Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft
File: TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft (raw, json)
Hash identifier: NX6Fdwt8U8TLyf3LYwvNKHVn3BLBFxUBvlvqBRK2TBo=
Subject key identifier: 20:2E:0F:8D:54:D4:AF:4D:F7:29:F5:B5:E1:2C:D4:27:F9:C1:6A:3A
Authority key identifier: 4E:91:16:2B:B0:D9:B5:51:BF:5F:7B:1C:15:EE:31:5A:51:A6:77:F4
Certificate issuer: /CN=4e91162bb0d9b551bf5f7b1c15ee315a51a677f4
Certificate serial: 019872CFEF9AE118E311B34AFA71028C531F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TpEWK7DZtVG_X3scFe4xWlGmd_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft
Manifest number: 0B89
Signing time: Mon 04 Aug 2025 02:01:26 +0000
Manifest this update: Mon 04 Aug 2025 02:01:26 +0000
Manifest next update: Tue 05 Aug 2025 02:01:26 +0000
Files and hashes: 1: TpEWK7DZtVG_X3scFe4xWlGmd_Q.crl (hash: eHXUHBGldMAxOCZoxrwRf/wNDmtdaTosZxsJIORU49A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/TpEWK7DZtVG_X3scFe4xWlGmd_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:ef:9a:e1:18:e3:11:b3:4a:fa:71:02:8c:53:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e91162bb0d9b551bf5f7b1c15ee315a51a677f4
Validity
Not Before: Aug 4 02:01:26 2025 GMT
Not After : Aug 5 02:01:26 2025 GMT
Subject: CN=202e0f8d54d4af4df729f5b5e12cd427f9c16a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:42:8c:6f:37:a4:bd:29:f0:52:7a:3b:89:a8:
a3:78:67:46:02:de:40:d2:39:7b:8e:a2:13:44:43:
58:81:0b:b6:54:3c:ec:36:0e:c7:51:84:68:0c:21:
35:4a:7e:ef:ff:46:b0:7e:fc:15:c8:81:0d:6a:39:
e4:b8:8a:c2:8a:a5:e1:3b:28:fe:1b:b0:5f:48:b5:
86:52:cb:42:0d:82:99:5f:55:7d:fa:1a:00:80:c1:
6b:9e:09:b5:73:24:e0:4c:fd:04:9f:34:d1:58:0e:
0a:1b:65:26:10:63:31:2c:f0:3e:bb:78:15:01:ab:
32:bb:b2:79:21:ba:28:75:08:cd:86:ef:45:83:a1:
62:a1:59:8f:2d:60:12:8c:af:a9:53:39:3f:44:33:
c3:d3:e2:28:76:67:dc:9c:84:a2:2b:be:5e:67:ba:
c7:54:7f:f3:2a:cb:d5:78:6b:ed:0f:f0:cc:43:0d:
0d:d1:db:34:88:e6:85:3b:d1:6a:e7:c6:12:08:38:
4c:d6:ff:fb:b6:eb:f4:a4:a5:0d:26:0c:19:c4:2a:
94:fa:4a:34:96:47:91:d5:fd:bb:81:f6:34:15:9e:
46:77:21:79:04:eb:36:c0:9d:b1:ef:72:24:09:b6:
a2:65:9a:b6:a3:42:4a:50:9d:0f:00:64:ec:d1:00:
30:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2E:0F:8D:54:D4:AF:4D:F7:29:F5:B5:E1:2C:D4:27:F9:C1:6A:3A
X509v3 Authority Key Identifier:
keyid:4E:91:16:2B:B0:D9:B5:51:BF:5F:7B:1C:15:EE:31:5A:51:A6:77:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TpEWK7DZtVG_X3scFe4xWlGmd_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:91:29:6b:8d:e5:57:57:cc:78:57:d9:18:6b:93:3f:b1:70:
3d:44:a4:c5:c4:c1:26:b1:90:8d:0e:46:79:dc:10:7f:83:f2:
e9:27:a2:af:d7:a9:19:57:97:ef:06:2d:88:c6:2c:79:ca:0d:
42:a4:9c:91:74:50:97:98:9a:12:35:ef:4e:6f:97:48:96:0c:
cc:1c:13:14:10:28:ee:e9:b6:fa:c0:48:19:92:f6:2b:62:09:
42:94:f2:79:2f:4f:3e:69:a3:6d:01:e6:5e:8a:d3:a6:a8:b4:
f2:a4:66:79:3d:d4:10:06:90:3e:75:60:9c:f0:97:61:87:25:
bd:a7:01:ae:bd:dc:8a:94:02:43:bb:0a:77:15:a2:b0:1a:7c:
46:1d:f3:26:0d:05:77:dd:69:31:b9:51:ab:c5:10:32:11:85:
e6:15:99:22:f0:dd:66:b0:1c:d0:b8:64:a5:d7:d5:85:f9:30:
0e:c1:06:ea:1f:9a:82:a6:8f:b8:8d:c2:c5:e5:24:b0:b9:51:
65:38:e2:54:93:e2:99:26:4b:a2:53:6c:cc:cf:74:7e:3f:41:
02:d4:83:2c:ea:31:6a:e4:be:f1:59:db:13:c9:d5:fd:b6:01:
8c:93:72:74:08:8f:d9:84:9e:58:cd:f2:d8:12:34:66:7f:d3:
b1:1d:e6:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz++a4RjjEbNK+nECjFMfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlOTExNjJiYjBkOWI1NTFiZjVmN2IxYzE1ZWUzMTVhNTFh
Njc3ZjQwHhcNMjUwODA0MDIwMTI2WhcNMjUwODA1MDIwMTI2WjAzMTEwLwYDVQQD
EygyMDJlMGY4ZDU0ZDRhZjRkZjcyOWY1YjVlMTJjZDQyN2Y5YzE2YTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUKMbzekvSnwUno7iaijeGdGAt5A
0jl7jqITRENYgQu2VDzsNg7HUYRoDCE1Sn7v/0awfvwVyIENajnkuIrCiqXhOyj+
G7BfSLWGUstCDYKZX1V9+hoAgMFrngm1cyTgTP0EnzTRWA4KG2UmEGMxLPA+u3gV
Aasyu7J5IboodQjNhu9Fg6FioVmPLWASjK+pUzk/RDPD0+IodmfcnISiK75eZ7rH
VH/zKsvVeGvtD/DMQw0N0ds0iOaFO9Fq58YSCDhM1v/7tuv0pKUNJgwZxCqU+ko0
lkeR1f27gfY0FZ5GdyF5BOs2wJ2x73IkCbaiZZq2o0JKUJ0PAGTs0QAw8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAuD41U1K9N9yn1teEs1Cf5wWo6MB8GA1UdIwQY
MBaAFE6RFiuw2bVRv197HBXuMVpRpnf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHBFV0s3RFp0VkdfWDNzY0ZlNHhXbEdtZF9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yMjljM2YtOTk3Mi00M2Q2LThlNDIt
NTcxM2YxNzQ5YzFkLzEvVHBFV0s3RFp0VkdfWDNzY0ZlNHhXbEdtZF9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8yMjljM2YtOTk3Mi00M2Q2LThlNDItNTcxM2YxNzQ5YzFk
LzEvVHBFV0s3RFp0VkdfWDNzY0ZlNHhXbEdtZF9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5Epa43l
V1fMeFfZGGuTP7FwPUSkxcTBJrGQjQ5GedwQf4Py6Seir9epGVeX7wYtiMYsecoN
QqSckXRQl5iaEjXvTm+XSJYMzBwTFBAo7um2+sBIGZL2K2IJQpTyeS9PPmmjbQHm
XorTpqi08qRmeT3UEAaQPnVgnPCXYYclvacBrr3cipQCQ7sKdxWisBp8Rh3zJg0F
d91pMblRq8UQMhGF5hWZIvDdZrAc0LhkpdfVhfkwDsEG6h+agqaPuI3CxeUksLlR
ZTjiVJPimSZLolNszM90fj9BAtSDLOoxauS+8VnbE8nV/bYBjJNydAiP2YSeWM3y
2BI0Zn/TsR3myw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:47 2025 by rpki-client