Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
File: tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft (raw, json)
Hash identifier: H2NKddSQvcohuXEhiOw2D0Rial8NEVXCBTOjPxd5ZPI=
Subject key identifier: 30:FD:24:6C:40:ED:79:7B:C7:F0:A1:10:5A:B8:C1:99:28:6E:37:5F
Authority key identifier: B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
Certificate issuer: /CN=b46320188098520c366277f749a4f77a1d444439
Certificate serial: 01984966DE375B03447FE69997A97A15B18A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 01:02:14 +0000
Manifest this update: Sun 27 Jul 2025 01:02:14 +0000
Manifest next update: Mon 28 Jul 2025 01:02:14 +0000
Files and hashes: 1: 1c-Abo0LxBVDDE4sBrG9JS_ePzI.roa (hash: rxDs0I1CVbIWmreeYb6ePZfwtg9Spev7LU71wCrsp/4=)
2: tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl (hash: 2xQj77gEgbgb1FtcPfqg8JbBVHl/3AQ9rxlZ2DjUC8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:de:37:5b:03:44:7f:e6:99:97:a9:7a:15:b1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b46320188098520c366277f749a4f77a1d444439
Validity
Not Before: Jul 27 01:02:14 2025 GMT
Not After : Jul 28 01:02:14 2025 GMT
Subject: CN=30fd246c40ed797bc7f0a1105ab8c199286e375f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:39:e1:30:60:c8:03:39:d1:8b:e2:86:30:ff:
86:01:6c:da:f7:f0:96:1a:0b:77:0b:0c:09:be:fa:
f4:72:38:88:ee:c8:4b:69:aa:ee:6e:76:17:2d:06:
16:83:45:ff:a3:da:54:4d:07:37:d3:09:a5:7a:86:
cf:50:91:5c:26:71:dc:d3:11:bf:24:af:99:bb:56:
cf:b9:f2:f6:70:e9:f3:93:82:fe:84:16:87:2d:56:
b8:5f:3b:c8:8b:bb:d6:23:38:8f:96:3c:08:f7:f5:
3c:4a:24:ee:52:78:ff:b5:c5:55:15:09:cf:36:1b:
c4:fc:0a:d6:00:d0:1a:7f:c3:03:4a:b3:f7:cc:3c:
f7:61:52:ce:28:64:6b:18:91:c3:8f:f2:ba:7a:59:
82:23:ba:94:54:63:ad:e7:b7:c4:e7:64:98:dd:d2:
ad:40:e9:3f:6b:d5:c4:38:03:38:47:43:41:6e:f0:
31:d6:49:10:0f:b2:83:c9:fc:49:e7:6c:c9:b3:47:
a7:0a:3d:fa:2e:cf:88:35:77:9c:b6:25:ad:33:ff:
9c:50:23:a7:c5:c4:1e:2c:b7:28:2b:26:06:ed:f7:
29:ec:a4:48:8b:46:0d:7e:c6:18:ae:5f:ca:fb:59:
3a:30:e9:ce:72:cb:6c:b5:e7:39:0e:e5:31:1e:9f:
76:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FD:24:6C:40:ED:79:7B:C7:F0:A1:10:5A:B8:C1:99:28:6E:37:5F
X509v3 Authority Key Identifier:
keyid:B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d7:d7:40:02:30:cb:24:9c:4d:3c:fd:f2:d6:1b:33:0b:45:
ef:47:a6:8e:12:60:8b:21:2f:df:53:22:da:04:94:17:94:3d:
0f:54:85:fb:f7:e2:1b:f2:44:b8:0d:85:23:90:0d:85:31:87:
32:31:f5:a5:a4:20:45:86:54:70:67:4b:74:0c:bb:27:02:9c:
6e:94:b1:f2:b2:01:51:4b:a4:40:4a:52:19:50:f7:8f:21:f1:
a3:df:5c:1d:e8:df:c7:ab:25:55:4f:06:03:a5:ea:34:44:aa:
3d:7b:2e:0e:87:f0:a9:d7:c1:af:8b:6b:74:bf:5d:f1:94:5c:
44:0f:fc:43:fb:d1:84:a4:2d:2d:0e:32:22:c5:f0:77:db:cd:
13:b6:bb:c7:21:94:b1:6b:12:ee:62:e1:5f:fa:f3:40:34:ae:
c6:c3:5a:26:3a:9d:98:c8:47:86:06:47:71:db:61:04:6f:b2:
c9:e8:f2:04:51:b5:d0:4b:7b:07:f3:2c:47:ab:19:f0:7d:83:
2a:a9:f9:2a:41:ca:3c:ae:57:48:14:c3:9f:56:c3:ff:27:c1:
a3:ae:65:0c:db:fc:03:67:01:e1:9e:c2:56:20:7c:5c:c2:4b:
0a:94:0b:22:87:55:e6:d5:be:c2:04:f9:c9:36:9a:d5:ce:1b:
0e:08:e7:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZt43WwNEf+aZl6l6FbGKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjMyMDE4ODA5ODUyMGMzNjYyNzdmNzQ5YTRmNzdhMWQ0
NDQ0MzkwHhcNMjUwNzI3MDEwMjE0WhcNMjUwNzI4MDEwMjE0WjAzMTEwLwYDVQQD
EygzMGZkMjQ2YzQwZWQ3OTdiYzdmMGExMTA1YWI4YzE5OTI4NmUzNzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDnhMGDIAznRi+KGMP+GAWza9/CW
Ggt3CwwJvvr0cjiI7shLaarubnYXLQYWg0X/o9pUTQc30wmleobPUJFcJnHc0xG/
JK+Zu1bPufL2cOnzk4L+hBaHLVa4XzvIi7vWIziPljwI9/U8SiTuUnj/tcVVFQnP
NhvE/ArWANAaf8MDSrP3zDz3YVLOKGRrGJHDj/K6elmCI7qUVGOt57fE52SY3dKt
QOk/a9XEOAM4R0NBbvAx1kkQD7KDyfxJ52zJs0enCj36Ls+INXectiWtM/+cUCOn
xcQeLLcoKyYG7fcp7KRIi0YNfsYYrl/K+1k6MOnOcststec5DuUxHp92tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDD9JGxA7Xl7x/ChEFq4wZkobjdfMB8GA1UdIwQY
MBaAFLRjIBiAmFIMNmJ390mk93odREQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdNZ0dJQ1lVZ3cyWW5mM1NhVDNlaDFFUkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC80YWNiODMtZjk0MC00NzY2LWJjYTkt
NjA4ZTdkNzc5YmM3LzEvdEdNZ0dJQ1lVZ3cyWW5mM1NhVDNlaDFFUkRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC80YWNiODMtZjk0MC00NzY2LWJjYTktNjA4ZTdkNzc5YmM3
LzEvdEdNZ0dJQ1lVZ3cyWW5mM1NhVDNlaDFFUkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNfXQAIw
yyScTTz98tYbMwtF70emjhJgiyEv31Mi2gSUF5Q9D1SF+/fiG/JEuA2FI5ANhTGH
MjH1paQgRYZUcGdLdAy7JwKcbpSx8rIBUUukQEpSGVD3jyHxo99cHejfx6slVU8G
A6XqNESqPXsuDofwqdfBr4trdL9d8ZRcRA/8Q/vRhKQtLQ4yIsXwd9vNE7a7xyGU
sWsS7mLhX/rzQDSuxsNaJjqdmMhHhgZHcdthBG+yyejyBFG10Et7B/MsR6sZ8H2D
Kqn5KkHKPK5XSBTDn1bD/yfBo65lDNv8A2cB4Z7CViB8XMJLCpQLIodV5tW+wgT5
yTaa1c4bDgjnBg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:17:42 2025 by rpki-client