Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
File: TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json)
Hash identifier: jlTx8OuQWgYBjrKAh4SkLlJWeoE4VCZNA1MrLcmycc4=
Subject key identifier: A4:35:C1:0C:A6:6A:29:7F:6A:01:37:EB:C3:6E:E2:C7:A0:56:21:CD
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial: 01987863F99D812E3EB3A3ADFEEAB2DB4721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
Manifest number: 1619
Signing time: Tue 05 Aug 2025 04:01:14 +0000
Manifest this update: Tue 05 Aug 2025 04:01:14 +0000
Manifest next update: Wed 06 Aug 2025 04:01:14 +0000
Files and hashes: 1: LHdFFtkhND-G29Bb5TNwX3ZX6HI.roa (hash: 5JCuzcczihsYGo60q4ytQ60HO2vUMA1Wb8XrWH6WiqE=)
2: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: PBR2B2M16W/ciQjwWPsJ7sny4Ek4qkFgo7G3Y41dUyw=)
3: VYrJyKdSTfJ9aOSPJMCRhItn6O0.roa (hash: EVl6QPoQm24Wnsg0W0HBnWjfCtTCiCv6xfCekdHCwzI=)
4: XGm_swis7gPqLxLCw4_WpqKe8Ac.roa (hash: HuoRGpzlvzmJtj6Rn/56OaSHzb/3wfWOGTlv62srzB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:78:63:f9:9d:81:2e:3e:b3:a3:ad:fe:ea:b2:db:47:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Validity
Not Before: Aug 5 04:01:14 2025 GMT
Not After : Aug 6 04:01:14 2025 GMT
Subject: CN=a435c10ca66a297f6a0137ebc36ee2c7a05621cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e3:be:02:27:2f:cf:8a:48:0c:15:3e:9a:b4:
8e:b6:f2:a0:cf:7a:6a:f0:f8:b4:92:a4:00:f8:8b:
fd:4c:50:f3:90:b7:68:28:32:5f:fd:56:58:81:0b:
3e:4a:25:20:7f:08:db:d9:1d:90:ea:90:3b:43:0a:
92:d6:68:e1:5f:d8:82:7a:de:c6:e0:d7:3b:26:37:
0a:1d:36:1d:95:0c:1a:21:7e:db:0b:a8:33:8e:77:
30:0d:76:11:c8:19:5d:f1:49:44:55:4f:8b:d3:6a:
84:fb:75:39:09:85:fb:e4:c3:73:94:71:9e:e2:d2:
23:fe:9e:9d:12:62:f6:a1:27:d4:a3:f0:e2:c5:75:
a1:50:a0:51:6f:db:0c:27:75:02:a5:f4:e3:ff:18:
06:fa:11:27:6d:4e:04:dc:31:7c:56:b1:be:16:ff:
df:49:7c:c7:75:31:f5:d5:0c:59:95:41:0d:af:b2:
7e:d6:32:0e:90:f6:65:a9:dd:f5:d6:0d:e8:1b:6d:
55:ee:cc:42:01:05:c6:60:98:79:d9:c5:bd:4f:d6:
3f:5a:34:f9:3a:a3:29:95:09:37:35:b8:28:f2:37:
31:94:50:de:cf:01:ad:7e:52:1d:56:32:e9:00:f0:
55:45:74:85:1f:78:47:ec:3b:4b:d4:fc:61:cd:27:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:35:C1:0C:A6:6A:29:7F:6A:01:37:EB:C3:6E:E2:C7:A0:56:21:CD
X509v3 Authority Key Identifier:
keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:06:a9:1a:e2:8a:06:69:de:79:b6:52:3e:3e:7b:70:85:d1:
5f:e3:74:67:c8:d3:17:67:80:f3:78:8f:07:dd:b4:4c:34:5b:
1e:26:4e:96:a6:95:0a:4c:8d:1e:8c:33:01:8a:83:0c:1f:a5:
d3:f8:47:29:0b:15:e5:7d:10:0e:7c:1e:18:50:5a:f8:ea:48:
25:18:9e:c4:23:89:48:77:e1:db:c5:b0:f5:4d:59:8a:19:2b:
36:59:a0:dd:bd:bb:70:1b:dd:9b:1f:ed:9b:01:d1:3e:3b:75:
02:66:d2:e8:ea:ca:7f:62:83:39:db:09:3c:12:dd:43:26:d7:
cd:65:a0:ed:bc:ca:ec:4e:23:61:42:82:e1:34:16:7c:1f:fc:
65:94:c4:8d:4d:91:6c:aa:87:60:f6:83:63:17:fd:77:80:3e:
11:fe:95:2a:05:17:7c:24:0d:1d:7c:43:71:9d:97:fd:46:b2:
67:bf:66:b8:44:31:92:f6:99:1e:e4:2b:6f:62:c7:d0:7c:a3:
83:17:17:b7:3f:e1:7d:de:32:79:8c:65:c5:0d:e6:1c:cf:f1:
b8:7a:24:2f:bf:ef:74:bc:33:ac:d5:95:4e:ab:51:b1:20:1f:
d8:74:8f:51:6d:36:84:63:4b:45:56:72:91:f0:62:06:5f:91:
61:83:a9:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh4Y/mdgS4+s6Ot/uqy20chMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjY2M2MDQ5NWIyYTM0ZDg5MjExY2MxYzc5NTI0ZWFiNjFi
YTE2NTYwHhcNMjUwODA1MDQwMTE0WhcNMjUwODA2MDQwMTE0WjAzMTEwLwYDVQQD
EyhhNDM1YzEwY2E2NmEyOTdmNmEwMTM3ZWJjMzZlZTJjN2EwNTYyMWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+O+Aicvz4pIDBU+mrSOtvKgz3pq
8Pi0kqQA+Iv9TFDzkLdoKDJf/VZYgQs+SiUgfwjb2R2Q6pA7QwqS1mjhX9iCet7G
4Nc7JjcKHTYdlQwaIX7bC6gzjncwDXYRyBld8UlEVU+L02qE+3U5CYX75MNzlHGe
4tIj/p6dEmL2oSfUo/DixXWhUKBRb9sMJ3UCpfTj/xgG+hEnbU4E3DF8VrG+Fv/f
SXzHdTH11QxZlUENr7J+1jIOkPZlqd311g3oG21V7sxCAQXGYJh52cW9T9Y/WjT5
OqMplQk3Nbgo8jcxlFDezwGtflIdVjLpAPBVRXSFH3hH7DtL1PxhzSfaBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQ1wQymail/agE368Nu4segViHNMB8GA1UdIwQY
MBaAFEzMYElbKjTYkhHMHHlSTqthuhZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNTFjNmMtNjE3Yy00NjQzLTlmNmUt
Njk4MDlkOGI5YzIwLzEvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xNTFjNmMtNjE3Yy00NjQzLTlmNmUtNjk4MDlkOGI5YzIw
LzEvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwapGuKK
BmneebZSPj57cIXRX+N0Z8jTF2eA83iPB920TDRbHiZOlqaVCkyNHowzAYqDDB+l
0/hHKQsV5X0QDnweGFBa+OpIJRiexCOJSHfh28Ww9U1ZihkrNlmg3b27cBvdmx/t
mwHRPjt1AmbS6OrKf2KDOdsJPBLdQybXzWWg7bzK7E4jYUKC4TQWfB/8ZZTEjU2R
bKqHYPaDYxf9d4A+Ef6VKgUXfCQNHXxDcZ2X/UayZ79muEQxkvaZHuQrb2LH0Hyj
gxcXtz/hfd4yeYxlxQ3mHM/xuHokL7/vdLwzrNWVTqtRsSAf2HSPUW02hGNLRVZy
kfBiBl+RYYOpcQ==
-----END CERTIFICATE-----
Generated at Tue Aug 5 08:18:05 2025 by rpki-client