Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
File: TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft (raw, json)
Hash identifier: xV1yQ7WhXuIwinnhu5dmacdW1AcOmcmSPdssb3qlkaw=
Subject key identifier: C2:59:70:54:8C:1C:82:9F:53:E5:A5:06:1B:57:74:E1:FB:3D:A1:C6
Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Certificate serial: 0197CA9525B201D9C0D8E208340444822A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
Manifest number: 15C1
Signing time: Wed 02 Jul 2025 10:01:01 +0000
Manifest this update: Wed 02 Jul 2025 10:01:01 +0000
Manifest next update: Thu 03 Jul 2025 10:01:01 +0000
Files and hashes: 1: TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl (hash: NIW+SzoWKqR7TyKgbk33vHoxZ/MiylTmlhVby8EpuYc=)
2: bs1HYE5HpmfRDe1IWRWlAw4_YbQ.roa (hash: /9wCX+4PJTuFTnMcFlhOot3PdJrbFSkbu3ySPd314JY=)
3: kvulLtgS7l9j5cL5cr_z1UEgt1M.roa (hash: lwycUBIUeNB/fogCEgMYVAepQLASER5k8Ye40EXBAoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:95:25:b2:01:d9:c0:d8:e2:08:34:04:44:82:2a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Validity
Not Before: Jul 2 10:01:01 2025 GMT
Not After : Jul 3 10:01:01 2025 GMT
Subject: CN=c25970548c1c829f53e5a5061b5774e1fb3da1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:9e:61:44:3d:f5:32:b9:65:81:99:bc:f4:
bc:34:f5:04:e0:2f:3f:b1:47:95:02:7e:29:41:e7:
fd:b6:52:d5:45:8c:69:e8:d2:a9:9f:00:ea:ce:32:
f8:6a:02:c7:39:95:86:49:46:9d:e4:ec:80:e4:cf:
20:25:47:df:73:ed:53:dc:17:20:a3:83:b6:63:49:
b4:ce:e1:b4:d4:28:d2:1c:b0:0f:94:f2:4b:62:42:
e7:78:81:f9:2e:50:d7:9a:74:99:ea:59:c0:3b:87:
fd:9e:3f:4c:9d:4a:f0:b3:58:6a:cd:66:6b:56:0b:
3b:53:17:89:75:ae:8c:75:59:dd:5f:90:37:e8:d4:
14:93:a5:ff:67:f0:6c:5c:21:59:30:64:18:c4:1b:
d6:a3:60:01:58:12:35:ab:f9:ab:8b:b0:03:b4:c9:
a5:59:93:72:69:f1:6f:55:13:b3:7f:3c:bd:07:cf:
a0:06:76:92:70:8a:23:d9:a0:62:82:ea:2d:fb:16:
3b:98:fc:e1:87:4a:b2:04:41:4f:f0:39:c6:b7:6c:
41:35:da:92:46:0b:17:8e:25:70:21:64:55:1d:9b:
78:a1:69:d3:ab:9d:c9:ff:22:82:de:98:2a:21:b0:
76:13:64:e3:7a:96:05:57:2b:8b:ec:5b:21:8a:0b:
89:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:59:70:54:8C:1C:82:9F:53:E5:A5:06:1B:57:74:E1:FB:3D:A1:C6
X509v3 Authority Key Identifier:
keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:83:72:1e:61:97:01:91:c5:4e:65:fe:30:14:ac:9b:26:1c:
5e:63:c0:b6:3e:e1:cd:c1:47:8d:01:aa:b4:25:20:e1:0c:6b:
b7:76:55:0f:2f:85:fe:d9:23:0d:e8:d1:33:dd:11:7b:4e:c1:
2f:68:38:b8:83:0c:6e:9d:67:92:fc:3d:c4:26:5d:c1:8b:81:
cb:34:bf:40:a6:b8:ef:22:0e:fd:d1:82:39:7c:fb:50:7a:c3:
f3:49:b3:a1:29:00:4f:30:4d:4e:1c:43:19:00:c8:43:0d:22:
f5:12:2c:de:23:f0:d4:d0:a0:26:59:de:2b:43:44:da:5a:bb:
29:4f:15:42:0d:35:4a:a2:32:b1:47:99:cc:79:67:79:5a:90:
23:b7:ca:69:7b:11:6c:be:13:40:be:45:ee:b4:56:70:de:fc:
b6:75:32:01:8d:84:49:fd:97:9d:a8:20:77:66:34:be:aa:2a:
c8:46:62:6c:e0:d8:40:b1:c7:97:ba:98:8f:09:9c:96:9d:a5:
f5:f0:0b:ec:60:b0:7d:7c:79:18:36:60:3b:f4:e3:0c:df:1d:
27:56:f0:74:6d:ee:03:98:c7:1c:fa:ba:b1:ae:87:91:91:ec:
b2:af:31:fa:98:cc:35:97:5e:5e:87:9e:5d:2a:f3:a4:15:19:
ea:de:e7:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKlSWyAdnA2OIINAREgipHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjY2JjNWUwNDVlYWE1Zjc2MmE5MTQ2MjQ0YzE5MjQ4YjYy
YmE5NzYwHhcNMjUwNzAyMTAwMTAxWhcNMjUwNzAzMTAwMTAxWjAzMTEwLwYDVQQD
EyhjMjU5NzA1NDhjMWM4MjlmNTNlNWE1MDYxYjU3NzRlMWZiM2RhMWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaCeYUQ99TK5ZYGZvPS8NPUE4C8/
sUeVAn4pQef9tlLVRYxp6NKpnwDqzjL4agLHOZWGSUad5OyA5M8gJUffc+1T3Bcg
o4O2Y0m0zuG01CjSHLAPlPJLYkLneIH5LlDXmnSZ6lnAO4f9nj9MnUrws1hqzWZr
Vgs7UxeJda6MdVndX5A36NQUk6X/Z/BsXCFZMGQYxBvWo2ABWBI1q/mri7ADtMml
WZNyafFvVROzfzy9B8+gBnaScIoj2aBiguot+xY7mPzhh0qyBEFP8DnGt2xBNdqS
RgsXjiVwIWRVHZt4oWnTq53J/yKC3pgqIbB2E2TjepYFVyuL7FshiguJeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJZcFSMHIKfU+WlBhtXdOH7PaHGMB8GA1UdIwQY
MBaAFEzLxeBF6qX3YqkUYkTBkki2K6l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iZjY2ZGQtNjIzNy00OGRlLWFlZDct
YTdjNTlkZGNmNzZiLzEvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iZjY2ZGQtNjIzNy00OGRlLWFlZDctYTdjNTlkZGNmNzZi
LzEvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYNyHmGX
AZHFTmX+MBSsmyYcXmPAtj7hzcFHjQGqtCUg4Qxrt3ZVDy+F/tkjDejRM90Re07B
L2g4uIMMbp1nkvw9xCZdwYuByzS/QKa47yIO/dGCOXz7UHrD80mzoSkATzBNThxD
GQDIQw0i9RIs3iPw1NCgJlneK0NE2lq7KU8VQg01SqIysUeZzHlneVqQI7fKaXsR
bL4TQL5F7rRWcN78tnUyAY2ESf2Xnaggd2Y0vqoqyEZibODYQLHHl7qYjwmclp2l
9fAL7GCwfXx5GDZgO/TjDN8dJ1bwdG3uA5jHHPq6sa6HkZHssq8x+pjMNZdeXoee
XSrzpBUZ6t7n/w==
-----END CERTIFICATE-----
Generated at Wed Jul 2 13:40:33 2025 by rpki-client