Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
File: TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft (raw, json)
Hash identifier: 5kzmiNTMf/Alb9sg0y2eSqCRY1spT5AUKxyM4a8yTxc=
Subject key identifier: 05:F3:19:2C:94:98:D3:DE:C3:90:69:08:4A:44:40:70:A0:DB:B1:FE
Authority key identifier: 4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07
Certificate issuer: /CN=4ca509b35011ed71663952ba0e0c3c38457f9d07
Certificate serial: 0198D70627C34792EC0D517F7FA7889DD759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 13:02:41 +0000
Manifest this update: Sat 23 Aug 2025 13:02:41 +0000
Manifest next update: Sun 24 Aug 2025 13:02:41 +0000
Files and hashes: 1: TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl (hash: bhkQBkEPN0DRZpJyRVy/fSRUyxoAVlCzrzeMMiJ18Ag=)
2: ilNe5KDmG0o6LZVjHMLtOGd-0DQ.roa (hash: JkEgQ36ayeHC4m0mo3MRV7E4gABrbKLeaaxVJdDM2eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:27:c3:47:92:ec:0d:51:7f:7f:a7:88:9d:d7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca509b35011ed71663952ba0e0c3c38457f9d07
Validity
Not Before: Aug 23 13:02:41 2025 GMT
Not After : Aug 24 13:02:41 2025 GMT
Subject: CN=05f3192c9498d3dec39069084a444070a0dbb1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:f7:6c:e0:5b:c9:b8:29:1a:f9:67:76:79:
6f:55:8d:9f:72:39:82:ba:75:13:c4:4d:a9:e8:8c:
6b:a3:e9:09:5c:7e:64:11:14:cd:ba:9f:68:3d:f0:
c9:c3:a2:2e:67:9b:8e:15:cf:9b:75:84:7a:0a:f0:
3c:bb:0c:4e:8c:c8:c3:2d:03:f8:27:40:40:6b:06:
4d:18:43:27:18:e1:9b:71:79:a3:98:28:56:a4:c0:
a8:2a:7c:ea:a3:49:51:d8:ee:49:c3:a0:64:73:55:
37:76:09:a1:f2:79:e3:2f:9e:a4:59:9b:06:d3:51:
d8:05:1c:2a:e6:2a:5a:ec:cb:f0:38:b7:67:7e:e0:
94:a5:bd:cf:69:9c:3a:a9:57:0e:aa:81:56:00:6c:
1d:15:85:53:5e:6e:eb:75:30:3c:3e:2c:13:79:87:
fc:e0:76:af:72:62:7d:75:4f:d3:db:4a:14:da:e4:
37:70:23:a6:ce:7b:67:8f:0f:28:0f:bb:e2:ae:62:
58:7c:a6:cb:36:98:6e:37:92:20:4f:12:9e:d5:43:
5d:8e:d4:57:18:eb:42:9f:d7:25:ee:6d:05:bd:3f:
58:be:32:c3:74:62:4e:91:2d:fc:2d:d0:b8:a3:ba:
97:a1:db:fe:2a:1c:ce:24:06:c0:d7:57:e2:54:39:
a2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F3:19:2C:94:98:D3:DE:C3:90:69:08:4A:44:40:70:A0:DB:B1:FE
X509v3 Authority Key Identifier:
keyid:4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:25:b9:8c:0c:30:8e:dd:c0:7e:25:ce:29:c2:ae:48:9a:60:
42:8a:a9:6d:92:a9:16:c9:39:79:82:f7:da:7e:dd:08:b0:97:
ed:b4:a0:26:b8:0d:e2:a5:4d:a0:f7:b7:a8:16:a4:68:6a:96:
86:42:b2:5f:1b:5d:ac:2d:04:ab:a7:b2:75:6f:a5:e3:a7:29:
d7:5d:4b:5a:3f:b9:7b:67:f6:88:c7:90:c3:8c:e5:09:84:26:
09:bb:69:8c:23:93:6a:82:e2:81:ba:8a:41:14:41:6c:b5:c4:
47:e8:cc:df:a7:b0:18:f5:9d:62:e5:c2:c9:9b:98:ac:87:d0:
0e:4c:8c:5a:bc:bb:aa:1c:46:ed:a2:53:88:14:fb:63:d4:a1:
1a:d4:50:fb:eb:b4:9b:1a:3b:ea:52:cc:b4:2c:14:72:46:5e:
e7:4c:9a:b1:ac:16:84:f4:74:75:dc:b5:84:ff:ea:ba:b4:dd:
06:6e:17:0a:1e:9d:28:72:28:10:be:25:40:0d:9c:2b:cd:43:
52:f6:4d:d6:7c:c7:d5:77:6e:8b:8e:a9:83:54:11:18:bb:7d:
5f:3f:1e:df:4b:ac:9c:f1:b9:9a:49:49:e8:5b:cd:84:db:d3:
31:93:48:bb:5e:ef:b9:35:70:d0:a8:e9:07:d5:d1:91:e2:ff:
98:d6:0d:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBifDR5LsDVF/f6eInddZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYTUwOWIzNTAxMWVkNzE2NjM5NTJiYTBlMGMzYzM4NDU3
ZjlkMDcwHhcNMjUwODIzMTMwMjQxWhcNMjUwODI0MTMwMjQxWjAzMTEwLwYDVQQD
EygwNWYzMTkyYzk0OThkM2RlYzM5MDY5MDg0YTQ0NDA3MGEwZGJiMWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDj3bOBbybgpGvlndnlvVY2fcjmC
unUTxE2p6Ixro+kJXH5kERTNup9oPfDJw6IuZ5uOFc+bdYR6CvA8uwxOjMjDLQP4
J0BAawZNGEMnGOGbcXmjmChWpMCoKnzqo0lR2O5Jw6Bkc1U3dgmh8nnjL56kWZsG
01HYBRwq5ipa7MvwOLdnfuCUpb3PaZw6qVcOqoFWAGwdFYVTXm7rdTA8PiwTeYf8
4HavcmJ9dU/T20oU2uQ3cCOmzntnjw8oD7virmJYfKbLNphuN5IgTxKe1UNdjtRX
GOtCn9cl7m0FvT9YvjLDdGJOkS38LdC4o7qXodv+KhzOJAbA11fiVDmizQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXzGSyUmNPew5BpCEpEQHCg27H+MB8GA1UdIwQY
MBaAFEylCbNQEe1xZjlSug4MPDhFf50HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEtVSnMxQVI3WEZtT1ZLNkRndzhPRVZfblFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wYTEzMWUtMzdjNi00NWNiLTk2ODIt
MGIwYzEyYjIyYmY5LzEvVEtVSnMxQVI3WEZtT1ZLNkRndzhPRVZfblFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wYTEzMWUtMzdjNi00NWNiLTk2ODItMGIwYzEyYjIyYmY5
LzEvVEtVSnMxQVI3WEZtT1ZLNkRndzhPRVZfblFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyW5jAww
jt3AfiXOKcKuSJpgQoqpbZKpFsk5eYL32n7dCLCX7bSgJrgN4qVNoPe3qBakaGqW
hkKyXxtdrC0Eq6eydW+l46cp111LWj+5e2f2iMeQw4zlCYQmCbtpjCOTaoLigbqK
QRRBbLXER+jM36ewGPWdYuXCyZuYrIfQDkyMWry7qhxG7aJTiBT7Y9ShGtRQ++u0
mxo76lLMtCwUckZe50yasawWhPR0ddy1hP/qurTdBm4XCh6dKHIoEL4lQA2cK81D
UvZN1nzH1Xdui46pg1QRGLt9Xz8e30usnPG5mklJ6FvNhNvTMZNIu17vuTVw0Kjp
B9XRkeL/mNYNXA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:05:44 2025 by rpki-client