Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
File: TO94CCwHKSqq4kD27P06_bp4uMo.mft (raw, json)
Hash identifier: B2DbW+ZSJS7G0r6uJnrC5YGVSmzvdhbGoOg8tDZWcew=
Subject key identifier: BB:7E:88:6E:7E:37:C1:45:4B:39:E3:4C:EA:42:1E:48:CD:33:C8:21
Authority key identifier: 4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA
Certificate issuer: /CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca
Certificate serial: 0198D4A812F94022FCEF4B807A1CBDC07537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
Manifest number: 03F1
Signing time: Sat 23 Aug 2025 02:00:41 +0000
Manifest this update: Sat 23 Aug 2025 02:00:41 +0000
Manifest next update: Sun 24 Aug 2025 02:00:41 +0000
Files and hashes: 1: TO94CCwHKSqq4kD27P06_bp4uMo.crl (hash: LxdzkiYA20eL2Kki2uM4Rb6ABfAmMcySCl1UuH6bSAM=)
2: wqDhS7gdeGbdKyK4P2B2xid5RCk.roa (hash: pzt+fKb4dYAAFu+QRte1CXzAs8gCt6ejAy8RnTWXAJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:12:f9:40:22:fc:ef:4b:80:7a:1c:bd:c0:75:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca
Validity
Not Before: Aug 23 02:00:41 2025 GMT
Not After : Aug 24 02:00:41 2025 GMT
Subject: CN=bb7e886e7e37c1454b39e34cea421e48cd33c821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:20:ee:07:da:b0:7e:ab:87:f9:e2:82:be:
36:6c:7f:ed:f1:60:02:04:56:14:b4:9d:d5:26:7f:
c4:c5:bd:12:cb:2a:d4:ac:f0:32:e3:be:5d:e0:98:
71:63:27:b8:e0:0c:ce:b8:e8:d4:ec:19:6a:b5:3c:
39:8a:20:45:07:57:65:2a:66:ef:aa:6d:3c:e6:f7:
4b:87:6e:5b:fb:4e:09:ad:d2:f8:04:2a:3d:52:01:
a1:fb:d3:5e:74:66:ef:c8:3a:ff:44:c4:fe:e2:50:
0a:13:0c:04:74:c4:e5:d7:9e:39:2a:6d:39:49:16:
14:65:dd:3d:fd:bf:2f:ef:57:94:71:cc:23:c2:83:
47:25:35:87:bc:3f:b8:62:29:0d:78:a1:5a:2d:c2:
4a:d8:5a:ca:5c:27:ea:e2:e6:01:57:48:99:d6:44:
1c:af:57:e3:cb:4b:25:6a:83:d5:d9:88:81:1b:4d:
38:23:fc:56:5a:a0:9c:b6:be:32:dc:82:70:91:82:
ad:16:84:e8:1f:a9:ba:d7:5f:f7:60:6b:93:0f:85:
ac:bb:eb:31:d9:9f:38:82:ae:e4:96:27:7a:07:94:
81:d8:57:76:e3:cb:b8:58:36:70:09:de:a1:46:00:
60:f9:89:bf:5b:a1:9a:eb:3a:c6:24:bf:46:1f:76:
60:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7E:88:6E:7E:37:C1:45:4B:39:E3:4C:EA:42:1E:48:CD:33:C8:21
X509v3 Authority Key Identifier:
keyid:4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:45:d5:73:9e:87:95:76:27:5b:77:e3:7e:47:6a:66:de:c3:
e9:6e:5d:65:0c:90:58:64:ad:f6:74:f0:20:76:dc:0c:87:1e:
b5:8f:ee:8f:55:20:28:b9:9f:42:20:45:3e:4b:92:a6:cb:ea:
65:59:bf:5d:59:8b:87:be:ef:2c:7d:5d:f3:bf:09:d0:c2:e9:
50:fa:7a:77:58:1e:09:d5:be:6b:ca:0e:47:32:56:b2:53:93:
8d:61:8a:a9:07:e8:2b:fc:b6:50:1b:27:e7:ab:00:45:ba:22:
5b:77:8b:a9:6e:49:56:39:c1:d8:2f:8d:66:7d:af:0d:35:0b:
80:28:fe:1b:e9:7c:de:c2:7c:27:8f:dd:7a:8b:29:d8:36:1e:
18:de:65:53:c9:d8:ad:4e:d0:40:17:dc:80:e7:e8:6a:3d:43:
d3:74:70:12:71:69:16:91:b5:70:8e:9b:0a:0f:6f:4b:eb:b9:
81:6b:7b:91:85:e1:d9:88:8a:29:1e:0b:af:2a:aa:ff:6f:42:
f1:aa:59:ff:b1:4a:0a:3f:f4:06:07:70:67:d0:33:a9:8b:48:
57:5b:40:7c:22:c9:83:38:90:15:92:1d:b2:39:0a:21:39:61:
a7:f3:f5:76:3d:4b:7c:ab:fe:0a:35:ce:02:ab:b7:14:9e:e7:
26:64:c3:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqBL5QCL870uAehy9wHU3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZWY3ODA4MmMwNzI5MmFhYWUyNDBmNmVjZmQzYWZkYmE3
OGI4Y2EwHhcNMjUwODIzMDIwMDQxWhcNMjUwODI0MDIwMDQxWjAzMTEwLwYDVQQD
EyhiYjdlODg2ZTdlMzdjMTQ1NGIzOWUzNGNlYTQyMWU0OGNkMzNjODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TUg7gfasH6rh/nigr42bH/t8WAC
BFYUtJ3VJn/Exb0SyyrUrPAy475d4JhxYye44AzOuOjU7BlqtTw5iiBFB1dlKmbv
qm085vdLh25b+04JrdL4BCo9UgGh+9NedGbvyDr/RMT+4lAKEwwEdMTl1545Km05
SRYUZd09/b8v71eUccwjwoNHJTWHvD+4YikNeKFaLcJK2FrKXCfq4uYBV0iZ1kQc
r1fjy0slaoPV2YiBG004I/xWWqCctr4y3IJwkYKtFoToH6m611/3YGuTD4Wsu+sx
2Z84gq7klid6B5SB2Fd248u4WDZwCd6hRgBg+Ym/W6Ga6zrGJL9GH3ZgaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLt+iG5+N8FFSznjTOpCHkjNM8ghMB8GA1UdIwQY
MBaAFEzveAgsBykqquJA9uz9Ov26eLjKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE85NENDd0hLU3FxNGtEMjdQMDZfYnA0dU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xNmZiYmYtNmNkZC00OWI3LThjMjEt
ODgzYjkwY2QxMzRhLzEvVE85NENDd0hLU3FxNGtEMjdQMDZfYnA0dU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xNmZiYmYtNmNkZC00OWI3LThjMjEtODgzYjkwY2QxMzRh
LzEvVE85NENDd0hLU3FxNGtEMjdQMDZfYnA0dU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUXVc56H
lXYnW3fjfkdqZt7D6W5dZQyQWGSt9nTwIHbcDIcetY/uj1UgKLmfQiBFPkuSpsvq
ZVm/XVmLh77vLH1d878J0MLpUPp6d1geCdW+a8oORzJWslOTjWGKqQfoK/y2UBsn
56sARboiW3eLqW5JVjnB2C+NZn2vDTULgCj+G+l83sJ8J4/deosp2DYeGN5lU8nY
rU7QQBfcgOfoaj1D03RwEnFpFpG1cI6bCg9vS+u5gWt7kYXh2YiKKR4Lryqq/29C
8apZ/7FKCj/0BgdwZ9AzqYtIV1tAfCLJgziQFZIdsjkKITlhp/P1dj1LfKv+CjXO
Aqu3FJ7nJmTDxQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:20 2025 by rpki-client