Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
File: TWJ4HKFDbZbWd1uiDFzyx139E-k.mft (raw, json)
Hash identifier: IFs419Aw649H7x5dewO3TKwPQO4+Kf/GH0SLbLa1WNk=
Subject key identifier: E9:87:66:26:F2:4A:1E:BA:28:04:D6:92:33:59:1F:FC:45:B3:7D:03
Authority key identifier: 4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9
Certificate issuer: /CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9
Certificate serial: 0198D583E708E32364847A62D51D42EB02AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
Manifest number: 15A2
Signing time: Sat 23 Aug 2025 06:00:48 +0000
Manifest this update: Sat 23 Aug 2025 06:00:48 +0000
Manifest next update: Sun 24 Aug 2025 06:00:48 +0000
Files and hashes: 1: TWJ4HKFDbZbWd1uiDFzyx139E-k.crl (hash: Snf6xKW8gBtnfuPQpqX40d5zcaUCq7A2ChJGDBdqez4=)
2: aMDb2aqsB1gnaYoCsXASMw4mf7g.roa (hash: nKgevpuMWVmNTWjVHVyGbe988HLYNNZK38XCR2Z6V2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e7:08:e3:23:64:84:7a:62:d5:1d:42:eb:02:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9
Validity
Not Before: Aug 23 06:00:48 2025 GMT
Not After : Aug 24 06:00:48 2025 GMT
Subject: CN=e9876626f24a1eba2804d69233591ffc45b37d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:97:5d:08:fd:ce:03:c3:48:57:c2:6f:c7:97:
f7:ed:bf:40:a3:fe:8f:e7:be:d3:e2:aa:2b:c6:58:
33:dc:e0:fb:56:1c:d0:15:4b:4d:9f:13:c8:86:02:
04:1b:b0:b3:68:6d:27:3a:1d:79:2c:43:1a:4c:92:
62:48:04:3a:9f:45:e2:2c:d5:d6:e1:dc:d0:de:5a:
c1:17:6f:1e:6e:f6:61:e7:7e:54:2b:16:7c:df:35:
2d:54:20:48:bc:41:53:87:68:3e:60:c2:ac:42:22:
55:7d:a8:a0:92:5f:de:f3:a1:56:c7:4e:3d:e4:0e:
55:6f:ad:0e:92:c4:d2:c5:5a:18:7a:bd:04:3b:01:
75:8e:4c:d1:d4:11:dc:50:29:8a:46:e6:9d:64:45:
ff:e4:bd:ac:8a:50:23:1f:94:0e:ff:40:39:47:fd:
c0:18:f6:1a:c5:78:3a:d6:df:b4:58:f8:5c:88:37:
74:65:39:9b:a5:72:7f:2a:a2:ba:47:e7:f6:2f:5a:
46:2b:36:d0:84:c4:57:6d:ed:cd:20:11:ab:69:a6:
a5:74:fa:32:47:ca:05:b2:1c:69:c7:90:7c:35:07:
a4:64:21:d3:a9:19:b4:3c:bf:be:6f:82:fc:6b:3b:
45:94:8c:78:42:97:18:b9:6c:ab:7e:10:8f:6a:a6:
e6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:87:66:26:F2:4A:1E:BA:28:04:D6:92:33:59:1F:FC:45:B3:7D:03
X509v3 Authority Key Identifier:
keyid:4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b1:86:92:c8:a5:82:b4:de:0a:82:a0:d7:32:30:bd:73:cb:
0f:da:aa:f4:c0:f5:9a:b8:1e:14:a2:25:56:2a:39:fb:f1:4c:
33:0e:c6:75:c8:e0:b5:3c:ce:b2:e2:a1:1e:5f:a4:46:67:a9:
9f:e6:00:df:e8:b7:ac:13:2a:a0:64:aa:77:a9:37:59:99:e2:
1c:5b:03:39:a7:10:f7:3b:ac:4f:6f:51:33:f3:f9:72:37:1c:
93:22:cd:87:f2:a7:d4:13:e5:f7:95:8b:a6:a3:ba:40:5d:39:
12:2b:e0:35:b1:d2:c6:17:f0:46:c8:57:a6:f1:76:b9:db:77:
48:06:03:f3:47:73:ba:d2:6e:c7:4c:47:7c:f8:a5:e7:c3:14:
14:b3:a5:bc:0c:ff:f3:a7:a7:20:bf:1c:ef:a2:0e:57:6e:46:
25:50:fe:b4:f3:b7:e1:16:9f:58:48:e3:fd:f9:3d:1d:df:00:
c9:24:75:17:a4:ac:94:f0:15:a0:dc:76:b5:7a:60:c6:2c:aa:
e7:92:89:50:76:ec:14:4c:b0:a2:df:0e:cb:72:c5:c1:1a:ca:
6c:8a:57:a9:d8:66:5e:cd:27:b0:33:64:26:a4:22:36:4c:79:
ec:b0:66:e0:02:33:f7:b1:10:f9:58:f9:40:96:d5:36:a5:58:
18:54:4e:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg+cI4yNkhHpi1R1C6wKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNjI3ODFjYTE0MzZkOTZkNjc3NWJhMjBjNWNmMmM3NWRm
ZDEzZTkwHhcNMjUwODIzMDYwMDQ4WhcNMjUwODI0MDYwMDQ4WjAzMTEwLwYDVQQD
EyhlOTg3NjYyNmYyNGExZWJhMjgwNGQ2OTIzMzU5MWZmYzQ1YjM3ZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZddCP3OA8NIV8Jvx5f37b9Ao/6P
577T4qorxlgz3OD7VhzQFUtNnxPIhgIEG7CzaG0nOh15LEMaTJJiSAQ6n0XiLNXW
4dzQ3lrBF28ebvZh535UKxZ83zUtVCBIvEFTh2g+YMKsQiJVfaigkl/e86FWx049
5A5Vb60OksTSxVoYer0EOwF1jkzR1BHcUCmKRuadZEX/5L2silAjH5QO/0A5R/3A
GPYaxXg61t+0WPhciDd0ZTmbpXJ/KqK6R+f2L1pGKzbQhMRXbe3NIBGraaaldPoy
R8oFshxpx5B8NQekZCHTqRm0PL++b4L8aztFlIx4QpcYuWyrfhCPaqbmXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmHZibySh66KATWkjNZH/xFs30DMB8GA1UdIwQY
MBaAFE1ieByhQ22W1ndbogxc8sdd/RPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFdKNEhLRkRiWmJXZDF1aURGenl4MTM5RS1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mZTYzNjMtNmVkNS00NjdkLWI5NmUt
OGUwYmRmZjIzN2Y4LzEvVFdKNEhLRkRiWmJXZDF1aURGenl4MTM5RS1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mZTYzNjMtNmVkNS00NjdkLWI5NmUtOGUwYmRmZjIzN2Y4
LzEvVFdKNEhLRkRiWmJXZDF1aURGenl4MTM5RS1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLGGksil
grTeCoKg1zIwvXPLD9qq9MD1mrgeFKIlVio5+/FMMw7GdcjgtTzOsuKhHl+kRmep
n+YA3+i3rBMqoGSqd6k3WZniHFsDOacQ9zusT29RM/P5cjcckyLNh/Kn1BPl95WL
pqO6QF05EivgNbHSxhfwRshXpvF2udt3SAYD80dzutJux0xHfPil58MUFLOlvAz/
86enIL8c76IOV25GJVD+tPO34RafWEjj/fk9Hd8AySR1F6SslPAVoNx2tXpgxiyq
55KJUHbsFEywot8Oy3LFwRrKbIpXqdhmXs0nsDNkJqQiNkx57LBm4AIz97EQ+Vj5
QJbVNqVYGFRORA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:16 2025 by rpki-client