Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
File: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft (raw, json)
Hash identifier: Ntr52JNipRYDChejAaUTFuC0k4KRpQ8uE3/W7zEdCQQ=
Subject key identifier: 74:8C:C3:FF:A6:F5:3E:A4:0A:13:58:ED:A6:9F:DC:B4:69:BB:AF:29
Authority key identifier: 4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
Certificate issuer: /CN=4d1527d1839bf830360d71590134354e6d904697
Certificate serial: 0198D5F18E0EB4DE79C51A5E2AAE387F7415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:34 +0000
Manifest this update: Sat 23 Aug 2025 08:00:34 +0000
Manifest next update: Sun 24 Aug 2025 08:00:34 +0000
Files and hashes: 1: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl (hash: qhjcys4DHcdmtoXbEXmM5lmQ9QvGqbtAhYsFrnXpGLw=)
2: a6Whh1qMHaCLz9si7bMkIx4xg1Y.roa (hash: R/Syehgq2eEOSio/8bhqr2YXvz+4Ke3qpd0G80XikQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:8e:0e:b4:de:79:c5:1a:5e:2a:ae:38:7f:74:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d1527d1839bf830360d71590134354e6d904697
Validity
Not Before: Aug 23 08:00:34 2025 GMT
Not After : Aug 24 08:00:34 2025 GMT
Subject: CN=748cc3ffa6f53ea40a1358eda69fdcb469bbaf29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:c7:17:4d:d1:91:d0:98:ba:db:7a:78:67:
5a:57:9c:73:88:93:11:db:2d:a5:c1:0f:b7:1c:84:
dc:c2:55:a6:13:5c:67:fb:20:7b:ea:7b:48:36:c6:
f5:82:46:db:0d:65:62:bb:b1:c0:0c:f8:e8:87:6d:
ee:05:cf:7d:11:fc:1a:1d:86:fc:22:85:16:4c:51:
94:09:2c:0e:06:69:df:bc:a0:f9:03:11:c3:64:5e:
28:95:6c:2f:5a:9e:2e:05:d7:1a:75:d0:3e:79:b4:
49:2b:e9:0d:ba:61:74:f5:ff:c8:78:ba:9c:fd:be:
46:26:0d:91:de:cb:84:d8:45:04:8c:19:47:c7:9a:
6a:5b:64:c5:b0:f7:09:74:62:a3:8d:b0:64:13:9f:
fd:02:6c:c5:a7:2b:01:d0:95:f3:75:6f:47:f9:69:
3d:f7:b8:8f:18:05:5f:a2:cc:99:ca:3b:e9:a8:2b:
ee:9d:2b:ff:94:23:b0:ce:08:4e:1f:3e:26:fc:e9:
37:a0:0c:43:de:0d:c4:c9:0b:9b:5a:7c:6a:44:b1:
ea:30:07:28:eb:6d:74:5d:b0:64:78:90:d0:08:1d:
65:a0:b1:fc:c0:22:d9:ed:af:a3:ed:c6:8b:24:6a:
72:d2:b4:e5:61:68:49:1d:8c:10:8a:e0:0c:55:69:
6b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8C:C3:FF:A6:F5:3E:A4:0A:13:58:ED:A6:9F:DC:B4:69:BB:AF:29
X509v3 Authority Key Identifier:
keyid:4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d3:4b:4e:6b:b8:8c:fe:d0:5e:c0:d1:fe:55:b1:5e:15:dd:
63:aa:58:8d:fc:94:ef:d2:ed:1d:e3:22:36:99:46:6e:9c:fa:
b0:ce:c9:b9:86:56:ca:45:6b:9a:31:fe:94:10:5f:fe:55:ab:
c7:d5:e7:33:61:87:ec:79:5b:38:06:60:05:24:d1:c2:34:e2:
6f:70:62:33:71:ba:44:12:b8:f7:8e:e0:fb:ed:f8:9e:00:14:
75:5f:b7:62:84:c3:49:ea:36:41:e5:0f:ff:0b:b7:7a:f2:50:
3b:86:a2:1f:c8:ef:f4:2d:10:c6:84:1a:e2:90:cc:8a:6d:42:
88:76:86:4b:f6:06:fd:6c:34:2f:19:a3:c7:59:3f:b0:21:65:
67:af:48:d1:d9:90:1f:24:05:dd:03:e0:43:7c:de:43:46:e9:
e4:74:66:81:9c:fc:5d:fa:f7:8a:76:76:9c:60:3f:c1:1a:9b:
c5:fa:50:7d:48:2c:9e:37:c9:ad:38:5a:17:38:ca:8d:c9:a3:
d3:cf:4f:de:c2:ad:87:b0:52:66:38:0d:37:d2:c2:61:16:d7:
88:c2:dc:37:23:5a:fa:e5:37:69:20:a7:8a:39:b0:dd:d1:29:
19:52:67:f9:1e:55:a7:77:94:41:e4:9a:58:3d:a6:c3:d3:6d:
01:b0:13:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8Y4OtN55xRpeKq44f3QVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMTUyN2QxODM5YmY4MzAzNjBkNzE1OTAxMzQzNTRlNmQ5
MDQ2OTcwHhcNMjUwODIzMDgwMDM0WhcNMjUwODI0MDgwMDM0WjAzMTEwLwYDVQQD
Eyg3NDhjYzNmZmE2ZjUzZWE0MGExMzU4ZWRhNjlmZGNiNDY5YmJhZjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRnHF03RkdCYutt6eGdaV5xziJMR
2y2lwQ+3HITcwlWmE1xn+yB76ntINsb1gkbbDWViu7HADPjoh23uBc99EfwaHYb8
IoUWTFGUCSwOBmnfvKD5AxHDZF4olWwvWp4uBdcaddA+ebRJK+kNumF09f/IeLqc
/b5GJg2R3suE2EUEjBlHx5pqW2TFsPcJdGKjjbBkE5/9AmzFpysB0JXzdW9H+Wk9
97iPGAVfosyZyjvpqCvunSv/lCOwzghOHz4m/Ok3oAxD3g3EyQubWnxqRLHqMAco
6210XbBkeJDQCB1loLH8wCLZ7a+j7caLJGpy0rTlYWhJHYwQiuAMVWlrLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSMw/+m9T6kChNY7aaf3LRpu68pMB8GA1UdIwQY
MBaAFE0VJ9GDm/gwNg1xWQE0NU5tkEaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFJVbjBZT2ItREEyRFhGWkFUUTFUbTJRUnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zMDlkMzYtYzQyMC00MzIxLTk1NDAt
ZjNkZjY3M2VhNThjLzEvVFJVbjBZT2ItREEyRFhGWkFUUTFUbTJRUnBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8zMDlkMzYtYzQyMC00MzIxLTk1NDAtZjNkZjY3M2VhNThj
LzEvVFJVbjBZT2ItREEyRFhGWkFUUTFUbTJRUnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoNNLTmu4
jP7QXsDR/lWxXhXdY6pYjfyU79LtHeMiNplGbpz6sM7JuYZWykVrmjH+lBBf/lWr
x9XnM2GH7HlbOAZgBSTRwjTib3BiM3G6RBK4947g++34ngAUdV+3YoTDSeo2QeUP
/wu3evJQO4aiH8jv9C0QxoQa4pDMim1CiHaGS/YG/Ww0Lxmjx1k/sCFlZ69I0dmQ
HyQF3QPgQ3zeQ0bp5HRmgZz8Xfr3inZ2nGA/wRqbxfpQfUgsnjfJrThaFzjKjcmj
089P3sKth7BSZjgNN9LCYRbXiMLcNyNa+uU3aSCnijmw3dEpGVJn+R5Vp3eUQeSa
WD2mw9NtAbATNQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:05:04 2025 by rpki-client