Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
File: Tc_QAaZn4WRatAxbvtifWScAT4U.mft (raw, json)
Hash identifier: MrdgytZdE9Wz396T6rx1yWeCXGz4t9E8VVtBECvx3KE=
Subject key identifier: D3:CF:67:31:11:D8:EA:B8:ED:91:DD:6F:5F:72:90:C0:A9:8A:56:79
Authority key identifier: 4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
Certificate issuer: /CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Certificate serial: 0198744F997F77144ACDA68A84167C6CE103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
Manifest number: 0A42
Signing time: Mon 04 Aug 2025 09:00:30 +0000
Manifest this update: Mon 04 Aug 2025 09:00:30 +0000
Manifest next update: Tue 05 Aug 2025 09:00:30 +0000
Files and hashes: 1: Tc_QAaZn4WRatAxbvtifWScAT4U.crl (hash: 4u+eG68qTus3Xv/bv8cSPSFZ0XDJ1y6VsXW9Ee4HNnM=)
2: jdMFheDlAIgKvi6YF6C6Rm8zqwg.roa (hash: 0uopvNrGmCf9iLiAY1t8oTN34NZD3FhGP5c/aZny+2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:99:7f:77:14:4a:cd:a6:8a:84:16:7c:6c:e1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Validity
Not Before: Aug 4 09:00:30 2025 GMT
Not After : Aug 5 09:00:30 2025 GMT
Subject: CN=d3cf673111d8eab8ed91dd6f5f7290c0a98a5679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:98:d3:c3:81:b3:32:a1:b4:39:57:d5:09:47:
20:4a:04:63:3d:cd:cc:81:95:80:c4:62:57:59:1b:
56:53:04:b8:fd:8f:75:60:ec:22:73:11:03:5b:09:
77:bc:7c:4d:52:c3:4d:9e:74:80:b4:cc:3c:a6:fb:
27:92:d2:b0:8a:cd:96:bd:ba:c7:3b:0a:e1:53:e9:
c5:ca:95:a5:2f:3b:58:bd:5c:b2:61:c8:14:59:33:
ff:cd:b8:69:31:ab:22:69:28:72:b9:9a:cc:26:0f:
ce:ef:9f:27:ae:a5:dc:7d:c8:23:83:ac:79:51:4d:
10:eb:e8:a0:80:7e:7a:af:e8:0f:17:4c:fa:4f:75:
d4:21:6a:33:96:0e:bd:8c:8d:48:16:05:46:66:d5:
9d:69:db:27:e1:c6:3a:fe:61:3a:59:a0:e8:92:49:
e7:92:bf:59:35:f9:32:af:6a:2d:52:47:26:5e:66:
91:65:99:d7:70:25:4d:a4:b1:f0:c6:31:30:37:f0:
d2:5b:d2:c7:4e:03:69:3f:95:1f:c4:d5:5d:86:14:
3d:7c:95:67:59:6b:79:7a:01:50:ad:6a:32:91:f4:
bd:de:3d:ac:4c:01:e9:33:f7:21:19:65:bf:66:65:
2b:76:e5:18:de:b7:ae:cb:b0:11:12:f6:b7:40:e1:
e7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CF:67:31:11:D8:EA:B8:ED:91:DD:6F:5F:72:90:C0:A9:8A:56:79
X509v3 Authority Key Identifier:
keyid:4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:7e:ec:71:2c:78:1f:5d:33:48:1d:b5:9a:d6:be:81:8a:43:
36:82:5e:05:ae:91:f9:ae:f2:cc:15:7c:3b:3a:05:5a:09:39:
18:20:bf:65:65:09:59:e3:46:3a:a8:ac:fd:ae:cf:ab:29:e4:
37:ec:b4:e5:1f:43:7d:3c:01:10:d7:d6:0c:8e:b5:5e:ef:68:
31:86:24:e5:f3:66:3e:0e:eb:6e:48:44:0b:a5:28:03:bc:aa:
9b:6a:7d:52:2d:6d:b1:d4:af:5a:a0:82:71:6e:c5:56:eb:b1:
20:aa:ec:87:90:1a:7a:6f:ac:ad:b8:b5:d2:1d:2d:36:a5:7f:
18:78:1d:32:30:46:fa:97:cc:a2:d7:45:5e:45:18:39:64:fa:
cb:5a:a4:67:d6:ae:70:7e:ba:d8:a9:31:87:cb:9c:38:02:fc:
64:92:2e:7b:cc:19:6b:92:9a:44:32:9c:8a:e9:df:27:e9:30:
f9:f6:18:63:67:86:4a:39:e3:98:c4:47:02:86:dd:62:50:c1:
c4:10:8e:50:b9:c8:2e:6a:04:e9:af:87:c9:68:56:01:91:fa:
3d:0a:e6:8e:9e:16:3f:f5:dd:62:50:11:98:76:e8:7b:c4:17:
82:c4:34:e7:2d:8b:93:db:c0:59:67:ff:88:82:ad:92:c8:45:
44:0a:7e:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0T5l/dxRKzaaKhBZ8bOEDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkY2ZkMDAxYTY2N2UxNjQ1YWI0MGM1YmJlZDg5ZjU5Mjcw
MDRmODUwHhcNMjUwODA0MDkwMDMwWhcNMjUwODA1MDkwMDMwWjAzMTEwLwYDVQQD
EyhkM2NmNjczMTExZDhlYWI4ZWQ5MWRkNmY1ZjcyOTBjMGE5OGE1Njc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pjTw4GzMqG0OVfVCUcgSgRjPc3M
gZWAxGJXWRtWUwS4/Y91YOwicxEDWwl3vHxNUsNNnnSAtMw8pvsnktKwis2WvbrH
OwrhU+nFypWlLztYvVyyYcgUWTP/zbhpMasiaShyuZrMJg/O758nrqXcfcgjg6x5
UU0Q6+iggH56r+gPF0z6T3XUIWozlg69jI1IFgVGZtWdadsn4cY6/mE6WaDokknn
kr9ZNfkyr2otUkcmXmaRZZnXcCVNpLHwxjEwN/DSW9LHTgNpP5UfxNVdhhQ9fJVn
WWt5egFQrWoykfS93j2sTAHpM/chGWW/ZmUrduUY3reuy7AREva3QOHnIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPPZzER2Oq47ZHdb19ykMCpilZ5MB8GA1UdIwQY
MBaAFE3P0AGmZ+FkWrQMW77Yn1knAE+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGNfUUFhWm40V1JhdEF4YnZ0aWZXU2NBVDRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81YmE4MWUtZTI3NC00YmEzLTk1NGQt
YmRmOTRhM2ZiMzJkLzEvVGNfUUFhWm40V1JhdEF4YnZ0aWZXU2NBVDRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81YmE4MWUtZTI3NC00YmEzLTk1NGQtYmRmOTRhM2ZiMzJk
LzEvVGNfUUFhWm40V1JhdEF4YnZ0aWZXU2NBVDRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1H7scSx4
H10zSB21mta+gYpDNoJeBa6R+a7yzBV8OzoFWgk5GCC/ZWUJWeNGOqis/a7Pqynk
N+y05R9DfTwBENfWDI61Xu9oMYYk5fNmPg7rbkhEC6UoA7yqm2p9Ui1tsdSvWqCC
cW7FVuuxIKrsh5Aaem+srbi10h0tNqV/GHgdMjBG+pfMotdFXkUYOWT6y1qkZ9au
cH662Kkxh8ucOAL8ZJIue8wZa5KaRDKciunfJ+kw+fYYY2eGSjnjmMRHAobdYlDB
xBCOULnILmoE6a+HyWhWAZH6PQrmjp4WP/XdYlARmHboe8QXgsQ05y2Lk9vAWWf/
iIKtkshFRAp+eQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:54 2025 by rpki-client