Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
File: TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json)
Hash identifier: NEgqCyo/7YNNjmI2gsb5zrOvEG+GBhPFP2I2AoYSun4=
Subject key identifier: 35:E4:13:B7:A3:67:17:A8:33:77:51:EA:7D:B3:41:9E:1B:4E:35:70
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial: 019873E37F24A8E10FB18FE8F58A5839D53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
Manifest number: 1305
Signing time: Mon 04 Aug 2025 07:02:25 +0000
Manifest this update: Mon 04 Aug 2025 07:02:25 +0000
Manifest next update: Tue 05 Aug 2025 07:02:25 +0000
Files and hashes: 1: H36xXwuB9FJ3ESjpo_XmH_KZ2R4.roa (hash: CUtTMRPtfP9rNsMoQeZ2J44Z+jwTnsWRsKW5k/0LKug=)
2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: 4P5pPXbSf7xzN7J6oC8aOBz3z7LnfK3jnNC9+dssnWM=)
3: tpqvdlW8wuSttlFQd80uk4F5YQY.roa (hash: yDvp+gGPiyhARcManoLZEVb02KcZ7k4JkC3clhGu75w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:7f:24:a8:e1:0f:b1:8f:e8:f5:8a:58:39:d5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Validity
Not Before: Aug 4 07:02:25 2025 GMT
Not After : Aug 5 07:02:25 2025 GMT
Subject: CN=35e413b7a36717a8337751ea7db3419e1b4e3570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:04:87:a6:0a:aa:23:c5:fd:6a:db:48:0d:
ae:a8:c6:cf:25:19:c0:a8:02:11:cb:39:60:56:f5:
8c:e5:de:75:54:e7:f5:f3:79:85:46:f8:7f:72:c6:
10:4a:17:f3:46:df:53:7f:9f:d0:01:1d:f2:63:d7:
bf:e9:f8:bf:44:70:e8:5c:36:24:94:f3:a7:83:f9:
d1:34:c7:f0:38:a6:de:88:81:08:37:ed:43:5f:33:
b5:fb:fd:2b:93:b2:63:57:16:a1:1c:92:0e:70:73:
36:df:5d:bd:44:74:53:4f:e1:f3:50:38:17:27:25:
67:91:61:83:9d:e0:0a:9c:85:80:58:43:aa:ff:68:
1e:c2:4c:18:ed:25:db:dc:19:8c:24:1a:2e:eb:f1:
20:9e:42:c0:26:b0:8c:f1:fd:9c:ba:02:84:e4:f6:
0d:e6:91:df:49:d7:20:4e:b9:a5:b1:41:df:e0:89:
37:1d:94:87:ac:4c:fd:e2:2f:df:9b:14:1e:d3:e5:
4c:fd:0e:06:7b:aa:5d:b7:82:f1:bd:29:3b:04:18:
6a:1b:d8:3a:28:1e:c4:8b:a0:09:d6:2c:f7:1b:ea:
d6:d7:46:24:03:5f:99:f0:5e:58:6e:7d:0c:c3:b4:
25:93:08:3f:6a:57:c8:4d:bb:f9:19:78:c5:d0:db:
45:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E4:13:B7:A3:67:17:A8:33:77:51:EA:7D:B3:41:9E:1B:4E:35:70
X509v3 Authority Key Identifier:
keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:64:38:4f:24:dd:64:5a:66:b9:7d:27:42:df:b9:6c:b8:c4:
3d:ff:8a:ad:d0:b3:5e:2b:c6:40:c9:c6:c3:7f:b8:70:b0:c6:
72:b5:50:94:87:fa:17:26:7a:e2:7e:13:d3:11:fc:b2:9c:4c:
ef:97:cb:e2:8b:18:8b:fa:39:56:14:78:9d:4d:fb:da:0b:b0:
89:76:bc:6b:70:34:f1:37:51:53:ea:8b:b0:d5:d6:76:7c:1a:
3c:dc:93:d4:7a:57:fa:ae:76:6e:1b:c5:94:39:6c:be:14:86:
d5:e6:a8:ad:a1:c1:ec:cd:57:ef:7d:c8:98:5c:42:8f:0a:98:
c3:33:22:36:49:13:4d:19:b3:09:3b:86:f7:e6:74:44:1e:78:
fa:6b:14:0c:c8:cf:17:f9:69:e2:6d:b5:ff:f4:38:8e:15:05:
b3:e8:d5:67:ba:67:b5:6d:1b:c4:62:a9:b5:97:88:f7:00:71:
62:a7:b7:4d:b1:c1:f2:c1:9f:88:fd:42:e1:0f:9a:28:37:5d:
77:61:e3:0e:ef:3d:11:9f:a0:72:1a:ed:d1:26:ef:99:24:a2:
ed:8c:7b:99:9a:9b:6e:c3:57:06:af:b5:ec:bf:5e:a8:65:42:
36:72:64:96:44:a5:b2:35:05:ce:ca:00:c7:c6:b3:67:46:04:
ca:22:95:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz438kqOEPsY/o9YpYOdU9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMWIwYzQwOTY5MDgwOTU3ZmNjZWUxZmI4YTNmYjRiYjM4
YmY1ZGMwHhcNMjUwODA0MDcwMjI1WhcNMjUwODA1MDcwMjI1WjAzMTEwLwYDVQQD
EygzNWU0MTNiN2EzNjcxN2E4MzM3NzUxZWE3ZGIzNDE5ZTFiNGUzNTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr18Eh6YKqiPF/WrbSA2uqMbPJRnA
qAIRyzlgVvWM5d51VOf183mFRvh/csYQShfzRt9Tf5/QAR3yY9e/6fi/RHDoXDYk
lPOng/nRNMfwOKbeiIEIN+1DXzO1+/0rk7JjVxahHJIOcHM23129RHRTT+HzUDgX
JyVnkWGDneAKnIWAWEOq/2gewkwY7SXb3BmMJBou6/EgnkLAJrCM8f2cugKE5PYN
5pHfSdcgTrmlsUHf4Ik3HZSHrEz94i/fmxQe0+VM/Q4Ge6pdt4LxvSk7BBhqG9g6
KB7Ei6AJ1iz3G+rW10YkA1+Z8F5Ybn0Mw7Qlkwg/alfITbv5GXjF0NtFbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXkE7ejZxeoM3dR6n2zQZ4bTjVwMB8GA1UdIwQY
MBaAFEwbDECWkICVf8zuH7ij+0uzi/XcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMt
OTRjODI1NGJkM2I3LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMtOTRjODI1NGJkM2I3
LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGQ4TyTd
ZFpmuX0nQt+5bLjEPf+KrdCzXivGQMnGw3+4cLDGcrVQlIf6FyZ64n4T0xH8spxM
75fL4osYi/o5VhR4nU372guwiXa8a3A08TdRU+qLsNXWdnwaPNyT1HpX+q52bhvF
lDlsvhSG1eaoraHB7M1X733ImFxCjwqYwzMiNkkTTRmzCTuG9+Z0RB54+msUDMjP
F/lp4m21//Q4jhUFs+jVZ7pntW0bxGKptZeI9wBxYqe3TbHB8sGfiP1C4Q+aKDdd
d2HjDu89EZ+gchrt0SbvmSSi7Yx7mZqbbsNXBq+17L9eqGVCNnJklkSlsjUFzsoA
x8azZ0YEyiKVBA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:42 2025 by rpki-client