Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
File: Tm32g40DOAFB635O5V3AXYcGHck.mft (raw, json)
Hash identifier: 5yBLnxC88K8TFFhzY77w8Tmy5vDQXKNqqj+Q9Y+Nl/k=
Subject key identifier: E2:E8:9E:0A:D0:DE:69:EA:B4:91:E1:DF:D5:E3:7D:84:90:58:42:F2
Authority key identifier: 4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9
Certificate issuer: /CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
Certificate serial: 0198748723DB4D3DA01CEC4A4E65077E528B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
Manifest number: 1065
Signing time: Mon 04 Aug 2025 10:01:10 +0000
Manifest this update: Mon 04 Aug 2025 10:01:10 +0000
Manifest next update: Tue 05 Aug 2025 10:01:10 +0000
Files and hashes: 1: 6zGLvq4k5vmzCBWK5uxpgKx-SpM.roa (hash: d72RjXOy3TrPnzNgu1Y/cwJXn9F8xvKoAfaZ+LW3oR4=)
2: Tm32g40DOAFB635O5V3AXYcGHck.crl (hash: j8BxUU9lXl/7Eoj4hx2+LljomGbaWxUBCDbIQwvPqko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:23:db:4d:3d:a0:1c:ec:4a:4e:65:07:7e:52:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
Validity
Not Before: Aug 4 10:01:10 2025 GMT
Not After : Aug 5 10:01:10 2025 GMT
Subject: CN=e2e89e0ad0de69eab491e1dfd5e37d84905842f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:02:46:e6:59:c0:45:ca:a2:e8:45:8b:0b:4e:
aa:c7:04:fa:77:3c:57:a2:95:07:58:1c:e1:c6:a7:
d6:bc:20:c2:19:61:6b:35:93:f6:32:a5:28:6d:74:
f2:c3:4c:27:2d:5f:51:4e:52:83:48:d9:3e:ae:9d:
52:a0:69:d7:51:ee:6b:84:c7:52:fc:e8:1f:c4:08:
b8:9d:4e:c2:e5:57:b0:c8:3e:2a:72:d0:c1:10:25:
ed:d3:87:38:73:9a:be:b5:c5:0e:42:a3:34:32:4a:
d1:27:21:52:8d:7f:9d:3b:d8:17:d9:7d:03:27:8d:
a9:6a:9a:5a:e9:14:28:e1:23:75:cf:5c:84:8d:74:
bf:d9:30:98:42:20:fc:a5:07:7e:0d:2d:f2:e9:fc:
77:20:eb:a1:32:82:19:81:fd:4f:65:e1:94:58:0e:
e9:99:80:2b:f0:91:ef:dc:ed:1c:81:81:e0:5b:4e:
a5:bc:80:de:1f:04:31:d4:b1:b3:dc:55:76:73:09:
3a:f4:b4:f3:33:98:38:81:07:01:7d:4d:31:37:da:
e7:60:f9:be:b5:14:53:a0:88:78:74:81:03:ac:b6:
c6:6b:ba:f1:a3:b1:42:bd:1d:b1:e3:b2:d8:29:2d:
83:ee:29:1a:6a:de:7f:63:de:e9:5f:cc:87:29:43:
64:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E8:9E:0A:D0:DE:69:EA:B4:91:E1:DF:D5:E3:7D:84:90:58:42:F2
X509v3 Authority Key Identifier:
keyid:4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d3:46:02:78:eb:37:52:f0:fc:88:45:ef:1c:e4:a6:3a:2f:
19:ff:bf:19:bd:e1:97:9d:3d:d2:5a:ee:b8:17:eb:db:c6:b5:
02:d1:f9:90:e1:63:e8:79:76:cb:79:c9:23:71:cf:8f:fd:3f:
ba:29:f6:5d:50:20:2d:72:02:0e:65:1b:1f:cc:13:fa:7f:cf:
b0:70:e4:21:f4:27:a9:91:4e:18:3e:6c:b5:72:68:51:37:dc:
8e:56:90:dd:c2:82:5f:c1:8f:32:fe:e2:ca:2d:7d:a2:43:6d:
01:31:70:46:79:e5:07:ee:32:ad:b0:fe:05:3c:9a:85:27:04:
e0:3b:0d:97:b2:f8:b4:13:b6:04:67:61:b9:e1:76:9c:79:10:
a7:24:38:b1:28:0e:f0:a7:bc:e0:ae:8c:da:a0:e7:e9:7e:ec:
f2:d2:1c:17:f7:03:33:e8:03:4e:9d:63:8e:8a:2f:af:1c:91:
1e:99:65:f0:20:5e:bf:b4:1a:3d:82:7d:e8:8e:a9:45:5b:d4:
a2:36:8c:db:da:1f:fb:3f:5b:f7:65:8f:08:77:89:97:f4:12:
df:3c:81:98:d1:12:71:3b:a7:2a:a2:e2:00:6c:75:68:d1:5c:
7c:b5:59:8c:2a:ea:04:2a:e9:7a:11:44:90:cb:c2:26:91:9b:
da:a7:cf:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0hyPbTT2gHOxKTmUHflKLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNmRmNjgzOGQwMzM4MDE0MWViN2U0ZWU1NWRjMDVkODcw
NjFkYzkwHhcNMjUwODA0MTAwMTEwWhcNMjUwODA1MTAwMTEwWjAzMTEwLwYDVQQD
EyhlMmU4OWUwYWQwZGU2OWVhYjQ5MWUxZGZkNWUzN2Q4NDkwNTg0MmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gJG5lnARcqi6EWLC06qxwT6dzxX
opUHWBzhxqfWvCDCGWFrNZP2MqUobXTyw0wnLV9RTlKDSNk+rp1SoGnXUe5rhMdS
/OgfxAi4nU7C5VewyD4qctDBECXt04c4c5q+tcUOQqM0MkrRJyFSjX+dO9gX2X0D
J42pappa6RQo4SN1z1yEjXS/2TCYQiD8pQd+DS3y6fx3IOuhMoIZgf1PZeGUWA7p
mYAr8JHv3O0cgYHgW06lvIDeHwQx1LGz3FV2cwk69LTzM5g4gQcBfU0xN9rnYPm+
tRRToIh4dIEDrLbGa7rxo7FCvR2x47LYKS2D7ikaat5/Y97pX8yHKUNkxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLongrQ3mnqtJHh39XjfYSQWELyMB8GA1UdIwQY
MBaAFE5t9oONAzgBQet+TuVdwF2HBh3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG0zMmc0MERPQUZCNjM1TzVWM0FYWWNHSGNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi82ZWViNWMtZDI1MS00NzBhLWE3Y2Qt
MzE4MzYyMDA0ZThhLzEvVG0zMmc0MERPQUZCNjM1TzVWM0FYWWNHSGNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi82ZWViNWMtZDI1MS00NzBhLWE3Y2QtMzE4MzYyMDA0ZThh
LzEvVG0zMmc0MERPQUZCNjM1TzVWM0FYWWNHSGNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtNGAnjr
N1Lw/IhF7xzkpjovGf+/Gb3hl5090lruuBfr28a1AtH5kOFj6Hl2y3nJI3HPj/0/
uin2XVAgLXICDmUbH8wT+n/PsHDkIfQnqZFOGD5stXJoUTfcjlaQ3cKCX8GPMv7i
yi19okNtATFwRnnlB+4yrbD+BTyahScE4DsNl7L4tBO2BGdhueF2nHkQpyQ4sSgO
8Ke84K6M2qDn6X7s8tIcF/cDM+gDTp1jjoovrxyRHpll8CBev7QaPYJ96I6pRVvU
ojaM29of+z9b92WPCHeJl/QS3zyBmNEScTunKqLiAGx1aNFcfLVZjCrqBCrpehFE
kMvCJpGb2qfPHg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:05 2025 by rpki-client