Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
File: TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft (raw, json)
Hash identifier: IxcEz4+wWWR97ElezmYs11mLz3pE5AqtYGUizjllnUI=
Subject key identifier: EE:02:20:D7:74:FE:23:49:9A:EC:A9:2E:65:95:AD:4E:48:6B:7C:45
Authority key identifier: 4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC
Certificate issuer: /CN=4cd710b65373e0d910da70636fc143c06ba5ddac
Certificate serial: 01987450907A237421E4E1ED438C5CF9AB5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
Manifest number: 156D
Signing time: Mon 04 Aug 2025 09:01:33 +0000
Manifest this update: Mon 04 Aug 2025 09:01:33 +0000
Manifest next update: Tue 05 Aug 2025 09:01:33 +0000
Files and hashes: 1: TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl (hash: eQ3mxezbO0fifpH6wvQ/qY5RQSgBzJSU6hUhzF3CKOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:90:7a:23:74:21:e4:e1:ed:43:8c:5c:f9:ab:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd710b65373e0d910da70636fc143c06ba5ddac
Validity
Not Before: Aug 4 09:01:33 2025 GMT
Not After : Aug 5 09:01:33 2025 GMT
Subject: CN=ee0220d774fe23499aeca92e6595ad4e486b7c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d4:7a:78:6a:7e:82:ae:8e:2d:50:b4:28:02:
63:60:7d:a2:e6:ed:fc:de:e0:79:a3:59:12:2f:00:
63:23:a4:93:ea:49:f8:72:ed:8a:0f:4a:e9:e1:b7:
51:ad:f5:17:b1:f1:00:94:53:de:7e:f6:6e:02:40:
fd:88:da:b4:8c:6c:2a:9c:8c:be:5b:54:05:40:b2:
98:65:d2:13:c0:cd:e1:db:23:b0:5c:87:3c:ec:7b:
cc:2d:f6:b4:11:e9:d7:b7:eb:43:fe:27:08:9a:57:
20:35:e7:78:04:43:36:3a:cd:79:5d:a7:f4:11:0d:
8d:42:cc:64:77:da:32:2e:61:35:f3:0b:ae:7a:bd:
97:48:aa:3b:83:93:8e:a9:51:a4:26:87:99:62:3c:
43:98:c1:b6:c2:fa:c2:84:19:f6:2a:35:0b:3a:63:
bd:7e:38:4c:f3:2b:b7:5a:22:d4:e8:7d:af:b2:93:
aa:01:8e:69:11:01:70:31:a9:18:96:94:f6:33:57:
82:58:a1:26:62:7b:4a:1d:b9:29:8f:fe:c0:06:e8:
ec:b1:6c:6f:ad:36:a6:a4:62:c6:dd:01:af:00:ed:
7b:51:31:2d:35:45:dc:1f:9b:44:96:5f:84:d6:c5:
7e:6c:b1:86:dc:e2:a7:b2:cc:af:2e:9e:f7:a0:ff:
ae:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:02:20:D7:74:FE:23:49:9A:EC:A9:2E:65:95:AD:4E:48:6B:7C:45
X509v3 Authority Key Identifier:
keyid:4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:25:2f:fa:84:bd:db:9a:00:22:2b:46:f5:68:ce:a7:e7:8e:
aa:f7:1c:3e:63:b6:9b:47:b1:df:d9:40:0d:b9:b4:86:c1:7b:
a0:ec:cc:ac:78:22:02:cf:f5:c1:af:f2:b0:af:ab:ed:90:cd:
6c:8b:43:84:d1:15:fb:46:d6:10:83:70:f5:66:bf:b8:aa:3a:
05:6d:0f:32:0e:91:3d:b9:96:51:c3:39:62:33:5f:6f:f9:41:
e4:ff:e8:69:dd:72:ca:44:6e:35:38:61:4b:2a:06:87:21:19:
95:ab:66:0d:d2:a6:94:5e:dd:72:8b:1d:c8:5d:8f:ba:cb:9a:
40:f7:03:1a:0c:69:2e:70:5e:96:d3:cb:06:5e:28:fb:25:74:
af:c7:d3:7a:51:dc:69:4f:fe:dd:ad:7a:87:95:04:f6:30:5c:
cd:c7:4b:4b:03:b5:6d:83:d6:c4:d3:7f:fe:fc:92:1a:a1:66:
ac:98:c7:29:1d:32:bd:31:92:98:b3:43:77:62:95:d6:56:82:
c0:43:50:11:c8:42:ae:4e:a0:db:3e:fa:b7:a0:eb:c0:cc:54:
ac:4d:0b:05:67:89:f9:b0:ad:6e:8a:26:5a:db:1c:8a:80:cf:
6d:47:e6:55:b7:b3:19:aa:53:06:e1:af:53:53:90:05:d2:fb:
6c:a1:b6:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UJB6I3Qh5OHtQ4xc+ateMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZDcxMGI2NTM3M2UwZDkxMGRhNzA2MzZmYzE0M2MwNmJh
NWRkYWMwHhcNMjUwODA0MDkwMTMzWhcNMjUwODA1MDkwMTMzWjAzMTEwLwYDVQQD
EyhlZTAyMjBkNzc0ZmUyMzQ5OWFlY2E5MmU2NTk1YWQ0ZTQ4NmI3YzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9R6eGp+gq6OLVC0KAJjYH2i5u38
3uB5o1kSLwBjI6ST6kn4cu2KD0rp4bdRrfUXsfEAlFPefvZuAkD9iNq0jGwqnIy+
W1QFQLKYZdITwM3h2yOwXIc87HvMLfa0EenXt+tD/icImlcgNed4BEM2Os15Xaf0
EQ2NQsxkd9oyLmE18wuuer2XSKo7g5OOqVGkJoeZYjxDmMG2wvrChBn2KjULOmO9
fjhM8yu3WiLU6H2vspOqAY5pEQFwMakYlpT2M1eCWKEmYntKHbkpj/7ABujssWxv
rTampGLG3QGvAO17UTEtNUXcH5tEll+E1sV+bLGG3OKnssyvLp73oP+ulwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4CINd0/iNJmuypLmWVrU5Ia3xFMB8GA1UdIwQY
MBaAFEzXELZTc+DZENpwY2/BQ8Brpd2sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE5jUXRsTno0TmtRMm5CamI4RkR3R3VsM2F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82ZjQwZGQtNGMwNy00MDViLWEwNDIt
ZjkyNTBkZDc5ZmU5LzEvVE5jUXRsTno0TmtRMm5CamI4RkR3R3VsM2F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82ZjQwZGQtNGMwNy00MDViLWEwNDItZjkyNTBkZDc5ZmU5
LzEvVE5jUXRsTno0TmtRMm5CamI4RkR3R3VsM2F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyUv+oS9
25oAIitG9WjOp+eOqvccPmO2m0ex39lADbm0hsF7oOzMrHgiAs/1wa/ysK+r7ZDN
bItDhNEV+0bWEINw9Wa/uKo6BW0PMg6RPbmWUcM5YjNfb/lB5P/oad1yykRuNThh
SyoGhyEZlatmDdKmlF7dcosdyF2PusuaQPcDGgxpLnBeltPLBl4o+yV0r8fTelHc
aU/+3a16h5UE9jBczcdLSwO1bYPWxNN//vySGqFmrJjHKR0yvTGSmLNDd2KV1laC
wENQEchCrk6g2z76t6DrwMxUrE0LBWeJ+bCtboomWtscioDPbUfmVbezGapTBuGv
U1OQBdL7bKG2Ww==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:54 2025 by rpki-client