Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
File: TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft (raw, json)
Hash identifier: KEyUvdw5xfdjFKXYFNLFylmSD8ow9tQdaR9beg5ZXnM=
Subject key identifier: C1:D5:D6:98:D1:70:5E:B4:CD:15:A0:7D:C0:9B:44:58:C6:5D:B3:79
Authority key identifier: 4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
Certificate issuer: /CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
Certificate serial: 0199258F5C9F1BD53F24960B1CAACC61243F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
Manifest number: 0C14
Signing time: Sun 07 Sep 2025 19:02:56 +0000
Manifest this update: Sun 07 Sep 2025 19:02:56 +0000
Manifest next update: Mon 08 Sep 2025 19:02:56 +0000
Files and hashes: 1: 2uYjtWwrEGy8RjTZ7XkVPtKNY1o.roa (hash: Q+J34jzVVf5yX7UskA0nUE436owKoCvouyp2C9nIn84=)
2: 8bYh9KTQNyhUoZK5Xa3Zu-_BqQk.roa (hash: Ckdj62IcP39fMv9cL87VgjiYlT1GoMjuC5C5dI+N2jA=)
3: TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl (hash: chvADou7wz3U4qvhDUyGPAROpFr9B5W0ZK1DVAWkZOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:25:8f:5c:9f:1b:d5:3f:24:96:0b:1c:aa:cc:61:24:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
Validity
Not Before: Sep 7 19:02:56 2025 GMT
Not After : Sep 8 19:02:56 2025 GMT
Subject: CN=c1d5d698d1705eb4cd15a07dc09b4458c65db379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:90:e3:d7:d6:3a:d7:5b:4e:ce:6b:7e:cf:38:
c6:b9:7c:88:ae:45:d7:6f:e5:4f:f0:70:0d:11:9b:
6a:4a:3e:7a:86:9d:15:83:92:6b:9c:bc:d1:fc:47:
3b:3b:a2:ce:e0:fb:61:91:d5:74:84:77:5c:46:f4:
a3:a4:f0:ed:b9:5f:01:6f:b9:77:e3:56:49:67:04:
9c:b1:18:23:02:3b:38:9f:1a:45:a0:73:3a:70:31:
e5:a0:c9:68:f4:2e:02:2a:f3:ff:2e:5a:a6:4a:89:
1c:13:93:79:d6:29:05:00:62:64:f2:47:66:19:97:
48:62:ff:88:ac:13:81:c0:60:33:c2:f9:4f:04:5b:
03:cd:62:f2:0f:56:a9:f2:89:68:0a:6c:64:1e:a3:
25:2f:72:2a:b7:b6:b0:07:75:74:7c:60:82:f9:23:
37:4e:7b:15:93:76:80:41:fc:6b:09:73:d2:8b:19:
ad:01:ad:48:77:02:3e:80:c7:5b:b3:f2:32:17:72:
50:91:08:c2:d4:b3:1f:26:52:ae:a5:06:a5:ba:d8:
f5:37:d4:4e:1d:65:0e:58:eb:da:98:44:45:44:b6:
a2:88:6c:39:a3:0d:f8:e1:7b:d6:27:5b:03:d5:64:
95:46:fa:ea:53:6b:d5:bc:b6:69:fa:7a:e2:a5:f8:
26:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D5:D6:98:D1:70:5E:B4:CD:15:A0:7D:C0:9B:44:58:C6:5D:B3:79
X509v3 Authority Key Identifier:
keyid:4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:86:b8:f0:e8:55:22:fa:77:e2:52:90:72:26:ba:6e:59:cd:
e0:bb:1d:3f:ac:3b:a1:5a:3b:47:66:5c:ea:78:d2:2b:87:46:
44:53:0b:8e:46:8b:76:8c:6b:14:cc:d4:58:74:c2:3a:b6:3f:
2e:1e:fa:fa:90:ad:91:47:df:0e:7b:8e:92:7a:62:34:93:0f:
74:5b:ec:9d:7c:8c:47:ab:fd:bd:23:72:76:9b:01:75:cc:88:
9c:cd:6b:37:c7:fc:bf:d3:55:8d:26:cd:56:26:8f:05:5b:3d:
49:60:1b:3d:ef:91:6a:24:74:ef:14:ef:ca:c4:58:c8:6b:fb:
65:00:6a:4b:a9:75:35:e1:a6:65:68:e2:4b:6b:d3:fc:7e:f5:
3a:76:7b:fd:4e:d7:ab:08:5c:56:26:0e:1f:94:a0:05:e1:56:
73:2d:a2:c4:0b:9b:95:f3:3a:fe:62:6f:de:fb:d8:5a:2d:7d:
9a:f9:7b:1c:47:bd:7e:73:91:23:f6:70:f4:b6:bd:cf:87:de:
ce:74:62:36:21:88:7b:de:de:87:b7:51:d6:69:20:dd:31:20:
67:d1:cf:27:25:02:6e:e6:11:05:8f:6b:42:18:07:7e:bb:24:
48:ab:9c:81:63:ab:e2:a8:1e:52:2b:d1:f5:71:9e:53:c4:37:
b1:da:cf:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZklj1yfG9U/JJYLHKrMYSQ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZjA5NzA0ODRlYjI2YmM1OWZkOGZhOGQ1YmY3YzNjNzIx
MmQwMTEwHhcNMjUwOTA3MTkwMjU2WhcNMjUwOTA4MTkwMjU2WjAzMTEwLwYDVQQD
EyhjMWQ1ZDY5OGQxNzA1ZWI0Y2QxNWEwN2RjMDliNDQ1OGM2NWRiMzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5Dj19Y611tOzmt+zzjGuXyIrkXX
b+VP8HANEZtqSj56hp0Vg5JrnLzR/Ec7O6LO4PthkdV0hHdcRvSjpPDtuV8Bb7l3
41ZJZwScsRgjAjs4nxpFoHM6cDHloMlo9C4CKvP/LlqmSokcE5N51ikFAGJk8kdm
GZdIYv+IrBOBwGAzwvlPBFsDzWLyD1ap8oloCmxkHqMlL3Iqt7awB3V0fGCC+SM3
TnsVk3aAQfxrCXPSixmtAa1IdwI+gMdbs/IyF3JQkQjC1LMfJlKupQalutj1N9RO
HWUOWOvamERFRLaiiGw5ow344XvWJ1sD1WSVRvrqU2vVvLZp+nripfgmkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHV1pjRcF60zRWgfcCbRFjGXbN5MB8GA1UdIwQY
MBaAFE3wlwSE6ya8Wf2PqNW/fDxyEtARMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGZDWEJJVHJKcnhaX1ktbzFiOThQSElTMEJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84ZTExOTgtZTUwZi00MTZmLTlkNmIt
MWU5YmZmNWU0MDIxLzEvVGZDWEJJVHJKcnhaX1ktbzFiOThQSElTMEJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84ZTExOTgtZTUwZi00MTZmLTlkNmItMWU5YmZmNWU0MDIx
LzEvVGZDWEJJVHJKcnhaX1ktbzFiOThQSElTMEJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYa48OhV
Ivp34lKQcia6blnN4LsdP6w7oVo7R2Zc6njSK4dGRFMLjkaLdoxrFMzUWHTCOrY/
Lh76+pCtkUffDnuOknpiNJMPdFvsnXyMR6v9vSNydpsBdcyInM1rN8f8v9NVjSbN
ViaPBVs9SWAbPe+RaiR07xTvysRYyGv7ZQBqS6l1NeGmZWjiS2vT/H71OnZ7/U7X
qwhcViYOH5SgBeFWcy2ixAublfM6/mJv3vvYWi19mvl7HEe9fnORI/Zw9La9z4fe
znRiNiGIe97eh7dR1mkg3TEgZ9HPJyUCbuYRBY9rQhgHfrskSKucgWOr4qgeUivR
9XGeU8Q3sdrPTw==
-----END CERTIFICATE-----
Generated at Mon Sep 8 00:01:10 2025 by rpki-client