Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
File: tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft (raw, json)
Hash identifier: LTZUMpw0U2aOeda+uQGuZnZdgglT0NgAQisr9E/yc6k=
Subject key identifier: 6C:62:F4:59:58:90:18:12:A4:BE:C2:70:9E:9F:1D:75:CA:AD:8B:65
Authority key identifier: B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5
Certificate issuer: /CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
Certificate serial: 019923A0DF805931A67B3CC08AC4C5701D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
Manifest number: 07FF
Signing time: Sun 07 Sep 2025 10:02:49 +0000
Manifest this update: Sun 07 Sep 2025 10:02:49 +0000
Manifest next update: Mon 08 Sep 2025 10:02:49 +0000
Files and hashes: 1: tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl (hash: ZT7grAMr69ytMu4zDrovtCzavRr2i1aOvgLIA7gjh98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:df:80:59:31:a6:7b:3c:c0:8a:c4:c5:70:1d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
Validity
Not Before: Sep 7 10:02:49 2025 GMT
Not After : Sep 8 10:02:49 2025 GMT
Subject: CN=6c62f45958901812a4bec2709e9f1d75caad8b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:89:79:18:a9:9e:40:f6:5c:33:7f:51:24:
b0:6c:4a:f6:f0:27:d5:0d:29:30:b0:88:46:66:49:
95:82:04:17:60:aa:ca:54:d9:fd:62:d8:44:56:78:
0d:18:42:ee:97:6e:1c:f4:7b:ac:f7:11:cc:70:50:
e4:bf:28:6b:23:e0:a2:9c:c7:93:0d:4a:e5:70:e6:
a4:30:12:b6:69:26:01:f0:89:05:3e:0f:ad:b9:88:
0f:2e:79:a3:17:8a:cb:f1:4c:31:6d:8f:f4:8b:d9:
71:e2:c7:98:56:7b:16:ca:bd:63:8b:e7:15:32:36:
25:bb:87:cf:56:78:00:2a:ae:8e:f9:e7:a0:12:a3:
9a:16:b7:7f:e9:9f:0a:00:ee:32:f4:e4:b8:ad:f0:
37:84:64:ef:da:35:cf:ff:96:57:aa:67:17:71:27:
98:f3:36:8a:6e:61:85:83:31:60:f9:c0:6b:b8:77:
d0:68:73:1a:6f:a7:91:0c:8d:50:9b:d7:8f:80:90:
29:37:77:5e:33:23:ce:34:6b:ef:d8:c4:1a:1d:33:
23:a7:37:29:de:62:c8:4b:d1:99:b3:74:d3:f7:85:
05:27:c6:bb:03:ac:f3:d3:45:b1:a3:5a:36:6a:71:
99:a3:10:84:ac:5a:e7:f9:d7:e7:ec:b6:b1:1c:6c:
3a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:62:F4:59:58:90:18:12:A4:BE:C2:70:9E:9F:1D:75:CA:AD:8B:65
X509v3 Authority Key Identifier:
keyid:B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1f:b3:b1:56:92:86:40:0a:71:f6:f2:19:37:1f:d1:6a:0e:
41:7a:02:12:34:96:8c:83:39:68:b7:6c:c5:47:d4:49:96:7b:
b1:34:84:26:5e:b1:b0:1e:4f:27:43:6b:b4:6e:59:2c:da:39:
d3:08:7e:a0:c0:89:3f:ca:46:4a:69:01:07:e1:2f:5d:c1:3b:
55:d8:00:8b:1c:8a:b0:f4:ec:d4:68:dc:f3:8c:05:fe:e9:82:
cc:b2:06:61:29:7f:9d:5e:55:8a:bf:7a:7f:f8:74:71:da:fb:
3f:4b:93:17:fd:a0:b7:2c:d1:ad:9e:85:b8:5b:16:54:9b:8f:
26:e5:ca:6a:95:24:4a:cc:5d:26:99:49:84:f5:76:4e:ab:f4:
30:a4:23:e3:a2:7e:6e:ae:b2:ab:2c:5e:46:f3:c5:43:d4:d4:
39:23:e3:91:4b:cd:52:f0:52:b3:80:f3:a0:56:3c:09:19:df:
86:94:0a:39:5d:b0:c8:06:65:e0:dc:73:dd:7a:9a:25:10:31:
af:e9:bd:19:2c:c4:aa:40:70:dc:72:bd:9e:b8:f9:8e:45:a2:
fd:97:4d:84:2f:3f:a0:5e:cc:57:29:be:7c:be:45:2c:e6:6a:
1c:55:34:7b:36:7a:69:6f:fe:94:84:66:7e:2e:d1:46:66:e8:
7e:b5:a5:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoN+AWTGmezzAisTFcB0zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YThmMmNhMjNlMTAyZDRkMzU3MTEzNjJkMjRhYmQ0N2Iw
OWU5ZTUwHhcNMjUwOTA3MTAwMjQ5WhcNMjUwOTA4MTAwMjQ5WjAzMTEwLwYDVQQD
Eyg2YzYyZjQ1OTU4OTAxODEyYTRiZWMyNzA5ZTlmMWQ3NWNhYWQ4YjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoyJeRipnkD2XDN/USSwbEr28CfV
DSkwsIhGZkmVggQXYKrKVNn9YthEVngNGELul24c9Hus9xHMcFDkvyhrI+CinMeT
DUrlcOakMBK2aSYB8IkFPg+tuYgPLnmjF4rL8UwxbY/0i9lx4seYVnsWyr1ji+cV
MjYlu4fPVngAKq6O+eegEqOaFrd/6Z8KAO4y9OS4rfA3hGTv2jXP/5ZXqmcXcSeY
8zaKbmGFgzFg+cBruHfQaHMab6eRDI1Qm9ePgJApN3deMyPONGvv2MQaHTMjpzcp
3mLIS9GZs3TT94UFJ8a7A6zz00Wxo1o2anGZoxCErFrn+dfn7LaxHGw6AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxi9FlYkBgSpL7CcJ6fHXXKrYtlMB8GA1UdIwQY
MBaAFLWo8soj4QLU01cRNi0kq9R7CenlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGFqeXlpUGhBdFRUVnhFMkxTU3IxSHNKNmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mNmY3NTItYzA0Yi00ZWE4LTg1N2Qt
OGE4NzQ0ZTQ1NDE3LzEvdGFqeXlpUGhBdFRUVnhFMkxTU3IxSHNKNmVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mNmY3NTItYzA0Yi00ZWE4LTg1N2QtOGE4NzQ0ZTQ1NDE3
LzEvdGFqeXlpUGhBdFRUVnhFMkxTU3IxSHNKNmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkB+zsVaS
hkAKcfbyGTcf0WoOQXoCEjSWjIM5aLdsxUfUSZZ7sTSEJl6xsB5PJ0NrtG5ZLNo5
0wh+oMCJP8pGSmkBB+EvXcE7VdgAixyKsPTs1Gjc84wF/umCzLIGYSl/nV5Vir96
f/h0cdr7P0uTF/2gtyzRrZ6FuFsWVJuPJuXKapUkSsxdJplJhPV2Tqv0MKQj46J+
bq6yqyxeRvPFQ9TUOSPjkUvNUvBSs4DzoFY8CRnfhpQKOV2wyAZl4Nxz3XqaJRAx
r+m9GSzEqkBw3HK9nrj5jkWi/ZdNhC8/oF7MVym+fL5FLOZqHFU0ezZ6aW/+lIRm
fi7RRmbofrWlgg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:42 2025 by rpki-client