Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
File: TTxfCqFBARzi2_GMzOqsjSOoAlM.mft (raw, json)
Hash identifier: Mb30uXi475mIpH19Etm77E4H8trGVU0qUi6m3mihGbk=
Subject key identifier: 24:07:10:80:79:D3:2B:32:B0:7E:E3:EE:FB:B6:AC:CB:15:75:F5:9B
Authority key identifier: 4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53
Certificate issuer: /CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253
Certificate serial: 01987C403A1EDDFB28FDF14902424EA53A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
Manifest number: 0347
Signing time: Tue 05 Aug 2025 22:00:40 +0000
Manifest this update: Tue 05 Aug 2025 22:00:40 +0000
Manifest next update: Wed 06 Aug 2025 22:00:40 +0000
Files and hashes: 1: TTxfCqFBARzi2_GMzOqsjSOoAlM.crl (hash: AKEP1xcC19OjepVfqSON4jQ2tYt8v6tTO4y9EUfA8z8=)
2: VzuF2DppIrspDzJ85GPpog256VM.roa (hash: NVhHykKnaNaKUFenioMV2s+C+yHI/RstE5ooTmdayhs=)
3: gl57ADSHY0k4ndDK_OjTyc2Vj-w.roa (hash: K2iUKBC94qqs+lcuU9alkOi5wrj2IpvPW1nPAtFGI+M=)
4: wVbnrxwKxuyFCykAZfTxIk8usp4.roa (hash: nUg8btnlBOx76JKnTAelqbIAdPi5nKQqhhSAdUCbOU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:3a:1e:dd:fb:28:fd:f1:49:02:42:4e:a5:3a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253
Validity
Not Before: Aug 5 22:00:40 2025 GMT
Not After : Aug 6 22:00:40 2025 GMT
Subject: CN=2407108079d32b32b07ee3eefbb6accb1575f59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5b:2d:d8:e9:6a:47:06:55:d5:e4:8e:ed:ac:
bb:28:cb:fd:2d:05:ea:d6:2a:1a:59:32:5d:27:b6:
15:55:e0:05:37:ad:a6:07:2c:04:db:5d:71:0b:75:
1a:1d:e1:3e:6c:44:4e:e8:2a:f0:f4:c4:42:f0:ef:
cb:42:09:54:f6:ea:52:8a:b7:1f:7c:ca:90:71:0c:
6e:9b:11:fc:0f:4d:57:66:5f:17:5c:8e:71:5e:dc:
a3:23:a7:68:57:e0:4b:74:9f:41:9d:2a:e1:66:d2:
5e:c9:3b:27:ed:33:99:1c:6f:b0:6e:0e:22:80:89:
1a:1d:31:b8:28:9f:73:b2:d3:dc:9b:5a:6f:c2:0b:
d1:fa:0a:81:5a:14:84:6d:92:fb:ce:1c:59:3d:18:
c1:35:89:e1:b0:7e:35:72:c5:0a:75:b4:7a:be:87:
8a:f2:92:ed:37:b0:6d:bb:c3:02:0e:02:32:8f:de:
54:2d:d9:8c:fe:77:df:15:5b:a0:4f:62:2f:48:b4:
4d:66:64:17:5b:a2:5b:b1:89:bf:95:bc:d7:f7:f5:
31:ed:73:5e:c9:8f:c7:3e:a2:c8:fc:09:3c:1d:d4:
bd:27:ec:c5:0c:34:c4:9e:10:a3:b5:a3:9c:29:06:
94:d1:e0:e0:a5:71:87:46:cf:fd:b4:f2:cb:73:14:
07:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:07:10:80:79:D3:2B:32:B0:7E:E3:EE:FB:B6:AC:CB:15:75:F5:9B
X509v3 Authority Key Identifier:
keyid:4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ec:24:6f:a2:6f:b4:e8:a6:ca:dd:81:a3:4b:88:3f:71:84:
03:09:e8:49:4a:b4:6f:df:4c:03:e7:f9:ef:c9:24:91:70:68:
be:ce:34:97:c1:23:33:f2:63:c8:32:bc:3c:e5:a7:23:ab:d5:
80:85:dd:a4:0c:36:fb:03:fe:f7:fa:1c:3e:66:ff:51:ef:a3:
5c:ce:0a:c4:e1:ce:d4:88:7e:34:e6:35:95:04:d5:9e:f3:d0:
dd:35:a8:b4:7c:25:d6:dd:7e:52:8d:85:63:35:ac:74:3a:5d:
a7:8e:24:5e:c4:0a:8e:49:b3:ce:5a:01:5e:48:8c:1c:18:a5:
79:60:e4:b2:5a:1a:45:9f:16:b2:d4:14:f0:35:e9:0f:e5:3f:
d9:7b:14:14:3b:ca:26:3d:fc:ef:ef:55:35:df:34:c7:64:a8:
55:e9:93:1a:09:1e:49:9a:e8:db:48:9e:5e:77:d7:e0:6e:05:
83:62:64:2b:3b:80:db:f3:34:30:74:82:01:7a:71:30:a5:aa:
a9:35:7c:2e:09:02:0d:a1:d7:e7:8a:16:89:d6:51:9a:c0:00:
ab:05:c7:b9:53:3d:40:e5:33:5a:db:9a:1c:4c:f3:95:41:42:
b4:b2:99:0f:a1:b4:de:ee:d2:38:83:17:d7:e0:3a:09:fc:88:
e8:c0:e1:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8QDoe3fso/fFJAkJOpTpAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2M1ZjBhYTE0MTAxMWNlMmRiZjE4Y2NjZWFhYzhkMjNh
ODAyNTMwHhcNMjUwODA1MjIwMDQwWhcNMjUwODA2MjIwMDQwWjAzMTEwLwYDVQQD
EygyNDA3MTA4MDc5ZDMyYjMyYjA3ZWUzZWVmYmI2YWNjYjE1NzVmNTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylst2OlqRwZV1eSO7ay7KMv9LQXq
1ioaWTJdJ7YVVeAFN62mBywE211xC3UaHeE+bERO6Crw9MRC8O/LQglU9upSircf
fMqQcQxumxH8D01XZl8XXI5xXtyjI6doV+BLdJ9BnSrhZtJeyTsn7TOZHG+wbg4i
gIkaHTG4KJ9zstPcm1pvwgvR+gqBWhSEbZL7zhxZPRjBNYnhsH41csUKdbR6voeK
8pLtN7Btu8MCDgIyj95ULdmM/nffFVugT2IvSLRNZmQXW6JbsYm/lbzX9/Ux7XNe
yY/HPqLI/Ak8HdS9J+zFDDTEnhCjtaOcKQaU0eDgpXGHRs/9tPLLcxQHlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQHEIB50ysysH7j7vu2rMsVdfWbMB8GA1UdIwQY
MBaAFE08XwqhQQEc4tvxjMzqrI0jqAJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFR4ZkNxRkJBUnppMl9HTXpPcXNqU09vQWxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8yZDA2N2MtZGY3Mi00MDQwLWJjNDMt
MTkzOTdmYzc2ZmVjLzEvVFR4ZkNxRkJBUnppMl9HTXpPcXNqU09vQWxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8yZDA2N2MtZGY3Mi00MDQwLWJjNDMtMTkzOTdmYzc2ZmVj
LzEvVFR4ZkNxRkJBUnppMl9HTXpPcXNqU09vQWxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAquwkb6Jv
tOimyt2Bo0uIP3GEAwnoSUq0b99MA+f578kkkXBovs40l8EjM/JjyDK8POWnI6vV
gIXdpAw2+wP+9/ocPmb/Ue+jXM4KxOHO1Ih+NOY1lQTVnvPQ3TWotHwl1t1+Uo2F
YzWsdDpdp44kXsQKjkmzzloBXkiMHBileWDksloaRZ8WstQU8DXpD+U/2XsUFDvK
Jj387+9VNd80x2SoVemTGgkeSZro20ieXnfX4G4Fg2JkKzuA2/M0MHSCAXpxMKWq
qTV8LgkCDaHX54oWidZRmsAAqwXHuVM9QOUzWtuaHEzzlUFCtLKZD6G03u7SOIMX
1+A6CfyI6MDhvQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:06:06 2025 by rpki-client