Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
File: TtTTbmM3JKGxeUm8QiR2lk518GU.mft (raw, json)
Hash identifier: RCinQq1ttl9gY4/M1W4WkfBS1SQyzs6eGzkCmU8BlKg=
Subject key identifier: 3B:B1:19:09:86:20:36:71:28:A9:41:4C:25:71:A0:33:68:B6:C1:25
Authority key identifier: 4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
Certificate issuer: /CN=4ed4d36e633724a1b17949bc422476964e75f065
Certificate serial: 0198D7E17D119D7596DFBD74BB30FF61947F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 17:02:15 +0000
Manifest this update: Sat 23 Aug 2025 17:02:15 +0000
Manifest next update: Sun 24 Aug 2025 17:02:15 +0000
Files and hashes: 1: CnryW-h9KBqAbLH3yoElsj6kkME.roa (hash: LGWkYgge1+9ItWTLHb68eWMOdZQGepA7ESiUA3d7dLI=)
2: TtTTbmM3JKGxeUm8QiR2lk518GU.crl (hash: pHtpcglMw9tLE1DLfBJauZ3OKIWYWL6hRUQYSUP1vQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:7d:11:9d:75:96:df:bd:74:bb:30:ff:61:94:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed4d36e633724a1b17949bc422476964e75f065
Validity
Not Before: Aug 23 17:02:15 2025 GMT
Not After : Aug 24 17:02:15 2025 GMT
Subject: CN=3bb119098620367128a9414c2571a03368b6c125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:96:26:5f:e0:6e:8e:3f:30:2f:f5:eb:a7:11:
b3:9a:f1:a7:5a:96:8e:53:b8:f3:19:81:55:eb:d1:
2f:b5:b3:b0:e2:14:e5:55:a2:e3:8c:90:fd:40:e6:
85:ca:b9:df:eb:40:02:2e:96:df:32:03:c2:03:24:
c9:24:6e:71:c4:01:01:ea:4d:dc:61:94:6b:6b:ff:
f0:0d:d5:ad:a1:73:e6:a5:8d:6d:8e:68:a3:07:73:
be:24:b0:36:d4:8d:56:28:0d:10:21:a3:ac:4a:eb:
ef:5d:0c:63:68:e5:49:9b:c9:20:69:94:dd:f4:c2:
d4:91:27:b4:c9:68:7f:6a:cd:6e:21:8b:31:63:0d:
bc:f3:e1:35:f8:24:26:a7:59:4c:7e:d1:e4:59:12:
10:8e:73:7d:ea:cb:ec:68:61:5d:5b:ba:72:37:5f:
5e:1b:b8:1b:2e:de:52:0c:f5:1c:bd:3f:96:c4:63:
50:c7:4d:46:09:bd:7e:cf:ef:7b:9e:90:6b:e7:15:
fa:83:33:23:e3:3f:61:26:f2:d6:da:3a:e5:26:30:
9f:76:7c:70:49:bf:39:99:f4:18:4b:d5:df:d5:5e:
73:b2:c3:a7:30:95:ff:c9:58:5a:52:ac:d1:82:44:
de:0a:03:a7:d8:2b:e7:71:4a:29:e0:d9:39:74:58:
59:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B1:19:09:86:20:36:71:28:A9:41:4C:25:71:A0:33:68:B6:C1:25
X509v3 Authority Key Identifier:
keyid:4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d2:6b:28:38:66:33:c3:51:ec:79:1c:d9:c9:73:d6:ee:a1:
5e:a0:38:b9:b6:57:70:44:26:be:c3:38:a4:ea:47:4e:a3:5d:
ef:60:ff:83:5b:53:bc:e7:4c:62:e2:0f:fc:d3:64:53:46:28:
72:62:d2:68:de:f3:56:73:f6:34:77:47:c3:31:fc:b7:7a:6d:
b2:38:0f:da:f7:38:4c:e9:53:17:b5:2f:3b:96:84:a4:f1:92:
f1:c4:57:98:ac:b4:f8:ca:f0:a3:e2:75:2c:43:80:b9:4b:f2:
8a:33:24:8c:25:be:f7:e1:c0:2c:67:d2:88:4a:da:b5:eb:9e:
b4:49:98:59:36:e6:4e:76:06:ca:e7:8d:fb:4a:cf:1b:46:ae:
dc:d2:44:44:42:57:80:a0:11:52:68:d1:a8:12:b6:c6:0d:f6:
8d:3a:81:5a:be:e4:b5:05:42:78:39:22:c0:8d:3b:3c:4c:b7:
9a:6e:37:6a:ad:1f:1c:1a:14:d0:02:0c:cd:bc:88:31:0a:7f:
e0:50:9d:df:df:c8:cb:3b:92:a3:d1:e8:a1:2d:d4:e7:fe:f4:
34:b9:91:8b:28:31:fc:d1:55:05:63:86:a1:b6:5a:22:cb:ba:
57:b6:c8:6f:dc:82:97:e8:b2:f4:52:76:71:39:e5:e7:d4:d4:
7a:47:cc:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjX4X0RnXWW3710uzD/YZR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZDRkMzZlNjMzNzI0YTFiMTc5NDliYzQyMjQ3Njk2NGU3
NWYwNjUwHhcNMjUwODIzMTcwMjE1WhcNMjUwODI0MTcwMjE1WjAzMTEwLwYDVQQD
EygzYmIxMTkwOTg2MjAzNjcxMjhhOTQxNGMyNTcxYTAzMzY4YjZjMTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JYmX+Bujj8wL/XrpxGzmvGnWpaO
U7jzGYFV69EvtbOw4hTlVaLjjJD9QOaFyrnf60ACLpbfMgPCAyTJJG5xxAEB6k3c
YZRra//wDdWtoXPmpY1tjmijB3O+JLA21I1WKA0QIaOsSuvvXQxjaOVJm8kgaZTd
9MLUkSe0yWh/as1uIYsxYw288+E1+CQmp1lMftHkWRIQjnN96svsaGFdW7pyN19e
G7gbLt5SDPUcvT+WxGNQx01GCb1+z+97npBr5xX6gzMj4z9hJvLW2jrlJjCfdnxw
Sb85mfQYS9Xf1V5zssOnMJX/yVhaUqzRgkTeCgOn2CvncUop4Nk5dFhZuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDuxGQmGIDZxKKlBTCVxoDNotsElMB8GA1UdIwQY
MBaAFE7U025jNyShsXlJvEIkdpZOdfBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHRUVGJtTTNKS0d4ZVVtOFFpUjJsazUxOEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82ODZkNGItZjE1Yi00NTMwLWI5MWIt
ZTBjNDA2YjY0NjcyLzEvVHRUVGJtTTNKS0d4ZVVtOFFpUjJsazUxOEdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy82ODZkNGItZjE1Yi00NTMwLWI5MWItZTBjNDA2YjY0Njcy
LzEvVHRUVGJtTTNKS0d4ZVVtOFFpUjJsazUxOEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNJrKDhm
M8NR7Hkc2clz1u6hXqA4ubZXcEQmvsM4pOpHTqNd72D/g1tTvOdMYuIP/NNkU0Yo
cmLSaN7zVnP2NHdHwzH8t3ptsjgP2vc4TOlTF7UvO5aEpPGS8cRXmKy0+Mrwo+J1
LEOAuUvyijMkjCW+9+HALGfSiErateuetEmYWTbmTnYGyueN+0rPG0au3NJEREJX
gKARUmjRqBK2xg32jTqBWr7ktQVCeDkiwI07PEy3mm43aq0fHBoU0AIMzbyIMQp/
4FCd39/IyzuSo9HooS3U5/70NLmRiygx/NFVBWOGobZaIsu6V7bIb9yCl+iy9FJ2
cTnl59TUekfMaw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:31:26 2025 by rpki-client