Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
File: T1JcTLrI19lzMkWHalyr5rNeL-k.mft (raw, json)
Hash identifier: STgWyO37zQZ2N3jEa3E6/1EVShZ0pn8eVtsv0jSOMlM=
Subject key identifier: CA:32:AD:12:1C:27:78:34:D3:39:AC:90:1F:7C:B1:59:B1:94:D3:A3
Authority key identifier: 4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
Certificate issuer: /CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Certificate serial: 0198D54EB9C79C5F3091A0992445C05B5A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
Manifest number: 0EE0
Signing time: Sat 23 Aug 2025 05:02:42 +0000
Manifest this update: Sat 23 Aug 2025 05:02:42 +0000
Manifest next update: Sun 24 Aug 2025 05:02:42 +0000
Files and hashes: 1: T1JcTLrI19lzMkWHalyr5rNeL-k.crl (hash: v1eRaA4PcX3o62PYvdmLm9l5/L7Lr+zuTjV1YryiyjE=)
2: c8I1j-_EdlLIZz3-7BnhuaavJno.roa (hash: CwCN8RoP1XffLa+Wr9AuQzfDKd1y2haHBaFngEMqfpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b9:c7:9c:5f:30:91:a0:99:24:45:c0:5b:5a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Validity
Not Before: Aug 23 05:02:42 2025 GMT
Not After : Aug 24 05:02:42 2025 GMT
Subject: CN=ca32ad121c277834d339ac901f7cb159b194d3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c8:98:13:d9:99:3a:30:18:93:96:d8:29:75:
06:33:8f:65:bc:6f:f2:b3:21:2c:63:4b:07:f7:74:
17:49:c3:22:8b:69:ab:ec:d5:41:61:f6:46:2f:cb:
29:17:7f:3f:02:93:d3:73:e1:c7:33:b7:40:b6:b1:
26:57:1c:7d:98:29:93:12:44:bc:b9:30:04:6f:f5:
69:2a:33:5f:cf:7f:be:e1:0c:58:c5:24:5b:ec:62:
2d:58:8c:91:41:88:27:61:1d:af:98:20:ab:ef:29:
52:af:ae:5a:98:be:3b:f8:38:b7:b0:40:9d:02:2c:
e1:a3:6d:96:62:5d:89:e4:e8:24:0c:c5:f2:70:b3:
c0:08:19:0e:1e:78:df:ee:a5:a5:19:e5:2b:5f:e6:
c7:11:6f:c0:7f:91:26:00:41:dc:a1:91:70:4c:27:
ce:d1:a6:31:f5:57:aa:52:7b:88:4d:60:62:fa:71:
45:6f:1d:5e:a8:b4:ac:35:d9:f1:2a:3c:2e:f3:fb:
ec:1b:20:b5:c6:9a:6e:1f:55:de:fd:fd:cb:a8:1e:
56:12:1b:3b:00:4e:bc:a5:62:de:e1:43:0b:dc:c2:
18:6d:af:a6:3e:47:be:fd:50:95:4a:50:56:20:b3:
39:1a:a9:d1:17:ed:4e:aa:24:78:e8:06:96:3e:04:
78:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:32:AD:12:1C:27:78:34:D3:39:AC:90:1F:7C:B1:59:B1:94:D3:A3
X509v3 Authority Key Identifier:
keyid:4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2f:69:dd:74:c7:d3:da:9d:a6:cf:fd:e8:cf:5c:f5:8f:72:
44:c0:c3:47:0d:d4:57:5f:f4:f9:e3:df:93:ed:f9:bf:8b:32:
b8:ea:04:29:b5:ad:17:83:54:88:12:36:13:47:74:a9:4c:21:
f6:e7:34:17:69:cc:6e:72:0f:ef:06:ad:8d:95:4c:2d:ed:97:
4c:57:e4:d4:21:58:a3:15:70:e0:1a:4c:15:4d:ba:2c:f7:00:
13:c4:fa:0f:a3:5b:b6:ab:d1:27:bc:f0:69:1d:88:9b:6a:52:
3d:3d:8c:6e:6d:57:fd:03:a0:8e:e6:02:c9:5d:11:95:3e:bb:
b9:f3:4a:21:7e:06:af:c2:cc:82:a8:93:cf:9b:bf:7f:a4:9c:
7b:b1:9b:15:6a:21:b9:6b:24:74:7f:f9:68:40:9a:50:ed:55:
dd:9e:2c:5a:b1:6d:75:72:01:f0:76:6b:8e:36:29:96:c1:4c:
d6:cb:68:32:93:f4:6e:6b:18:fa:5e:98:2d:be:46:25:72:27:
f5:0f:3a:c6:70:b8:cb:5e:3f:1e:dc:08:f2:8d:0c:5a:d0:4d:
a4:b4:03:53:a6:b8:76:39:c4:c6:26:09:f1:a7:2f:4f:c7:56:
c4:c5:66:56:97:38:f0:df:f0:58:b3:44:6b:4d:e3:c1:c1:c6:
12:c1:0e:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTrnHnF8wkaCZJEXAW1p6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNTI1YzRjYmFjOGQ3ZDk3MzMyNDU4NzZhNWNhYmU2YjM1
ZTJmZTkwHhcNMjUwODIzMDUwMjQyWhcNMjUwODI0MDUwMjQyWjAzMTEwLwYDVQQD
EyhjYTMyYWQxMjFjMjc3ODM0ZDMzOWFjOTAxZjdjYjE1OWIxOTRkM2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8iYE9mZOjAYk5bYKXUGM49lvG/y
syEsY0sH93QXScMii2mr7NVBYfZGL8spF38/ApPTc+HHM7dAtrEmVxx9mCmTEkS8
uTAEb/VpKjNfz3++4QxYxSRb7GItWIyRQYgnYR2vmCCr7ylSr65amL47+Di3sECd
Aizho22WYl2J5OgkDMXycLPACBkOHnjf7qWlGeUrX+bHEW/Af5EmAEHcoZFwTCfO
0aYx9VeqUnuITWBi+nFFbx1eqLSsNdnxKjwu8/vsGyC1xppuH1Xe/f3LqB5WEhs7
AE68pWLe4UML3MIYba+mPke+/VCVSlBWILM5GqnRF+1OqiR46AaWPgR4jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoyrRIcJ3g00zmskB98sVmxlNOjMB8GA1UdIwQY
MBaAFE9SXEy6yNfZczJFh2pcq+azXi/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDFKY1RMckkxOWx6TWtXSGFseXI1ck5lTC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yOGE1ZjktOTA3MS00NDU5LTk4Mjkt
NTU3OTVjMjZlYWNhLzEvVDFKY1RMckkxOWx6TWtXSGFseXI1ck5lTC1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8yOGE1ZjktOTA3MS00NDU5LTk4MjktNTU3OTVjMjZlYWNh
LzEvVDFKY1RMckkxOWx6TWtXSGFseXI1ck5lTC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAey9p3XTH
09qdps/96M9c9Y9yRMDDRw3UV1/0+ePfk+35v4syuOoEKbWtF4NUiBI2E0d0qUwh
9uc0F2nMbnIP7watjZVMLe2XTFfk1CFYoxVw4BpMFU26LPcAE8T6D6NbtqvRJ7zw
aR2Im2pSPT2Mbm1X/QOgjuYCyV0RlT67ufNKIX4Gr8LMgqiTz5u/f6Sce7GbFWoh
uWskdH/5aECaUO1V3Z4sWrFtdXIB8HZrjjYplsFM1stoMpP0bmsY+l6YLb5GJXIn
9Q86xnC4y14/HtwI8o0MWtBNpLQDU6a4djnExiYJ8acvT8dWxMVmVpc48N/wWLNE
a03jwcHGEsEObA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:02 2025 by rpki-client