Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
File: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft (raw, json)
Hash identifier: 5M80ZjGmCh5kxlOLN8rqnNn5lhf7EIXkUR02it9OD3I=
Subject key identifier: 86:26:38:FF:1A:C9:BB:9B:FF:48:66:4D:52:EE:AA:E8:77:A5:C1:DB
Authority key identifier: 4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
Certificate issuer: /CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Certificate serial: 01987A89832BA8012919F0B97B21DAEE768C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
Manifest number: 0D00
Signing time: Tue 05 Aug 2025 14:01:28 +0000
Manifest this update: Tue 05 Aug 2025 14:01:28 +0000
Manifest next update: Wed 06 Aug 2025 14:01:28 +0000
Files and hashes: 1: 4f1jI7-qAw-Fm-OtnESqUBoebm0.roa (hash: Yj15262IImuG/zvO4RGd+KynWz9BG4CJpl9H3lrssA0=)
2: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl (hash: 7zwEuMoOMhAwm6NzF1IEI+LTd6XawibaLAtlt6v9+4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:89:83:2b:a8:01:29:19:f0:b9:7b:21:da:ee:76:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Validity
Not Before: Aug 5 14:01:28 2025 GMT
Not After : Aug 6 14:01:28 2025 GMT
Subject: CN=862638ff1ac9bb9bff48664d52eeaae877a5c1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e1:0d:2f:4b:9b:7d:98:6d:04:dd:aa:e0:9c:
2d:a5:f5:e9:39:e3:bb:6e:4e:55:15:24:77:77:ba:
46:a2:9a:00:03:80:ec:9c:80:d5:8a:e2:44:d8:65:
1e:97:8f:82:2f:13:06:4e:16:a7:c1:76:ab:68:d6:
b2:78:df:4f:05:33:d1:b4:fa:47:a3:84:f0:77:49:
1b:70:21:bd:36:4a:ac:1a:0d:55:57:67:78:e6:d0:
e3:e1:44:88:01:54:58:5b:a0:fe:76:58:25:2f:29:
77:48:fc:a6:f5:da:bb:d4:a7:04:db:4b:2d:25:e1:
2e:75:aa:35:7b:28:bd:23:58:20:25:33:f6:b0:d8:
0d:65:50:38:70:b4:e5:0b:d8:e7:3c:cf:c3:4d:18:
c3:e2:12:55:23:71:37:0c:e1:d0:3d:80:c6:92:cd:
ed:fb:7a:35:c1:b4:4b:cc:d5:c7:1a:6d:39:a3:c5:
0b:9f:04:df:ba:3c:5f:41:d6:dd:5e:89:b3:ca:f3:
c8:27:91:9a:42:53:00:58:08:e7:9a:04:74:b1:76:
46:a7:f1:fd:bf:15:1f:39:46:20:df:48:a4:9a:96:
ae:19:fd:4a:0c:b3:a2:a4:e6:26:74:3a:47:cb:76:
9c:98:d0:90:31:cc:4d:ee:63:8d:b7:df:8c:e5:cb:
8e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:26:38:FF:1A:C9:BB:9B:FF:48:66:4D:52:EE:AA:E8:77:A5:C1:DB
X509v3 Authority Key Identifier:
keyid:4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:01:bb:b5:73:fd:22:ec:ee:ae:93:87:8d:11:2a:d4:b9:c2:
f6:ba:f8:a4:e2:d2:b1:12:97:a3:13:6b:bd:ea:32:8e:47:b5:
e1:eb:02:27:8c:ca:34:0e:80:ee:d3:7c:14:06:a0:4e:55:d3:
26:1f:95:eb:52:a9:2a:5b:ac:7c:d3:28:2b:39:ec:83:45:9b:
e2:de:ab:78:7d:56:a9:65:52:7e:67:47:83:49:66:fd:90:78:
bb:ff:ba:8a:9e:2b:4e:7b:64:1d:80:8e:d5:18:94:8c:0d:8a:
6b:bb:8b:72:d5:78:9b:5b:12:a0:14:55:ff:85:b4:52:26:cc:
bd:1d:31:f4:66:9b:64:6b:8b:bf:2a:db:7c:1e:33:d3:f4:0b:
96:63:ab:e5:1f:62:bd:09:a8:93:5d:b8:e5:72:fd:c0:0a:39:
0f:01:34:76:85:85:28:c4:1d:f0:31:eb:19:bd:a3:97:6c:b1:
2b:e8:47:66:b3:0d:2a:34:c5:00:60:6e:e4:fa:a0:56:be:ee:
6b:c7:3d:e5:0b:f2:08:fa:e4:55:85:02:b6:dc:99:28:9e:a5:
24:fd:a2:12:d2:47:07:0c:5e:dd:c8:b2:b2:12:ec:61:d2:58:
74:7c:c5:e7:a7:e3:75:a8:2c:74:63:9a:e7:4f:63:13:92:6a:
1a:0a:c8:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6iYMrqAEpGfC5eyHa7naMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYmUzMWI2YmVkYzUxZjJhYTJlYzBhNjQ1M2YyZTQzNWU4
MDhmYjUwHhcNMjUwODA1MTQwMTI4WhcNMjUwODA2MTQwMTI4WjAzMTEwLwYDVQQD
Eyg4NjI2MzhmZjFhYzliYjliZmY0ODY2NGQ1MmVlYWFlODc3YTVjMWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uENL0ubfZhtBN2q4JwtpfXpOeO7
bk5VFSR3d7pGopoAA4DsnIDViuJE2GUel4+CLxMGThanwXaraNayeN9PBTPRtPpH
o4Twd0kbcCG9NkqsGg1VV2d45tDj4USIAVRYW6D+dlglLyl3SPym9dq71KcE20st
JeEudao1eyi9I1ggJTP2sNgNZVA4cLTlC9jnPM/DTRjD4hJVI3E3DOHQPYDGks3t
+3o1wbRLzNXHGm05o8ULnwTfujxfQdbdXomzyvPIJ5GaQlMAWAjnmgR0sXZGp/H9
vxUfOUYg30ikmpauGf1KDLOipOYmdDpHy3acmNCQMcxN7mONt9+M5cuOKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYmOP8aybub/0hmTVLuquh3pcHbMB8GA1UdIwQY
MBaAFE2+Mba+3FHyqi7ApkU/LkNegI+1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xZDI3ODgtZGE0MC00MzFhLTk3ZDAt
ZmJkNDZkOWNhMzcyLzEvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xZDI3ODgtZGE0MC00MzFhLTk3ZDAtZmJkNDZkOWNhMzcy
LzEvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgG7tXP9
IuzurpOHjREq1LnC9rr4pOLSsRKXoxNrveoyjke14esCJ4zKNA6A7tN8FAagTlXT
Jh+V61KpKlusfNMoKznsg0Wb4t6reH1WqWVSfmdHg0lm/ZB4u/+6ip4rTntkHYCO
1RiUjA2Ka7uLctV4m1sSoBRV/4W0UibMvR0x9GabZGuLvyrbfB4z0/QLlmOr5R9i
vQmok1245XL9wAo5DwE0doWFKMQd8DHrGb2jl2yxK+hHZrMNKjTFAGBu5PqgVr7u
a8c95QvyCPrkVYUCttyZKJ6lJP2iEtJHBwxe3ciyshLsYdJYdHzF56fjdagsdGOa
509jE5JqGgrIEQ==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:22:46 2025 by rpki-client