Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
File: TsVuJbACVuJM2jJN6yGqnRMBX2U.mft (raw, json)
Hash identifier: axQxxgfwtxPTJDBLDhasFZ0UXLM5i8pLWgzhf+urLc0=
Subject key identifier: A3:F0:F0:1A:04:4C:95:F6:86:9A:A1:58:15:FC:9E:F3:72:A6:6B:5B
Authority key identifier: 4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
Certificate issuer: /CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Certificate serial: 0199228D267C5ACE58B4096B0F4BEBE4868E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
Manifest number: 2C
Signing time: Sun 07 Sep 2025 05:01:39 +0000
Manifest this update: Sun 07 Sep 2025 05:01:39 +0000
Manifest next update: Mon 08 Sep 2025 05:01:39 +0000
Files and hashes: 1: Ium09zmGvJCt2AU9c-Fdjqpa5l8.roa (hash: wf3B9W4I0o93C3K/6FUMd+RJ7+UQTH/bjXgr4nrzINY=)
2: TsVuJbACVuJM2jJN6yGqnRMBX2U.crl (hash: LFwVVA1wSsU/Xc7E91FEN75aYxEUBKIo262qEB8OPxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:26:7c:5a:ce:58:b4:09:6b:0f:4b:eb:e4:86:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Validity
Not Before: Sep 7 05:01:39 2025 GMT
Not After : Sep 8 05:01:39 2025 GMT
Subject: CN=a3f0f01a044c95f6869aa15815fc9ef372a66b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:37:40:4c:ed:e0:77:7a:9a:eb:e0:f0:ac:49:
18:4f:8e:e0:b3:4c:a2:10:5d:63:61:2e:56:8d:17:
e0:0b:d3:c8:ce:25:af:fb:fc:0e:cc:a1:00:91:f2:
b4:56:e9:bc:2c:71:df:e7:be:7e:b8:01:58:f4:8d:
62:95:dd:82:94:fa:59:8e:2e:65:8d:d8:4f:ab:51:
0f:f7:b8:29:f9:d5:83:d8:18:27:7d:83:f8:cf:f9:
67:be:b0:69:30:1a:38:81:c5:95:63:54:10:ac:45:
c5:2f:b6:61:79:d9:06:5a:c0:78:d0:b8:7f:c5:5d:
f9:f1:9c:18:7a:65:67:c0:f3:08:cb:99:d2:cc:dd:
c2:31:c5:05:9c:31:ec:68:ef:6a:79:f0:b6:72:d2:
2c:58:21:bb:60:d3:8d:53:ed:57:dc:f4:2c:9d:19:
4e:49:c6:71:61:77:96:47:01:fe:1a:85:5a:3a:c2:
f7:10:e4:3a:99:31:b8:48:05:b9:37:30:a8:80:0c:
42:0e:5a:4c:e3:9f:d6:e6:67:e0:94:a8:12:b8:44:
98:11:6e:9c:ce:fb:3d:29:46:bb:8d:96:80:7d:9d:
26:9e:3d:96:34:a8:ad:83:1c:ca:96:e0:71:1a:21:
42:23:7c:ab:38:b1:e3:c9:a0:61:84:50:58:24:6e:
ce:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F0:F0:1A:04:4C:95:F6:86:9A:A1:58:15:FC:9E:F3:72:A6:6B:5B
X509v3 Authority Key Identifier:
keyid:4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:cd:b1:a2:2e:cf:dd:d4:26:43:37:39:5b:9c:41:f4:07:bf:
02:32:a5:ff:aa:44:ea:ef:b7:47:2c:72:17:8c:2f:7b:10:9e:
80:2f:06:0e:ff:70:68:93:45:88:c5:c2:1a:fd:05:df:e6:d9:
a4:68:6a:5c:9b:9a:fb:68:15:a6:a3:67:fc:7d:71:9c:31:87:
5b:ca:67:d6:4d:97:44:4e:05:7d:d0:b7:38:d7:5e:d5:16:47:
b2:6b:4d:f7:ad:d5:ba:c9:1e:f6:4a:79:90:35:02:27:db:e3:
69:dd:88:c5:7a:9a:d4:c5:90:83:ec:ee:e8:ed:fc:ce:d7:51:
f0:f1:93:9d:6e:4f:07:d6:35:fe:65:c3:43:53:02:e2:86:c8:
f8:8b:ef:a6:d8:f7:87:ae:cb:4a:99:56:47:ec:55:bb:32:84:
6a:ad:1a:a8:be:0b:23:aa:84:2f:84:42:0e:cb:c7:8f:81:29:
3d:58:f0:f0:72:ca:2c:64:c5:80:b1:b6:a3:af:1d:69:f5:8f:
43:71:fb:28:ee:c4:48:b5:72:2a:42:f7:06:9d:61:91:2b:29:
a2:4f:16:93:a6:7a:e9:7e:4d:9a:16:5b:43:a4:7b:63:a1:76:
5c:11:ee:6f:f0:4a:d6:17:be:1d:26:6d:8b:a8:12:ba:3c:9b:
9c:27:b7:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijSZ8Ws5YtAlrD0vr5IaOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYzU2ZTI1YjAwMjU2ZTI0Y2RhMzI0ZGViMjFhYTlkMTMw
MTVmNjUwHhcNMjUwOTA3MDUwMTM5WhcNMjUwOTA4MDUwMTM5WjAzMTEwLwYDVQQD
EyhhM2YwZjAxYTA0NGM5NWY2ODY5YWExNTgxNWZjOWVmMzcyYTY2YjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DdATO3gd3qa6+DwrEkYT47gs0yi
EF1jYS5WjRfgC9PIziWv+/wOzKEAkfK0Vum8LHHf575+uAFY9I1ild2ClPpZji5l
jdhPq1EP97gp+dWD2BgnfYP4z/lnvrBpMBo4gcWVY1QQrEXFL7ZhedkGWsB40Lh/
xV358ZwYemVnwPMIy5nSzN3CMcUFnDHsaO9qefC2ctIsWCG7YNONU+1X3PQsnRlO
ScZxYXeWRwH+GoVaOsL3EOQ6mTG4SAW5NzCogAxCDlpM45/W5mfglKgSuESYEW6c
zvs9KUa7jZaAfZ0mnj2WNKitgxzKluBxGiFCI3yrOLHjyaBhhFBYJG7OlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPw8BoETJX2hpqhWBX8nvNypmtbMB8GA1UdIwQY
MBaAFE7FbiWwAlbiTNoyTeshqp0TAV9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHNWdUpiQUNWdUpNMmpKTjZ5R3FuUk1CWDJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82NmU2YmEtMDE3Ny00MmYzLWFhOTAt
MDlhMmM5Y2E3MTU1LzEvVHNWdUpiQUNWdUpNMmpKTjZ5R3FuUk1CWDJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS82NmU2YmEtMDE3Ny00MmYzLWFhOTAtMDlhMmM5Y2E3MTU1
LzEvVHNWdUpiQUNWdUpNMmpKTjZ5R3FuUk1CWDJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0c2xoi7P
3dQmQzc5W5xB9Ae/AjKl/6pE6u+3RyxyF4wvexCegC8GDv9waJNFiMXCGv0F3+bZ
pGhqXJua+2gVpqNn/H1xnDGHW8pn1k2XRE4FfdC3ONde1RZHsmtN963Vuske9kp5
kDUCJ9vjad2IxXqa1MWQg+zu6O38ztdR8PGTnW5PB9Y1/mXDQ1MC4obI+Ivvptj3
h67LSplWR+xVuzKEaq0aqL4LI6qEL4RCDsvHj4EpPVjw8HLKLGTFgLG2o68dafWP
Q3H7KO7ESLVyKkL3Bp1hkSspok8Wk6Z66X5NmhZbQ6R7Y6F2XBHub/BK1he+HSZt
i6gSujybnCe3QA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:34 2025 by rpki-client