Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json)
Hash identifier: rGARFUQUh3ZkGBY6p3vD2k9qSRLcPs1aCwr9wkY/WkM=
Subject key identifier: 25:EF:AB:6C:8F:43:32:C6:13:CF:DE:19:ED:FA:27:97:F3:BC:49:37
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 0198D404C7069FE6D6E2BA826D5AB4DD137C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
Manifest number: 09A3
Signing time: Fri 22 Aug 2025 23:02:19 +0000
Manifest this update: Fri 22 Aug 2025 23:02:19 +0000
Manifest next update: Sat 23 Aug 2025 23:02:19 +0000
Files and hashes: 1: ZFlE4CwGV5oXv28o6nsvolZlI_Y.roa (hash: S5Q4DAjjTKxkiafJ6he6yLpO30RXNUCaXjGnLWKadCQ=)
2: a3EraYk05VPEffLc6KjCZtg0uOM.roa (hash: MkXr1kaZ6Jwr9qIlXjAkJ2Xml1hQyvkyv9rct4pH8co=)
3: fJY20OuQ1IuJYeyVIHU1EBJ0rFM.roa (hash: +X81MlM0oUdVo08v6gDJj1EWTtIWJ/ia51w5FCk6+3U=)
4: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: JZGProZkwqzYmOYqrELHHf1ZmLAx7G812jDTEf86C5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:c7:06:9f:e6:d6:e2:ba:82:6d:5a:b4:dd:13:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: Aug 22 23:02:19 2025 GMT
Not After : Aug 23 23:02:19 2025 GMT
Subject: CN=25efab6c8f4332c613cfde19edfa2797f3bc4937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:5f:76:93:b5:40:34:7b:b8:e7:8b:54:63:
df:3b:bd:49:64:1d:49:95:f8:2d:5a:65:f7:db:6b:
99:bb:f5:fc:8d:0f:18:fc:ca:0a:3a:48:24:41:50:
fd:3b:52:ab:6f:e3:ac:f9:89:b1:a3:b3:a8:5c:54:
85:5b:1e:88:a8:28:f2:e1:67:df:48:90:78:d5:94:
ec:9e:a6:85:b5:b2:67:a1:5a:22:48:48:c6:eb:9f:
bb:71:89:db:82:6b:6b:06:4b:f7:c0:72:79:22:fd:
0f:d0:2d:66:8c:3b:36:b1:e5:45:c7:ae:3a:4c:86:
f8:04:66:81:99:60:10:63:4b:7d:60:b9:7f:4a:f3:
86:e8:91:21:f1:f6:e0:28:f3:30:92:c3:f4:ac:8f:
96:0e:98:c3:d3:6a:f8:c4:90:5a:6c:05:83:92:d0:
85:9c:27:8a:ee:e1:6d:99:3d:d8:f6:4f:39:46:0e:
9f:f8:d1:be:14:20:3d:c2:85:72:fe:fb:a3:4c:a7:
8d:e9:19:58:ea:d9:db:ed:00:39:7e:3c:21:7c:45:
e0:72:a6:1b:1d:1e:2e:95:f5:f7:93:b9:7e:8b:ce:
ba:03:75:09:e0:5a:88:24:29:b2:a7:46:a3:52:47:
2f:20:a2:b0:75:4d:49:7d:b2:b1:03:3a:56:9a:7e:
40:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EF:AB:6C:8F:43:32:C6:13:CF:DE:19:ED:FA:27:97:F3:BC:49:37
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b7:9f:7c:01:86:d2:95:7c:1b:ef:6c:4e:8e:2e:ba:16:5b:
b9:31:d0:5d:a1:df:65:52:85:43:09:4d:27:78:eb:1b:c4:e6:
0b:62:54:77:f9:1c:3e:77:5f:c4:2a:95:73:f9:82:49:ed:d8:
fb:d5:3b:47:93:7b:37:46:b4:4d:e6:3c:24:7a:e3:ef:4f:01:
50:7a:52:26:a5:89:bc:96:a2:3a:05:76:c2:17:63:99:88:31:
95:f4:5e:ca:3a:4f:4d:d6:61:f3:41:30:29:cc:7b:e2:79:36:
86:da:b7:65:84:c4:43:74:39:72:aa:95:79:ad:ab:49:ed:d9:
8f:e9:0c:df:c9:d0:5b:72:be:78:fc:d4:a0:c6:6d:13:9b:77:
ba:00:f3:b7:6b:12:ac:1e:ba:e6:ef:50:05:04:57:61:4f:60:
8c:1e:94:fb:a1:62:09:0b:b3:5d:d4:bf:55:b3:5a:69:7c:8d:
53:b4:70:83:17:ad:2a:cd:4e:59:be:34:8e:8a:27:65:34:99:
a1:7d:cd:ce:e5:4c:79:53:06:11:67:f3:17:f2:90:39:71:b2:
d8:1b:3f:fb:af:82:24:0b:f0:72:53:2b:1f:01:59:45:4a:ac:
00:bb:53:ef:25:17:d2:37:d5:cd:45:f0:36:b9:ff:88:b9:4f:
c6:71:3d:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBMcGn+bW4rqCbVq03RN8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YzdkODFlYzRjNDA1NWM2NzNmZjU3MWNjYWQwN2MzYTY5
OTEwNWUwHhcNMjUwODIyMjMwMjE5WhcNMjUwODIzMjMwMjE5WjAzMTEwLwYDVQQD
EygyNWVmYWI2YzhmNDMzMmM2MTNjZmRlMTllZGZhMjc5N2YzYmM0OTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAhfdpO1QDR7uOeLVGPfO71JZB1J
lfgtWmX322uZu/X8jQ8Y/MoKOkgkQVD9O1Krb+Os+Ymxo7OoXFSFWx6IqCjy4Wff
SJB41ZTsnqaFtbJnoVoiSEjG65+7cYnbgmtrBkv3wHJ5Iv0P0C1mjDs2seVFx646
TIb4BGaBmWAQY0t9YLl/SvOG6JEh8fbgKPMwksP0rI+WDpjD02r4xJBabAWDktCF
nCeK7uFtmT3Y9k85Rg6f+NG+FCA9woVy/vujTKeN6RlY6tnb7QA5fjwhfEXgcqYb
HR4ulfX3k7l+i866A3UJ4FqIJCmyp0ajUkcvIKKwdU1JfbKxAzpWmn5A6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXvq2yPQzLGE8/eGe36J5fzvEk3MB8GA1UdIwQY
MBaAFLXH2B7ExAVcZz/1ccytB8OmmRBeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82NzJhMmYtYWMyYi00NjMxLWFiM2Qt
YzJiYzE0NTFmMjcxLzEvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi82NzJhMmYtYWMyYi00NjMxLWFiM2QtYzJiYzE0NTFmMjcx
LzEvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7effAGG
0pV8G+9sTo4uuhZbuTHQXaHfZVKFQwlNJ3jrG8TmC2JUd/kcPndfxCqVc/mCSe3Y
+9U7R5N7N0a0TeY8JHrj708BUHpSJqWJvJaiOgV2whdjmYgxlfReyjpPTdZh80Ew
Kcx74nk2htq3ZYTEQ3Q5cqqVea2rSe3Zj+kM38nQW3K+ePzUoMZtE5t3ugDzt2sS
rB665u9QBQRXYU9gjB6U+6FiCQuzXdS/VbNaaXyNU7RwgxetKs1OWb40joonZTSZ
oX3NzuVMeVMGEWfzF/KQOXGy2Bs/+6+CJAvwclMrHwFZRUqsALtT7yUX0jfVzUXw
Nrn/iLlPxnE9Bw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:03 2025 by rpki-client