Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
File: TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json)
Hash identifier: p8SEQU9slz30xdNsDJ9dDhlvLqdml5Wl7PWMgQAGsSQ=
Subject key identifier: 65:05:0E:39:8B:EF:E3:8C:DC:28:EF:87:E0:BF:32:7B:2F:04:85:19
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Certificate issuer: /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial: 0199172CADB3C4F3EAAA950AC8573EC67C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
Manifest number: 1672
Signing time: Fri 05 Sep 2025 00:00:27 +0000
Manifest this update: Fri 05 Sep 2025 00:00:27 +0000
Manifest next update: Sat 06 Sep 2025 00:00:27 +0000
Files and hashes: 1: BhaT-M-zQEVQbEPTvK_whwRLo3g.roa (hash: yoydrscKhHCdRvyWQAObyBBT0xMyfOzTOU389MtWZv4=)
2: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: DAOT8cQ1gWGTDa7oLTF/tsQ7Bh6KKHdBLqzoKqbB27A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2c:ad:b3:c4:f3:ea:aa:95:0a:c8:57:3e:c6:7c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Validity
Not Before: Sep 5 00:00:27 2025 GMT
Not After : Sep 6 00:00:27 2025 GMT
Subject: CN=65050e398befe38cdc28ef87e0bf327b2f048519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:10:35:11:0b:c5:3e:37:8d:38:6c:a2:84:f7:
14:33:37:96:0e:4e:62:42:b2:96:ab:fd:f9:d6:40:
bc:15:05:23:6d:18:03:32:a3:78:e7:87:28:f4:ca:
53:b8:b9:b7:b9:07:32:d9:e5:2e:c1:1e:3a:98:d0:
af:89:21:27:7b:75:ea:4d:3e:ba:73:17:c3:54:3c:
9a:85:e8:d7:72:1d:b3:27:16:bd:7c:49:41:5b:66:
a3:ba:77:3c:a9:4b:83:c5:68:cc:94:04:08:ff:19:
67:ce:66:74:0d:0d:dd:5a:49:d3:a3:48:74:ec:b2:
a6:c3:d0:e2:dc:72:87:85:53:64:41:19:17:e3:9f:
72:ba:43:11:69:d9:08:10:00:5f:83:b7:fa:6d:4b:
4c:6b:9b:62:7f:a0:b6:2a:49:d3:85:f3:cb:c0:be:
0e:d1:4d:03:7a:4b:e5:96:77:c4:27:b3:b3:42:ad:
b9:25:14:5d:a2:e4:ed:fe:50:64:f5:a6:03:da:47:
e3:e7:67:22:8b:cd:2f:5c:47:8d:f3:10:e6:aa:56:
27:c6:93:88:13:15:ac:7d:a4:37:c7:7f:40:ee:5d:
04:ea:16:15:41:d2:e8:32:ba:3b:2f:ce:07:7c:03:
12:ee:73:7b:c2:e7:68:45:4a:e0:3b:5f:ea:f2:01:
e1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:05:0E:39:8B:EF:E3:8C:DC:28:EF:87:E0:BF:32:7B:2F:04:85:19
X509v3 Authority Key Identifier:
keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b0:9c:fe:78:86:75:9b:c1:0b:a7:7f:09:b7:03:25:03:7b:
de:ce:6e:f1:57:9b:04:28:2f:6a:b6:5b:d8:6f:6f:d5:b8:8d:
5c:71:bb:84:af:c1:2f:60:ea:d6:29:92:c1:55:d6:e5:6e:97:
2a:7d:fa:22:e6:d4:c3:54:b1:37:2a:a0:5d:d4:9d:2b:22:22:
dd:70:af:04:d4:ec:5a:0d:e5:4f:64:32:7d:18:ae:ba:71:f6:
21:39:5d:b8:bf:66:07:48:21:5c:37:a1:f1:e0:41:15:0b:03:
3d:44:02:87:41:15:aa:1f:cd:3d:63:77:cb:60:23:09:62:41:
a1:10:d4:66:da:10:4e:d4:63:23:6d:fb:37:de:fb:61:57:a4:
ff:17:60:67:79:0b:f1:cc:46:23:dc:63:53:2e:81:37:91:2a:
3f:ee:69:27:34:d3:fd:7f:06:9d:21:75:d0:5d:21:d3:85:ad:
a5:6e:f8:56:14:3d:4a:c2:f6:13:ba:c7:6e:06:d9:c5:1a:34:
97:f5:13:56:b0:bd:e6:89:3f:6e:62:35:e9:39:c9:2b:b4:48:
8f:56:7d:01:17:e3:1b:9c:ee:4b:e3:1b:f9:bb:d1:cb:35:01:
c7:37:69:7e:22:1e:3b:44:c2:75:72:d4:ab:b5:c3:82:21:46:
fc:9b:4a:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkXLK2zxPPqqpUKyFc+xnwqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYTRkNjE5OWFlYzgyOGY2OTg5ZTJlODRjZWMxNzc2NWJh
YzVjZDUwHhcNMjUwOTA1MDAwMDI3WhcNMjUwOTA2MDAwMDI3WjAzMTEwLwYDVQQD
Eyg2NTA1MGUzOThiZWZlMzhjZGMyOGVmODdlMGJmMzI3YjJmMDQ4NTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hA1EQvFPjeNOGyihPcUMzeWDk5i
QrKWq/351kC8FQUjbRgDMqN454co9MpTuLm3uQcy2eUuwR46mNCviSEne3XqTT66
cxfDVDyahejXch2zJxa9fElBW2ajunc8qUuDxWjMlAQI/xlnzmZ0DQ3dWknTo0h0
7LKmw9Di3HKHhVNkQRkX459yukMRadkIEABfg7f6bUtMa5tif6C2KknThfPLwL4O
0U0DekvllnfEJ7OzQq25JRRdouTt/lBk9aYD2kfj52cii80vXEeN8xDmqlYnxpOI
ExWsfaQ3x39A7l0E6hYVQdLoMro7L84HfAMS7nN7wudoRUrgO1/q8gHhMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUFDjmL7+OM3Cjvh+C/MnsvBIUZMB8GA1UdIwQY
MBaAFE2k1hma7IKPaYni6EzsF3ZbrFzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yYzg0ODItNTMzMS00ZTU3LTk5NzQt
NDA4MzdkNDg0NzNkLzEvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yYzg0ODItNTMzMS00ZTU3LTk5NzQtNDA4MzdkNDg0NzNk
LzEvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7Cc/niG
dZvBC6d/CbcDJQN73s5u8VebBCgvarZb2G9v1biNXHG7hK/BL2Dq1imSwVXW5W6X
Kn36IubUw1SxNyqgXdSdKyIi3XCvBNTsWg3lT2QyfRiuunH2ITlduL9mB0ghXDeh
8eBBFQsDPUQCh0EVqh/NPWN3y2AjCWJBoRDUZtoQTtRjI237N977YVek/xdgZ3kL
8cxGI9xjUy6BN5EqP+5pJzTT/X8GnSF10F0h04WtpW74VhQ9SsL2E7rHbgbZxRo0
l/UTVrC95ok/bmI16TnJK7RIj1Z9ARfjG5zuS+Mb+bvRyzUBxzdpfiIeO0TCdXLU
q7XDgiFG/JtKJw==
-----END CERTIFICATE-----
Generated at Fri Sep 5 05:55:33 2025 by rpki-client