Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
File: tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft (raw, json)
Hash identifier: 9g24zN4qNQrRC3qTcZp1f97hlm9NRQ9jzveCTrdFjZo=
Subject key identifier: 69:C3:23:80:FC:89:27:8E:0C:08:C9:0B:2C:E6:F1:03:33:05:E6:A6
Authority key identifier: B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
Certificate issuer: /CN=b57c8ac055c574d8cf13522b964b92314d211eae
Certificate serial: 019893A3AE6639B07DCAA8473416ABD6F10B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
Manifest number: 1374
Signing time: Sun 10 Aug 2025 11:00:34 +0000
Manifest this update: Sun 10 Aug 2025 11:00:34 +0000
Manifest next update: Mon 11 Aug 2025 11:00:34 +0000
Files and hashes: 1: tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl (hash: u7AjjIP2tyd9BiQihsvjxGP+kWxffVgy3F4p9BZMyeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:ae:66:39:b0:7d:ca:a8:47:34:16:ab:d6:f1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57c8ac055c574d8cf13522b964b92314d211eae
Validity
Not Before: Aug 10 11:00:34 2025 GMT
Not After : Aug 11 11:00:34 2025 GMT
Subject: CN=69c32380fc89278e0c08c90b2ce6f1033305e6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:f7:9f:b2:23:ac:22:53:57:39:d7:74:7b:
95:15:89:8d:f8:60:42:39:04:16:6f:a2:d6:56:8c:
c9:50:c0:2b:cd:b7:44:72:28:c0:0f:5c:1b:0d:44:
e4:78:e2:e7:6a:89:43:9d:a9:07:35:a9:6b:68:b4:
80:7e:f0:13:be:62:68:c3:00:5a:84:f4:fd:9e:40:
4b:61:b0:72:a4:73:67:1b:11:e6:ce:ab:ae:d0:92:
f6:1d:55:e8:3b:94:40:62:21:72:17:8b:5f:1d:2e:
c9:b3:09:6c:d7:72:fb:ae:39:74:a2:22:44:4b:64:
91:0a:a9:05:3d:c8:2c:ad:58:a1:13:ec:4b:b8:88:
84:da:c5:f5:4b:62:97:9f:25:e0:b7:84:d1:f1:e6:
42:3b:51:2d:49:3a:dc:d2:46:96:69:59:e8:88:26:
32:8c:1c:0f:4b:e7:bd:f0:9b:bd:d1:74:62:b1:4b:
1f:61:c9:44:ab:c9:b7:bd:20:b4:04:76:17:5f:52:
59:12:54:85:bd:c0:08:73:51:78:28:de:3a:1f:33:
ce:18:91:a6:96:01:ab:c1:12:95:bd:47:6b:85:3b:
7f:38:0f:94:3e:e4:17:69:15:ba:c9:bb:1c:4d:d0:
23:2e:fc:d5:04:2b:0a:40:9a:e9:92:b2:b8:af:7d:
6d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C3:23:80:FC:89:27:8E:0C:08:C9:0B:2C:E6:F1:03:33:05:E6:A6
X509v3 Authority Key Identifier:
keyid:B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:59:ac:d3:27:8d:e3:1d:51:36:13:f0:d8:46:f2:8e:fe:e8:
8e:4f:4e:5c:4c:57:53:33:29:d8:60:ef:5a:09:71:5c:f4:d9:
58:57:1b:cb:40:98:89:77:62:ca:85:cb:74:f7:46:72:94:4c:
07:96:7b:1c:59:8d:b5:b1:3b:46:74:4f:1f:07:c5:5f:7f:a9:
2c:a7:b0:3d:dd:d8:ae:c9:58:93:c5:df:0a:d8:90:cc:58:a8:
2b:7d:69:9f:35:d1:6a:96:57:9a:ef:a1:27:f3:45:d5:67:6b:
ba:77:a8:33:a5:0a:26:4f:4c:8e:24:6a:45:c3:03:f3:00:a9:
46:73:fc:cb:f0:7d:ac:4e:84:0a:0c:63:87:5e:09:84:0d:0f:
53:db:47:d6:8f:3b:13:d3:8d:7a:33:cf:ae:20:01:66:79:6d:
61:8a:23:72:51:d0:e2:c2:47:92:2c:01:8d:74:02:34:bf:9c:
9b:a3:0c:3d:97:e4:04:12:f9:1b:61:ba:74:90:ee:e7:5c:ef:
10:18:b6:70:91:ab:4a:b4:ba:49:db:a4:2f:4d:d2:43:70:e0:
f6:55:1e:1b:28:a5:4d:f6:1a:60:98:27:ea:55:d7:71:47:94:
6e:3e:23:4a:5b:3e:d1:97:a0:58:9f:16:ef:4e:dc:ac:4d:3e:
45:87:38:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTo65mObB9yqhHNBar1vELMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1N2M4YWMwNTVjNTc0ZDhjZjEzNTIyYjk2NGI5MjMxNGQy
MTFlYWUwHhcNMjUwODEwMTEwMDM0WhcNMjUwODExMTEwMDM0WjAzMTEwLwYDVQQD
Eyg2OWMzMjM4MGZjODkyNzhlMGMwOGM5MGIyY2U2ZjEwMzMzMDVlNmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGL3n7IjrCJTVznXdHuVFYmN+GBC
OQQWb6LWVozJUMArzbdEcijAD1wbDUTkeOLnaolDnakHNalraLSAfvATvmJowwBa
hPT9nkBLYbBypHNnGxHmzquu0JL2HVXoO5RAYiFyF4tfHS7Jswls13L7rjl0oiJE
S2SRCqkFPcgsrVihE+xLuIiE2sX1S2KXnyXgt4TR8eZCO1EtSTrc0kaWaVnoiCYy
jBwPS+e98Ju90XRisUsfYclEq8m3vSC0BHYXX1JZElSFvcAIc1F4KN46HzPOGJGm
lgGrwRKVvUdrhTt/OA+UPuQXaRW6ybscTdAjLvzVBCsKQJrpkrK4r31t4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnDI4D8iSeODAjJCyzm8QMzBeamMB8GA1UdIwQY
MBaAFLV8isBVxXTYzxNSK5ZLkjFNIR6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFh5S3dGWEZkTmpQRTFJcmxrdVNNVTBoSHE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8yODlmNDAtYTIzMy00YzYzLWI5M2Ut
OGU0YzdjN2I2NTA0LzEvdFh5S3dGWEZkTmpQRTFJcmxrdVNNVTBoSHE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8yODlmNDAtYTIzMy00YzYzLWI5M2UtOGU0YzdjN2I2NTA0
LzEvdFh5S3dGWEZkTmpQRTFJcmxrdVNNVTBoSHE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1ms0yeN
4x1RNhPw2Ebyjv7ojk9OXExXUzMp2GDvWglxXPTZWFcby0CYiXdiyoXLdPdGcpRM
B5Z7HFmNtbE7RnRPHwfFX3+pLKewPd3YrslYk8XfCtiQzFioK31pnzXRapZXmu+h
J/NF1WdruneoM6UKJk9MjiRqRcMD8wCpRnP8y/B9rE6ECgxjh14JhA0PU9tH1o87
E9ONejPPriABZnltYYojclHQ4sJHkiwBjXQCNL+cm6MMPZfkBBL5G2G6dJDu51zv
EBi2cJGrSrS6SdukL03SQ3Dg9lUeGyilTfYaYJgn6lXXcUeUbj4jSls+0ZegWJ8W
707crE0+RYc4ng==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:03 2025 by rpki-client