Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
File: TmROKYPFxQTYAPLQWCsYLrq_JIc.mft (raw, json)
Hash identifier: RQo27Px8DiekwsdkJZQUvwOZog6WvJuvUuv72fayAa0=
Subject key identifier: 1B:A2:D0:66:0D:A7:02:6F:E4:6D:F8:56:3C:93:05:A5:C0:42:E1:20
Authority key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
Certificate issuer: /CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Certificate serial: 0198477684220D74B8BB9DF53DBCBC85EFB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
Manifest number: 08C2
Signing time: Sat 26 Jul 2025 16:00:06 +0000
Manifest this update: Sat 26 Jul 2025 16:00:06 +0000
Manifest next update: Sun 27 Jul 2025 16:00:06 +0000
Files and hashes: 1: TmROKYPFxQTYAPLQWCsYLrq_JIc.crl (hash: J6OJX2Nclv6fFywUKBAnR+8Njq/pbseiPsRqeC4d/1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:84:22:0d:74:b8:bb:9d:f5:3d:bc:bc:85:ef:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Validity
Not Before: Jul 26 16:00:06 2025 GMT
Not After : Jul 27 16:00:06 2025 GMT
Subject: CN=1ba2d0660da7026fe46df8563c9305a5c042e120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e8:c8:0e:ac:8a:51:a7:19:2a:67:38:08:f0:
46:17:62:98:52:42:2a:66:12:a5:f6:e8:67:3b:d6:
6e:50:72:8b:c2:f3:5e:93:7c:ae:b0:7a:41:26:20:
63:d7:ad:a7:02:bc:2a:26:32:d4:c5:1a:76:5c:60:
b2:21:74:2d:67:d5:da:db:89:f9:a6:4a:71:dd:0b:
49:f4:b3:c0:b4:27:e3:dd:3f:08:d6:86:de:95:25:
84:ab:16:66:c1:35:d3:23:75:0f:f8:d5:c4:52:01:
c2:4f:6e:39:b3:b4:55:5e:59:65:3e:2d:46:73:4f:
6d:c2:e3:bf:ff:51:00:0b:1a:44:81:42:6e:b6:c7:
d6:10:18:3c:5d:bf:8b:c1:7c:df:07:e1:51:e2:eb:
cf:cd:48:85:79:ef:69:f8:f2:50:c9:50:56:a3:0e:
6c:d6:84:34:77:53:00:d6:62:46:22:61:b2:d2:dc:
35:ab:9c:ca:28:50:74:99:81:38:42:6c:18:be:02:
85:88:80:f1:0f:bf:e9:b8:2f:21:c4:25:38:bc:db:
b0:e1:2f:53:68:a7:f2:38:f1:32:21:d4:9b:6c:40:
60:f2:ce:51:58:da:64:7e:5e:d0:a6:db:a1:fd:4e:
f7:c4:6a:85:40:c1:28:89:ad:69:0e:0c:96:39:bd:
d3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A2:D0:66:0D:A7:02:6F:E4:6D:F8:56:3C:93:05:A5:C0:42:E1:20
X509v3 Authority Key Identifier:
keyid:4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:53:5f:44:05:52:72:b3:78:bb:b3:75:1c:ec:16:3f:12:fa:
34:70:c3:82:39:fe:0b:ba:ce:19:42:8d:27:a8:7b:bf:05:32:
92:5d:fc:c6:5a:ad:71:7b:45:0d:2f:2d:67:18:5c:b4:35:78:
5e:f9:71:b1:0e:65:1e:3a:77:00:06:e8:a1:f5:f1:ae:af:1d:
d9:a2:01:2f:63:26:6c:30:02:cd:02:33:e7:4f:b3:1b:93:1c:
82:81:ed:f5:6b:60:4a:38:2f:8a:94:02:a6:12:1b:d6:9f:6e:
1c:e7:a3:97:be:35:38:35:a1:17:c0:6b:37:b9:71:8f:60:26:
6d:13:05:7b:4b:aa:ed:fd:d5:a5:a7:78:dd:d8:f9:30:48:21:
d8:8e:72:d9:82:27:7a:de:77:b9:f1:d6:46:5a:84:69:73:ff:
46:bb:db:47:5c:5f:06:14:58:29:5b:d5:f5:c8:19:8d:27:1f:
a4:13:93:fa:ff:c8:b6:e6:6e:9b:fb:57:4b:40:09:d6:5f:53:
ac:a1:02:f8:f0:db:7f:57:9a:56:11:d2:27:7a:f1:64:d9:2d:
f2:39:97:76:13:59:ce:4b:74:46:99:fe:15:88:30:7d:95:b4:
21:9b:83:20:20:27:04:61:9b:fc:a1:6d:d5:a5:4f:db:7b:46:
6e:6d:9d:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdoQiDXS4u531Pby8he+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNjQ0ZTI5ODNjNWM1MDRkODAwZjJkMDU4MmIxODJlYmFi
ZjI0ODcwHhcNMjUwNzI2MTYwMDA2WhcNMjUwNzI3MTYwMDA2WjAzMTEwLwYDVQQD
EygxYmEyZDA2NjBkYTcwMjZmZTQ2ZGY4NTYzYzkzMDVhNWMwNDJlMTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOjIDqyKUacZKmc4CPBGF2KYUkIq
ZhKl9uhnO9ZuUHKLwvNek3yusHpBJiBj162nArwqJjLUxRp2XGCyIXQtZ9Xa24n5
pkpx3QtJ9LPAtCfj3T8I1obelSWEqxZmwTXTI3UP+NXEUgHCT245s7RVXlllPi1G
c09twuO//1EACxpEgUJutsfWEBg8Xb+LwXzfB+FR4uvPzUiFee9p+PJQyVBWow5s
1oQ0d1MA1mJGImGy0tw1q5zKKFB0mYE4QmwYvgKFiIDxD7/puC8hxCU4vNuw4S9T
aKfyOPEyIdSbbEBg8s5RWNpkfl7Qptuh/U73xGqFQMEoia1pDgyWOb3T6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBui0GYNpwJv5G34VjyTBaXAQuEgMB8GA1UdIwQY
MBaAFE5kTimDxcUE2ADy0FgrGC66vySHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG1ST0tZUEZ4UVRZQVBMUVdDc1lMcnFfSkljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jMGU2YTItOGIyMC00NDgwLWE4YWIt
YjM4OGM1NzcwZTA0LzEvVG1ST0tZUEZ4UVRZQVBMUVdDc1lMcnFfSkljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9jMGU2YTItOGIyMC00NDgwLWE4YWItYjM4OGM1NzcwZTA0
LzEvVG1ST0tZUEZ4UVRZQVBMUVdDc1lMcnFfSkljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwVNfRAVS
crN4u7N1HOwWPxL6NHDDgjn+C7rOGUKNJ6h7vwUykl38xlqtcXtFDS8tZxhctDV4
XvlxsQ5lHjp3AAboofXxrq8d2aIBL2MmbDACzQIz50+zG5McgoHt9WtgSjgvipQC
phIb1p9uHOejl741ODWhF8BrN7lxj2AmbRMFe0uq7f3Vpad43dj5MEgh2I5y2YIn
et53ufHWRlqEaXP/RrvbR1xfBhRYKVvV9cgZjScfpBOT+v/ItuZum/tXS0AJ1l9T
rKEC+PDbf1eaVhHSJ3rxZNkt8jmXdhNZzkt0Rpn+FYgwfZW0IZuDICAnBGGb/KFt
1aVP23tGbm2dVw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:46:18 2025 by rpki-client