Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
File: TRNilffzLmS-ePs5nrbRWuPpJjI.mft (raw, json)
Hash identifier: jyV2/cyIJ4P/DqLQjfhFb5YACa86hzlayh+v+aLh/vU=
Subject key identifier: 30:B8:50:55:C6:D0:DE:62:42:FA:36:F1:01:B1:2B:C3:44:16:DC:C0
Authority key identifier: 4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
Certificate issuer: /CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Certificate serial: 019A1CBE6B1745FF2CAF12A767F5C15C9556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
Manifest number: 16F3
Signing time: Sat 25 Oct 2025 19:00:32 +0000
Manifest this update: Sat 25 Oct 2025 19:00:32 +0000
Manifest next update: Sun 26 Oct 2025 19:00:32 +0000
Files and hashes: 1: 0w6euFTp3UzxouPKJPAlF0GR1yI.roa (hash: alEYIZXZwAXSB7arGqSdzzPit/FWLiAkOyabJR5JGf8=)
2: 5ekL_VnxtRm7-caJUH4OelBy7bQ.roa (hash: C2pbDFwPGGpQ/WwmXSA+V7qxwJXZjh78LiDnuEJr7qo=)
3: TRNilffzLmS-ePs5nrbRWuPpJjI.crl (hash: HaG+xZuSQY4o1aPChAVEzYUyDh7mFHHh5d0/y3eoTA0=)
4: m0L9XQnYVY6caI4raS3KgfN4us0.roa (hash: N3sU1FEe5n17DZBnmA+WMg+GZywEKpUuatIib1ejKHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:be:6b:17:45:ff:2c:af:12:a7:67:f5:c1:5c:95:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Validity
Not Before: Oct 25 19:00:32 2025 GMT
Not After : Oct 26 19:00:32 2025 GMT
Subject: CN=30b85055c6d0de6242fa36f101b12bc34416dcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:55:ef:ba:be:52:5b:a3:39:89:d9:27:18:
4a:97:44:3a:0e:69:15:bb:81:e7:f3:e1:00:ba:4b:
74:a8:34:42:7c:80:65:10:3a:ea:81:0f:8d:fd:87:
4b:fb:57:13:3d:94:ef:d9:08:42:af:c4:a8:06:c7:
b3:5c:58:60:3b:f5:9f:fb:55:05:22:19:04:d6:85:
5b:ce:99:84:86:46:df:22:2b:6b:6b:cd:86:92:8f:
58:d1:95:20:ad:25:30:b5:58:48:4b:b3:0f:3d:b3:
11:f2:93:86:86:f1:53:0c:d1:58:4c:ab:8e:52:44:
5e:7a:1c:4e:ae:d0:76:c9:b8:a6:6d:4d:94:f8:fb:
8d:2c:ca:8d:3f:f4:7b:02:77:46:b4:37:4f:3f:c0:
b6:9f:5c:b9:ec:fe:24:99:7c:bb:ad:4c:bc:b6:a5:
b6:4e:04:12:9c:ab:ea:db:46:50:e9:64:b7:a6:4f:
9e:a8:4e:02:53:2d:63:84:23:25:ea:1c:bb:75:bd:
c2:ff:e9:b8:d3:9c:36:45:9d:78:b0:3b:3f:12:6e:
92:d5:96:3e:83:d7:de:1c:12:1e:94:9a:84:02:5e:
aa:8b:cd:48:80:21:68:a0:69:f0:79:a0:26:51:24:
ee:61:3c:f4:96:ee:c3:1f:61:f7:98:e0:80:3f:e2:
ab:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B8:50:55:C6:D0:DE:62:42:FA:36:F1:01:B1:2B:C3:44:16:DC:C0
X509v3 Authority Key Identifier:
keyid:4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:fe:40:9e:34:c1:ce:e0:fc:a6:42:44:37:98:45:ef:37:08:
0a:72:92:9f:71:c8:4f:48:3d:06:f6:bd:bb:18:35:f2:de:e7:
9b:8b:fc:fd:cd:a7:64:fa:1b:36:4a:81:4b:59:be:f2:eb:c4:
d2:e5:09:e3:36:c4:fc:3f:6d:ae:14:51:5e:e1:8b:1a:94:7f:
1f:cc:c7:b5:1d:9e:88:be:d6:bd:01:93:ee:32:b4:0e:3f:57:
5f:41:e5:46:3d:b2:34:08:5d:8c:b6:89:de:39:45:32:d5:9e:
41:91:9c:8c:1e:1a:74:7e:d8:0b:0c:99:67:6f:85:3c:15:3c:
f4:7a:e4:01:60:1f:c7:ac:a9:2e:44:53:4d:01:bd:1a:09:d0:
2b:4f:d3:25:4b:82:a4:56:32:f3:0f:ca:ad:3c:d0:5f:7e:a2:
42:4f:49:92:bf:08:a3:6f:83:dc:64:b4:1b:0c:52:31:2c:e2:
7a:40:44:30:85:cb:83:fb:f4:26:9e:53:1d:b9:fd:8f:0e:74:
c4:cf:b5:84:26:18:2a:2e:a3:fd:57:0f:53:26:f7:bb:48:fb:
8d:ec:e4:a4:69:31:87:01:a7:9c:0c:84:cb:2e:59:76:f2:f7:
3d:65:d6:9c:d3:d0:3d:46:9c:f0:29:37:23:d2:0b:3f:a7:85:
7a:ab:73:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZocvmsXRf8srxKnZ/XBXJVWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMTM2Mjk1ZjdmMzJlNjRiZTc4ZmIzOTllYjZkMTVhZTNl
OTI2MzIwHhcNMjUxMDI1MTkwMDMyWhcNMjUxMDI2MTkwMDMyWjAzMTEwLwYDVQQD
EygzMGI4NTA1NWM2ZDBkZTYyNDJmYTM2ZjEwMWIxMmJjMzQ0MTZkY2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnFV77q+UlujOYnZJxhKl0Q6DmkV
u4Hn8+EAukt0qDRCfIBlEDrqgQ+N/YdL+1cTPZTv2QhCr8SoBsezXFhgO/Wf+1UF
IhkE1oVbzpmEhkbfIitra82Gko9Y0ZUgrSUwtVhIS7MPPbMR8pOGhvFTDNFYTKuO
UkReehxOrtB2ybimbU2U+PuNLMqNP/R7AndGtDdPP8C2n1y57P4kmXy7rUy8tqW2
TgQSnKvq20ZQ6WS3pk+eqE4CUy1jhCMl6hy7db3C/+m405w2RZ14sDs/Em6S1ZY+
g9feHBIelJqEAl6qi81IgCFooGnweaAmUSTuYTz0lu7DH2H3mOCAP+KrdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDC4UFXG0N5iQvo28QGxK8NEFtzAMB8GA1UdIwQY
MBaAFE0TYpX38y5kvnj7OZ620Vrj6SYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFJOaWxmZnpMbVMtZVBzNW5yYlJXdVBwSmpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNDQzMzAtNWQzYi00NDc5LThiMTAt
MmJiN2ZkZDVmNzI4LzEvVFJOaWxmZnpMbVMtZVBzNW5yYlJXdVBwSmpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iNDQzMzAtNWQzYi00NDc5LThiMTAtMmJiN2ZkZDVmNzI4
LzEvVFJOaWxmZnpMbVMtZVBzNW5yYlJXdVBwSmpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdv5AnjTB
zuD8pkJEN5hF7zcICnKSn3HIT0g9Bva9uxg18t7nm4v8/c2nZPobNkqBS1m+8uvE
0uUJ4zbE/D9trhRRXuGLGpR/H8zHtR2eiL7WvQGT7jK0Dj9XX0HlRj2yNAhdjLaJ
3jlFMtWeQZGcjB4adH7YCwyZZ2+FPBU89HrkAWAfx6ypLkRTTQG9GgnQK0/TJUuC
pFYy8w/KrTzQX36iQk9Jkr8Io2+D3GS0GwxSMSziekBEMIXLg/v0Jp5THbn9jw50
xM+1hCYYKi6j/VcPUyb3u0j7jezkpGkxhwGnnAyEyy5ZdvL3PWXWnNPQPUac8Ck3
I9ILP6eFeqtzTg==
-----END CERTIFICATE-----
Generated at Sat Oct 25 22:18:20 2025 by rpki-client