Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
File: TuQFf56gFAzvfOR4k2nFzwH3xo4.mft (raw, json)
Hash identifier: nv5YjKn0Vdz1opoBASzOaWmPN0kiWCc6NmcbQ/toQVw=
Subject key identifier: 46:95:92:88:32:88:73:E8:64:09:61:70:06:0E:A4:32:F2:62:36:20
Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Certificate serial: 01988B0FB8CEB81AC1FD7CCAF6EC033D408B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
Manifest number: 1479
Signing time: Fri 08 Aug 2025 19:01:59 +0000
Manifest this update: Fri 08 Aug 2025 19:01:59 +0000
Manifest next update: Sat 09 Aug 2025 19:01:59 +0000
Files and hashes: 1: CEuXJrDVGtc7Z4aBHwivyFbJk6I.roa (hash: YlEuDFYK1ghHbSy2lJ7W4OAiAQ8b74GXZr4K2Q1Nk+o=)
2: TuQFf56gFAzvfOR4k2nFzwH3xo4.crl (hash: fBOZwHXRK/gfdvn2TNrAipHaoki/gsjdp7c1xjE1jL0=)
3: zQYGnUVB4bBy-t9A3BsXP2JPTI8.roa (hash: yYhiUqDeYjOIAS1CW8QCSgxrWRWrSjdPUM0N7RvDxVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:b8:ce:b8:1a:c1:fd:7c:ca:f6:ec:03:3d:40:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Validity
Not Before: Aug 8 19:01:59 2025 GMT
Not After : Aug 9 19:01:59 2025 GMT
Subject: CN=46959288328873e864096170060ea432f2623620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c3:7a:44:99:be:b1:49:6b:aa:30:0f:64:63:
2d:96:aa:d2:65:df:c3:2f:2d:1b:ce:e3:4b:dd:c0:
69:cd:05:9f:00:f8:aa:ea:09:04:f2:02:51:58:7f:
70:0b:88:d3:52:a4:9d:a5:2f:81:15:85:d0:14:a7:
82:dd:d2:2a:27:51:c7:25:8c:c2:5a:fe:2d:1a:4b:
03:ed:13:09:09:73:cd:c3:93:bd:d1:54:13:96:69:
ae:55:e4:2b:bf:a0:96:86:fe:2d:53:1c:d1:5d:22:
87:ef:31:43:72:ad:52:ee:16:41:5b:18:9f:00:1c:
9f:bd:31:c5:47:4c:6c:3d:35:7d:9c:64:04:dd:61:
b8:07:dd:60:3b:2d:b6:78:75:c7:45:0d:d5:ad:ac:
f7:a0:62:bd:8d:5e:ee:31:fa:25:f5:e0:c3:28:23:
02:ca:46:69:63:14:e0:a2:ff:d3:63:f4:2a:9d:1f:
a3:68:25:6d:70:5a:fc:30:c4:43:f5:a9:a0:89:2f:
57:2f:43:7b:c3:57:ab:a4:4e:2b:30:e7:31:84:2f:
9e:94:17:3d:db:61:33:a4:76:9a:c5:a4:c5:80:4e:
ac:fb:24:32:04:42:c2:8c:8d:85:1b:81:42:85:85:
75:68:ee:fe:78:c3:0e:db:88:a3:b9:e2:ce:a6:ac:
78:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:95:92:88:32:88:73:E8:64:09:61:70:06:0E:A4:32:F2:62:36:20
X509v3 Authority Key Identifier:
keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2e:ec:d6:1c:63:86:98:ed:62:f4:2b:a4:42:4d:a2:d6:5c:
1a:8d:3e:5c:e4:e1:19:8a:3e:f5:7d:1a:3a:d9:95:ac:f8:ac:
36:df:8b:5e:8e:91:18:7e:9f:36:80:20:3b:0d:88:49:b3:de:
1c:8a:d6:aa:b8:83:a0:93:5e:7b:56:c0:be:5f:9e:d9:49:49:
7d:76:b5:29:69:5c:83:04:b0:85:3d:2d:74:62:b3:b8:3b:c3:
6f:cd:29:c3:78:96:df:b0:2a:d1:aa:97:58:f6:a1:ae:27:fa:
51:6f:e9:c5:64:55:ff:23:c8:6c:4a:16:1a:3c:5d:fd:d3:d1:
7b:d5:d7:70:61:8f:6a:75:2e:cf:dc:6c:a3:90:a6:e4:38:3e:
6c:9b:74:ea:26:de:16:b8:22:5a:42:05:61:7b:95:ee:da:6b:
85:c0:75:b8:10:bb:54:9d:10:06:a6:0a:45:e2:5b:11:f1:25:
3a:d8:35:ee:ae:a0:70:0d:b3:6a:66:8d:5f:21:7d:9d:0c:72:
68:f0:2c:6a:05:17:ae:20:69:e3:d7:9b:be:96:e5:2c:b8:e0:
1c:d1:7d:92:86:01:42:35:51:93:f7:13:cb:71:c8:1b:65:f0:
85:7f:aa:3d:72:c8:1d:47:69:37:22:71:72:e3:36:91:2d:48:
b7:7a:5c:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLD7jOuBrB/XzK9uwDPUCLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZTQwNTdmOWVhMDE0MGNlZjdjZTQ3ODkzNjljNWNmMDFm
N2M2OGUwHhcNMjUwODA4MTkwMTU5WhcNMjUwODA5MTkwMTU5WjAzMTEwLwYDVQQD
Eyg0Njk1OTI4ODMyODg3M2U4NjQwOTYxNzAwNjBlYTQzMmYyNjIzNjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8N6RJm+sUlrqjAPZGMtlqrSZd/D
Ly0bzuNL3cBpzQWfAPiq6gkE8gJRWH9wC4jTUqSdpS+BFYXQFKeC3dIqJ1HHJYzC
Wv4tGksD7RMJCXPNw5O90VQTlmmuVeQrv6CWhv4tUxzRXSKH7zFDcq1S7hZBWxif
AByfvTHFR0xsPTV9nGQE3WG4B91gOy22eHXHRQ3Vraz3oGK9jV7uMfol9eDDKCMC
ykZpYxTgov/TY/QqnR+jaCVtcFr8MMRD9amgiS9XL0N7w1erpE4rMOcxhC+elBc9
22EzpHaaxaTFgE6s+yQyBELCjI2FG4FChYV1aO7+eMMO24ijueLOpqx4TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaVkogyiHPoZAlhcAYOpDLyYjYgMB8GA1UdIwQY
MBaAFE7kBX+eoBQM73zkeJNpxc8B98aOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHVRRmY1NmdGQXp2Zk9SNGsybkZ6d0gzeG80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jZjJlYmYtMmEwOS00M2QyLWEyMjUt
YTE2NTM1OWE2MjExLzEvVHVRRmY1NmdGQXp2Zk9SNGsybkZ6d0gzeG80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jZjJlYmYtMmEwOS00M2QyLWEyMjUtYTE2NTM1OWE2MjEx
LzEvVHVRRmY1NmdGQXp2Zk9SNGsybkZ6d0gzeG80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmS7s1hxj
hpjtYvQrpEJNotZcGo0+XOThGYo+9X0aOtmVrPisNt+LXo6RGH6fNoAgOw2ISbPe
HIrWqriDoJNee1bAvl+e2UlJfXa1KWlcgwSwhT0tdGKzuDvDb80pw3iW37Aq0aqX
WPahrif6UW/pxWRV/yPIbEoWGjxd/dPRe9XXcGGPanUuz9xso5Cm5Dg+bJt06ibe
FrgiWkIFYXuV7tprhcB1uBC7VJ0QBqYKReJbEfElOtg17q6gcA2zamaNXyF9nQxy
aPAsagUXriBp49ebvpblLLjgHNF9koYBQjVRk/cTy3HIG2XwhX+qPXLIHUdpNyJx
cuM2kS1It3pcMw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:50 2025 by rpki-client