Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.mft
File: tKW-MwcSDmXjxBZcnI50jBwSp6I.mft (raw, json)
Hash identifier: vYLCV8UnPvWMpEJqo3Yl7YIFKGHCX2VP5EOf+Zfrutw=
Subject key identifier: B2:06:C6:69:E3:98:10:1D:46:31:C8:2A:C8:22:73:ED:F3:62:80:2F
Authority key identifier: B4:A5:BE:33:07:12:0E:65:E3:C4:16:5C:9C:8E:74:8C:1C:12:A7:A2
Certificate issuer: /CN=b4a5be3307120e65e3c4165c9c8e748c1c12a7a2
Certificate serial: 0198D4727AFD5616306EBEA13D52DF173F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKW-MwcSDmXjxBZcnI50jBwSp6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.mft
Manifest number: 0599
Signing time: Sat 23 Aug 2025 01:02:08 +0000
Manifest this update: Sat 23 Aug 2025 01:02:08 +0000
Manifest next update: Sun 24 Aug 2025 01:02:08 +0000
Files and hashes: 1: pHJ5oRo1kF5oiX8KeKirS42gdJI.roa (hash: pWmX7zoUYI3ChoG1HELYfAkOPLPYyR79PMNSLK6H1B0=)
2: tKW-MwcSDmXjxBZcnI50jBwSp6I.crl (hash: IAACIjwwGqL3WxdXYtCJUxg3jgXBmh1TAZUYp2zsR94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKW-MwcSDmXjxBZcnI50jBwSp6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:7a:fd:56:16:30:6e:be:a1:3d:52:df:17:3f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a5be3307120e65e3c4165c9c8e748c1c12a7a2
Validity
Not Before: Aug 23 01:02:08 2025 GMT
Not After : Aug 24 01:02:08 2025 GMT
Subject: CN=b206c669e398101d4631c82ac82273edf362802f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5b:ad:ca:1c:c2:dd:53:ba:87:b6:a2:22:17:
df:fc:e5:cd:32:70:da:3c:3b:66:78:04:aa:30:37:
0e:3d:2e:55:aa:f1:77:29:d7:74:e5:9c:37:41:b8:
0e:a0:24:97:92:91:73:25:d6:f6:f6:b3:8d:f2:a2:
14:79:a3:28:43:18:c4:92:26:2f:06:f8:0b:3c:e6:
84:cf:5e:30:40:8f:74:80:7d:2f:fd:de:85:a0:9e:
cd:42:10:f0:54:89:89:02:cc:35:14:ff:b8:f3:cc:
c3:5b:5c:cc:bf:6b:52:b7:30:a5:32:d8:34:5f:6b:
a0:45:08:88:70:d2:fd:26:ec:c7:f7:33:57:7a:0e:
45:ca:eb:f5:da:9e:51:a2:4e:03:5f:c0:73:54:c7:
bb:01:c8:88:16:7b:9f:26:99:1a:0c:90:13:22:44:
ed:30:8d:30:fc:d3:c9:69:84:13:13:06:ec:0e:b1:
39:e2:33:ea:bd:72:ac:74:22:1b:de:66:38:cc:9e:
8f:98:16:c5:ea:c5:dc:cf:d9:b3:bc:89:37:64:61:
64:c8:79:c7:74:90:10:9a:73:4a:6f:e5:fa:30:df:
31:57:04:fb:fb:8c:41:6c:09:1e:0c:1f:56:31:4a:
36:89:71:a8:6b:02:56:90:db:3c:52:8e:49:a8:9e:
56:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:06:C6:69:E3:98:10:1D:46:31:C8:2A:C8:22:73:ED:F3:62:80:2F
X509v3 Authority Key Identifier:
keyid:B4:A5:BE:33:07:12:0E:65:E3:C4:16:5C:9C:8E:74:8C:1C:12:A7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKW-MwcSDmXjxBZcnI50jBwSp6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:6a:89:46:7e:fe:46:92:5d:af:a3:42:1b:23:b4:69:81:c8:
ac:2f:c7:ec:af:03:55:2e:7a:4a:c2:35:01:0f:4a:1b:bf:09:
1a:0e:e3:a7:57:55:3d:07:08:af:34:ec:ee:8a:ec:0a:22:bb:
59:d6:e5:ca:31:71:33:d0:24:f7:79:b1:06:d2:ad:22:fe:a1:
fd:0d:f4:af:d3:44:3a:c3:75:7e:43:0a:cf:51:ac:81:fa:de:
cb:66:bd:5f:dc:6b:7e:2f:3a:6d:ea:d1:6e:c0:62:3b:aa:61:
f5:80:98:79:2d:db:ed:d6:e4:3c:20:9f:be:25:c7:07:16:3c:
ba:4a:02:28:a6:4d:a4:1c:d6:62:04:0c:9b:7e:de:16:c2:66:
8e:0b:fb:08:6f:fc:1e:9e:5a:21:5d:5c:f4:49:59:e1:7f:2e:
eb:c6:33:3a:04:7f:9b:93:54:df:a6:4d:17:b2:27:19:06:4c:
70:c0:da:dc:45:7a:5f:03:b6:e0:78:90:3d:66:c1:60:04:d7:
d2:06:78:03:d2:01:a2:71:b8:28:fc:9a:f8:24:2d:65:5a:9d:
49:cb:9e:69:0d:5d:07:c8:65:a5:32:0b:34:ed:59:2a:bb:98:
0b:88:b5:2d:7b:f8:cc:f7:05:63:92:20:dd:f6:da:63:6a:41:
5e:1b:73:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcnr9VhYwbr6hPVLfFz8QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YTViZTMzMDcxMjBlNjVlM2M0MTY1YzljOGU3NDhjMWMx
MmE3YTIwHhcNMjUwODIzMDEwMjA4WhcNMjUwODI0MDEwMjA4WjAzMTEwLwYDVQQD
EyhiMjA2YzY2OWUzOTgxMDFkNDYzMWM4MmFjODIyNzNlZGYzNjI4MDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lutyhzC3VO6h7aiIhff/OXNMnDa
PDtmeASqMDcOPS5VqvF3Kdd05Zw3QbgOoCSXkpFzJdb29rON8qIUeaMoQxjEkiYv
BvgLPOaEz14wQI90gH0v/d6FoJ7NQhDwVImJAsw1FP+488zDW1zMv2tStzClMtg0
X2ugRQiIcNL9JuzH9zNXeg5Fyuv12p5Rok4DX8BzVMe7AciIFnufJpkaDJATIkTt
MI0w/NPJaYQTEwbsDrE54jPqvXKsdCIb3mY4zJ6PmBbF6sXcz9mzvIk3ZGFkyHnH
dJAQmnNKb+X6MN8xVwT7+4xBbAkeDB9WMUo2iXGoawJWkNs8Uo5JqJ5WmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIGxmnjmBAdRjHIKsgic+3zYoAvMB8GA1UdIwQY
MBaAFLSlvjMHEg5l48QWXJyOdIwcEqeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEtXLU13Y1NEbVhqeEJaY25JNTBqQndTcDZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mZTI3NmYtOTQ2YS00NDZiLTg0NTMt
MTcwZWIxYzlmZWM4LzEvdEtXLU13Y1NEbVhqeEJaY25JNTBqQndTcDZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9mZTI3NmYtOTQ2YS00NDZiLTg0NTMtMTcwZWIxYzlmZWM4
LzEvdEtXLU13Y1NEbVhqeEJaY25JNTBqQndTcDZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZGqJRn7+
RpJdr6NCGyO0aYHIrC/H7K8DVS56SsI1AQ9KG78JGg7jp1dVPQcIrzTs7orsCiK7
WdblyjFxM9Ak93mxBtKtIv6h/Q30r9NEOsN1fkMKz1Gsgfrey2a9X9xrfi86berR
bsBiO6ph9YCYeS3b7dbkPCCfviXHBxY8ukoCKKZNpBzWYgQMm37eFsJmjgv7CG/8
Hp5aIV1c9ElZ4X8u68YzOgR/m5NU36ZNF7InGQZMcMDa3EV6XwO24HiQPWbBYATX
0gZ4A9IBonG4KPya+CQtZVqdScueaQ1dB8hlpTILNO1ZKruYC4i1LXv4zPcFY5Ig
3fbaY2pBXhtzpw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:07 2025 by rpki-client