Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
File: Tddxzuh-yov3sS4KYwbxgdKlWm0.mft (raw, json)
Hash identifier: I5+5IDaD89UW+f/xxFCWLcf3Yqxz/UrzWu3oim9DQws=
Subject key identifier: B3:F6:84:67:86:7D:19:6F:60:36:6D:FE:E1:53:8B:5F:1C:24:A1:8F
Authority key identifier: 4D:D7:71:CE:E8:7E:CA:8B:F7:B1:2E:0A:63:06:F1:81:D2:A5:5A:6D
Certificate issuer: /CN=4dd771cee87eca8bf7b12e0a6306f181d2a55a6d
Certificate serial: 019922C3572428B1FC4F644D0551D4ADA3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
Manifest number: 0238
Signing time: Sun 07 Sep 2025 06:00:51 +0000
Manifest this update: Sun 07 Sep 2025 06:00:51 +0000
Manifest next update: Mon 08 Sep 2025 06:00:51 +0000
Files and hashes: 1: Tddxzuh-yov3sS4KYwbxgdKlWm0.crl (hash: TGJ9K/0y61uO6QfRduB0VuhuH1IxJ0A4dJK3Zn3LR5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:57:24:28:b1:fc:4f:64:4d:05:51:d4:ad:a3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd771cee87eca8bf7b12e0a6306f181d2a55a6d
Validity
Not Before: Sep 7 06:00:51 2025 GMT
Not After : Sep 8 06:00:51 2025 GMT
Subject: CN=b3f68467867d196f60366dfee1538b5f1c24a18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:91:0a:b9:18:89:9d:da:14:5e:be:e2:62:11:
4e:dc:5c:f9:9d:c3:4e:3f:63:29:2e:0f:28:4b:e4:
26:16:77:13:60:a1:67:a0:db:bc:68:38:28:98:6b:
8b:67:2c:da:2a:de:19:4a:d7:cc:35:2b:0d:0d:34:
ef:bf:29:6c:bc:1f:cc:6b:6d:1f:9a:b0:73:c2:74:
ae:51:25:4b:d1:26:64:a6:5f:5d:43:13:e3:fd:33:
d3:e1:1f:e4:bd:1f:06:25:51:08:08:11:2d:aa:a6:
fc:0d:2d:18:18:a6:bd:25:c3:70:a8:db:12:b0:99:
0b:ef:c8:2a:22:25:2a:9d:8a:ed:08:20:49:95:69:
fa:f1:f7:31:00:36:3b:64:74:b1:4d:dc:73:89:00:
e0:84:9b:d7:cb:42:42:36:8e:a8:7d:1b:93:65:03:
bf:5e:bb:0e:e4:39:3e:16:59:b5:6a:82:61:16:ef:
a1:85:e5:68:8a:78:7d:12:b8:43:ff:77:05:c6:02:
aa:41:05:30:6e:4d:2a:e2:6c:a5:e7:ce:5b:b4:6c:
76:43:a2:84:f5:8d:5a:ab:27:9b:45:65:4d:59:28:
60:ad:4d:e3:0d:14:e2:75:93:f3:1a:33:5d:b9:b5:
86:7f:24:5e:ea:46:9e:83:aa:a8:64:68:1f:d6:f0:
d3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F6:84:67:86:7D:19:6F:60:36:6D:FE:E1:53:8B:5F:1C:24:A1:8F
X509v3 Authority Key Identifier:
keyid:4D:D7:71:CE:E8:7E:CA:8B:F7:B1:2E:0A:63:06:F1:81:D2:A5:5A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:34:38:eb:35:ba:30:4c:dc:bf:9a:41:2d:2d:f8:d9:61:fe:
d3:3d:a7:21:13:19:f0:08:95:99:ef:0c:ce:44:1d:ee:d1:b1:
09:12:a1:6e:b7:aa:02:b1:5f:83:a8:ee:ad:59:f1:f5:6a:57:
3b:e2:22:af:01:66:d4:02:94:7b:57:c3:99:45:f2:53:ba:03:
c5:80:62:16:24:06:93:6d:34:f0:82:01:c0:cc:0e:4b:74:fe:
5a:c5:f0:19:1c:4c:f8:41:35:7f:ba:94:9a:5d:af:b0:7b:d5:
fe:c3:6a:9f:0b:a6:1e:c6:ce:1b:34:49:29:e8:2d:9a:b4:39:
8e:29:ed:8f:6a:35:d3:ba:43:1e:e3:1d:06:e8:09:a8:02:c3:
73:21:9f:96:c2:cd:58:f3:d0:23:ae:e1:4a:86:88:f0:cc:8f:
8e:51:a0:a0:2e:71:9c:e4:aa:8a:5b:22:52:a4:91:12:73:5e:
83:6a:82:29:f9:34:99:aa:c2:1a:e3:67:ac:e7:cc:10:bc:49:
1a:4d:91:5a:d0:e1:5d:3b:77:48:b4:25:8f:5a:46:b8:1b:c7:
7b:26:a4:6b:0f:03:c1:9d:71:38:78:00:78:48:51:eb:fd:52:
47:22:20:95:7c:e1:9d:bd:d0:c4:02:33:6f:b6:b2:65:a7:55:
e5:92:a4:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw1ckKLH8T2RNBVHUraP/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDc3MWNlZTg3ZWNhOGJmN2IxMmUwYTYzMDZmMTgxZDJh
NTVhNmQwHhcNMjUwOTA3MDYwMDUxWhcNMjUwOTA4MDYwMDUxWjAzMTEwLwYDVQQD
EyhiM2Y2ODQ2Nzg2N2QxOTZmNjAzNjZkZmVlMTUzOGI1ZjFjMjRhMThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJEKuRiJndoUXr7iYhFO3Fz5ncNO
P2MpLg8oS+QmFncTYKFnoNu8aDgomGuLZyzaKt4ZStfMNSsNDTTvvylsvB/Ma20f
mrBzwnSuUSVL0SZkpl9dQxPj/TPT4R/kvR8GJVEICBEtqqb8DS0YGKa9JcNwqNsS
sJkL78gqIiUqnYrtCCBJlWn68fcxADY7ZHSxTdxziQDghJvXy0JCNo6ofRuTZQO/
XrsO5Dk+Flm1aoJhFu+hheVoinh9ErhD/3cFxgKqQQUwbk0q4myl585btGx2Q6KE
9Y1aqyebRWVNWShgrU3jDRTidZPzGjNdubWGfyRe6kaeg6qoZGgf1vDT9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLP2hGeGfRlvYDZt/uFTi18cJKGPMB8GA1UdIwQY
MBaAFE3Xcc7ofsqL97EuCmMG8YHSpVptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRkeHp1aC15b3Yzc1M0S1l3YnhnZEtsV20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mMjFiZjAtYmE0OS00M2JhLTg5OGMt
NTM5ZjljYmEwMGM1LzEvVGRkeHp1aC15b3Yzc1M0S1l3YnhnZEtsV20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mMjFiZjAtYmE0OS00M2JhLTg5OGMtNTM5ZjljYmEwMGM1
LzEvVGRkeHp1aC15b3Yzc1M0S1l3YnhnZEtsV20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzQ46zW6
MEzcv5pBLS342WH+0z2nIRMZ8AiVme8MzkQd7tGxCRKhbreqArFfg6jurVnx9WpX
O+IirwFm1AKUe1fDmUXyU7oDxYBiFiQGk2008IIBwMwOS3T+WsXwGRxM+EE1f7qU
ml2vsHvV/sNqnwumHsbOGzRJKegtmrQ5jintj2o107pDHuMdBugJqALDcyGflsLN
WPPQI67hSoaI8MyPjlGgoC5xnOSqilsiUqSREnNeg2qCKfk0marCGuNnrOfMELxJ
Gk2RWtDhXTt3SLQlj1pGuBvHeyakaw8DwZ1xOHgAeEhR6/1SRyIglXzhnb3QxAIz
b7ayZadV5ZKkjA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:40 2025 by rpki-client