8c:d1:
cd:53:13:5c:7d:de:ba:96:e6:75:38:8e:b4:bf:50:
85:e4:6c:a7:75:84:c5:8d:48:1e:33:a1:41:25:33:
b4:9a:f7:fd:67:f2:6a:dc:28:7a:b4:59:9e:61:1b:
1f:dd:b7:09:c0:ea:cf:47:73:73:97:ad:46:30:87:
8e:1d:ab:ce:9f:f7:ec:e2:a9:8f:ec:e3:96:cb:4b:
a5:91:23:8e:e6:46:84:e2:1f:01:81:af:3b:28:72:
fb:70:74:cb:04:67:fa:d1:65:cc:32:6b:e6:40:ad:
06:5b:ff:5e:98:ef:8a:58:52:aa:c8:33:3e:26:4b:
48:40:a6:5e:22:c4:9b:7c:15:64:42:7c:32:c6:25:
3e:b0:37:a7:9f:a6:af:92:e1:1a:3d:26:c0:81:cf:
26:5b:e9:ab:92:b0:cb:fd:5d:07:65:0c:fb:78:d8:
47:2d:f2:bb:1d:21:da:5d:59:6f:2b:59:74:f6:18:
4a:84:04:6a:77:a2:ac:dd:37:a6:fb:41:17:dd:6f:
27:35:c3:ad:87:6c:72:f0:fc:f7:22:42:40:b9:12:
71:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:07:8A:A3:3D:CE:5F:82:C4:5C:DC:BA:B1:60:AC:9B:31:08:90:55
X509v3 Authority Key Identifier:
keyid:4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:34:31:90:83:10:ff:5f:a5:74:ab:0f:bb:53:e5:db:a3:09:
3e:8e:6d:d3:d0:55:a3:85:c5:b7:17:1e:1e:c8:5c:f7:ea:42:
db:5a:85:83:b2:3b:43:ac:0d:b6:f3:e4:27:47:3d:f2:8e:55:
05:2f:f4:41:1e:99:b5:3f:72:1a:b6:7c:82:8c:9b:96:60:59:
58:74:ae:11:6f:9c:fc:c8:16:61:3b:f7:27:0c:e9:f9:80:2b:
4c:ce:2b:31:89:ca:42:73:f5:14:30:3c:16:ee:94:9a:76:8d:
7f:b9:3a:2a:fd:94:d8:76:d9:21:73:08:ff:87:60:c9:20:35:
76:2f:e1:03:c9:83:d2:d7:e9:d7:8d:ca:d5:fc:5c:c5:32:d2:
7f:d7:24:5b:be:53:bd:53:77:e6:83:d7:07:a6:74:b2:ee:57:
2a:2b:d7:2f:16:e4:26:69:fa:d3:8b:66:51:d4:17:c1:11:5c:
d9:93:90:ab:b4:05:5d:e6:17:66:62:23:90:fa:21:81:8c:72:
11:12:61:31:e6:52:27:88:8d:78:1b:00:a1:e3:f4:24:10:90:
9c:f1:3a:54:15:2c:e3:91:0c:1b:95:72:64:58:e3:56:67:33:
50:d2:fc:22:3d:e6:60:e8:10:24:7c:f8:ed:99:9b:ab:b8:8b:
1e:b6:cf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:19:36 2025 by rpki-client