Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
File: TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft (raw, json)
Hash identifier: BICYRCURRCjsJDin2dXc/Ly3tFV/VoAN1I2N1vZ2+XY=
Subject key identifier: EB:26:B5:EA:9A:68:99:CD:01:60:86:CE:A7:18:16:BA:24:B5:25:94
Authority key identifier: 4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
Certificate issuer: /CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
Certificate serial: 019839169A476AE4EF72B2D19C927D2A10F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
Manifest number: 0B98
Signing time: Wed 23 Jul 2025 21:00:39 +0000
Manifest this update: Wed 23 Jul 2025 21:00:39 +0000
Manifest next update: Thu 24 Jul 2025 21:00:39 +0000
Files and hashes: 1: RdCbQ_v6C3AqgUPprLsURH8LT5w.roa (hash: kXBabjQsEi+6w0J2wLx2a1ynhFaoOMH+SG7D7xchscI=)
2: TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl (hash: AzhIZRq+9yy8JqPd5H07+nCXxZx9Dp06R9YitOWZezE=)
3: lJrwoyCHk-KhLsTndl2kfTJmzS0.roa (hash: QQVDCU2+xswVxXyXjpbkieNuyjdGUltA6OYqC3/o4lo=)
4: ukETrBXaXN-UD0p_P4lkBp13yEg.roa (hash: 1tDW+L2GN0E1ucMKdwQbOBeshAxIT1tSiJJRpkDWW6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:16:9a:47:6a:e4:ef:72:b2:d1:9c:92:7d:2a:10:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
Validity
Not Before: Jul 23 21:00:39 2025 GMT
Not After : Jul 24 21:00:39 2025 GMT
Subject: CN=eb26b5ea9a6899cd016086cea71816ba24b52594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9a:40:03:fb:d4:97:19:c8:2e:74:87:3a:4b:
0b:51:af:6e:1c:ab:c9:4a:14:f8:97:51:ff:28:49:
2b:ab:b0:b2:2c:c7:e2:51:81:52:70:ad:d0:75:77:
9b:99:64:01:e7:45:41:46:f8:e4:94:8c:be:2b:45:
cd:7b:d0:49:dc:63:ec:d4:25:1f:fd:93:7c:11:ee:
76:74:4e:d7:df:b4:c9:fa:9a:f6:04:ed:3f:71:ae:
f7:19:b3:a5:d2:98:96:72:b1:fe:be:6e:81:02:4d:
29:aa:11:02:b9:b8:37:13:26:86:f6:3b:11:63:4b:
73:d9:28:68:36:3b:05:d7:7f:7a:05:0f:d3:19:6b:
49:6e:23:1d:16:81:2b:3d:08:71:41:be:4a:68:73:
c3:07:b2:aa:db:0b:f8:08:a1:fa:64:d0:60:79:94:
89:21:8a:6c:ac:36:6e:d8:94:b9:86:a1:0e:ed:76:
4d:4c:76:9d:a8:b8:53:1e:6a:09:93:8d:3d:dd:8d:
04:cc:1e:2b:05:7e:1c:8f:b2:81:c5:5a:b4:20:02:
4b:73:40:db:0f:e0:09:8f:4b:f6:cc:65:1a:50:b6:
cf:9b:64:65:9f:bf:cf:dc:d7:37:f2:e0:da:68:62:
a7:36:97:c2:a6:1a:a0:7a:77:d6:82:62:18:54:e3:
75:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:26:B5:EA:9A:68:99:CD:01:60:86:CE:A7:18:16:BA:24:B5:25:94
X509v3 Authority Key Identifier:
keyid:4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9a:b1:d9:e3:46:d3:10:26:f4:ce:89:46:ce:a2:fd:d2:ec:
a8:1d:b3:0a:76:6c:7f:69:a6:4d:12:a8:7c:8d:62:a2:fe:bc:
de:4a:76:8a:86:f7:70:5d:af:72:e6:54:f9:3f:7d:3a:c5:90:
f4:e1:ed:c5:a2:59:66:aa:3d:37:49:0d:3b:97:de:78:c8:14:
9c:9f:9f:80:6d:e6:a7:90:fc:42:b2:78:93:51:52:fd:0b:24:
e9:ff:7d:64:7e:9f:32:49:21:e1:d8:3c:d4:7e:48:ea:61:b5:
66:d5:d4:48:6c:ca:f9:02:51:84:c0:9b:07:a1:28:3e:af:6a:
9a:ef:fd:2a:cf:20:f3:a1:5c:cc:29:26:f3:45:90:fa:d6:eb:
b5:d0:22:77:7a:8a:48:f8:f8:0c:fb:ed:2e:47:ef:b5:57:89:
82:0b:a9:08:3a:25:6d:6f:0b:4e:45:04:9d:0e:4f:dd:ef:95:
bd:2a:34:80:5f:2d:de:bb:84:41:56:aa:8f:e4:d3:c3:ac:c6:
65:42:f3:ce:f0:16:e8:6e:a5:27:54:0f:e4:69:5c:ab:9c:24:
c7:ec:2b:6f:3c:71:4f:1d:2f:e8:dd:fd:05:eb:13:b5:68:2b:
63:8c:ef:cc:85:91:e8:32:aa:e3:a7:f9:1d:e0:7a:07:2f:b9:
97:61:bc:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg5FppHauTvcrLRnJJ9KhDwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZjA5NzA0ODRlYjI2YmM1OWZkOGZhOGQ1YmY3YzNjNzIx
MmQwMTEwHhcNMjUwNzIzMjEwMDM5WhcNMjUwNzI0MjEwMDM5WjAzMTEwLwYDVQQD
EyhlYjI2YjVlYTlhNjg5OWNkMDE2MDg2Y2VhNzE4MTZiYTI0YjUyNTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnppAA/vUlxnILnSHOksLUa9uHKvJ
ShT4l1H/KEkrq7CyLMfiUYFScK3QdXebmWQB50VBRvjklIy+K0XNe9BJ3GPs1CUf
/ZN8Ee52dE7X37TJ+pr2BO0/ca73GbOl0piWcrH+vm6BAk0pqhECubg3EyaG9jsR
Y0tz2ShoNjsF1396BQ/TGWtJbiMdFoErPQhxQb5KaHPDB7Kq2wv4CKH6ZNBgeZSJ
IYpsrDZu2JS5hqEO7XZNTHadqLhTHmoJk4093Y0EzB4rBX4cj7KBxVq0IAJLc0Db
D+AJj0v2zGUaULbPm2Rln7/P3Nc38uDaaGKnNpfCphqgenfWgmIYVON1xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsmteqaaJnNAWCGzqcYFroktSWUMB8GA1UdIwQY
MBaAFE3wlwSE6ya8Wf2PqNW/fDxyEtARMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGZDWEJJVHJKcnhaX1ktbzFiOThQSElTMEJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84ZTExOTgtZTUwZi00MTZmLTlkNmIt
MWU5YmZmNWU0MDIxLzEvVGZDWEJJVHJKcnhaX1ktbzFiOThQSElTMEJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84ZTExOTgtZTUwZi00MTZmLTlkNmItMWU5YmZmNWU0MDIx
LzEvVGZDWEJJVHJKcnhaX1ktbzFiOThQSElTMEJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZqx2eNG
0xAm9M6JRs6i/dLsqB2zCnZsf2mmTRKofI1iov683kp2iob3cF2vcuZU+T99OsWQ
9OHtxaJZZqo9N0kNO5feeMgUnJ+fgG3mp5D8QrJ4k1FS/Qsk6f99ZH6fMkkh4dg8
1H5I6mG1ZtXUSGzK+QJRhMCbB6EoPq9qmu/9Ks8g86FczCkm80WQ+tbrtdAid3qK
SPj4DPvtLkfvtVeJggupCDolbW8LTkUEnQ5P3e+VvSo0gF8t3ruEQVaqj+TTw6zG
ZULzzvAW6G6lJ1QP5Glcq5wkx+wrbzxxTx0v6N39BesTtWgrY4zvzIWR6DKq46f5
HeB6By+5l2G8UA==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:48:37 2025 by rpki-client