Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
File: T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json)
Hash identifier: fd/jTInXEpX/Rf4qieiG0V9vU78J5i8B+oPKJdnxOi4=
Subject key identifier: 54:8A:D4:55:FF:3D:B5:BF:23:2E:78:08:19:9D:2A:EC:01:E2:65:7C
Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
Certificate issuer: /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Certificate serial: 0198D5BBFC9673878EAA0FB7AB94C87DD671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:02:03 +0000
Manifest this update: Sat 23 Aug 2025 07:02:03 +0000
Manifest next update: Sun 24 Aug 2025 07:02:03 +0000
Files and hashes: 1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: SwBXvk5Dp6LMQXQOCBKOTIcmga0unCpYMR7Pz85szdE=)
2: kfsN1HfyfK-NQ9iZIGxx8I0iebc.roa (hash: 471clsXqk9Nk68jCHR5a7ma3NzbA1DO/nClDnuoSJLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:fc:96:73:87:8e:aa:0f:b7:ab:94:c8:7d:d6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Validity
Not Before: Aug 23 07:02:03 2025 GMT
Not After : Aug 24 07:02:03 2025 GMT
Subject: CN=548ad455ff3db5bf232e7808199d2aec01e2657c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:98:89:3c:58:21:2d:3b:06:de:ed:64:9b:
34:60:b0:ac:14:1a:1d:69:ce:6f:a1:f6:2b:a3:be:
60:2c:a3:b7:55:a2:af:4e:24:41:cf:0d:63:e7:d3:
c0:ed:86:21:dc:0c:96:d1:8b:da:cc:74:68:53:bf:
e0:d0:37:d3:b0:ba:6e:f0:4b:8c:0f:89:73:be:d1:
92:18:4f:3a:1d:b0:67:0c:0a:1d:5e:01:50:98:60:
a5:6d:c4:f0:89:78:4d:26:ef:b9:3e:08:85:9f:89:
fb:98:77:df:94:77:04:aa:f6:c9:5c:f5:6f:42:a8:
ff:ac:82:05:01:5f:3f:4f:0f:44:6a:21:89:7e:39:
34:13:27:a9:a9:8b:03:23:6a:b3:9c:36:e6:a1:b6:
52:27:62:a8:ba:09:1b:3c:07:81:7e:33:ea:2f:29:
09:c8:c4:d2:3d:e6:50:bd:a9:13:ed:c3:e7:c6:43:
0f:89:7d:a1:83:16:4e:bc:0e:a7:06:1a:7f:57:46:
c0:2c:71:d1:f5:7a:3c:0b:4c:26:0b:7d:25:55:7b:
12:21:e3:e0:0f:6d:2a:5d:4d:3f:3b:1c:7b:30:a7:
99:ef:d3:4b:96:25:c2:e0:03:0f:34:f2:f0:d8:4b:
02:00:50:27:49:d9:b2:91:68:8c:b1:a3:a5:92:68:
2b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8A:D4:55:FF:3D:B5:BF:23:2E:78:08:19:9D:2A:EC:01:E2:65:7C
X509v3 Authority Key Identifier:
keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8f:65:ee:03:e1:73:19:68:22:4a:f8:3f:e2:46:c2:aa:ec:
d2:22:fb:8e:54:c0:f1:c8:c6:de:0b:69:eb:a8:25:e1:3b:34:
c4:c0:8e:9f:ef:0b:ef:02:54:45:25:2f:30:03:ed:46:b8:35:
e7:14:65:c2:9d:e0:50:52:4b:5c:d6:1d:69:5a:20:97:7b:5c:
01:91:67:55:32:4c:03:44:1a:b1:8f:7b:59:91:ec:08:8e:71:
07:8a:89:27:44:8a:e7:cf:cd:4e:b5:a7:9f:b5:56:c1:81:d2:
98:ca:90:0f:e0:5c:7d:15:df:2b:46:97:c5:38:08:60:09:77:
40:19:06:6a:bf:69:50:3f:c0:29:f1:04:6c:54:31:08:66:c2:
68:08:a9:3d:21:e7:f0:42:53:eb:93:20:8e:01:96:01:e9:2b:
33:3b:d2:f9:38:62:51:a1:6d:ae:93:25:86:78:4e:74:87:e2:
ba:88:3b:d5:39:45:dd:a6:09:6b:18:ce:1b:b9:a8:f8:0c:ab:
6c:35:c3:76:28:44:7a:b1:35:bb:80:5f:30:2a:de:af:de:76:
35:d2:9a:8c:9f:ed:94:c9:42:7d:df:e0:62:2a:06:71:7c:3b:
4b:dc:d9:85:16:8d:b8:82:dd:61:00:cf:8d:6b:b4:37:02:ae:
c1:11:55:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu/yWc4eOqg+3q5TIfdZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNmE5NDQ0YWRhYTUyM2M1NzY4ZTlmNmJlMTQwNjUxODNh
YzIwYTgwHhcNMjUwODIzMDcwMjAzWhcNMjUwODI0MDcwMjAzWjAzMTEwLwYDVQQD
Eyg1NDhhZDQ1NWZmM2RiNWJmMjMyZTc4MDgxOTlkMmFlYzAxZTI2NTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3GYiTxYIS07Bt7tZJs0YLCsFBod
ac5vofYro75gLKO3VaKvTiRBzw1j59PA7YYh3AyW0YvazHRoU7/g0DfTsLpu8EuM
D4lzvtGSGE86HbBnDAodXgFQmGClbcTwiXhNJu+5PgiFn4n7mHfflHcEqvbJXPVv
Qqj/rIIFAV8/Tw9EaiGJfjk0EyepqYsDI2qznDbmobZSJ2KougkbPAeBfjPqLykJ
yMTSPeZQvakT7cPnxkMPiX2hgxZOvA6nBhp/V0bALHHR9Xo8C0wmC30lVXsSIePg
D20qXU0/Oxx7MKeZ79NLliXC4AMPNPLw2EsCAFAnSdmykWiMsaOlkmgrBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSK1FX/PbW/Iy54CBmdKuwB4mV8MB8GA1UdIwQY
MBaAFE9qlEStqlI8V2jp9r4UBlGDrCCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDJxVVJLMnFVanhYYU9uMnZoUUdVWU9zSUtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85YzRmYjAtYzQ3NS00MjA0LTk5ODct
MGE5MWNhZGJlZTY2LzEvVDJxVVJLMnFVanhYYU9uMnZoUUdVWU9zSUtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85YzRmYjAtYzQ3NS00MjA0LTk5ODctMGE5MWNhZGJlZTY2
LzEvVDJxVVJLMnFVanhYYU9uMnZoUUdVWU9zSUtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfI9l7gPh
cxloIkr4P+JGwqrs0iL7jlTA8cjG3gtp66gl4Ts0xMCOn+8L7wJURSUvMAPtRrg1
5xRlwp3gUFJLXNYdaVogl3tcAZFnVTJMA0QasY97WZHsCI5xB4qJJ0SK58/NTrWn
n7VWwYHSmMqQD+BcfRXfK0aXxTgIYAl3QBkGar9pUD/AKfEEbFQxCGbCaAipPSHn
8EJT65MgjgGWAekrMzvS+ThiUaFtrpMlhnhOdIfiuog71TlF3aYJaxjOG7mo+Ayr
bDXDdihEerE1u4BfMCrer952NdKajJ/tlMlCfd/gYioGcXw7S9zZhRaNuILdYQDP
jWu0NwKuwRFVdQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:43 2025 by rpki-client