Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
File: TK8RFQzl_p9w82yYBnR7toKxyiE.mft (raw, json)
Hash identifier: Pf+hx+DMD0tiDUFzN9W3k9jA6nnT13RUjWF0F4U2ZgY=
Subject key identifier: E8:29:88:2C:56:79:EE:B3:1A:59:05:72:F1:2D:F1:BB:ED:5A:81:65
Authority key identifier: 4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
Certificate issuer: /CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Certificate serial: 01987A88C164CD230C6E7ECD9F4CFAE3C3A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
Manifest number: 154E
Signing time: Tue 05 Aug 2025 14:00:39 +0000
Manifest this update: Tue 05 Aug 2025 14:00:39 +0000
Manifest next update: Wed 06 Aug 2025 14:00:39 +0000
Files and hashes: 1: TK8RFQzl_p9w82yYBnR7toKxyiE.crl (hash: vLonp3o5J4JNLc5xpOQ0HwEGBLuKphhgh29Y4M6k1p0=)
2: fuMrSOrjtC2Pjn0DbbjzzEXmpIM.roa (hash: 82A1cuez1ZD0Bc+8PeFu3N5JKG3dUU8f0mhUHsfa/b0=)
3: tT8Bhk3TRbD92onTtD9xdUFkuBo.roa (hash: nGHXcTt4lmnaxv72VD2WiGZwBBegRpFmPrLz3wSYepE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:88:c1:64:cd:23:0c:6e:7e:cd:9f:4c:fa:e3:c3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Validity
Not Before: Aug 5 14:00:39 2025 GMT
Not After : Aug 6 14:00:39 2025 GMT
Subject: CN=e829882c5679eeb31a590572f12df1bbed5a8165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:67:36:1b:b4:c9:93:f2:90:b1:cc:72:49:b9:
d5:fa:32:ba:ec:a7:5d:16:41:3e:ae:d3:10:11:f4:
93:10:05:81:29:f4:73:ff:7a:f1:ed:55:9f:57:72:
9c:84:ec:1c:24:07:ab:5f:e6:ef:68:5b:c7:da:dc:
59:dc:be:7d:17:a5:98:37:0d:d3:ce:9b:6d:fd:ab:
ff:92:b3:06:2d:9d:01:3a:f7:19:98:8b:75:3b:4a:
92:0e:eb:58:6c:17:56:c2:36:c3:1a:b1:94:bf:b9:
50:b4:10:20:f6:a5:39:63:0a:b1:a3:bd:05:76:46:
9f:89:ed:60:d9:3b:d5:b6:c7:dc:b3:5e:f1:bb:22:
b7:8b:12:e3:f1:86:b1:bc:77:ac:5a:b9:c3:2b:89:
96:bf:43:85:5c:72:2a:91:5d:2d:ba:5c:d6:3b:f5:
2e:db:8f:39:3e:8a:8e:b6:4f:3a:e5:fd:46:8e:56:
bf:9f:4a:77:17:6a:3c:4c:54:1d:c6:11:58:06:9c:
3f:01:db:ab:ad:2d:f2:8a:37:7f:bd:4d:a9:c6:26:
1c:d7:a1:57:c4:61:7b:ea:6c:49:3b:43:2d:bc:e0:
2b:ab:b7:57:ea:61:a6:34:50:89:dc:46:6f:30:b4:
2e:6b:00:29:ac:2b:e6:fb:72:a3:1a:a4:dd:05:cb:
eb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:29:88:2C:56:79:EE:B3:1A:59:05:72:F1:2D:F1:BB:ED:5A:81:65
X509v3 Authority Key Identifier:
keyid:4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f6:c1:ac:e6:f8:65:a0:43:e8:58:55:59:08:d1:c6:2d:7f:
59:b5:fc:e3:3b:e1:4e:98:dc:80:98:8d:17:ab:f3:49:c1:05:
a6:53:d3:30:c3:7b:e9:79:e3:3b:8d:65:c2:47:e2:ca:97:e9:
d7:0f:c1:6f:28:f0:18:a5:50:7f:65:6c:aa:a0:81:fe:ac:16:
66:63:5a:ab:b3:8b:27:16:ce:7c:aa:96:ec:30:ee:9f:a7:a0:
f8:c6:47:2c:90:ab:90:63:af:68:ae:c4:c3:d6:4d:94:d1:ac:
05:b4:63:de:8f:bd:6a:f8:97:23:dc:26:27:c7:ae:11:0e:db:
a0:ca:58:ce:60:4f:13:fe:70:cc:8e:8e:ec:f3:7f:73:04:50:
80:59:5c:e0:52:a4:9b:05:0e:c6:06:a4:0a:61:85:8c:7e:e7:
17:29:3f:4b:23:d5:3e:41:93:9c:1b:53:52:64:56:56:26:ae:
ea:f9:ac:53:5f:04:cf:7c:9f:a0:26:eb:22:68:36:ee:17:a2:
56:de:a3:70:3f:ba:38:8d:29:89:e8:51:69:0f:86:95:14:9c:
22:6f:52:7e:a4:2a:29:26:e7:27:c8:74:bf:cf:84:48:16:2d:
d0:d3:14:17:21:31:cc:99:cc:24:ac:70:4b:11:1c:63:d7:ed:
13:24:e8:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6iMFkzSMMbn7Nn0z648OpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYWYxMTE1MGNlNWZlOWY3MGYzNmM5ODA2NzQ3YmI2ODJi
MWNhMjEwHhcNMjUwODA1MTQwMDM5WhcNMjUwODA2MTQwMDM5WjAzMTEwLwYDVQQD
EyhlODI5ODgyYzU2NzllZWIzMWE1OTA1NzJmMTJkZjFiYmVkNWE4MTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGc2G7TJk/KQscxySbnV+jK67Kdd
FkE+rtMQEfSTEAWBKfRz/3rx7VWfV3KchOwcJAerX+bvaFvH2txZ3L59F6WYNw3T
zptt/av/krMGLZ0BOvcZmIt1O0qSDutYbBdWwjbDGrGUv7lQtBAg9qU5Ywqxo70F
dkafie1g2TvVtsfcs17xuyK3ixLj8YaxvHesWrnDK4mWv0OFXHIqkV0tulzWO/Uu
2485PoqOtk865f1Gjla/n0p3F2o8TFQdxhFYBpw/AdurrS3yijd/vU2pxiYc16FX
xGF76mxJO0MtvOArq7dX6mGmNFCJ3EZvMLQuawAprCvm+3KjGqTdBcvrTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgpiCxWee6zGlkFcvEt8bvtWoFlMB8GA1UdIwQY
MBaAFEyvERUM5f6fcPNsmAZ0e7aCscohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEs4UkZRemxfcDl3ODJ5WUJuUjd0b0t4eWlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mMzY5NWMtZTM0MC00ZTJmLWFmZWIt
NmI5NWQzYzg5YzkxLzEvVEs4UkZRemxfcDl3ODJ5WUJuUjd0b0t4eWlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9mMzY5NWMtZTM0MC00ZTJmLWFmZWItNmI5NWQzYzg5Yzkx
LzEvVEs4UkZRemxfcDl3ODJ5WUJuUjd0b0t4eWlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvbBrOb4
ZaBD6FhVWQjRxi1/WbX84zvhTpjcgJiNF6vzScEFplPTMMN76XnjO41lwkfiypfp
1w/BbyjwGKVQf2VsqqCB/qwWZmNaq7OLJxbOfKqW7DDun6eg+MZHLJCrkGOvaK7E
w9ZNlNGsBbRj3o+9aviXI9wmJ8euEQ7boMpYzmBPE/5wzI6O7PN/cwRQgFlc4FKk
mwUOxgakCmGFjH7nFyk/SyPVPkGTnBtTUmRWViau6vmsU18Ez3yfoCbrImg27hei
Vt6jcD+6OI0piehRaQ+GlRScIm9SfqQqKSbnJ8h0v8+ESBYt0NMUFyExzJnMJKxw
SxEcY9ftEyTo2g==
-----END CERTIFICATE-----
Generated at Tue Aug 5 16:41:28 2025 by rpki-client