Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
File: TSE3TacxMU8KBRddJbDYmnb24IE.mft (raw, json)
Hash identifier: oeKLdd+su6Wvj6yWzbHgtSlD2nv9GUIl3yh1w7C5scc=
Subject key identifier: D8:3A:BB:D0:10:88:E4:5B:63:47:70:C3:8E:42:96:34:87:41:2C:EF
Authority key identifier: 4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81
Certificate issuer: /CN=4d21374da731314f0a05175d25b0d89a76f6e081
Certificate serial: 0198A0F16F992A49EF3769F6DBD4B918837D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
Manifest number: 059D
Signing time: Wed 13 Aug 2025 01:00:33 +0000
Manifest this update: Wed 13 Aug 2025 01:00:33 +0000
Manifest next update: Thu 14 Aug 2025 01:00:33 +0000
Files and hashes: 1: TSE3TacxMU8KBRddJbDYmnb24IE.crl (hash: 1G0nE18rURP+UdlQu0CHLlZbkAJAVwJ43olZMGx6Lq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f1:6f:99:2a:49:ef:37:69:f6:db:d4:b9:18:83:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21374da731314f0a05175d25b0d89a76f6e081
Validity
Not Before: Aug 13 01:00:33 2025 GMT
Not After : Aug 14 01:00:33 2025 GMT
Subject: CN=d83abbd01088e45b634770c38e42963487412cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:18:b1:c4:99:6f:a8:0b:20:36:6c:ca:1c:47:
1e:b0:75:7a:f4:dd:d4:1b:1f:cd:49:55:21:30:0e:
e7:a7:a3:06:ae:9a:fd:d7:fa:45:33:42:9a:c6:a8:
9e:37:47:10:f5:68:95:c9:69:1f:d7:1b:cd:21:94:
66:fb:99:ac:c1:cf:18:60:c9:9b:a1:70:17:28:61:
10:4d:fa:09:8c:1f:a8:c7:5a:5c:59:a6:ae:5a:86:
6b:d9:21:4a:d4:91:66:2b:71:29:60:46:9b:de:3d:
a7:0d:8a:8f:c8:d1:d6:c2:61:08:6e:65:0b:04:99:
cc:2b:f3:9a:86:ab:12:53:55:6f:9c:bd:df:6b:67:
26:0e:e3:fa:8d:c6:39:b5:f4:8b:d4:19:16:84:e7:
9e:7f:fe:80:75:e0:a9:22:d2:c5:59:83:e5:f0:48:
9b:d9:53:d5:fe:9c:9f:cd:2d:20:2d:23:f6:56:98:
66:a8:b2:23:40:05:17:44:3c:24:5a:2b:ef:d8:54:
d4:67:cc:8d:80:9a:63:92:ef:34:b6:6f:f6:5f:4a:
d1:1e:4c:49:b3:5d:b6:36:c8:3f:10:8d:2e:46:c3:
a7:34:6d:00:5a:b6:f4:5c:23:b6:fb:67:0c:fa:27:
d6:93:7f:13:c1:63:83:40:0e:f7:45:de:a2:a5:8c:
ae:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3A:BB:D0:10:88:E4:5B:63:47:70:C3:8E:42:96:34:87:41:2C:EF
X509v3 Authority Key Identifier:
keyid:4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6e:3f:88:89:60:6a:2e:f2:54:d7:f3:89:a1:ba:39:18:22:
cb:0d:81:3b:29:c7:be:cd:a7:cc:36:4b:fc:b1:55:88:56:e6:
ce:74:60:e0:51:4c:41:a3:d0:82:27:8f:36:79:a9:eb:63:39:
b3:3f:b7:2f:a3:69:82:3a:ea:28:5f:3f:c8:a2:e9:64:4f:c2:
9d:96:e3:97:ae:31:d9:16:89:42:70:df:95:11:47:31:c1:7d:
0a:a0:85:a2:82:48:76:2d:99:c1:b7:88:89:be:d1:70:51:2c:
43:d8:3e:dc:a3:ce:5a:33:47:30:a2:f6:3b:17:66:32:9c:3a:
6b:50:8c:49:8f:c3:dc:ff:5f:02:a6:16:01:a7:ee:c6:b9:bf:
68:f8:7c:0f:04:c0:14:59:aa:7c:6b:82:7e:03:64:b2:7d:f5:
98:5d:50:1b:6e:2e:9d:7f:61:8d:b1:9c:96:66:96:b0:37:2e:
14:e2:90:09:0f:39:88:c7:42:cb:5e:87:4a:b4:8d:88:95:cf:
57:8a:08:9b:ef:90:34:97:2b:7f:5b:65:0c:2f:b3:f8:a0:37:
20:dd:81:39:08:68:80:88:1a:19:a9:99:90:42:d8:ea:2d:28:
35:6a:43:32:6c:ee:94:82:31:31:30:fe:0f:e0:52:36:a5:91:
73:61:26:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZig8W+ZKknvN2n229S5GIN9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMjEzNzRkYTczMTMxNGYwYTA1MTc1ZDI1YjBkODlhNzZm
NmUwODEwHhcNMjUwODEzMDEwMDMzWhcNMjUwODE0MDEwMDMzWjAzMTEwLwYDVQQD
EyhkODNhYmJkMDEwODhlNDViNjM0NzcwYzM4ZTQyOTYzNDg3NDEyY2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hixxJlvqAsgNmzKHEcesHV69N3U
Gx/NSVUhMA7np6MGrpr91/pFM0KaxqieN0cQ9WiVyWkf1xvNIZRm+5mswc8YYMmb
oXAXKGEQTfoJjB+ox1pcWaauWoZr2SFK1JFmK3EpYEab3j2nDYqPyNHWwmEIbmUL
BJnMK/OahqsSU1VvnL3fa2cmDuP6jcY5tfSL1BkWhOeef/6AdeCpItLFWYPl8Eib
2VPV/pyfzS0gLSP2VphmqLIjQAUXRDwkWivv2FTUZ8yNgJpjku80tm/2X0rRHkxJ
s122Nsg/EI0uRsOnNG0AWrb0XCO2+2cM+ifWk38TwWODQA73Rd6ipYyujwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNg6u9AQiORbY0dww45CljSHQSzvMB8GA1UdIwQY
MBaAFE0hN02nMTFPCgUXXSWw2Jp29uCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFNFM1RhY3hNVThLQlJkZEpiRFltbmIyNElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85YjJmYzEtYmE1OC00OTU3LTg1NDAt
ZWIxZWQwYjQ4N2IxLzEvVFNFM1RhY3hNVThLQlJkZEpiRFltbmIyNElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi85YjJmYzEtYmE1OC00OTU3LTg1NDAtZWIxZWQwYjQ4N2Ix
LzEvVFNFM1RhY3hNVThLQlJkZEpiRFltbmIyNElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANW4/iIlg
ai7yVNfziaG6ORgiyw2BOynHvs2nzDZL/LFViFbmznRg4FFMQaPQgiePNnmp62M5
sz+3L6NpgjrqKF8/yKLpZE/CnZbjl64x2RaJQnDflRFHMcF9CqCFooJIdi2ZwbeI
ib7RcFEsQ9g+3KPOWjNHMKL2OxdmMpw6a1CMSY/D3P9fAqYWAafuxrm/aPh8DwTA
FFmqfGuCfgNksn31mF1QG24unX9hjbGclmaWsDcuFOKQCQ85iMdCy16HSrSNiJXP
V4oIm++QNJcrf1tlDC+z+KA3IN2BOQhogIgaGamZkELY6i0oNWpDMmzulIIxMTD+
D+BSNqWRc2EmFw==
-----END CERTIFICATE-----
Generated at Wed Aug 13 07:39:25 2025 by rpki-client