Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
File: TjbM4hQsoYtQWJcVjSblg50rQX8.mft (raw, json)
Hash identifier: y3JwY5xb7z861e6fKL/ikVsn/MHHG0EkeiSUck7CLL0=
Subject key identifier: 5C:43:14:26:01:D2:4A:BB:89:34:F1:F9:89:E7:13:12:2E:91:A8:5A
Authority key identifier: 4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F
Certificate issuer: /CN=4e36cce2142ca18b505897158d26e5839d2b417f
Certificate serial: 01984966597AB37D42AA6D4CA0E7496B42F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 01:01:40 +0000
Manifest this update: Sun 27 Jul 2025 01:01:40 +0000
Manifest next update: Mon 28 Jul 2025 01:01:40 +0000
Files and hashes: 1: TjbM4hQsoYtQWJcVjSblg50rQX8.crl (hash: O0biiWg44XnNeP28Bv7moYB4h1f6G2os4avb7zD3sVw=)
2: XbP44H3vmNpq_6C_0jvpv9umOf0.roa (hash: DcrY51YDFwazT333yz0LqnUGv8gSeHfRdQ2uMNMEV+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:59:7a:b3:7d:42:aa:6d:4c:a0:e7:49:6b:42:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e36cce2142ca18b505897158d26e5839d2b417f
Validity
Not Before: Jul 27 01:01:40 2025 GMT
Not After : Jul 28 01:01:40 2025 GMT
Subject: CN=5c43142601d24abb8934f1f989e713122e91a85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:4b:ca:60:bf:08:69:43:3c:00:0f:08:61:
64:f8:89:21:c2:d6:39:c4:08:9a:a1:53:7a:29:16:
af:e9:93:cb:95:36:92:ec:df:fe:4b:e4:b7:3e:08:
31:d1:80:09:42:a5:7d:d2:3a:af:d3:52:a7:8b:5d:
ce:c0:63:aa:e9:5a:e1:ac:f4:af:c7:de:65:0e:8f:
d6:91:18:d6:c9:e0:e0:68:f4:e3:fa:b5:b5:82:b9:
94:c1:06:ae:b6:14:fb:32:10:a3:57:eb:62:ff:da:
b1:dc:17:30:c2:ac:1b:56:92:70:b1:7c:66:31:b3:
1c:c0:bc:fa:f7:e0:41:bf:68:c8:d0:00:05:15:70:
c9:2c:ee:bf:f2:ca:b8:c0:e5:de:f2:1d:87:43:88:
c0:6a:7d:a1:c1:e1:5b:99:80:84:23:49:6a:cf:b3:
f2:33:ec:65:c7:84:8b:bb:8e:92:c6:16:89:bb:20:
dd:d5:04:d8:6d:9e:8e:03:4b:89:33:c4:0a:fd:ac:
c4:99:aa:c9:c2:87:d5:bc:a2:6a:ed:69:d7:65:65:
66:6b:30:7a:5b:63:8a:ed:ff:83:af:b4:99:ea:19:
b1:72:35:b0:c3:0e:69:8f:2f:a8:99:05:dd:df:2b:
ff:a8:d4:33:89:92:e1:38:c7:6e:6c:af:7a:17:3a:
55:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:43:14:26:01:D2:4A:BB:89:34:F1:F9:89:E7:13:12:2E:91:A8:5A
X509v3 Authority Key Identifier:
keyid:4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2c:a8:54:15:3e:0d:95:52:df:d1:d0:65:2e:13:b8:b2:0c:
df:fd:31:09:ba:42:b0:d9:f1:9a:6a:1d:dd:e4:c7:c5:b4:0e:
c3:76:15:92:6d:89:2a:9c:42:a3:1c:df:eb:86:b3:48:46:27:
6b:1a:09:a0:82:5b:27:e4:d6:88:55:cf:92:81:ea:3a:05:c2:
9f:a7:50:49:1d:7f:ec:64:54:ee:92:7c:43:5c:66:03:1d:07:
a3:7d:01:31:15:ff:84:5f:8b:d2:66:7b:e2:ba:0d:b2:d4:f5:
76:2e:55:f1:71:78:fe:d4:ba:34:16:f3:82:c8:bb:d4:18:ca:
fe:0e:cf:12:64:54:58:ad:70:d6:a2:63:c9:88:18:a6:d7:17:
c2:4b:d3:9e:9c:3f:eb:bf:1f:b2:44:fd:1b:d2:1f:4f:16:2e:
d9:4e:03:36:9d:e6:11:dc:17:e7:ad:7b:6e:90:57:46:24:81:
85:7b:7f:21:e5:94:dd:fe:cd:80:e2:3f:54:1e:b1:92:8b:d5:
14:32:f9:a4:04:fc:5b:20:12:33:3e:84:95:5f:27:3a:b1:73:
61:81:6c:06:cc:2d:d1:24:87:99:e3:8c:fc:1f:c9:61:1b:dd:
6c:98:8b:d0:83:c6:0e:19:8e:53:08:ad:23:9c:5d:03:3a:b4:
8a:4b:7d:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZll6s31Cqm1MoOdJa0L0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMzZjY2UyMTQyY2ExOGI1MDU4OTcxNThkMjZlNTgzOWQy
YjQxN2YwHhcNMjUwNzI3MDEwMTQwWhcNMjUwNzI4MDEwMTQwWjAzMTEwLwYDVQQD
Eyg1YzQzMTQyNjAxZDI0YWJiODkzNGYxZjk4OWU3MTMxMjJlOTFhODVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGFLymC/CGlDPAAPCGFk+IkhwtY5
xAiaoVN6KRav6ZPLlTaS7N/+S+S3Pggx0YAJQqV90jqv01Kni13OwGOq6VrhrPSv
x95lDo/WkRjWyeDgaPTj+rW1grmUwQauthT7MhCjV+ti/9qx3BcwwqwbVpJwsXxm
MbMcwLz69+BBv2jI0AAFFXDJLO6/8sq4wOXe8h2HQ4jAan2hweFbmYCEI0lqz7Py
M+xlx4SLu46SxhaJuyDd1QTYbZ6OA0uJM8QK/azEmarJwofVvKJq7WnXZWVmazB6
W2OK7f+Dr7SZ6hmxcjWwww5pjy+omQXd3yv/qNQziZLhOMdubK96FzpVIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxDFCYB0kq7iTTx+YnnExIukahaMB8GA1UdIwQY
MBaAFE42zOIULKGLUFiXFY0m5YOdK0F/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGpiTTRoUXNvWXRRV0pjVmpTYmxnNTByUVg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8yMjBiMzgtNzdjYS00ZGU0LThiODYt
OWY4NDVjNTQ2NDcwLzEvVGpiTTRoUXNvWXRRV0pjVmpTYmxnNTByUVg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8yMjBiMzgtNzdjYS00ZGU0LThiODYtOWY4NDVjNTQ2NDcw
LzEvVGpiTTRoUXNvWXRRV0pjVmpTYmxnNTByUVg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAiyoVBU+
DZVS39HQZS4TuLIM3/0xCbpCsNnxmmod3eTHxbQOw3YVkm2JKpxCoxzf64azSEYn
axoJoIJbJ+TWiFXPkoHqOgXCn6dQSR1/7GRU7pJ8Q1xmAx0Ho30BMRX/hF+L0mZ7
4roNstT1di5V8XF4/tS6NBbzgsi71BjK/g7PEmRUWK1w1qJjyYgYptcXwkvTnpw/
678fskT9G9IfTxYu2U4DNp3mEdwX5617bpBXRiSBhXt/IeWU3f7NgOI/VB6xkovV
FDL5pAT8WyASMz6ElV8nOrFzYYFsBswt0SSHmeOM/B/JYRvdbJiL0IPGDhmOUwit
I5xdAzq0ikt9OA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 06:05:05 2025 by rpki-client