Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
File: TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft (raw, json)
Hash identifier: V7MRGjwase2DSxoOUJqn4JaTzFBDyv3K8PV0Pa54njo=
Subject key identifier: EB:E1:02:46:F7:42:19:90:B5:23:F4:07:16:CF:8F:61:09:05:54:92
Authority key identifier: 4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
Certificate issuer: /CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Certificate serial: 0198D4732218B2ABE574BADAA0486B384D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
Manifest number: 1043
Signing time: Sat 23 Aug 2025 01:02:51 +0000
Manifest this update: Sat 23 Aug 2025 01:02:51 +0000
Manifest next update: Sun 24 Aug 2025 01:02:51 +0000
Files and hashes: 1: TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl (hash: rjbIypP2MB6PrK32JijxQg3AbDQrm6SfOheWaArn7V0=)
2: ebErOTcxF8x0HRmokQpD8A9P798.roa (hash: hgALEdNUDsS4deffBsaMplhK9QNYL4vbKGcbf+NsbgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:22:18:b2:ab:e5:74:ba:da:a0:48:6b:38:4d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Validity
Not Before: Aug 23 01:02:51 2025 GMT
Not After : Aug 24 01:02:51 2025 GMT
Subject: CN=ebe10246f7421990b523f40716cf8f6109055492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:79:dc:f0:5b:2d:de:f0:45:c3:ad:96:4b:
31:50:f5:1d:18:10:c9:a5:13:f2:42:e4:e0:f0:a3:
f1:ad:8f:70:fe:12:f0:84:37:92:b9:e0:bc:cb:c2:
c1:b3:f6:01:bd:32:62:f0:f0:cb:43:74:4e:43:e8:
df:c8:de:0d:50:98:4d:ad:83:8c:9a:6f:2b:21:a7:
a2:01:6f:5c:32:05:12:cd:39:dd:61:06:18:24:bd:
37:74:ab:23:a0:db:44:6a:7d:97:e7:92:58:90:40:
0d:e4:c6:61:d2:f6:8c:62:b9:4d:58:25:94:fc:5c:
f5:97:9a:f7:e4:98:db:8f:dc:de:cf:50:f0:e7:9f:
e5:1e:b8:cd:ab:8d:05:60:45:e5:81:26:de:a7:63:
30:1e:db:53:3e:c8:1b:f2:66:0c:83:ec:2b:32:f8:
e6:58:2f:33:f0:b0:8a:55:3a:1c:a3:84:2c:bd:22:
2b:bc:b7:a2:3f:16:86:b9:31:4c:3d:f7:0c:3b:9e:
0a:fa:f1:2c:5a:05:a2:77:53:e4:f8:29:c8:c0:63:
76:d6:9d:a3:10:7d:16:2f:99:14:c6:1e:ea:bc:c4:
99:42:cb:54:ff:da:dc:3e:5f:81:fa:cc:4c:1b:fc:
10:d8:bb:9e:3c:5d:7a:52:09:5a:83:d6:8a:75:89:
00:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E1:02:46:F7:42:19:90:B5:23:F4:07:16:CF:8F:61:09:05:54:92
X509v3 Authority Key Identifier:
keyid:4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d2:c5:17:a4:7b:99:7f:24:f8:fd:ac:f8:52:e1:59:7a:3c:
ba:d9:50:32:5c:fe:87:c6:85:30:bf:b3:12:bc:cc:03:e3:0c:
8e:c5:82:b0:49:9f:aa:89:43:70:9f:6e:4a:7f:cf:cf:5a:8c:
1c:6c:c6:94:40:f0:07:ea:e8:bb:c1:f6:10:d2:60:72:4f:15:
55:be:48:fa:8b:07:38:4e:f1:6b:42:23:07:6f:28:2c:ed:c5:
0a:d3:9b:3f:e4:9e:d6:0e:c6:cd:f7:2a:8c:a6:6d:63:e5:36:
4b:99:b1:86:2a:66:bd:be:52:67:b9:3e:91:e9:fc:2f:3d:8a:
59:eb:b8:13:a7:b2:b0:1b:b0:11:a4:77:2e:0f:0e:1f:7c:8b:
f1:48:b5:0d:22:7d:a0:38:28:71:21:e9:bc:6e:f8:69:c2:e8:
e4:99:bf:e6:b3:04:af:16:c3:e1:b5:5e:5a:77:32:74:0e:93:
6a:32:57:fc:05:eb:22:4e:f2:d6:dc:26:72:68:6b:70:26:db:
46:ae:13:d8:f1:96:1b:06:ff:fa:04:aa:14:fd:89:31:fe:d0:
21:40:9a:8c:42:81:a1:33:63:7d:8f:2b:84:c4:64:f2:8d:a9:
63:bc:cd:38:7f:12:a5:56:b1:06:29:08:ca:e5:97:ef:35:5c:
18:ac:58:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcyIYsqvldLraoEhrOE0FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTQ4OGM2NDAxYzhmNWU5NjllMTVkNjQ2NTFmYjRiMmQy
ZGNkZjcwHhcNMjUwODIzMDEwMjUxWhcNMjUwODI0MDEwMjUxWjAzMTEwLwYDVQQD
EyhlYmUxMDI0NmY3NDIxOTkwYjUyM2Y0MDcxNmNmOGY2MTA5MDU1NDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1d53PBbLd7wRcOtlksxUPUdGBDJ
pRPyQuTg8KPxrY9w/hLwhDeSueC8y8LBs/YBvTJi8PDLQ3ROQ+jfyN4NUJhNrYOM
mm8rIaeiAW9cMgUSzTndYQYYJL03dKsjoNtEan2X55JYkEAN5MZh0vaMYrlNWCWU
/Fz1l5r35Jjbj9zez1Dw55/lHrjNq40FYEXlgSbep2MwHttTPsgb8mYMg+wrMvjm
WC8z8LCKVToco4QsvSIrvLeiPxaGuTFMPfcMO54K+vEsWgWid1Pk+CnIwGN21p2j
EH0WL5kUxh7qvMSZQstU/9rcPl+B+sxMG/wQ2LuePF16Uglag9aKdYkAQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvhAkb3QhmQtSP0BxbPj2EJBVSSMB8GA1UdIwQY
MBaAFEzkiMZAHI9elp4V1kZR+0stLc33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9TSXhrQWNqMTZXbmhYV1JsSDdTeTB0emZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jNWM1OTUtMjY3My00ZDVmLThhODUt
YWU4YzgxZjk2ZjQyLzEvVE9TSXhrQWNqMTZXbmhYV1JsSDdTeTB0emZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jNWM1OTUtMjY3My00ZDVmLThhODUtYWU4YzgxZjk2ZjQy
LzEvVE9TSXhrQWNqMTZXbmhYV1JsSDdTeTB0emZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhtLFF6R7
mX8k+P2s+FLhWXo8utlQMlz+h8aFML+zErzMA+MMjsWCsEmfqolDcJ9uSn/Pz1qM
HGzGlEDwB+rou8H2ENJgck8VVb5I+osHOE7xa0IjB28oLO3FCtObP+Se1g7Gzfcq
jKZtY+U2S5mxhipmvb5SZ7k+ken8Lz2KWeu4E6eysBuwEaR3Lg8OH3yL8Ui1DSJ9
oDgocSHpvG74acLo5Jm/5rMErxbD4bVeWncydA6TajJX/AXrIk7y1twmcmhrcCbb
Rq4T2PGWGwb/+gSqFP2JMf7QIUCajEKBoTNjfY8rhMRk8o2pY7zNOH8SpVaxBikI
yuWX7zVcGKxYsw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:27 2025 by rpki-client