Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
File: Tj_pDw-taiXUa9fDNbki2gMbLHg.mft (raw, json)
Hash identifier: SP91uPjrfXs+D1G7XMBXrhSrIRn2MQTxx3flg0m7Ado=
Subject key identifier: CA:56:84:D7:0F:5C:99:E9:DF:38:E7:67:1D:A3:29:80:18:F3:C0:EC
Authority key identifier: 4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
Certificate issuer: /CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Certificate serial: 019874194CA18B0680379F8FF8605C3F80D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
Manifest number: 0ABF
Signing time: Mon 04 Aug 2025 08:01:11 +0000
Manifest this update: Mon 04 Aug 2025 08:01:11 +0000
Manifest next update: Tue 05 Aug 2025 08:01:11 +0000
Files and hashes: 1: A8YDmTBK0K140SrVGjKT4rgJaBs.roa (hash: dZ2I5la+5OGaL56JsGr6ibfQkik4DvtIbwTHLacKDFU=)
2: Tj_pDw-taiXUa9fDNbki2gMbLHg.crl (hash: UUFMTKQzsHXXaqbv25WdfxCn1boDDYz1/VWXYrVshzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:4c:a1:8b:06:80:37:9f:8f:f8:60:5c:3f:80:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Validity
Not Before: Aug 4 08:01:11 2025 GMT
Not After : Aug 5 08:01:11 2025 GMT
Subject: CN=ca5684d70f5c99e9df38e7671da3298018f3c0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5d:e5:ad:15:58:1a:8a:0e:eb:0a:e5:ef:54:
de:45:a5:43:77:73:de:2c:55:d7:a2:25:db:59:c5:
20:d1:9a:93:60:24:a3:83:3c:9f:b8:e3:ae:1c:97:
0c:a2:0f:e6:d8:df:b6:bf:f6:5c:c0:e8:93:f2:3f:
2e:ea:29:43:30:61:07:a7:d9:37:ca:f7:49:e7:8b:
05:2d:71:8a:17:18:ad:1f:aa:f1:99:16:06:a4:8a:
5e:9a:f1:32:1e:54:03:2c:b6:18:b1:40:16:df:09:
64:a6:0c:3e:6b:f3:fe:74:c5:11:69:81:e8:74:50:
9f:99:03:30:0d:fa:8f:ee:42:bb:a1:61:ef:8b:e6:
d3:99:e8:4b:15:5c:40:49:b7:90:57:76:e6:77:91:
05:12:56:df:50:0f:d6:bd:3b:b6:65:37:e6:f3:67:
7e:30:c6:7c:82:33:e9:6c:fb:29:cd:4a:33:3c:6c:
b1:49:f1:87:11:77:6f:a0:e5:2f:3b:b3:32:0b:ec:
20:25:7b:e1:e6:22:fd:da:73:50:0c:52:76:6e:6a:
5f:6f:69:38:3e:4e:6d:e6:26:c9:69:0e:59:17:03:
a8:03:8b:79:21:0c:44:c0:6c:bf:58:fc:96:23:26:
17:6f:fe:c9:79:bb:d4:6e:26:42:41:dc:80:b9:df:
89:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:56:84:D7:0F:5C:99:E9:DF:38:E7:67:1D:A3:29:80:18:F3:C0:EC
X509v3 Authority Key Identifier:
keyid:4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:2b:b5:05:f6:ed:4f:f3:89:09:eb:20:6a:07:02:b7:4c:f5:
a4:6b:b6:20:60:1f:c0:d7:ca:4b:ce:f2:97:8c:84:67:d8:08:
1e:b6:69:14:54:83:9c:cd:39:18:81:5c:20:1f:db:2a:f9:20:
df:1d:57:57:90:54:1c:91:78:83:c6:93:e7:21:e4:59:a9:1f:
9c:af:e9:6d:40:4e:2a:4d:54:bd:9d:ff:75:bc:a3:94:bb:91:
bd:ec:7e:89:dc:55:20:fa:64:65:df:3e:3d:d9:15:ff:22:5f:
42:21:ae:f3:c5:77:23:36:f4:d2:80:f4:e9:21:49:51:5e:a9:
cf:7c:6f:95:d1:41:7d:69:84:47:54:67:e2:12:bd:42:16:61:
df:c2:04:d8:c7:7f:b3:97:5e:02:96:8e:a5:0e:39:4d:e2:53:
7c:b0:3a:18:f8:d8:c1:e9:97:31:37:c9:3a:bf:40:80:58:3a:
c3:12:d3:96:45:6d:c0:91:d8:19:4d:4a:94:73:bc:9c:cb:33:
8f:67:07:0c:43:ea:45:01:de:7a:45:96:d6:58:a2:03:6d:9c:
67:fe:aa:3b:ac:71:fe:76:56:79:2c:68:d9:bf:7c:95:bf:09:
dd:77:18:8f:5c:d4:f2:5e:a7:c7:66:d6:99:d3:c0:88:3f:9d:
e7:19:ed:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GUyhiwaAN5+P+GBcP4DSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlM2ZlOTBmMGZhZDZhMjVkNDZiZDdjMzM1YjkyMmRhMDMx
YjJjNzgwHhcNMjUwODA0MDgwMTExWhcNMjUwODA1MDgwMTExWjAzMTEwLwYDVQQD
EyhjYTU2ODRkNzBmNWM5OWU5ZGYzOGU3NjcxZGEzMjk4MDE4ZjNjMGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4l3lrRVYGooO6wrl71TeRaVDd3Pe
LFXXoiXbWcUg0ZqTYCSjgzyfuOOuHJcMog/m2N+2v/ZcwOiT8j8u6ilDMGEHp9k3
yvdJ54sFLXGKFxitH6rxmRYGpIpemvEyHlQDLLYYsUAW3wlkpgw+a/P+dMURaYHo
dFCfmQMwDfqP7kK7oWHvi+bTmehLFVxASbeQV3bmd5EFElbfUA/WvTu2ZTfm82d+
MMZ8gjPpbPspzUozPGyxSfGHEXdvoOUvO7MyC+wgJXvh5iL92nNQDFJ2bmpfb2k4
Pk5t5ibJaQ5ZFwOoA4t5IQxEwGy/WPyWIyYXb/7JebvUbiZCQdyAud+JRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpWhNcPXJnp3zjnZx2jKYAY88DsMB8GA1UdIwQY
MBaAFE4/6Q8PrWol1GvXwzW5ItoDGyx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGpfcER3LXRhaVhVYTlmRE5ia2kyZ01iTEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80Zjk0M2YtZDE2YS00OGRhLWI5M2Et
MTQ4N2M2MDIwYzQ2LzEvVGpfcER3LXRhaVhVYTlmRE5ia2kyZ01iTEhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80Zjk0M2YtZDE2YS00OGRhLWI5M2EtMTQ4N2M2MDIwYzQ2
LzEvVGpfcER3LXRhaVhVYTlmRE5ia2kyZ01iTEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCu1Bfbt
T/OJCesgagcCt0z1pGu2IGAfwNfKS87yl4yEZ9gIHrZpFFSDnM05GIFcIB/bKvkg
3x1XV5BUHJF4g8aT5yHkWakfnK/pbUBOKk1UvZ3/dbyjlLuRvex+idxVIPpkZd8+
PdkV/yJfQiGu88V3Izb00oD06SFJUV6pz3xvldFBfWmER1Rn4hK9QhZh38IE2Md/
s5deApaOpQ45TeJTfLA6GPjYwemXMTfJOr9AgFg6wxLTlkVtwJHYGU1KlHO8nMsz
j2cHDEPqRQHeekWW1liiA22cZ/6qO6xx/nZWeSxo2b98lb8J3XcYj1zU8l6nx2bW
mdPAiD+d5xntWg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:55 2025 by rpki-client