Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
File: TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft (raw, json)
Hash identifier: +kQu/Wza6LCn6PDFFv6eh+resuiFhzlejlBiwstz3XM=
Subject key identifier: 5B:21:AB:94:8F:AB:E7:B1:7F:E3:B0:C5:1F:17:18:E7:29:44:24:CE
Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Certificate serial: 019889C57257E21B60065174F125518C6E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 13:01:15 +0000
Manifest this update: Fri 08 Aug 2025 13:01:15 +0000
Manifest next update: Sat 09 Aug 2025 13:01:15 +0000
Files and hashes: 1: TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl (hash: kRDRlPzNzIq+x96zBy/LdCXRdItWTfespLt+8EgtgMA=)
2: bs1HYE5HpmfRDe1IWRWlAw4_YbQ.roa (hash: /9wCX+4PJTuFTnMcFlhOot3PdJrbFSkbu3ySPd314JY=)
3: kvulLtgS7l9j5cL5cr_z1UEgt1M.roa (hash: lwycUBIUeNB/fogCEgMYVAepQLASER5k8Ye40EXBAoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:c5:72:57:e2:1b:60:06:51:74:f1:25:51:8c:6e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Validity
Not Before: Aug 8 13:01:15 2025 GMT
Not After : Aug 9 13:01:15 2025 GMT
Subject: CN=5b21ab948fabe7b17fe3b0c51f1718e7294424ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:51:ac:43:c5:9f:2c:db:f0:0d:dc:88:3d:bf:
39:d3:d0:47:60:e5:9e:e8:30:12:53:06:4d:e6:66:
39:45:2d:e7:02:f9:eb:c4:9d:fb:de:03:7f:ff:55:
79:7a:89:91:29:61:80:22:87:c7:af:a0:a1:66:ef:
04:a4:7d:2c:d2:e8:c4:d3:3b:eb:8d:fe:71:41:d3:
0c:77:9d:ae:ef:d0:7a:6e:36:af:b0:9e:94:bc:fa:
41:f6:8a:29:57:d5:f4:8e:35:77:8e:8d:6d:3d:f0:
41:e7:8f:69:35:3a:60:fc:3b:36:ab:6b:16:5e:22:
0a:02:df:83:95:cb:d6:6c:3c:5d:4c:d4:b1:b8:fb:
39:a8:68:ad:94:f9:7a:ad:54:4b:84:f9:ff:8e:13:
53:57:10:89:0f:6b:64:42:ad:c5:b2:c3:0d:68:8f:
4a:6b:aa:d3:90:fc:fa:f5:3b:b0:56:9e:f8:fc:d7:
37:ad:6f:1f:ea:d5:b0:74:df:54:50:34:52:d7:ef:
cf:8c:ad:1c:d5:55:5a:30:38:17:7f:da:28:4e:d8:
1c:ed:ea:40:d4:0c:87:8a:60:6e:f3:86:21:4c:7a:
96:a0:ba:54:5f:77:39:87:2a:25:56:f6:7b:4e:4a:
f1:4d:13:91:82:f2:d2:c3:cc:f4:25:a4:e7:a6:5d:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:21:AB:94:8F:AB:E7:B1:7F:E3:B0:C5:1F:17:18:E7:29:44:24:CE
X509v3 Authority Key Identifier:
keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9e:66:6f:c8:b1:00:fb:b4:c0:a8:a9:6e:66:db:ad:66:f1:
64:84:2f:d2:08:49:ab:af:f1:37:7a:f8:8c:b4:48:40:3c:24:
8b:13:48:31:60:02:b0:25:85:6b:db:4f:52:30:6e:d8:07:7f:
36:19:21:9c:91:b4:83:64:41:25:87:2c:b5:2c:f1:b6:e3:ef:
fe:a8:3d:f0:57:d7:12:50:2f:79:98:08:be:e1:82:28:1f:65:
60:89:3c:28:df:56:a2:00:43:8d:ed:4c:64:50:a2:28:ec:b8:
e2:4a:c8:92:47:f4:29:5e:74:28:6f:2e:d2:86:c5:18:61:e5:
5f:06:14:f7:8f:f1:78:b9:da:84:e2:2d:00:1d:e9:ef:77:69:
09:45:fa:2f:a2:5d:48:31:06:8f:36:28:c7:dc:12:bf:67:82:
27:f5:30:24:14:cf:aa:d4:79:78:13:df:80:19:de:da:35:d4:
a7:04:e0:59:ac:42:78:ba:ab:a2:b6:ac:d7:61:75:1a:04:22:
7a:44:55:e1:ea:4a:42:1c:2e:f0:f9:17:6f:2a:0f:fc:30:a9:
1d:13:6b:d1:1f:cf:54:47:7d:ce:18:44:b4:79:2c:b4:4c:21:
28:94:b8:9b:d6:a8:03:d2:23:e3:a8:ee:c9:db:7e:59:b5:01:
6d:5b:45:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJxXJX4htgBlF08SVRjG4WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjY2JjNWUwNDVlYWE1Zjc2MmE5MTQ2MjQ0YzE5MjQ4YjYy
YmE5NzYwHhcNMjUwODA4MTMwMTE1WhcNMjUwODA5MTMwMTE1WjAzMTEwLwYDVQQD
Eyg1YjIxYWI5NDhmYWJlN2IxN2ZlM2IwYzUxZjE3MThlNzI5NDQyNGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31GsQ8WfLNvwDdyIPb8509BHYOWe
6DASUwZN5mY5RS3nAvnrxJ373gN//1V5eomRKWGAIofHr6ChZu8EpH0s0ujE0zvr
jf5xQdMMd52u79B6bjavsJ6UvPpB9oopV9X0jjV3jo1tPfBB549pNTpg/Ds2q2sW
XiIKAt+DlcvWbDxdTNSxuPs5qGitlPl6rVRLhPn/jhNTVxCJD2tkQq3FssMNaI9K
a6rTkPz69TuwVp74/Nc3rW8f6tWwdN9UUDRS1+/PjK0c1VVaMDgXf9ooTtgc7epA
1AyHimBu84YhTHqWoLpUX3c5hyolVvZ7TkrxTRORgvLSw8z0JaTnpl0elQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFshq5SPq+exf+OwxR8XGOcpRCTOMB8GA1UdIwQY
MBaAFEzLxeBF6qX3YqkUYkTBkki2K6l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iZjY2ZGQtNjIzNy00OGRlLWFlZDct
YTdjNTlkZGNmNzZiLzEvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iZjY2ZGQtNjIzNy00OGRlLWFlZDctYTdjNTlkZGNmNzZi
LzEvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJ5mb8ix
APu0wKipbmbbrWbxZIQv0ghJq6/xN3r4jLRIQDwkixNIMWACsCWFa9tPUjBu2Ad/
NhkhnJG0g2RBJYcstSzxtuPv/qg98FfXElAveZgIvuGCKB9lYIk8KN9WogBDje1M
ZFCiKOy44krIkkf0KV50KG8u0obFGGHlXwYU94/xeLnahOItAB3p73dpCUX6L6Jd
SDEGjzYox9wSv2eCJ/UwJBTPqtR5eBPfgBne2jXUpwTgWaxCeLqroras12F1GgQi
ekRV4epKQhwu8PkXbyoP/DCpHRNr0R/PVEd9zhhEtHkstEwhKJS4m9aoA9Ij46ju
ydt+WbUBbVtFPQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 21:02:15 2025 by rpki-client