Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
File: TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft (raw, json)
Hash identifier: HL1q1LgMBF8wHtOt5WYo4f6NY/LI+0Javq7xmv3BT28=
Subject key identifier: AD:C2:9B:D2:9E:D2:F5:F7:0C:B9:A5:D3:33:85:2D:80:DA:4D:30:45
Authority key identifier: 4D:C0:23:0C:D4:15:D8:6E:86:FD:88:93:13:42:87:CE:54:A6:87:D7
Certificate issuer: /CN=4dc0230cd415d86e86fd8893134287ce54a687d7
Certificate serial: 01987298AAA9C5271360883913BC1685F7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
Manifest number: DC
Signing time: Mon 04 Aug 2025 01:01:04 +0000
Manifest this update: Mon 04 Aug 2025 01:01:04 +0000
Manifest next update: Tue 05 Aug 2025 01:01:04 +0000
Files and hashes: 1: TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl (hash: Gdxc0G/i0owoZF13baFibZg6SdgC4UUtABDGIgUj4Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:aa:a9:c5:27:13:60:88:39:13:bc:16:85:f7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc0230cd415d86e86fd8893134287ce54a687d7
Validity
Not Before: Aug 4 01:01:04 2025 GMT
Not After : Aug 5 01:01:04 2025 GMT
Subject: CN=adc29bd29ed2f5f70cb9a5d333852d80da4d3045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:6a:3a:16:43:7c:3d:e3:44:fe:3e:63:82:
13:b9:00:f5:f8:49:ef:a7:3b:ff:97:dc:ec:b2:02:
8f:a4:88:95:a5:b8:ba:f9:83:12:3b:39:b1:b9:83:
79:3f:57:48:1f:dd:d0:b0:02:01:3b:24:0d:9b:73:
c4:fc:ef:8c:ee:5a:ee:bb:ab:08:a4:23:ed:6b:f0:
c6:95:d3:4e:90:19:92:d0:2d:c7:e2:41:4a:4b:7e:
63:a6:bc:74:55:5d:90:f0:f0:cf:2b:9e:80:fb:73:
b7:a4:ca:75:69:0e:6d:d3:dc:63:c6:45:c1:d9:71:
4b:70:0a:72:25:52:c7:c7:92:54:c4:97:4b:1f:5e:
d5:a2:70:06:69:20:2d:c9:d4:63:9d:e3:3b:40:04:
08:ad:e9:c2:26:3a:c6:17:e5:02:e9:fb:3b:ac:1f:
8c:c4:c8:78:dc:b6:cb:ce:5c:51:7a:3e:17:73:63:
e9:4c:b5:b8:e6:4b:cc:b6:7f:e9:75:1a:1d:5b:00:
e1:03:ea:37:05:3b:8b:fb:c2:23:12:e9:32:1d:48:
7f:ef:9a:53:80:ef:5b:88:d1:b6:bd:49:e3:0c:1d:
99:7e:4e:e7:cc:9a:56:51:1d:5e:a6:47:86:d0:90:
fd:ba:07:87:35:8a:ab:d0:7a:91:4e:06:77:a7:79:
46:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C2:9B:D2:9E:D2:F5:F7:0C:B9:A5:D3:33:85:2D:80:DA:4D:30:45
X509v3 Authority Key Identifier:
keyid:4D:C0:23:0C:D4:15:D8:6E:86:FD:88:93:13:42:87:CE:54:A6:87:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:24:ad:76:6b:06:20:3a:63:74:df:91:ea:ed:50:f4:3d:64:
08:89:43:13:9c:36:a0:ae:60:25:1d:67:7a:d6:fc:05:4f:bf:
4f:b4:82:46:d9:d0:3a:8f:c9:20:ca:08:72:9f:13:3e:d1:f9:
7c:82:14:35:de:bb:cc:48:d9:ea:11:5c:ac:21:8c:0b:dd:b5:
69:6b:b4:e8:48:45:a9:c8:a7:15:2a:fb:f8:3d:e3:af:dd:bd:
40:ac:9e:6d:92:ff:20:34:16:7d:81:3e:7c:2b:fb:38:bf:c2:
09:7c:67:ba:73:ac:c6:11:3c:63:c3:12:f5:8a:41:7e:81:af:
1b:91:7a:13:be:b4:d4:e7:4a:a9:3d:ae:cf:d0:c9:3a:e3:a7:
98:9a:48:ba:8f:fc:da:c1:b2:a0:ba:d1:62:15:59:23:90:9d:
35:28:58:e1:c9:eb:dc:4e:00:11:47:73:87:cf:21:20:d3:27:
6c:65:81:9d:d0:c7:c4:77:2d:d6:f7:94:26:1a:da:f9:aa:a0:
3f:ec:db:b8:a3:23:07:b2:e9:95:a9:c1:ee:f9:76:ec:99:d3:
66:d2:f9:e7:8e:38:91:5b:20:f2:66:c6:d0:c3:f4:4b:93:22:
85:66:c2:f4:81:6e:ab:c1:e1:28:79:2c:fc:91:da:d3:95:d3:
54:99:53:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymKqpxScTYIg5E7wWhffaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYzAyMzBjZDQxNWQ4NmU4NmZkODg5MzEzNDI4N2NlNTRh
Njg3ZDcwHhcNMjUwODA0MDEwMTA0WhcNMjUwODA1MDEwMTA0WjAzMTEwLwYDVQQD
EyhhZGMyOWJkMjllZDJmNWY3MGNiOWE1ZDMzMzg1MmQ4MGRhNGQzMDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2pqOhZDfD3jRP4+Y4ITuQD1+Env
pzv/l9zssgKPpIiVpbi6+YMSOzmxuYN5P1dIH93QsAIBOyQNm3PE/O+M7lruu6sI
pCPta/DGldNOkBmS0C3H4kFKS35jprx0VV2Q8PDPK56A+3O3pMp1aQ5t09xjxkXB
2XFLcApyJVLHx5JUxJdLH17VonAGaSAtydRjneM7QAQIrenCJjrGF+UC6fs7rB+M
xMh43LbLzlxRej4Xc2PpTLW45kvMtn/pdRodWwDhA+o3BTuL+8IjEukyHUh/75pT
gO9biNG2vUnjDB2Zfk7nzJpWUR1epkeG0JD9ugeHNYqr0HqRTgZ3p3lGxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3Cm9Ke0vX3DLml0zOFLYDaTTBFMB8GA1UdIwQY
MBaAFE3AIwzUFdhuhv2IkxNCh85UpofXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGNBakROUVYyRzZHX1lpVEUwS0h6bFNtaDljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mNTZmYTktZjlmZS00MGY1LWE4NTMt
ODMyYWI4NDQxNzJiLzEvVGNBakROUVYyRzZHX1lpVEUwS0h6bFNtaDljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9mNTZmYTktZjlmZS00MGY1LWE4NTMtODMyYWI4NDQxNzJi
LzEvVGNBakROUVYyRzZHX1lpVEUwS0h6bFNtaDljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyStdmsG
IDpjdN+R6u1Q9D1kCIlDE5w2oK5gJR1netb8BU+/T7SCRtnQOo/JIMoIcp8TPtH5
fIIUNd67zEjZ6hFcrCGMC921aWu06EhFqcinFSr7+D3jr929QKyebZL/IDQWfYE+
fCv7OL/CCXxnunOsxhE8Y8MS9YpBfoGvG5F6E7601OdKqT2uz9DJOuOnmJpIuo/8
2sGyoLrRYhVZI5CdNShY4cnr3E4AEUdzh88hINMnbGWBndDHxHct1veUJhra+aqg
P+zbuKMjB7LplanB7vl27JnTZtL55444kVsg8mbG0MP0S5MihWbC9IFuq8HhKHks
/JHa05XTVJlTPA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:27 2025 by rpki-client