
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
File: 1-TmwPxKU69NaOxXWldfpH4y0H6A.mft (raw, json)
Hash identifier: OxlFI07CqHqzndnauoRlUp6TZ8CBpy4xkpv7K8N4HR0=
Subject key identifier: 32:33:B4:11:48:5E:6D:47:14:B2:42:54:28:D9:0B:17:97:2C:37:A4
Authority key identifier: F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
Certificate issuer: /CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Certificate serial: 0198D5F184C166CF3BB97927B3901805D71B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
Manifest number: 1295
Signing time: Sat 23 Aug 2025 08:00:31 +0000
Manifest this update: Sat 23 Aug 2025 08:00:31 +0000
Manifest next update: Sun 24 Aug 2025 08:00:31 +0000
Files and hashes: 1: 1-TmwPxKU69NaOxXWldfpH4y0H6A.crl (hash: WE0iqn/COwutHxAzDQYM85eAlIJ4foRyy4K0ova44G0=)
2: S1K-LNOfEdqMwJPR6JwjXy3twNM.roa (hash: 6+dgtQWWnCxkd6rViHnDLK3NWbLzGQNeNx6DA6f+PL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:84:c1:66:cf:3b:b9:79:27:b3:90:18:05:d7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Validity
Not Before: Aug 23 08:00:31 2025 GMT
Not After : Aug 24 08:00:31 2025 GMT
Subject: CN=3233b411485e6d4714b2425428d90b17972c37a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:52:d1:f3:d8:7c:78:f5:06:c6:b3:b8:85:b4:
b5:5d:e0:43:0d:5a:a7:cc:e6:22:14:b5:32:d6:3c:
f6:30:09:48:43:a3:77:4f:32:5f:19:88:6e:8d:f1:
c0:56:b8:72:1e:cd:7e:c6:fb:03:c9:f8:1f:d5:2b:
56:61:5d:9a:39:f9:63:1f:81:67:cc:b9:18:ee:a4:
ee:72:46:44:38:d8:46:74:eb:10:7f:c7:96:ad:6c:
e2:92:11:21:ae:ec:3a:ff:31:2f:23:44:84:ee:e1:
2e:24:f4:cf:80:01:e6:d4:b6:da:06:cc:80:45:9f:
dd:c6:2e:0a:5a:4e:a5:67:04:a2:d6:13:ba:a9:13:
b1:b1:bc:44:96:6f:eb:3d:f4:05:b6:02:cb:96:c7:
ab:89:2f:77:bb:da:f7:73:9f:3a:fc:e4:00:8d:d2:
07:d6:9e:07:9f:86:cc:58:af:38:ec:8e:34:5f:d1:
1c:f5:fe:cc:ea:55:bf:27:90:c0:4c:70:54:7e:23:
6c:58:11:68:97:88:50:52:7d:d4:11:38:86:b8:66:
af:36:81:73:e7:eb:1f:26:cb:6e:63:c1:32:a1:3b:
01:02:0f:cb:12:d7:b2:3f:69:9a:7a:5d:8a:9e:af:
e3:0d:33:51:ef:d8:4b:f7:66:6b:e8:6a:3f:7d:e0:
b2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:33:B4:11:48:5E:6D:47:14:B2:42:54:28:D9:0B:17:97:2C:37:A4
X509v3 Authority Key Identifier:
keyid:F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:75:ea:96:72:87:8c:e5:00:7f:a7:e8:49:c6:93:3b:0f:c8:
6c:47:5e:23:59:99:a8:92:f8:62:f2:0c:f3:e8:8e:a1:dd:5c:
44:c5:98:87:59:3b:f2:9d:36:3a:da:d6:95:27:f3:96:db:4f:
37:c1:39:87:9f:ef:d9:4c:31:7b:fb:3a:3a:76:53:a4:a6:4c:
59:bf:6e:de:bf:3f:b6:69:5e:a9:83:56:7d:99:66:ea:e6:d2:
cc:5f:9c:7d:61:36:d8:7a:df:bb:82:58:09:48:5a:4b:31:80:
92:61:26:89:5b:ee:76:33:f3:14:54:72:88:e1:39:fc:ce:ae:
92:9e:ab:1c:ec:76:e2:d0:aa:d4:ea:16:80:f7:91:21:53:1e:
fd:80:06:12:f3:a1:88:bd:40:aa:27:53:3d:e2:a8:e9:bf:93:
c5:4b:b0:7c:29:dc:cc:82:33:0f:71:ab:16:fc:96:1a:63:48:
76:f5:2e:57:61:96:d9:a7:1b:ce:bf:d1:0e:8c:c2:98:47:cb:
57:ea:67:c7:08:2e:ca:82:4c:d5:77:ca:35:02:05:75:0b:c8:
ab:69:3f:1e:2e:2b:bd:3a:ee:66:64:1b:6a:af:ee:ab:cd:8a:
54:4b:bf:f9:93:7c:ef:a7:52:0b:86:52:b8:70:21:b2:83:9a:
dc:f0:0a:e6
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjV8YTBZs87uXkns5AYBdcbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MzliMDNmMTI5NGViZDM1YTNiMTVkNjk1ZDdlOTFmOGNi
NDFmYTAwHhcNMjUwODIzMDgwMDMxWhcNMjUwODI0MDgwMDMxWjAzMTEwLwYDVQQD
EygzMjMzYjQxMTQ4NWU2ZDQ3MTRiMjQyNTQyOGQ5MGIxNzk3MmMzN2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlLR89h8ePUGxrO4hbS1XeBDDVqn
zOYiFLUy1jz2MAlIQ6N3TzJfGYhujfHAVrhyHs1+xvsDyfgf1StWYV2aOfljH4Fn
zLkY7qTuckZEONhGdOsQf8eWrWzikhEhruw6/zEvI0SE7uEuJPTPgAHm1LbaBsyA
RZ/dxi4KWk6lZwSi1hO6qROxsbxElm/rPfQFtgLLlseriS93u9r3c586/OQAjdIH
1p4Hn4bMWK847I40X9Ec9f7M6lW/J5DATHBUfiNsWBFol4hQUn3UETiGuGavNoFz
5+sfJstuY8EyoTsBAg/LEteyP2mael2Knq/jDTNR79hL92Zr6Go/feCyWwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDIztBFIXm1HFLJCVCjZCxeXLDekMB8GA1UdIwQY
MBaAFPk5sD8SlOvTWjsV1pXX6R+MtB+gMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1UbXdQeEtVNjlOYU94WFdsZGZwSDR5MEg2QS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvMGM5ZGU4LWNlZjItNGQ4ZC1hOTIw
LTc2NTk0YTE5MTc3Yy8xLzEtVG13UHhLVTY5TmFPeFhXbGRmcEg0eTBINkEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2E3LzBjOWRlOC1jZWYyLTRkOGQtYTkyMC03NjU5NGExOTE3
N2MvMS8xLVRtd1B4S1U2OU5hT3hYV2xkZnBINHkwSDZBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3Xq
lnKHjOUAf6foScaTOw/IbEdeI1mZqJL4YvIM8+iOod1cRMWYh1k78p02OtrWlSfz
lttPN8E5h5/v2Uwxe/s6OnZTpKZMWb9u3r8/tmleqYNWfZlm6ubSzF+cfWE22Hrf
u4JYCUhaSzGAkmEmiVvudjPzFFRyiOE5/M6ukp6rHOx24tCq1OoWgPeRIVMe/YAG
EvOhiL1AqidTPeKo6b+TxUuwfCnczIIzD3GrFvyWGmNIdvUuV2GW2acbzr/RDozC
mEfLV+pnxwguyoJM1XfKNQIFdQvIq2k/Hi4rvTruZmQbaq/uq82KVEu/+ZN876dS
C4ZSuHAhsoOa3PAK5g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:03 2025 by rpki-client