Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
File: TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json)
Hash identifier: msflM0sTu7V5exUSGEXgy9CYmGrx5AZr7VhVQXwPZPg=
Subject key identifier: 39:83:0D:20:3B:B5:6A:26:9C:3D:0C:A7:DC:A4:67:8D:AA:F7:EF:C7
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Certificate issuer: /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial: 019873066561CC385DBA75A0C3BBA1DAC3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
Manifest number: 161D
Signing time: Mon 04 Aug 2025 03:00:55 +0000
Manifest this update: Mon 04 Aug 2025 03:00:55 +0000
Manifest next update: Tue 05 Aug 2025 03:00:55 +0000
Files and hashes: 1: BhaT-M-zQEVQbEPTvK_whwRLo3g.roa (hash: yoydrscKhHCdRvyWQAObyBBT0xMyfOzTOU389MtWZv4=)
2: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: ref+WB7it5UJfLLMbAnSpQnwbUIaaKfdjUnMBPIrCUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:65:61:cc:38:5d:ba:75:a0:c3:bb:a1:da:c3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Validity
Not Before: Aug 4 03:00:55 2025 GMT
Not After : Aug 5 03:00:55 2025 GMT
Subject: CN=39830d203bb56a269c3d0ca7dca4678daaf7efc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:07:af:73:3d:cc:01:d6:42:78:d2:e3:50:b2:
50:25:9f:f0:79:f6:5a:a2:4a:be:cf:e6:d3:0e:b2:
2f:5d:5a:b1:0e:f1:8d:81:90:78:f3:d3:cb:18:32:
c4:e4:ed:53:2a:4c:a8:40:85:36:1d:d6:1e:fa:f7:
59:24:07:22:b4:cb:b0:c4:38:f4:76:04:20:10:2e:
19:61:35:10:2b:48:dd:e3:36:59:bd:1d:5b:10:36:
23:31:91:d0:cb:40:b3:ef:41:dd:3e:3a:85:7b:d2:
fd:51:c1:b7:83:f4:c1:8b:8e:ec:e1:62:dc:ab:86:
b9:1e:ca:d4:24:6d:31:1c:c7:0f:18:40:0f:db:6f:
4f:66:bb:0a:1a:aa:1b:8f:a7:bc:1f:46:0f:68:5f:
6b:14:a4:5a:61:95:c8:b3:92:ce:32:8d:71:60:18:
35:d9:92:58:59:03:dc:00:a8:23:61:38:e0:1e:a4:
4f:38:1a:c4:c2:55:90:d5:3c:44:3e:51:04:45:87:
75:95:31:3f:f0:bb:d3:07:df:17:8c:3f:bd:e7:4e:
cd:8c:54:fb:15:f7:87:ad:e3:2c:d1:c9:31:3f:1e:
51:8e:ab:8d:3b:f0:ff:37:d0:5e:19:14:70:6d:75:
dd:fc:1f:19:73:7e:26:0c:21:d8:5c:14:56:f5:6f:
97:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:83:0D:20:3B:B5:6A:26:9C:3D:0C:A7:DC:A4:67:8D:AA:F7:EF:C7
X509v3 Authority Key Identifier:
keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0f:fb:7d:7a:aa:e1:8c:54:1d:4d:4c:64:0b:e8:ce:2a:08:
ec:d6:1d:1e:39:b7:1f:8e:9c:aa:d7:24:87:9c:91:4e:f7:ad:
da:d6:fa:1a:59:9c:4b:8e:01:11:31:2e:7a:3d:bb:75:0a:76:
7c:0c:21:33:43:6e:62:02:e3:56:05:51:78:18:b7:47:5d:00:
f7:81:e0:22:e4:0e:77:72:3a:50:54:f6:e3:a9:71:08:68:79:
a7:aa:61:8c:1c:5e:17:2e:6a:77:0d:27:1f:7a:ea:c3:33:86:
04:c0:97:3e:28:b5:87:70:a7:f3:69:d4:63:4e:04:01:bf:3b:
c0:44:8b:95:f5:6d:0f:0d:e6:b5:ff:a6:07:4e:bf:03:4b:0b:
c2:cd:68:0e:bd:4c:d7:ab:3a:b7:c2:79:49:a2:a0:f3:6c:80:
7f:3f:9c:67:60:da:5a:ee:d0:df:fa:85:bb:7a:6f:68:1a:88:
a9:f4:52:87:1f:ec:2e:60:e6:8d:ef:9e:ec:c1:08:8c:ec:1e:
b3:d0:dc:76:06:3d:b5:ca:97:bb:5d:f2:4a:79:16:1e:c4:fb:
ad:bf:e4:bd:1d:14:a6:fa:6e:12:b4:69:d6:f2:9c:f2:8b:9d:
e6:68:fd:22:11:b5:6d:91:aa:d2:be:b1:ca:c0:2a:18:55:f2:
de:a7:79:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBmVhzDhdunWgw7uh2sO+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYTRkNjE5OWFlYzgyOGY2OTg5ZTJlODRjZWMxNzc2NWJh
YzVjZDUwHhcNMjUwODA0MDMwMDU1WhcNMjUwODA1MDMwMDU1WjAzMTEwLwYDVQQD
EygzOTgzMGQyMDNiYjU2YTI2OWMzZDBjYTdkY2E0Njc4ZGFhZjdlZmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwevcz3MAdZCeNLjULJQJZ/wefZa
okq+z+bTDrIvXVqxDvGNgZB489PLGDLE5O1TKkyoQIU2HdYe+vdZJAcitMuwxDj0
dgQgEC4ZYTUQK0jd4zZZvR1bEDYjMZHQy0Cz70HdPjqFe9L9UcG3g/TBi47s4WLc
q4a5HsrUJG0xHMcPGEAP229PZrsKGqobj6e8H0YPaF9rFKRaYZXIs5LOMo1xYBg1
2ZJYWQPcAKgjYTjgHqRPOBrEwlWQ1TxEPlEERYd1lTE/8LvTB98XjD+9507NjFT7
FfeHreMs0ckxPx5RjquNO/D/N9BeGRRwbXXd/B8Zc34mDCHYXBRW9W+X3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmDDSA7tWomnD0Mp9ykZ42q9+/HMB8GA1UdIwQY
MBaAFE2k1hma7IKPaYni6EzsF3ZbrFzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yYzg0ODItNTMzMS00ZTU3LTk5NzQt
NDA4MzdkNDg0NzNkLzEvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yYzg0ODItNTMzMS00ZTU3LTk5NzQtNDA4MzdkNDg0NzNk
LzEvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQ/7fXqq
4YxUHU1MZAvozioI7NYdHjm3H46cqtckh5yRTvet2tb6GlmcS44BETEuej27dQp2
fAwhM0NuYgLjVgVReBi3R10A94HgIuQOd3I6UFT246lxCGh5p6phjBxeFy5qdw0n
H3rqwzOGBMCXPii1h3Cn82nUY04EAb87wESLlfVtDw3mtf+mB06/A0sLws1oDr1M
16s6t8J5SaKg82yAfz+cZ2DaWu7Q3/qFu3pvaBqIqfRShx/sLmDmje+e7MEIjOwe
s9DcdgY9tcqXu13ySnkWHsT7rb/kvR0UpvpuErRp1vKc8oud5mj9IhG1bZGq0r6x
ysAqGFXy3qd5HA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:07 2025 by rpki-client