Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json)
Hash identifier: 50ru+8mAur2+OaCldwbVMFjw9nZ5Gyrk68ysyN+7OEI=
Subject key identifier: 15:F4:9E:53:89:DC:06:4D:A6:50:1A:60:DB:E7:B6:0E:66:19:8D:A5
Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Certificate serial: 0198D5F16A60214266FAD0F66CE89B100009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
Manifest number: 02D2
Signing time: Sat 23 Aug 2025 08:00:25 +0000
Manifest this update: Sat 23 Aug 2025 08:00:25 +0000
Manifest next update: Sun 24 Aug 2025 08:00:25 +0000
Files and hashes: 1: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: P38RT9VZg8CsGCVLWEqGPto7Z7oDJeP32XfjaW58YwI=)
2: iTC7AIloz6nQaL3mT_rFGYZ-wig.roa (hash: fesaTZGLmhO2WzwSQegYz6bFqw2Ey8O4XUX49y7XEFA=)
3: uAJKiTWW3Ub4f2F2pRQzTM4uTxQ.roa (hash: QYC9wZJDQP4jalSd59izpnWdNPoZL5WfK7FyvYaliJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:6a:60:21:42:66:fa:d0:f6:6c:e8:9b:10:00:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Validity
Not Before: Aug 23 08:00:25 2025 GMT
Not After : Aug 24 08:00:25 2025 GMT
Subject: CN=15f49e5389dc064da6501a60dbe7b60e66198da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0f:8a:de:7d:93:1c:43:ff:72:0e:88:5a:8a:
42:c1:4f:a2:f2:a6:39:74:4e:63:1d:fa:2d:74:9d:
ef:39:91:17:ae:95:9f:d3:fe:01:4c:de:a6:36:be:
4a:91:bb:6d:7b:f7:68:1b:62:d8:65:d8:d5:cd:77:
62:eb:b4:c2:61:3a:33:d8:aa:70:4c:50:d2:03:e3:
57:40:4c:4e:b3:ad:a4:67:a1:ab:be:ba:8e:3f:9d:
32:87:04:dc:69:bb:a4:f0:c1:b5:af:65:83:84:bb:
17:08:b4:9e:4b:83:f1:33:ad:52:84:bc:95:93:48:
17:d0:54:a9:b5:c4:e7:5e:a0:15:00:6d:2c:62:bd:
c8:5f:9b:cd:c8:44:e5:d3:62:cb:02:93:f0:1e:59:
0d:77:d4:ac:7d:7c:5d:ee:06:53:0a:fe:6a:fc:3f:
2c:b1:88:d2:f2:62:66:82:c3:c9:31:b1:a7:d3:d3:
e7:20:7a:ca:c7:7d:3b:8b:d5:02:13:3a:bc:0c:2e:
7b:8c:56:8c:bd:f7:37:95:43:a6:d4:aa:66:e3:10:
81:86:7a:7d:13:a8:f0:a8:f3:e2:d2:62:12:4d:0b:
c4:3b:a0:d3:a7:3e:59:44:75:d5:bd:94:3d:83:48:
cc:37:dc:d1:48:cc:9c:51:08:f8:a1:05:cc:85:67:
c9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F4:9E:53:89:DC:06:4D:A6:50:1A:60:DB:E7:B6:0E:66:19:8D:A5
X509v3 Authority Key Identifier:
keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b5:80:b7:c7:48:99:10:82:d0:8e:0f:4c:d7:1c:f1:93:17:
7e:46:38:93:38:51:f7:12:c0:f6:ce:df:c9:3d:d2:61:09:ea:
fd:6a:8b:32:69:ca:58:17:a8:8b:8b:65:aa:9b:3a:27:81:e5:
59:85:36:10:2a:4f:70:21:31:ad:22:43:1d:b3:e6:c2:4f:d8:
18:9a:5a:87:a4:84:22:1f:21:4c:61:01:e0:9e:14:9d:fb:c8:
52:6e:6f:61:e4:4b:ac:7a:d1:9a:93:c6:65:fb:fe:e9:42:2c:
52:72:53:eb:f0:8d:ba:1a:78:49:77:4c:29:2b:a5:c4:ab:e7:
da:be:b5:93:09:72:cf:98:d3:7e:b3:2d:33:11:d7:7b:ad:a1:
48:89:4b:0a:e1:39:69:9f:38:e6:b9:48:08:6f:1d:2d:2a:60:
2a:ea:5c:8c:dd:45:d3:32:5e:2e:fa:d6:d9:98:dc:13:52:d7:
34:df:44:b3:27:6f:b6:15:6e:bb:e8:3b:5d:0f:38:27:a0:50:
f0:44:6e:24:44:59:6e:6c:de:14:d7:3d:d3:91:1c:a4:cf:fb:
95:4f:d5:52:5d:46:51:c1:7f:8a:62:d7:8e:64:bf:50:85:7b:
06:2d:28:40:f1:46:c8:71:fa:c7:82:6b:66:ee:0c:c4:88:fb:
29:a7:23:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8WpgIUJm+tD2bOibEAAJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZGQ2OTczNDkzY2UwYzM4NDliOGI5MTliNzUwMmJhNWZh
MDEzZDcwHhcNMjUwODIzMDgwMDI1WhcNMjUwODI0MDgwMDI1WjAzMTEwLwYDVQQD
EygxNWY0OWU1Mzg5ZGMwNjRkYTY1MDFhNjBkYmU3YjYwZTY2MTk4ZGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg+K3n2THEP/cg6IWopCwU+i8qY5
dE5jHfotdJ3vOZEXrpWf0/4BTN6mNr5Kkbtte/doG2LYZdjVzXdi67TCYToz2Kpw
TFDSA+NXQExOs62kZ6GrvrqOP50yhwTcabuk8MG1r2WDhLsXCLSeS4PxM61ShLyV
k0gX0FSptcTnXqAVAG0sYr3IX5vNyETl02LLApPwHlkNd9SsfXxd7gZTCv5q/D8s
sYjS8mJmgsPJMbGn09PnIHrKx307i9UCEzq8DC57jFaMvfc3lUOm1Kpm4xCBhnp9
E6jwqPPi0mISTQvEO6DTpz5ZRHXVvZQ9g0jMN9zRSMycUQj4oQXMhWfJLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBX0nlOJ3AZNplAaYNvntg5mGY2lMB8GA1UdIwQY
MBaAFEzdaXNJPODDhJuLkZt1ArpfoBPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hMzVmN2YtMjE5NC00NmQzLTkxYmQt
Y2MwZjUwYmRhMTU5LzEvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9hMzVmN2YtMjE5NC00NmQzLTkxYmQtY2MwZjUwYmRhMTU5
LzEvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILWAt8dI
mRCC0I4PTNcc8ZMXfkY4kzhR9xLA9s7fyT3SYQnq/WqLMmnKWBeoi4tlqps6J4Hl
WYU2ECpPcCExrSJDHbPmwk/YGJpah6SEIh8hTGEB4J4UnfvIUm5vYeRLrHrRmpPG
Zfv+6UIsUnJT6/CNuhp4SXdMKSulxKvn2r61kwlyz5jTfrMtMxHXe62hSIlLCuE5
aZ845rlICG8dLSpgKupcjN1F0zJeLvrW2ZjcE1LXNN9EsydvthVuu+g7XQ84J6BQ
8ERuJERZbmzeFNc905EcpM/7lU/VUl1GUcF/imLXjmS/UIV7Bi0oQPFGyHH6x4Jr
Zu4MxIj7KacjEA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:46 2025 by rpki-client