Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
File: TFTszmy8nFSSnqpLIrM3sP2bNr8.mft (raw, json)
Hash identifier: AYR3KmtAxudWrhsuuFIEYOrzV4unGKRg+7psfAMnnEY=
Subject key identifier: 5A:25:AA:5C:FB:EB:62:F4:5F:E8:F6:BB:40:84:02:E0:2F:04:0F:71
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial: 019826A2762A0D0E40DCE2B96AF5EEA46EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
Manifest number: 15F0
Signing time: Sun 20 Jul 2025 07:00:37 +0000
Manifest this update: Sun 20 Jul 2025 07:00:37 +0000
Manifest next update: Mon 21 Jul 2025 07:00:37 +0000
Files and hashes: 1: TFTszmy8nFSSnqpLIrM3sP2bNr8.crl (hash: 2uHS94nWgkc622dYlhj9Dbkppn0uwoxIg9XCdzPKXw8=)
2: eHPqpiMAvfqI-We9VzdWjZPR_bY.roa (hash: 2EtKDvjgQC4QGGaHfks3HUfVQC7NvALc/OB3oROL6rM=)
3: ePZ7Yuu3-_aTMfNEBfmL4fdhXII.roa (hash: ho6FnqARFfeawc2fVl+6U/A9evk5Ck/9UluGTSWRaEw=)
4: jEFUKY2bhw_vuBM1OshauBn8mvg.roa (hash: ZeWPCxGU+ldLXwfBechPAx21XNMieJ0auUVK9LjYs/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:a2:76:2a:0d:0e:40:dc:e2:b9:6a:f5:ee:a4:6e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Validity
Not Before: Jul 20 07:00:37 2025 GMT
Not After : Jul 21 07:00:37 2025 GMT
Subject: CN=5a25aa5cfbeb62f45fe8f6bb408402e02f040f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:8f:39:1b:e0:d3:62:5c:0f:9d:b5:e8:6b:
bf:80:cc:35:cc:49:95:74:cd:66:1e:30:3f:8b:2e:
b3:95:b5:cb:3f:b6:e3:a0:39:d8:19:57:d4:36:58:
ba:6a:c6:9f:40:df:7b:7b:bb:81:99:a1:23:a2:a0:
9b:36:60:3e:e6:03:16:85:99:4b:99:a7:39:56:a7:
ba:ad:95:b2:b9:42:f2:bb:e9:09:98:50:60:91:5a:
b3:cf:ec:3f:4f:64:4c:cc:96:bf:d2:17:df:a4:05:
61:2b:ae:e0:61:ea:49:02:08:7a:ff:de:46:bb:c4:
b9:23:30:ca:ce:64:96:b5:ce:0a:49:32:f6:b6:1b:
af:1c:8b:71:4a:10:ca:67:8e:ab:d2:9f:95:f6:85:
17:e3:1c:4e:18:32:42:27:fb:02:7e:b4:f2:6a:f9:
77:b9:ca:bc:d2:28:1c:d0:d1:ad:69:89:5c:6a:5f:
b9:e7:ab:d4:ce:89:b0:47:ee:d5:32:f1:eb:19:a0:
99:34:ae:83:0a:58:7b:89:2f:67:94:76:6f:cd:c6:
96:c5:85:f6:20:ca:c3:de:14:48:c8:60:1f:cc:34:
ec:26:d9:ab:56:20:21:48:83:7f:6b:01:15:25:3e:
9a:8f:90:0a:7f:ae:61:ed:30:01:71:d6:47:be:cc:
ad:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:25:AA:5C:FB:EB:62:F4:5F:E8:F6:BB:40:84:02:E0:2F:04:0F:71
X509v3 Authority Key Identifier:
keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:20:0a:44:48:c4:ea:8b:86:4a:75:6a:6e:c9:30:47:d6:29:
9d:38:b7:11:7d:b6:e6:73:45:1c:f3:24:d5:5a:9f:67:76:06:
96:d1:f4:24:3b:ff:49:36:f0:f2:1d:83:27:c5:ca:52:5a:f8:
55:e4:21:7a:bf:83:14:ee:c5:7f:62:76:c7:97:4b:4b:8e:34:
c6:11:77:7d:ef:2b:f3:51:d5:74:fc:9f:13:66:22:e3:d0:33:
2d:95:26:d0:b4:7f:66:42:8d:90:f6:63:ae:d8:db:16:b5:96:
f7:b8:2f:c5:4a:79:08:a3:75:a9:5c:09:5e:0e:b7:c5:a9:12:
82:03:a5:22:4e:dd:13:8f:2d:7b:01:1a:2f:66:e7:70:37:02:
b9:48:0c:8a:6a:ba:cb:6b:9c:16:52:4b:eb:26:30:b5:e2:86:
34:3e:9d:e4:72:96:d7:86:72:d4:c3:9d:ce:3e:ee:53:1e:17:
f3:53:69:53:7c:6e:6b:7c:30:e4:a9:42:c0:56:23:e0:b1:b2:
4c:84:b4:f6:ba:c3:6d:d1:79:ce:f6:da:fb:e2:7a:4c:cc:48:
f4:b1:51:f2:20:1a:3c:c6:5a:92:d0:48:4c:da:88:07:bf:3d:
a8:d5:7c:61:84:d5:2f:b7:62:60:86:fa:5c:5a:86:b0:8b:75:
6b:43:34:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgmonYqDQ5A3OK5avXupG7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNTRlY2NlNmNiYzljNTQ5MjllYWE0YjIyYjMzN2IwZmQ5
YjM2YmYwHhcNMjUwNzIwMDcwMDM3WhcNMjUwNzIxMDcwMDM3WjAzMTEwLwYDVQQD
Eyg1YTI1YWE1Y2ZiZWI2MmY0NWZlOGY2YmI0MDg0MDJlMDJmMDQwZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8GPORvg02JcD5216Gu/gMw1zEmV
dM1mHjA/iy6zlbXLP7bjoDnYGVfUNli6asafQN97e7uBmaEjoqCbNmA+5gMWhZlL
mac5Vqe6rZWyuULyu+kJmFBgkVqzz+w/T2RMzJa/0hffpAVhK67gYepJAgh6/95G
u8S5IzDKzmSWtc4KSTL2thuvHItxShDKZ46r0p+V9oUX4xxOGDJCJ/sCfrTyavl3
ucq80igc0NGtaYlcal+556vUzomwR+7VMvHrGaCZNK6DClh7iS9nlHZvzcaWxYX2
IMrD3hRIyGAfzDTsJtmrViAhSIN/awEVJT6aj5AKf65h7TABcdZHvsytbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFolqlz762L0X+j2u0CEAuAvBA9xMB8GA1UdIwQY
MBaAFExU7M5svJxUkp6qSyKzN7D9mza/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEZUc3pteThuRlNTbnFwTElyTTNzUDJiTnI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wMmM1ZWMtN2M2Zi00YWUyLTk4OTct
MzA1OWM4OWI3MmVhLzEvVEZUc3pteThuRlNTbnFwTElyTTNzUDJiTnI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8wMmM1ZWMtN2M2Zi00YWUyLTk4OTctMzA1OWM4OWI3MmVh
LzEvVEZUc3pteThuRlNTbnFwTElyTTNzUDJiTnI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGiAKREjE
6ouGSnVqbskwR9YpnTi3EX225nNFHPMk1VqfZ3YGltH0JDv/STbw8h2DJ8XKUlr4
VeQher+DFO7Ff2J2x5dLS440xhF3fe8r81HVdPyfE2Yi49AzLZUm0LR/ZkKNkPZj
rtjbFrWW97gvxUp5CKN1qVwJXg63xakSggOlIk7dE48tewEaL2bncDcCuUgMimq6
y2ucFlJL6yYwteKGND6d5HKW14Zy1MOdzj7uUx4X81NpU3xua3ww5KlCwFYj4LGy
TIS09rrDbdF5zvba++J6TMxI9LFR8iAaPMZaktBITNqIB789qNV8YYTVL7diYIb6
XFqGsIt1a0M0Rg==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:24:47 2025 by rpki-client