
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
File: TVg7b1bPCSco3lk62VKuoZzjGIY.mft (raw, json)
Hash identifier: JfAup3q02HgDCCznfbK4m0Rr0lKnQku/d7POJXhtUA0=
Subject key identifier: 0F:56:F5:4F:46:3A:89:E3:A1:80:E7:15:61:9D:DB:B4:11:B6:DF:34
Authority key identifier: 4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
Certificate issuer: /CN=4d583b6f56cf092728de593ad952aea19ce31886
Certificate serial: 01983803F2ED765C3BDAAED686DA37F1AE91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
Manifest number: 154E
Signing time: Wed 23 Jul 2025 16:00:39 +0000
Manifest this update: Wed 23 Jul 2025 16:00:39 +0000
Manifest next update: Thu 24 Jul 2025 16:00:39 +0000
Files and hashes: 1: TVg7b1bPCSco3lk62VKuoZzjGIY.crl (hash: P0s3laqGx8MbA72xVRFx+pxmyPZJ6xXre3PvCf7XGh8=)
2: bOLohqMKHagd_oJ4fhpVo7NmmeM.roa (hash: zc2jSYa3eGI9kHGQfF97SUcixmU4Ya6CBO+chtxYjPg=)
3: rAEXG8LVncu-VzH6pWQ3O-v7vJk.roa (hash: pHtLRGskuQm7vCqkOegxgViLMoHSueDTg44n3jic3FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:03:f2:ed:76:5c:3b:da:ae:d6:86:da:37:f1:ae:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d583b6f56cf092728de593ad952aea19ce31886
Validity
Not Before: Jul 23 16:00:39 2025 GMT
Not After : Jul 24 16:00:39 2025 GMT
Subject: CN=0f56f54f463a89e3a180e715619ddbb411b6df34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:68:85:1e:12:4b:b8:15:dd:68:9c:d0:3b:88:
b6:0f:73:d5:8a:ac:61:ef:99:df:11:79:89:58:bd:
07:1c:7b:fd:1c:9f:f0:53:e3:c3:05:18:7b:a8:e1:
fa:ea:51:43:99:32:ee:d6:ac:77:ab:04:c4:39:b1:
a7:67:7b:b2:b7:9b:1a:06:f6:f1:8f:90:f7:25:6e:
67:aa:0e:a5:f9:77:4c:4b:31:24:a6:4f:27:a4:6f:
6d:03:5c:4c:53:1a:db:e7:9b:ec:21:ec:80:d8:58:
71:f5:70:42:4a:16:2f:8d:9e:36:19:52:93:91:ed:
d7:c5:c2:af:8d:b9:e0:9e:6e:38:d7:58:ad:73:78:
57:ba:e7:d7:b8:fc:f0:48:3d:a4:85:a3:67:dc:95:
d5:0e:93:2b:6c:86:ed:f1:dc:99:ae:c1:92:a8:82:
0a:f1:fd:7c:7a:4a:b9:d9:42:9f:d0:a8:00:fc:d5:
49:b4:5a:d8:5c:ff:f0:21:ce:d6:8e:b9:b1:2f:f4:
83:ab:02:42:b0:f7:8c:02:16:59:65:86:47:84:28:
95:8a:17:fc:e9:3d:9d:fd:93:b4:84:de:ef:5d:c2:
de:71:1b:6e:62:e6:b9:99:87:da:13:b6:7e:c8:d7:
a1:ab:d6:51:7c:38:d4:ac:81:fa:44:7d:a4:2e:04:
92:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:56:F5:4F:46:3A:89:E3:A1:80:E7:15:61:9D:DB:B4:11:B6:DF:34
X509v3 Authority Key Identifier:
keyid:4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:90:7a:96:5c:85:1f:d6:6f:2e:d2:4f:f2:1c:47:f4:d2:d5:
63:b1:5e:6d:e4:50:f8:3f:6f:4b:fd:5b:66:7e:dd:09:a4:e5:
04:36:b2:a0:15:18:9f:65:83:1c:9e:3b:de:2e:e7:34:62:20:
cf:41:cf:46:c5:e0:db:ca:72:1d:71:aa:1b:98:1c:30:29:f5:
cd:7e:af:24:e2:96:68:20:e7:17:41:5d:14:ba:32:e1:b2:3b:
0b:2b:7a:81:ec:c0:ec:ac:dd:36:5e:75:f4:40:4c:97:51:d7:
ec:d0:be:06:72:c5:ef:d9:92:b6:f3:b5:b1:f1:32:28:04:88:
68:97:2e:eb:ef:c3:97:6f:9d:13:c5:12:21:70:df:31:00:1d:
f3:27:77:09:de:05:6a:75:db:bd:5f:26:33:d6:c2:f4:10:bf:
f7:c5:9f:cf:71:0e:7a:a0:87:ba:94:10:3b:93:f8:93:67:7e:
00:f5:3d:0d:c6:2d:64:e1:79:81:0c:8f:0c:b1:1f:06:25:07:
57:33:d7:2f:10:a3:2d:70:4a:0f:1a:82:90:85:83:78:89:12:
f5:ea:7f:60:ae:95:9c:4f:b6:95:fa:fa:d6:4e:fa:18:59:18:
71:ae:e9:53:d4:0d:f0:0b:48:74:75:42:94:bd:1d:bb:76:91:
a0:99:60:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg4A/Ltdlw72q7Whto38a6RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNTgzYjZmNTZjZjA5MjcyOGRlNTkzYWQ5NTJhZWExOWNl
MzE4ODYwHhcNMjUwNzIzMTYwMDM5WhcNMjUwNzI0MTYwMDM5WjAzMTEwLwYDVQQD
EygwZjU2ZjU0ZjQ2M2E4OWUzYTE4MGU3MTU2MTlkZGJiNDExYjZkZjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12iFHhJLuBXdaJzQO4i2D3PViqxh
75nfEXmJWL0HHHv9HJ/wU+PDBRh7qOH66lFDmTLu1qx3qwTEObGnZ3uyt5saBvbx
j5D3JW5nqg6l+XdMSzEkpk8npG9tA1xMUxrb55vsIeyA2Fhx9XBCShYvjZ42GVKT
ke3XxcKvjbngnm4411itc3hXuufXuPzwSD2khaNn3JXVDpMrbIbt8dyZrsGSqIIK
8f18ekq52UKf0KgA/NVJtFrYXP/wIc7WjrmxL/SDqwJCsPeMAhZZZYZHhCiVihf8
6T2d/ZO0hN7vXcLecRtuYua5mYfaE7Z+yNehq9ZRfDjUrIH6RH2kLgSSAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9W9U9GOonjoYDnFWGd27QRtt80MB8GA1UdIwQY
MBaAFE1YO29WzwknKN5ZOtlSrqGc4xiGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZnN2IxYlBDU2NvM2xrNjJWS3VvWnpqR0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83MzU4YmQtYzcyZi00ZDliLWJiMGQt
MGI0ZjcxN2FhMzYzLzEvVFZnN2IxYlBDU2NvM2xrNjJWS3VvWnpqR0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83MzU4YmQtYzcyZi00ZDliLWJiMGQtMGI0ZjcxN2FhMzYz
LzEvVFZnN2IxYlBDU2NvM2xrNjJWS3VvWnpqR0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArZB6llyF
H9ZvLtJP8hxH9NLVY7FebeRQ+D9vS/1bZn7dCaTlBDayoBUYn2WDHJ473i7nNGIg
z0HPRsXg28pyHXGqG5gcMCn1zX6vJOKWaCDnF0FdFLoy4bI7Cyt6gezA7KzdNl51
9EBMl1HX7NC+BnLF79mStvO1sfEyKASIaJcu6+/Dl2+dE8USIXDfMQAd8yd3Cd4F
anXbvV8mM9bC9BC/98Wfz3EOeqCHupQQO5P4k2d+APU9DcYtZOF5gQyPDLEfBiUH
VzPXLxCjLXBKDxqCkIWDeIkS9ep/YK6VnE+2lfr61k76GFkYca7pU9QN8AtIdHVC
lL0du3aRoJlg8w==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:42:54 2025 by rpki-client