Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
File: TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json)
Hash identifier: w8EkXDupwJKHjzLKWge2OqFm2/Z2ZRr1driDJJHkpn4=
Subject key identifier: 4A:10:5A:06:CC:71:F1:C6:56:D2:0B:A9:7C:34:79:D3:57:6E:29:2A
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial: 0198D472E7CDA2A7774D238FA653195A3BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
Manifest number: 1337
Signing time: Sat 23 Aug 2025 01:02:36 +0000
Manifest this update: Sat 23 Aug 2025 01:02:36 +0000
Manifest next update: Sun 24 Aug 2025 01:02:36 +0000
Files and hashes: 1: H36xXwuB9FJ3ESjpo_XmH_KZ2R4.roa (hash: CUtTMRPtfP9rNsMoQeZ2J44Z+jwTnsWRsKW5k/0LKug=)
2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: wUO1IJ3LJrB8nBX/h0/Bbu9mcqdfg+LvxsrHfVvg43g=)
3: tpqvdlW8wuSttlFQd80uk4F5YQY.roa (hash: yDvp+gGPiyhARcManoLZEVb02KcZ7k4JkC3clhGu75w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e7:cd:a2:a7:77:4d:23:8f:a6:53:19:5a:3b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Validity
Not Before: Aug 23 01:02:36 2025 GMT
Not After : Aug 24 01:02:36 2025 GMT
Subject: CN=4a105a06cc71f1c656d20ba97c3479d3576e292a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:41:53:17:8e:de:ea:5e:18:a4:84:f1:68:ad:
0f:9c:a3:17:ef:e6:4f:45:7b:55:98:6f:b2:0c:67:
5f:f7:f6:0d:74:16:96:42:6e:c6:be:b7:6e:ca:0f:
c4:ff:46:4b:52:03:aa:52:5b:0a:9b:b7:47:f7:53:
d4:ad:ba:50:eb:0f:18:39:e5:fe:e1:17:b0:c7:eb:
fc:e6:fb:e7:00:05:2c:b3:ec:c9:63:f1:e0:d9:8f:
89:d7:d4:84:1b:cb:4e:1a:0e:7b:75:cf:62:16:cb:
df:c3:ba:82:d5:21:81:97:31:94:13:97:c9:09:3d:
e8:05:0b:b9:1a:29:af:6b:04:d2:30:e3:bb:b8:e3:
d7:bd:ce:b6:bd:18:8f:84:28:d6:98:0a:68:32:bb:
76:a4:1f:80:25:2d:9c:73:ee:93:37:97:3a:86:bd:
d8:40:85:ef:52:de:0a:b7:63:df:d6:90:c9:38:e8:
b2:65:c4:67:8e:00:32:68:1a:5b:bd:2e:8c:25:58:
0b:97:08:ed:33:ea:d9:c0:08:64:f8:43:e7:5e:4f:
0a:5c:13:8e:7f:e5:23:53:c6:6a:b2:0c:e0:f0:e9:
12:24:75:5b:5d:cb:08:b3:ce:eb:4d:3e:e5:94:9c:
2e:9b:59:36:f8:ef:68:0d:43:9a:ee:57:a9:5f:dc:
a6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:10:5A:06:CC:71:F1:C6:56:D2:0B:A9:7C:34:79:D3:57:6E:29:2A
X509v3 Authority Key Identifier:
keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c3:3f:2f:0c:3a:71:9e:62:c6:dd:ca:4d:26:cf:f5:66:d7:
4c:c8:91:01:64:73:ee:f1:9d:29:f8:58:d2:be:30:bd:52:d7:
70:68:5e:0c:0f:66:91:5f:0f:e7:8d:8b:26:a3:3d:ae:75:a1:
22:76:bb:6e:a5:39:62:b5:e9:dd:50:1f:89:e0:de:5b:7c:5c:
ff:20:23:77:3f:b6:08:91:3d:6d:5d:7a:1f:fa:d1:6e:74:d9:
79:a8:3c:0b:ea:b4:a1:52:fd:63:0c:97:b8:49:11:24:55:ab:
36:42:06:e6:17:5a:67:1b:d8:89:49:10:78:1e:14:7d:ac:3f:
8b:9f:a7:d9:bb:e3:c1:1f:65:30:11:4c:3a:5a:e7:d8:11:a1:
b5:dd:d8:e8:2b:09:48:c2:f9:e8:51:d4:11:16:a1:f1:3a:23:
4c:95:c0:e7:0d:0c:e2:15:55:11:c6:47:2a:d6:c3:e0:c6:f8:
94:ef:fa:5d:a8:98:ee:17:cc:33:27:1c:06:10:b0:1f:4e:3f:
4a:f5:80:bc:d2:46:d1:d9:c1:d9:f7:b1:84:40:97:18:33:fa:
b1:97:8b:ab:10:39:c0:6b:0b:10:82:aa:ee:bd:89:89:45:0a:
03:26:3d:bc:60:23:e5:2f:c4:f3:5a:91:6b:ec:60:84:be:fc:
a2:c3:11:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcufNoqd3TSOPplMZWjutMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMWIwYzQwOTY5MDgwOTU3ZmNjZWUxZmI4YTNmYjRiYjM4
YmY1ZGMwHhcNMjUwODIzMDEwMjM2WhcNMjUwODI0MDEwMjM2WjAzMTEwLwYDVQQD
Eyg0YTEwNWEwNmNjNzFmMWM2NTZkMjBiYTk3YzM0NzlkMzU3NmUyOTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UFTF47e6l4YpITxaK0PnKMX7+ZP
RXtVmG+yDGdf9/YNdBaWQm7Gvrduyg/E/0ZLUgOqUlsKm7dH91PUrbpQ6w8YOeX+
4Rewx+v85vvnAAUss+zJY/Hg2Y+J19SEG8tOGg57dc9iFsvfw7qC1SGBlzGUE5fJ
CT3oBQu5GimvawTSMOO7uOPXvc62vRiPhCjWmApoMrt2pB+AJS2cc+6TN5c6hr3Y
QIXvUt4Kt2Pf1pDJOOiyZcRnjgAyaBpbvS6MJVgLlwjtM+rZwAhk+EPnXk8KXBOO
f+UjU8Zqsgzg8OkSJHVbXcsIs87rTT7llJwum1k2+O9oDUOa7lepX9ymYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoQWgbMcfHGVtILqXw0edNXbikqMB8GA1UdIwQY
MBaAFEwbDECWkICVf8zuH7ij+0uzi/XcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMt
OTRjODI1NGJkM2I3LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMtOTRjODI1NGJkM2I3
LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8M/Lww6
cZ5ixt3KTSbP9WbXTMiRAWRz7vGdKfhY0r4wvVLXcGheDA9mkV8P542LJqM9rnWh
Ina7bqU5YrXp3VAfieDeW3xc/yAjdz+2CJE9bV16H/rRbnTZeag8C+q0oVL9YwyX
uEkRJFWrNkIG5hdaZxvYiUkQeB4Ufaw/i5+n2bvjwR9lMBFMOlrn2BGhtd3Y6CsJ
SML56FHUERah8TojTJXA5w0M4hVVEcZHKtbD4Mb4lO/6XaiY7hfMMyccBhCwH04/
SvWAvNJG0dnB2fexhECXGDP6sZeLqxA5wGsLEIKq7r2JiUUKAyY9vGAj5S/E81qR
a+xghL78osMR9w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:37 2025 by rpki-client