
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
File: tPo4W-BSv6QF36zSnyarbwAeYEc.mft (raw, json)
Hash identifier: 2iXvDUifysdJsPzZdSlUiSIsqLxlt+KExH3M11vLQ5I=
Subject key identifier: 41:C0:02:10:42:D5:28:63:16:0A:FE:E2:B6:AB:48:4B:07:11:F4:1D
Authority key identifier: B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47
Certificate issuer: /CN=b4fa385be052bfa405dfacd29f26ab6f001e6047
Certificate serial: 01988A32AFA960FB831AFFBB3E43BF85A519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
Manifest number: 049C
Signing time: Fri 08 Aug 2025 15:00:34 +0000
Manifest this update: Fri 08 Aug 2025 15:00:34 +0000
Manifest next update: Sat 09 Aug 2025 15:00:34 +0000
Files and hashes: 1: tPo4W-BSv6QF36zSnyarbwAeYEc.crl (hash: TSe3fhXBVTUTGsRyJpZzWtd7q1g66XUU14dtNFwVmbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:32:af:a9:60:fb:83:1a:ff:bb:3e:43:bf:85:a5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fa385be052bfa405dfacd29f26ab6f001e6047
Validity
Not Before: Aug 8 15:00:34 2025 GMT
Not After : Aug 9 15:00:34 2025 GMT
Subject: CN=41c0021042d52863160afee2b6ab484b0711f41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ef:41:db:31:72:f5:c7:84:20:c6:54:a1:e6:
f6:d1:4d:ea:96:ff:79:1a:ba:c7:e3:d5:3c:83:51:
d5:c6:98:a4:58:77:c6:b6:c5:41:1a:2a:48:0d:c2:
c5:ce:f3:65:c9:ea:ed:83:b7:d9:34:09:2b:79:32:
41:d7:b1:e7:71:8c:3c:39:6b:50:fd:cb:c0:46:12:
e6:b3:72:36:47:ee:cd:29:06:1b:71:b7:d3:0a:12:
98:81:aa:af:d6:6e:cc:18:03:1a:ce:06:86:79:b1:
4b:2e:1c:ca:a7:89:ad:fc:d1:32:d0:ca:60:7e:ea:
68:1f:af:da:74:e2:e2:34:2d:2c:85:9f:cb:c3:dd:
f1:7b:14:c2:0e:8e:94:69:7d:ef:85:b7:46:39:aa:
08:0a:0f:c1:95:c4:4b:30:7b:9a:27:03:0f:71:57:
be:6a:a7:31:e6:5c:0c:36:57:73:0a:21:fb:9c:4f:
f9:68:0e:24:a9:f2:e7:77:e0:41:36:5b:5b:36:1e:
b1:f1:31:68:aa:e3:36:92:d7:fa:99:c0:b9:a8:db:
d4:57:a8:0f:2e:22:91:23:c5:56:ec:88:2f:c8:df:
41:3e:c6:12:c2:a9:98:0e:ed:7b:bd:ec:07:be:24:
1f:0a:dd:db:c3:40:38:af:52:02:c1:f5:88:ab:e0:
f7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C0:02:10:42:D5:28:63:16:0A:FE:E2:B6:AB:48:4B:07:11:F4:1D
X509v3 Authority Key Identifier:
keyid:B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e9:ba:af:29:b4:ff:47:2f:58:d7:f6:35:16:33:51:88:bf:
90:e3:8a:23:37:a8:f1:b6:aa:67:5a:07:20:85:5d:5c:0b:00:
21:53:00:f7:94:da:62:54:a5:8b:a9:d4:ca:a3:bd:af:48:1f:
95:aa:0e:7b:bc:a7:5c:7e:ab:a4:0f:fb:bd:01:05:de:48:11:
a9:57:2d:ca:5b:03:a8:72:45:19:01:87:a4:f0:48:d6:22:27:
46:2f:40:54:85:30:06:a4:fa:2a:16:57:06:88:d1:44:d5:bd:
39:61:04:63:36:71:ad:86:7f:89:f3:93:4d:ba:6f:02:6e:27:
dd:0f:bc:91:68:f7:17:df:88:da:f2:9c:6a:e1:c1:f3:18:af:
47:84:e3:57:74:e3:8f:7b:86:fa:e6:0b:8e:54:2d:f3:18:eb:
77:cd:e1:46:d1:5e:63:75:46:c4:ec:4a:1d:99:c7:48:c2:89:
c7:4e:c0:f4:a1:17:48:21:54:41:1d:40:51:61:98:60:21:33:
e7:77:df:51:5e:8d:d5:31:26:9e:f9:d4:c8:19:dd:6f:c7:14:
5a:c4:6d:72:b6:7d:e1:28:9f:3d:8e:9e:9a:ef:60:9a:ff:aa:
bc:23:95:4f:46:43:19:1a:73:82:93:7d:e3:3d:27:0a:37:83:
c8:de:3e:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKMq+pYPuDGv+7PkO/haUZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZmEzODViZTA1MmJmYTQwNWRmYWNkMjlmMjZhYjZmMDAx
ZTYwNDcwHhcNMjUwODA4MTUwMDM0WhcNMjUwODA5MTUwMDM0WjAzMTEwLwYDVQQD
Eyg0MWMwMDIxMDQyZDUyODYzMTYwYWZlZTJiNmFiNDg0YjA3MTFmNDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+9B2zFy9ceEIMZUoeb20U3qlv95
GrrH49U8g1HVxpikWHfGtsVBGipIDcLFzvNlyertg7fZNAkreTJB17HncYw8OWtQ
/cvARhLms3I2R+7NKQYbcbfTChKYgaqv1m7MGAMazgaGebFLLhzKp4mt/NEy0Mpg
fupoH6/adOLiNC0shZ/Lw93xexTCDo6UaX3vhbdGOaoICg/BlcRLMHuaJwMPcVe+
aqcx5lwMNldzCiH7nE/5aA4kqfLnd+BBNltbNh6x8TFoquM2ktf6mcC5qNvUV6gP
LiKRI8VW7IgvyN9BPsYSwqmYDu17vewHviQfCt3bw0A4r1ICwfWIq+D3hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHAAhBC1ShjFgr+4rarSEsHEfQdMB8GA1UdIwQY
MBaAFLT6OFvgUr+kBd+s0p8mq28AHmBHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBvNFctQlN2NlFGMzZ6U255YXJid0FlWUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi82NzcxMDYtNDA5OS00YWVmLThjYzYt
ZTk2MGE1MGNkYzgxLzEvdFBvNFctQlN2NlFGMzZ6U255YXJid0FlWUVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi82NzcxMDYtNDA5OS00YWVmLThjYzYtZTk2MGE1MGNkYzgx
LzEvdFBvNFctQlN2NlFGMzZ6U255YXJid0FlWUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOm6rym0
/0cvWNf2NRYzUYi/kOOKIzeo8baqZ1oHIIVdXAsAIVMA95TaYlSli6nUyqO9r0gf
laoOe7ynXH6rpA/7vQEF3kgRqVctylsDqHJFGQGHpPBI1iInRi9AVIUwBqT6KhZX
BojRRNW9OWEEYzZxrYZ/ifOTTbpvAm4n3Q+8kWj3F9+I2vKcauHB8xivR4TjV3Tj
j3uG+uYLjlQt8xjrd83hRtFeY3VGxOxKHZnHSMKJx07A9KEXSCFUQR1AUWGYYCEz
53ffUV6N1TEmnvnUyBndb8cUWsRtcrZ94SifPY6emu9gmv+qvCOVT0ZDGRpzgpN9
4z0nCjeDyN4+Wg==
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:51:07 2025 by rpki-client