Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
File: TTpxp39MqbpTb5hhKpxW1AwMO50.mft (raw, json)
Hash identifier: nghXs3vRu19eYZRyPu3BJjMIjgeKM/bDiU7A2bi9erY=
Subject key identifier: 08:C5:F4:33:35:40:9D:2B:81:D9:2A:B2:7D:84:2B:54:01:AC:E0:EA
Authority key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
Certificate issuer: /CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Certificate serial: 01988EEC11999A81F8A1172A5CC019C8EEAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
Manifest number: 1622
Signing time: Sat 09 Aug 2025 13:01:32 +0000
Manifest this update: Sat 09 Aug 2025 13:01:32 +0000
Manifest next update: Sun 10 Aug 2025 13:01:32 +0000
Files and hashes: 1: TTpxp39MqbpTb5hhKpxW1AwMO50.crl (hash: MOjazF/csmwqUkPXptDJc7vzINavfFVV8cWllRdF+GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:11:99:9a:81:f8:a1:17:2a:5c:c0:19:c8:ee:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Validity
Not Before: Aug 9 13:01:32 2025 GMT
Not After : Aug 10 13:01:32 2025 GMT
Subject: CN=08c5f43335409d2b81d92ab27d842b5401ace0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:a0:ed:e7:37:2b:1d:4f:ca:67:57:ec:82:
96:26:e2:b5:3c:e2:26:66:60:c1:ef:a7:b6:c3:68:
d1:68:28:18:cb:96:30:fc:34:a8:b8:3b:6d:83:b5:
84:55:04:f0:43:10:5f:5e:d9:a7:81:14:84:60:3f:
9c:c4:9b:f8:2a:35:d6:24:5a:51:89:15:54:2a:2d:
07:09:b9:b6:0a:f7:91:7c:81:f5:88:b3:c0:e0:bb:
af:e1:c2:66:40:0b:e5:23:16:7a:f6:d7:b3:67:11:
10:37:7d:65:c3:47:f8:95:a9:7d:8f:49:75:b1:87:
c9:3a:b1:66:93:b0:ae:5d:7c:8d:f3:80:a5:88:99:
d1:85:1a:22:41:de:39:61:55:f4:11:c4:21:0a:3b:
4b:52:c5:97:a8:9a:2a:28:3e:e4:54:f3:00:3d:b7:
98:f4:cb:4b:13:11:4b:14:75:60:fb:4e:4a:f7:a2:
e5:ee:b8:9c:1e:7c:6c:25:ac:1e:74:e6:e8:b5:06:
4c:9a:27:ac:f2:9e:93:2e:b2:88:52:1f:7c:d6:fb:
a0:7f:83:00:72:a1:5b:8c:93:a2:00:46:9f:c4:64:
54:d4:ce:a6:50:ef:a6:ac:3b:db:47:99:16:0c:24:
15:3b:96:68:e6:47:41:cc:7e:bb:e9:40:68:44:4b:
42:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C5:F4:33:35:40:9D:2B:81:D9:2A:B2:7D:84:2B:54:01:AC:E0:EA
X509v3 Authority Key Identifier:
keyid:4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:26:ab:ac:39:58:15:ac:98:a0:32:41:36:9a:2a:a7:ea:52:
ca:f6:ea:b8:f5:6f:5a:84:58:6c:96:15:11:b6:5b:05:d3:a9:
67:15:6f:31:da:18:d0:a6:39:f4:da:59:04:0d:0d:83:92:a8:
e6:25:f3:d2:a1:e6:7e:bf:8c:d6:2b:6d:23:d0:14:7f:cb:9e:
b8:88:46:09:7f:0e:9b:b4:a0:e8:1a:ba:d7:dd:48:3f:ff:af:
db:1d:19:9a:0e:34:e1:6f:ce:dc:2a:4d:fa:70:f9:38:8e:be:
3a:da:e0:6b:b2:bc:6c:cc:42:41:b1:b2:44:f3:8f:1b:86:f5:
eb:67:6c:05:39:ab:a2:92:9a:2b:6b:86:d2:a7:c9:d4:7b:ff:
7c:44:f4:fd:7b:64:d9:00:cf:8f:6f:ad:fa:86:f1:6b:fa:44:
bf:61:ee:2e:0f:40:78:40:0b:37:e5:16:c9:04:e4:7f:14:de:
6a:8f:26:f9:24:42:ec:39:d2:6a:39:d3:2a:79:e1:a9:fb:4b:
ac:0c:b4:e8:b3:a8:34:8f:c9:76:25:91:da:a1:54:6d:57:43:
57:ea:1c:d0:00:d8:2d:ef:55:4e:01:9f:7e:98:ef:d8:d2:2c:
ff:d3:3a:92:5a:a2:3f:c9:f9:67:02:cd:87:3f:17:df:da:91:
86:a9:6c:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO7BGZmoH4oRcqXMAZyO6uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2E3MWE3N2Y0Y2E5YmE1MzZmOTg2MTJhOWM1NmQ0MGMw
YzNiOWQwHhcNMjUwODA5MTMwMTMyWhcNMjUwODEwMTMwMTMyWjAzMTEwLwYDVQQD
EygwOGM1ZjQzMzM1NDA5ZDJiODFkOTJhYjI3ZDg0MmI1NDAxYWNlMGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjig7ec3Kx1PymdX7IKWJuK1POIm
ZmDB76e2w2jRaCgYy5Yw/DSouDttg7WEVQTwQxBfXtmngRSEYD+cxJv4KjXWJFpR
iRVUKi0HCbm2CveRfIH1iLPA4Luv4cJmQAvlIxZ69tezZxEQN31lw0f4lal9j0l1
sYfJOrFmk7CuXXyN84CliJnRhRoiQd45YVX0EcQhCjtLUsWXqJoqKD7kVPMAPbeY
9MtLExFLFHVg+05K96Ll7ricHnxsJawedObotQZMmies8p6TLrKIUh981vugf4MA
cqFbjJOiAEafxGRU1M6mUO+mrDvbR5kWDCQVO5Zo5kdBzH676UBoREtCBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjF9DM1QJ0rgdkqsn2EK1QBrODqMB8GA1UdIwQY
MBaAFE06cad/TKm6U2+YYSqcVtQMDDudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84ODc1MDEtNGQ4ZS00YmViLTk1OTAt
NjUwNzliNzU4NjhhLzEvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84ODc1MDEtNGQ4ZS00YmViLTk1OTAtNjUwNzliNzU4Njhh
LzEvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCarrDlY
FayYoDJBNpoqp+pSyvbquPVvWoRYbJYVEbZbBdOpZxVvMdoY0KY59NpZBA0Ng5Ko
5iXz0qHmfr+M1ittI9AUf8ueuIhGCX8Om7Sg6Bq6191IP/+v2x0Zmg404W/O3CpN
+nD5OI6+Otrga7K8bMxCQbGyRPOPG4b162dsBTmropKaK2uG0qfJ1Hv/fET0/Xtk
2QDPj2+t+obxa/pEv2HuLg9AeEALN+UWyQTkfxTeao8m+SRC7DnSajnTKnnhqftL
rAy06LOoNI/JdiWR2qFUbVdDV+oc0ADYLe9VTgGffpjv2NIs/9M6klqiP8n5ZwLN
hz8X39qRhqls4g==
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:19:16 2025 by rpki-client