Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
File: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft (raw, json)
Hash identifier: d1L0jWtamMLR5bCJHUlYroLvV432lJKWjlhm1XHbQtI=
Subject key identifier: B6:40:8B:C8:C8:F1:85:2E:58:74:95:07:F0:30:59:40:07:16:4A:AD
Authority key identifier: 4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E
Certificate issuer: /CN=4c8dea04de6e37b190355e03cd2600c47212e18e
Certificate serial: 0198D5157056F4216484D5FB26CCC40E73DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
Manifest number: 073A
Signing time: Sat 23 Aug 2025 04:00:08 +0000
Manifest this update: Sat 23 Aug 2025 04:00:08 +0000
Manifest next update: Sun 24 Aug 2025 04:00:08 +0000
Files and hashes: 1: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl (hash: HbsgC6ioAqbdIw9EzkuwBfMS1clVNyW8NBa38XiZFdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:70:56:f4:21:64:84:d5:fb:26:cc:c4:0e:73:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8dea04de6e37b190355e03cd2600c47212e18e
Validity
Not Before: Aug 23 04:00:08 2025 GMT
Not After : Aug 24 04:00:08 2025 GMT
Subject: CN=b6408bc8c8f1852e58749507f030594007164aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:aa:48:f4:d7:05:b6:8d:f5:46:20:c5:bc:
c2:0e:8a:1a:19:b7:66:10:66:82:0b:59:a2:31:a1:
9b:8f:96:4a:07:91:f9:c9:1d:b9:60:37:f1:c9:13:
b5:64:cd:25:a0:c9:79:5e:d6:53:43:b6:dc:ba:62:
a8:76:d4:75:7d:89:f4:c3:65:c1:28:e6:4b:f0:2c:
bf:d2:0e:10:99:d0:0f:df:64:bf:54:51:50:73:b0:
ab:24:25:c3:61:83:8a:2a:c5:b9:cb:f6:c0:a7:15:
73:e6:ef:6e:11:33:cc:98:63:98:ae:3e:2f:e5:2e:
5b:cd:f2:4c:c5:13:5e:0d:b0:1a:db:cc:ea:94:41:
a7:b6:02:5a:33:be:d3:71:71:41:e9:10:88:cf:ef:
3f:33:80:52:5f:a5:ec:80:d0:ed:7b:ee:9f:ca:cd:
e8:86:d4:06:af:21:5b:c9:17:48:ce:ec:10:57:52:
5c:71:1f:f0:9d:15:84:94:96:c9:0b:72:4e:3d:b2:
f8:72:36:38:a0:ab:60:81:7a:88:2d:c2:a7:a7:5f:
a5:5a:58:0f:98:4c:7a:47:b7:67:fa:be:85:71:a6:
dd:aa:b9:3a:5f:c8:cd:da:09:67:93:a0:42:c5:5d:
3f:5b:51:79:70:eb:5f:3d:0c:08:22:d9:39:67:96:
38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:40:8B:C8:C8:F1:85:2E:58:74:95:07:F0:30:59:40:07:16:4A:AD
X509v3 Authority Key Identifier:
keyid:4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:28:4c:c6:fe:4e:50:0d:42:52:be:df:ab:d5:f7:38:6f:59:
38:44:11:17:c6:fb:25:89:5c:2b:81:20:80:53:bf:3e:3b:8c:
0a:c1:d7:df:6f:55:8e:24:18:59:46:91:41:43:a8:cf:49:b5:
7b:3c:68:96:7a:36:b7:cc:8d:b7:54:11:fb:2f:b9:fc:a6:a8:
4c:49:b8:a3:2f:01:7e:2b:02:88:91:99:13:8d:ca:93:83:a7:
e5:46:d1:d1:4a:7e:ef:75:49:0d:d0:3a:78:f6:a1:76:c9:b3:
18:78:1b:3f:cb:58:e8:e0:8e:5c:74:76:fd:e6:23:0e:8f:85:
5f:cd:29:2a:60:82:30:44:43:4d:3d:8c:84:ad:55:ae:0a:3d:
03:7c:bb:43:3e:f7:51:2d:94:ce:84:41:ef:ef:4b:e1:f1:d5:
0d:b7:fd:60:1d:4f:8d:29:19:0d:c4:91:0e:26:26:e0:05:90:
45:f4:6c:17:4e:d8:e0:3d:5d:8f:5d:8e:fe:fb:c5:5e:11:8d:
4a:40:1d:63:35:9d:9f:03:1d:a2:1b:ac:41:25:62:a4:00:c4:
bb:d7:8a:86:59:24:cf:05:bf:db:0c:8a:7c:d0:7f:45:03:76:
a0:b7:de:a8:8b:44:5c:2d:3d:84:95:f8:9f:0e:3c:23:2a:6f:
cf:70:73:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFXBW9CFkhNX7JszEDnPeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOGRlYTA0ZGU2ZTM3YjE5MDM1NWUwM2NkMjYwMGM0NzIx
MmUxOGUwHhcNMjUwODIzMDQwMDA4WhcNMjUwODI0MDQwMDA4WjAzMTEwLwYDVQQD
EyhiNjQwOGJjOGM4ZjE4NTJlNTg3NDk1MDdmMDMwNTk0MDA3MTY0YWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKWqSPTXBbaN9UYgxbzCDooaGbdm
EGaCC1miMaGbj5ZKB5H5yR25YDfxyRO1ZM0loMl5XtZTQ7bcumKodtR1fYn0w2XB
KOZL8Cy/0g4QmdAP32S/VFFQc7CrJCXDYYOKKsW5y/bApxVz5u9uETPMmGOYrj4v
5S5bzfJMxRNeDbAa28zqlEGntgJaM77TcXFB6RCIz+8/M4BSX6XsgNDte+6fys3o
htQGryFbyRdIzuwQV1JccR/wnRWElJbJC3JOPbL4cjY4oKtggXqILcKnp1+lWlgP
mEx6R7dn+r6Fcabdqrk6X8jN2glnk6BCxV0/W1F5cOtfPQwIItk5Z5Y4nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZAi8jI8YUuWHSVB/AwWUAHFkqtMB8GA1UdIwQY
MBaAFEyN6gTebjexkDVeA80mAMRyEuGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEkzcUJONXVON0dRTlY0RHpTWUF4SElTNFk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lODU5MDMtNzU3NC00YWIzLWI0NDEt
NTI2N2Q3MTZlNGNlLzEvVEkzcUJONXVON0dRTlY0RHpTWUF4SElTNFk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9lODU5MDMtNzU3NC00YWIzLWI0NDEtNTI2N2Q3MTZlNGNl
LzEvVEkzcUJONXVON0dRTlY0RHpTWUF4SElTNFk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKihMxv5O
UA1CUr7fq9X3OG9ZOEQRF8b7JYlcK4EggFO/PjuMCsHX329VjiQYWUaRQUOoz0m1
ezxolno2t8yNt1QR+y+5/KaoTEm4oy8BfisCiJGZE43Kk4On5UbR0Up+73VJDdA6
ePahdsmzGHgbP8tY6OCOXHR2/eYjDo+FX80pKmCCMERDTT2MhK1Vrgo9A3y7Qz73
US2UzoRB7+9L4fHVDbf9YB1PjSkZDcSRDiYm4AWQRfRsF07Y4D1dj12O/vvFXhGN
SkAdYzWdnwMdohusQSVipADEu9eKhlkkzwW/2wyKfNB/RQN2oLfeqItEXC09hJX4
nw48Iypvz3Bz0A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:56 2025 by rpki-client