Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
File: TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json)
Hash identifier: ovWhUsjDntjIxTV1nuNwgTxys5s2mYXPID2jiu0nnr4=
Subject key identifier: 0F:3A:29:D0:F0:2E:7C:32:67:AA:84:6B:10:87:F7:8C:06:ED:59:E6
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial: 0198D515A0F676416130CDC068E2A80F7735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 04:00:21 +0000
Manifest this update: Sat 23 Aug 2025 04:00:21 +0000
Manifest next update: Sun 24 Aug 2025 04:00:21 +0000
Files and hashes: 1: LHdFFtkhND-G29Bb5TNwX3ZX6HI.roa (hash: 5JCuzcczihsYGo60q4ytQ60HO2vUMA1Wb8XrWH6WiqE=)
2: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: Qia+IhiCuu597+SJta9nsleRv8sSCul+W0m1MxZ+9C8=)
3: VYrJyKdSTfJ9aOSPJMCRhItn6O0.roa (hash: EVl6QPoQm24Wnsg0W0HBnWjfCtTCiCv6xfCekdHCwzI=)
4: XGm_swis7gPqLxLCw4_WpqKe8Ac.roa (hash: HuoRGpzlvzmJtj6Rn/56OaSHzb/3wfWOGTlv62srzB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:a0:f6:76:41:61:30:cd:c0:68:e2:a8:0f:77:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Validity
Not Before: Aug 23 04:00:21 2025 GMT
Not After : Aug 24 04:00:21 2025 GMT
Subject: CN=0f3a29d0f02e7c3267aa846b1087f78c06ed59e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:de:e2:65:1b:74:91:bf:40:4c:03:92:2a:
2a:1b:83:88:00:7b:de:98:d3:0d:8e:bf:00:44:4f:
d2:ce:62:92:29:27:4d:42:02:e8:b4:9d:ff:34:e3:
41:3a:1d:8b:b9:89:46:60:a1:c5:32:f8:98:22:be:
ff:ea:52:e8:9c:f2:87:ae:2a:60:22:22:26:f5:33:
94:d1:8e:95:f0:16:22:92:07:d2:e8:2f:12:67:23:
0c:fe:19:64:1c:a6:2a:a6:34:c1:f7:57:29:5f:9a:
9b:2a:a0:03:e1:40:92:03:9b:a5:6a:19:6e:d3:45:
6e:8f:1d:cd:5d:52:23:a4:48:a3:b2:f4:31:41:d3:
00:56:69:94:6e:de:64:e6:00:ef:5c:0f:e2:51:87:
c9:40:59:98:9f:ae:83:1b:b8:e5:f6:78:92:4a:11:
74:52:68:e4:3b:52:5e:19:ae:5d:db:7d:4a:00:75:
bf:dd:c3:da:40:87:bc:02:98:6f:cb:16:b3:f2:b1:
59:f9:ae:67:3c:ec:be:3d:05:81:3f:89:b1:6c:3e:
1e:32:22:e4:f7:6f:2b:25:d6:b1:49:21:19:32:12:
18:35:cb:de:6f:c8:37:22:3c:6c:28:63:a0:88:3e:
ca:d9:3c:ee:93:fb:7a:51:2d:1b:37:a6:32:23:c6:
06:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3A:29:D0:F0:2E:7C:32:67:AA:84:6B:10:87:F7:8C:06:ED:59:E6
X509v3 Authority Key Identifier:
keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f4:af:c9:a3:c5:14:4d:f9:00:2c:40:71:d3:89:5b:bb:e0:
e4:9c:fe:0c:28:ef:c3:3c:d8:fc:14:d8:6a:4c:4f:bf:3a:87:
02:42:f5:33:97:88:47:f9:38:ec:0d:21:df:65:a0:48:5c:c0:
c5:41:0d:dd:49:0d:f4:8a:4b:ae:d7:a7:13:7f:ea:aa:df:6d:
51:34:fb:90:f0:fb:7e:ed:e9:ab:7b:dd:1f:fa:1a:c7:5b:20:
b9:6b:67:7a:94:22:e5:c6:4e:3c:0e:2a:47:05:35:7e:d6:b7:
ed:e1:e4:75:ac:7e:93:95:17:d3:04:df:bc:2d:eb:20:1a:37:
91:37:17:04:99:85:5e:ed:4b:75:dc:c4:58:12:8c:67:f7:a9:
6c:46:43:3e:17:ba:23:d7:ef:b7:0f:6e:41:75:77:f4:21:98:
c0:7c:aa:fb:5f:de:ee:e2:48:8d:55:a3:b4:fc:3f:6e:67:49:
24:d2:c5:40:87:f9:fa:20:96:26:94:df:0e:2b:f9:bf:72:de:
b0:f1:19:cd:6c:62:7e:e7:3f:4b:9c:ce:59:f9:d8:43:ca:c6:
b1:7a:6e:ff:a4:2d:de:a0:b2:ad:1c:0d:f1:27:c9:b1:6b:5a:
8d:4d:90:6f:18:35:d9:93:52:cc:1c:1e:5d:84:97:ac:5f:22:
3b:d0:8e:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFaD2dkFhMM3AaOKoD3c1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjY2M2MDQ5NWIyYTM0ZDg5MjExY2MxYzc5NTI0ZWFiNjFi
YTE2NTYwHhcNMjUwODIzMDQwMDIxWhcNMjUwODI0MDQwMDIxWjAzMTEwLwYDVQQD
EygwZjNhMjlkMGYwMmU3YzMyNjdhYTg0NmIxMDg3Zjc4YzA2ZWQ1OWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwine4mUbdJG/QEwDkioqG4OIAHve
mNMNjr8ARE/SzmKSKSdNQgLotJ3/NONBOh2LuYlGYKHFMviYIr7/6lLonPKHripg
IiIm9TOU0Y6V8BYikgfS6C8SZyMM/hlkHKYqpjTB91cpX5qbKqAD4UCSA5ulahlu
00Vujx3NXVIjpEijsvQxQdMAVmmUbt5k5gDvXA/iUYfJQFmYn66DG7jl9niSShF0
UmjkO1JeGa5d231KAHW/3cPaQIe8Aphvyxaz8rFZ+a5nPOy+PQWBP4mxbD4eMiLk
928rJdaxSSEZMhIYNcveb8g3IjxsKGOgiD7K2Tzuk/t6US0bN6YyI8YGowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA86KdDwLnwyZ6qEaxCH94wG7VnmMB8GA1UdIwQY
MBaAFEzMYElbKjTYkhHMHHlSTqthuhZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNTFjNmMtNjE3Yy00NjQzLTlmNmUt
Njk4MDlkOGI5YzIwLzEvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xNTFjNmMtNjE3Yy00NjQzLTlmNmUtNjk4MDlkOGI5YzIw
LzEvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPSvyaPF
FE35ACxAcdOJW7vg5Jz+DCjvwzzY/BTYakxPvzqHAkL1M5eIR/k47A0h32WgSFzA
xUEN3UkN9IpLrtenE3/qqt9tUTT7kPD7fu3pq3vdH/oax1sguWtnepQi5cZOPA4q
RwU1fta37eHkdax+k5UX0wTfvC3rIBo3kTcXBJmFXu1LddzEWBKMZ/epbEZDPhe6
I9fvtw9uQXV39CGYwHyq+1/e7uJIjVWjtPw/bmdJJNLFQIf5+iCWJpTfDiv5v3Le
sPEZzWxifuc/S5zOWfnYQ8rGsXpu/6Qt3qCyrRwN8SfJsWtajU2Qbxg12ZNSzBwe
XYSXrF8iO9CO4g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:22 2025 by rpki-client