Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: nKV2Gvb5ycKu+yO9Z5SVFBcNuyZHqhHEeu5w+3YEBhE=
Subject key identifier: D6:B2:0E:9E:98:F4:64:0B:58:2A:F6:CB:D0:EE:0B:47:6D:56:90:87
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 0198D4DFF3A11F192D981E37B9C40E580461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 0AB5
Signing time: Sat 23 Aug 2025 03:01:43 +0000
Manifest this update: Sat 23 Aug 2025 03:01:43 +0000
Manifest next update: Sun 24 Aug 2025 03:01:43 +0000
Files and hashes: 1: BGPcLkk4F9FLxsMbGn-M_F2CXto.roa (hash: PqbiTHE+O2cRLL+2/Q85oltHntGJN/X4GOAuPJ95eug=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: 1fWScguojiqSLXLaPu6357Bk+AfyQMKg55OyATFfQ/Q=)
3: nGObtVTwcFKea1knaujpvqhbims.roa (hash: l9jwJiOaQQcxbUJC1OWeTnOmsW+JZFElguXsrGzJSD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f3:a1:1f:19:2d:98:1e:37:b9:c4:0e:58:04:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Aug 23 03:01:43 2025 GMT
Not After : Aug 24 03:01:43 2025 GMT
Subject: CN=d6b20e9e98f4640b582af6cbd0ee0b476d569087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bb:4a:4e:2e:4f:2e:fa:e2:3c:0a:12:da:f2:
a6:c7:2f:b9:bd:42:d3:a9:73:c0:3b:0a:0f:a9:19:
26:c1:f4:dd:c1:6e:e8:d7:ca:49:ee:82:b0:4c:0f:
84:80:ef:12:a0:cb:29:c9:a5:43:c4:c2:da:e2:79:
d9:f1:f8:9b:60:ad:0a:f7:f8:f6:ca:2a:e0:89:3c:
ab:c0:53:07:fe:28:e9:82:a3:f3:c7:6b:da:89:58:
96:bf:07:8e:00:e5:df:9c:50:2a:90:66:ee:bd:2a:
97:b3:55:e2:18:99:f4:44:9a:80:23:25:1f:fb:eb:
43:b7:22:be:86:b3:2b:04:70:c7:5f:35:51:b0:14:
e1:58:4a:90:c7:d4:e3:d7:75:40:fc:c7:20:1c:29:
4e:6f:91:9a:dc:27:c2:f9:1b:ba:c0:4e:82:6d:c5:
0c:b8:09:ca:8d:cc:66:03:3e:d5:b3:89:be:29:c9:
7e:80:14:ad:7b:5c:36:8e:0d:f9:68:2b:41:53:03:
47:97:b0:54:c7:ab:b7:71:fa:49:75:4e:2f:c1:63:
44:30:86:88:99:2c:7b:34:2d:4a:77:c6:32:3d:ab:
8c:67:c1:f3:5d:33:9b:d5:dd:07:ef:fc:e9:84:cc:
1a:f1:22:a5:3e:3a:ef:dd:b9:97:83:6e:4b:68:90:
ae:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B2:0E:9E:98:F4:64:0B:58:2A:F6:CB:D0:EE:0B:47:6D:56:90:87
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:99:40:38:d1:51:47:97:95:61:fc:62:76:ea:39:dc:bb:0a:
85:ba:52:c3:ba:cb:65:c8:1d:ba:9e:1b:0f:eb:24:ee:ab:a3:
6d:32:28:69:1b:26:ed:35:b4:8b:5a:3b:40:05:84:a8:37:99:
b2:04:a9:e8:c6:b5:e9:d1:ee:ae:92:4e:a6:63:51:27:e1:02:
4f:65:90:01:51:a1:b6:80:2b:a9:88:9b:8d:2c:c5:03:53:c6:
ef:9d:80:bf:5c:9a:71:65:47:27:23:6b:57:9f:60:cb:2c:01:
78:1b:8a:24:6c:0d:a3:05:e3:4e:47:85:a1:10:f9:bd:2d:96:
e5:0f:96:6c:59:7c:6a:3f:88:b3:91:21:a8:d4:44:46:a7:e6:
4d:81:9e:64:d9:f4:66:6d:bf:7a:5a:63:51:20:b2:94:15:84:
30:6e:4a:54:19:e1:8d:d0:44:0b:f2:f1:ff:e7:c7:ef:0a:e5:
61:a0:e8:4c:d6:d4:2e:e7:03:a7:90:2a:26:fe:59:75:57:bf:
85:eb:e8:76:40:45:1c:b6:d5:af:85:eb:ab:e5:1c:c1:96:bd:
25:8a:be:f2:00:06:42:d9:a9:65:93:20:db:ca:34:83:14:00:
ff:c0:7e:56:c1:88:ff:fc:08:9a:3f:ef:1c:42:70:b2:ee:0b:
a9:d5:55:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3/OhHxktmB43ucQOWARhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzlmOGI4ZmViYWI2ZDIwOWEyNDk4MWUzOTlmZDYwNDMy
ZTFjYzkwHhcNMjUwODIzMDMwMTQzWhcNMjUwODI0MDMwMTQzWjAzMTEwLwYDVQQD
EyhkNmIyMGU5ZTk4ZjQ2NDBiNTgyYWY2Y2JkMGVlMGI0NzZkNTY5MDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrtKTi5PLvriPAoS2vKmxy+5vULT
qXPAOwoPqRkmwfTdwW7o18pJ7oKwTA+EgO8SoMspyaVDxMLa4nnZ8fibYK0K9/j2
yirgiTyrwFMH/ijpgqPzx2vaiViWvweOAOXfnFAqkGbuvSqXs1XiGJn0RJqAIyUf
++tDtyK+hrMrBHDHXzVRsBThWEqQx9Tj13VA/McgHClOb5Ga3CfC+Ru6wE6CbcUM
uAnKjcxmAz7Vs4m+Kcl+gBSte1w2jg35aCtBUwNHl7BUx6u3cfpJdU4vwWNEMIaI
mSx7NC1Kd8YyPauMZ8HzXTOb1d0H7/zphMwa8SKlPjrv3bmXg25LaJCuYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNayDp6Y9GQLWCr2y9DuC0dtVpCHMB8GA1UdIwQY
MBaAFEw5+Lj+urbSCaJJgeOZ/WBDLhzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYt
OTMyMGZlMTNlNWZlLzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYtOTMyMGZlMTNlNWZl
LzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJlAONFR
R5eVYfxiduo53LsKhbpSw7rLZcgdup4bD+sk7qujbTIoaRsm7TW0i1o7QAWEqDeZ
sgSp6Ma16dHurpJOpmNRJ+ECT2WQAVGhtoArqYibjSzFA1PG752Av1yacWVHJyNr
V59gyywBeBuKJGwNowXjTkeFoRD5vS2W5Q+WbFl8aj+Is5EhqNRERqfmTYGeZNn0
Zm2/elpjUSCylBWEMG5KVBnhjdBEC/Lx/+fH7wrlYaDoTNbULucDp5AqJv5ZdVe/
hevodkBFHLbVr4Xrq+UcwZa9JYq+8gAGQtmpZZMg28o0gxQA/8B+VsGI//wImj/v
HEJwsu4LqdVVUg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:52 2025 by rpki-client