Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
File: TJMCnFsmOc0pufndUpTMlO9S1q8.mft (raw, json)
Hash identifier: 8pWGGEOoNBIsn4VqwaLArBEf6LTGVNEJ1RAQzAPOKao=
Subject key identifier: 68:78:DA:41:61:28:27:4C:E2:A5:BB:D1:47:0A:0C:EC:7D:49:8A:36
Authority key identifier: 4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
Certificate issuer: /CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Certificate serial: 0198D54E2FFF4003A37300152E72A8D0276F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
Manifest number: 0C7A
Signing time: Sat 23 Aug 2025 05:02:07 +0000
Manifest this update: Sat 23 Aug 2025 05:02:07 +0000
Manifest next update: Sun 24 Aug 2025 05:02:07 +0000
Files and hashes: 1: TJMCnFsmOc0pufndUpTMlO9S1q8.crl (hash: kyrOIKTA6v7N/w9qZzu36sLMlIYVa1A1agy8wP2qqDM=)
2: gm0FjeCIRrnMhU3d57SvCilXQ6Y.roa (hash: uUS5qc0jED6lwxU3POQRNrHoJ8s1cSrD4ysUmIZNtjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:2f:ff:40:03:a3:73:00:15:2e:72:a8:d0:27:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Validity
Not Before: Aug 23 05:02:07 2025 GMT
Not After : Aug 24 05:02:07 2025 GMT
Subject: CN=6878da416128274ce2a5bbd1470a0cec7d498a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bf:70:4c:96:7e:4c:58:f7:20:b2:c1:4d:b5:
78:df:f0:0b:77:6c:a7:80:88:56:ed:77:e3:b5:c3:
18:98:9a:b1:a6:b3:ca:bd:6e:18:65:58:08:fd:c3:
67:58:19:c3:8a:0a:55:13:12:eb:5c:45:46:b9:2b:
be:3b:39:89:f7:f6:ef:8c:ac:72:cb:50:df:bd:77:
73:a6:6e:21:1a:c5:17:2c:f7:04:ba:99:99:ee:b5:
0c:2b:6a:fd:5f:62:42:18:9e:ca:bc:26:75:77:26:
3c:55:64:06:a8:d3:eb:96:73:53:56:b5:96:02:58:
3c:14:85:ba:86:4a:4d:55:95:76:ba:7c:51:48:29:
ee:e5:38:8e:3a:c6:12:77:39:b6:ff:a9:19:03:fc:
e7:03:7e:94:53:50:a8:c0:b1:e0:ee:3d:49:5d:ee:
c3:00:f3:f4:ce:f0:82:1a:a4:5b:23:85:23:6d:46:
88:f4:4e:99:5f:8b:c3:3a:89:00:0c:62:90:cc:70:
88:74:1a:63:30:9c:85:53:ad:0a:50:f4:ce:15:95:
2f:e9:c8:14:11:74:7c:e3:a9:1e:f9:53:d6:45:5c:
44:fe:8d:3d:14:b9:5a:67:59:e6:83:5c:40:99:f5:
25:ce:90:07:67:f8:23:eb:ba:11:2f:ad:2c:99:90:
21:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:78:DA:41:61:28:27:4C:E2:A5:BB:D1:47:0A:0C:EC:7D:49:8A:36
X509v3 Authority Key Identifier:
keyid:4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a3:8b:ad:42:c2:4f:2d:78:1b:a7:2e:8b:60:91:5c:d2:93:
f4:d8:d6:99:34:2c:bb:db:ba:50:5c:d4:e5:08:0d:70:ac:fb:
ea:d0:5f:58:9a:c0:a9:21:da:54:0e:ff:7e:ad:f5:d5:45:07:
ae:6e:95:ef:c1:c0:5d:71:94:75:84:ad:cd:e1:71:96:d3:91:
5a:a5:0a:59:6f:ab:6e:ef:4f:13:98:65:4a:bb:5e:6c:c0:f1:
a8:79:08:15:23:3b:68:30:00:74:a1:e7:b9:31:1d:d4:cc:2a:
2b:29:44:31:c1:10:c4:b0:20:97:5f:29:5b:79:6f:ec:dd:4f:
1f:94:f2:8f:de:d2:09:59:72:71:ec:44:41:3c:87:ab:6c:76:
3e:c5:5b:d8:19:56:78:25:cc:e4:ee:27:32:20:61:c7:9c:d5:
00:f2:0a:4b:6e:fe:5c:24:ee:77:7e:76:7e:3a:e6:f1:5e:7c:
cd:0c:1b:0c:49:f4:3f:25:73:cd:b4:7d:c6:bf:d5:80:94:22:
89:0e:45:c6:c9:be:43:47:f4:e1:ae:74:24:87:b9:4f:7d:f1:
21:e1:f0:53:7e:97:f6:d5:d8:71:a2:52:ee:fb:f2:97:85:18:
9a:6a:11:7e:78:05:02:0f:e1:5e:67:b2:a6:07:38:8d:cd:b6:
a7:f0:03:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTi//QAOjcwAVLnKo0CdvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOTMwMjljNWIyNjM5Y2QyOWI5ZjlkZDUyOTRjYzk0ZWY1
MmQ2YWYwHhcNMjUwODIzMDUwMjA3WhcNMjUwODI0MDUwMjA3WjAzMTEwLwYDVQQD
Eyg2ODc4ZGE0MTYxMjgyNzRjZTJhNWJiZDE0NzBhMGNlYzdkNDk4YTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb9wTJZ+TFj3ILLBTbV43/ALd2yn
gIhW7XfjtcMYmJqxprPKvW4YZVgI/cNnWBnDigpVExLrXEVGuSu+OzmJ9/bvjKxy
y1DfvXdzpm4hGsUXLPcEupmZ7rUMK2r9X2JCGJ7KvCZ1dyY8VWQGqNPrlnNTVrWW
Alg8FIW6hkpNVZV2unxRSCnu5TiOOsYSdzm2/6kZA/znA36UU1CowLHg7j1JXe7D
APP0zvCCGqRbI4UjbUaI9E6ZX4vDOokADGKQzHCIdBpjMJyFU60KUPTOFZUv6cgU
EXR846ke+VPWRVxE/o09FLlaZ1nmg1xAmfUlzpAHZ/gj67oRL60smZAhQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGh42kFhKCdM4qW70UcKDOx9SYo2MB8GA1UdIwQY
MBaAFEyTApxbJjnNKbn53VKUzJTvUtavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEpNQ25Gc21PYzBwdWZuZFVwVE1sTzlTMXE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83YmQ3MjktOThlNS00M2ZmLWFmZTYt
MTg3YjFmNzdjMWE1LzEvVEpNQ25Gc21PYzBwdWZuZFVwVE1sTzlTMXE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC83YmQ3MjktOThlNS00M2ZmLWFmZTYtMTg3YjFmNzdjMWE1
LzEvVEpNQ25Gc21PYzBwdWZuZFVwVE1sTzlTMXE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqOLrULC
Ty14G6cui2CRXNKT9NjWmTQsu9u6UFzU5QgNcKz76tBfWJrAqSHaVA7/fq311UUH
rm6V78HAXXGUdYStzeFxltORWqUKWW+rbu9PE5hlSrtebMDxqHkIFSM7aDAAdKHn
uTEd1MwqKylEMcEQxLAgl18pW3lv7N1PH5Tyj97SCVlycexEQTyHq2x2PsVb2BlW
eCXM5O4nMiBhx5zVAPIKS27+XCTud352fjrm8V58zQwbDEn0PyVzzbR9xr/VgJQi
iQ5Fxsm+Q0f04a50JIe5T33xIeHwU36X9tXYcaJS7vvyl4UYmmoRfngFAg/hXmey
pgc4jc22p/ADHw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:22 2025 by rpki-client