
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
File: Tchxtd3wdAsxfR4042smgQu5gCY.mft (raw, json)
Hash identifier: VWFo4cJloiaoNRD9G5R2v1REmEhWjaYX09gktdf32Uk=
Subject key identifier: 90:96:08:DE:C1:73:B5:74:C7:A1:C3:DE:A5:7F:2A:AD:23:3C:0D:80
Authority key identifier: 4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
Certificate issuer: /CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Certificate serial: 01984AE57232CB6413AFB1994A760430A37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
Manifest number: 08D3
Signing time: Sun 27 Jul 2025 08:00:07 +0000
Manifest this update: Sun 27 Jul 2025 08:00:07 +0000
Manifest next update: Mon 28 Jul 2025 08:00:07 +0000
Files and hashes: 1: Tchxtd3wdAsxfR4042smgQu5gCY.crl (hash: asnVjvpiv03OcrgoTt1c6q3tCVzFvOrZlo8HnELazFk=)
2: paYxpLOj5q1m1CkvSIrYuNJXnfY.roa (hash: oASY8mwNlrx1vBXDbDUsEVfC2Mdva3sHjU/P5M6cgKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:72:32:cb:64:13:af:b1:99:4a:76:04:30:a3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Validity
Not Before: Jul 27 08:00:07 2025 GMT
Not After : Jul 28 08:00:07 2025 GMT
Subject: CN=909608dec173b574c7a1c3dea57f2aad233c0d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:06:2f:60:1c:c4:43:91:14:0a:51:e1:95:eb:
2e:57:c5:e9:83:c7:c0:1c:61:99:c1:7f:c0:8f:e6:
b9:fa:a7:5c:64:86:90:36:f5:cb:6b:49:53:2b:01:
4a:d0:ff:ca:18:bf:5b:87:1b:c1:34:4f:fa:79:58:
25:76:c2:c1:c9:b0:d7:b3:3d:d0:1f:d1:71:19:b1:
9c:41:5b:cb:ea:c6:b8:c9:c9:77:ea:43:4b:1a:16:
1f:f1:e8:d7:45:bb:5e:b6:6d:35:53:80:ea:9a:b9:
d3:7c:c5:6e:c3:d9:ad:50:da:6a:12:90:ca:12:4e:
03:75:8c:35:60:34:4d:0d:26:ad:ca:e6:47:81:50:
4d:93:50:f4:0f:95:f9:60:42:2f:96:32:e5:14:58:
f8:10:18:27:c1:cb:20:61:f6:08:13:8c:f6:44:4b:
0c:29:21:09:c5:9d:40:1d:d0:4a:5e:6c:16:b2:36:
2d:fe:83:f6:de:f9:de:bd:90:e3:d4:e1:94:cd:7a:
3c:08:7f:85:c3:8c:91:dc:e5:ef:cb:e4:1b:16:bd:
f7:ef:2c:c0:c7:52:80:11:16:cd:67:78:1a:5a:e0:
a7:68:bc:73:cc:a6:87:c1:36:d8:a4:34:d0:c9:bb:
20:23:6f:b4:0b:86:8d:c9:43:29:6f:af:87:3b:ab:
24:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:96:08:DE:C1:73:B5:74:C7:A1:C3:DE:A5:7F:2A:AD:23:3C:0D:80
X509v3 Authority Key Identifier:
keyid:4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:28:1e:e1:67:e4:83:65:e7:62:26:01:1f:d9:42:17:0d:bf:
a5:7b:1f:75:96:bc:5c:40:35:6c:08:cc:66:44:8a:ff:84:74:
84:88:0d:29:76:3b:79:e4:dc:56:9c:d9:4c:e0:03:87:62:83:
37:56:63:e0:02:a0:bb:33:37:da:c2:5c:20:9b:96:a2:68:dc:
df:4a:6c:95:49:e0:47:1b:93:80:83:c3:4e:2c:ba:83:2e:c7:
92:26:f0:10:03:03:ae:33:48:df:8c:5b:57:fa:c5:85:6d:29:
d4:3c:72:cf:1a:49:b2:1d:61:07:0b:a5:f3:d6:9f:40:ad:ab:
3e:32:9c:59:d0:be:8b:ee:78:a0:e8:71:72:df:c6:35:c7:51:
ae:dc:03:2f:d3:db:88:1b:27:ea:4c:37:a7:32:66:be:12:6a:
66:75:f8:e2:29:b1:bb:93:ca:41:b9:fa:4b:9b:45:47:bc:d3:
3c:12:07:97:ff:f8:cb:c3:ee:6c:a0:a7:a0:c8:50:d8:92:85:
4a:d8:99:ab:4c:a3:d8:d9:b8:9b:60:7c:d8:b9:1a:3e:73:36:
04:f2:5b:8c:c6:e3:13:df:00:12:e6:95:82:6e:5a:9e:4d:32:
37:75:4c:0b:4a:f0:78:3c:39:8f:96:d5:38:86:bf:43:ce:f6:
13:26:96:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5XIyy2QTr7GZSnYEMKN7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYzg3MWI1ZGRmMDc0MGIzMTdkMWUzNGUzNmIyNjgxMGJi
OTgwMjYwHhcNMjUwNzI3MDgwMDA3WhcNMjUwNzI4MDgwMDA3WjAzMTEwLwYDVQQD
Eyg5MDk2MDhkZWMxNzNiNTc0YzdhMWMzZGVhNTdmMmFhZDIzM2MwZDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QYvYBzEQ5EUClHhlesuV8Xpg8fA
HGGZwX/Aj+a5+qdcZIaQNvXLa0lTKwFK0P/KGL9bhxvBNE/6eVgldsLBybDXsz3Q
H9FxGbGcQVvL6sa4ycl36kNLGhYf8ejXRbtetm01U4DqmrnTfMVuw9mtUNpqEpDK
Ek4DdYw1YDRNDSatyuZHgVBNk1D0D5X5YEIvljLlFFj4EBgnwcsgYfYIE4z2REsM
KSEJxZ1AHdBKXmwWsjYt/oP23vnevZDj1OGUzXo8CH+Fw4yR3OXvy+QbFr337yzA
x1KAERbNZ3gaWuCnaLxzzKaHwTbYpDTQybsgI2+0C4aNyUMpb6+HO6skZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCWCN7Bc7V0x6HD3qV/Kq0jPA2AMB8GA1UdIwQY
MBaAFE3IcbXd8HQLMX0eNONrJoELuYAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGNoeHRkM3dkQXN4ZlI0MDQyc21nUXU1Z0NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8zNTVlZmItMjZiMC00MTEyLWI0YjUt
OTNjMjk2NDBiYmZlLzEvVGNoeHRkM3dkQXN4ZlI0MDQyc21nUXU1Z0NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8zNTVlZmItMjZiMC00MTEyLWI0YjUtOTNjMjk2NDBiYmZl
LzEvVGNoeHRkM3dkQXN4ZlI0MDQyc21nUXU1Z0NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSge4Wfk
g2XnYiYBH9lCFw2/pXsfdZa8XEA1bAjMZkSK/4R0hIgNKXY7eeTcVpzZTOADh2KD
N1Zj4AKguzM32sJcIJuWomjc30pslUngRxuTgIPDTiy6gy7HkibwEAMDrjNI34xb
V/rFhW0p1DxyzxpJsh1hBwul89afQK2rPjKcWdC+i+54oOhxct/GNcdRrtwDL9Pb
iBsn6kw3pzJmvhJqZnX44imxu5PKQbn6S5tFR7zTPBIHl//4y8PubKCnoMhQ2JKF
StiZq0yj2Nm4m2B82LkaPnM2BPJbjMbjE98AEuaVgm5ank0yN3VMC0rweDw5j5bV
OIa/Q872EyaWtA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:42:22 2025 by rpki-client