Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
File: Tni20AYU9VZdnYr4JHzHLqm4gz0.mft (raw, json)
Hash identifier: b58hrJ+Un3xkwZhU9G8mFpN5t7mNeozsTPl9wU6TmLQ=
Subject key identifier: 0C:29:34:3D:A6:46:01:25:83:12:4F:06:CD:0E:E2:FB:83:3F:F2:2A
Authority key identifier: 4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
Certificate issuer: /CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Certificate serial: 019921E79690D45F72FA9D50E9D38C699401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
Manifest number: 13DE
Signing time: Sun 07 Sep 2025 02:00:49 +0000
Manifest this update: Sun 07 Sep 2025 02:00:49 +0000
Manifest next update: Mon 08 Sep 2025 02:00:49 +0000
Files and hashes: 1: TejsNzlv7GKxiII-bvE87-We43E.roa (hash: mLnGXICbVXamBVxV9Y72sSIwMnc1cAfg9GvoIhGlM1Q=)
2: Tni20AYU9VZdnYr4JHzHLqm4gz0.crl (hash: Dor5AaXyKob8zJROol97gCb+ztuUKgmts5WOXZFmmJQ=)
3: fXu6dyybxQWnLI_jekEGclRV-kI.roa (hash: ybmfpunL7X6Tqn27iyMbozR499AYYSkkrm5Yi5bndZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:96:90:d4:5f:72:fa:9d:50:e9:d3:8c:69:94:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Validity
Not Before: Sep 7 02:00:49 2025 GMT
Not After : Sep 8 02:00:49 2025 GMT
Subject: CN=0c29343da646012583124f06cd0ee2fb833ff22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:be:c1:fa:f9:53:56:4e:2f:05:23:86:8f:
5a:fd:33:ef:c7:48:82:a1:8f:7d:1d:ad:0c:33:68:
69:b2:06:22:8f:c2:a3:f2:5f:fa:49:b1:2e:b8:8d:
62:29:b3:ac:a3:36:9e:9b:37:b8:37:8e:1d:e6:a2:
d7:30:71:02:7d:1b:ff:45:9d:aa:47:4c:bf:f5:fe:
a0:d0:89:4e:2e:46:2c:f0:91:8f:0f:6d:c6:8f:32:
48:5a:9d:fa:5e:2c:04:d9:59:12:10:7b:80:41:9c:
72:85:9b:99:76:aa:78:c6:d6:8c:fe:4a:50:72:5e:
45:f5:5a:4c:14:31:77:fe:50:f7:0c:42:05:e5:ae:
f7:e6:d0:d4:bc:cc:92:c1:df:5c:64:a0:5c:17:b9:
3f:03:62:43:bc:61:b8:d8:f9:cc:d9:f2:58:f2:75:
3b:54:e9:09:1d:31:52:f8:a6:f9:6f:81:d7:27:89:
82:fe:b4:25:e9:db:fb:00:d0:4f:b7:62:b3:53:08:
21:94:bb:3d:1b:e1:44:31:12:1f:0c:62:22:43:4a:
cf:fa:ce:23:85:ad:7d:01:5c:4b:6e:3b:41:68:0e:
a6:74:74:cb:a7:3b:fc:88:70:b8:48:2f:c1:13:d3:
f2:5c:a9:34:c4:29:67:6c:fc:b4:64:46:17:fc:2a:
80:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:29:34:3D:A6:46:01:25:83:12:4F:06:CD:0E:E2:FB:83:3F:F2:2A
X509v3 Authority Key Identifier:
keyid:4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:94:05:07:af:75:8a:8b:27:68:eb:12:eb:31:75:5c:dc:e0:
68:3a:0d:8b:da:33:4b:0e:d0:bf:0e:b8:26:9e:dc:80:bc:e6:
22:48:a8:ec:e5:bf:6d:06:46:a8:fc:b9:3b:34:dd:2b:4c:8e:
37:85:c8:e1:65:09:ef:62:31:a2:f3:3e:c9:9d:aa:73:b1:d4:
38:ae:09:40:98:d3:91:8d:13:e5:3d:81:35:71:bc:bd:ab:17:
0f:91:05:f0:b8:b8:4b:c5:ce:12:04:29:1f:29:1c:31:84:06:
9c:13:53:b9:e9:37:9e:06:29:7c:0e:87:29:43:76:29:26:55:
3f:cb:b3:81:b4:f4:97:39:6b:df:4f:55:42:38:e1:3c:dc:4b:
4d:13:57:bb:ca:ba:8c:90:47:39:9a:ef:ad:26:a2:2a:7c:d6:
32:f4:0d:ba:38:8e:e8:72:8d:1d:05:04:4a:66:b6:3f:a1:06:
55:35:57:78:91:ec:36:f7:7c:0a:d1:4b:1c:7a:3b:59:48:3e:
d1:4b:06:17:b6:17:f7:14:23:21:1a:2b:91:0b:8a:a7:f6:29:
0d:6d:48:07:e9:8b:bf:bc:4b:76:42:68:63:fa:cb:f3:f7:00:
9c:4b:f6:fe:ea:35:9a:de:91:f3:39:3e:45:2c:19:c9:a6:0e:
ec:8d:1d:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh55aQ1F9y+p1Q6dOMaZQBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNzhiNmQwMDYxNGY1NTY1ZDlkOGFmODI0N2NjNzJlYTli
ODgzM2QwHhcNMjUwOTA3MDIwMDQ5WhcNMjUwOTA4MDIwMDQ5WjAzMTEwLwYDVQQD
EygwYzI5MzQzZGE2NDYwMTI1ODMxMjRmMDZjZDBlZTJmYjgzM2ZmMjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGS+wfr5U1ZOLwUjho9a/TPvx0iC
oY99Ha0MM2hpsgYij8Kj8l/6SbEuuI1iKbOsozaemze4N44d5qLXMHECfRv/RZ2q
R0y/9f6g0IlOLkYs8JGPD23GjzJIWp36XiwE2VkSEHuAQZxyhZuZdqp4xtaM/kpQ
cl5F9VpMFDF3/lD3DEIF5a735tDUvMySwd9cZKBcF7k/A2JDvGG42PnM2fJY8nU7
VOkJHTFS+Kb5b4HXJ4mC/rQl6dv7ANBPt2KzUwghlLs9G+FEMRIfDGIiQ0rP+s4j
ha19AVxLbjtBaA6mdHTLpzv8iHC4SC/BE9PyXKk0xClnbPy0ZEYX/CqABwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwpND2mRgElgxJPBs0O4vuDP/IqMB8GA1UdIwQY
MBaAFE54ttAGFPVWXZ2K+CR8xy6puIM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG5pMjBBWVU5VlpkbllyNEpIekhMcW00Z3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9jYjgyNjUtYzYzMi00ODEzLWI4NTgt
ZGVmMzg2NzQzZjMyLzEvVG5pMjBBWVU5VlpkbllyNEpIekhMcW00Z3owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9jYjgyNjUtYzYzMi00ODEzLWI4NTgtZGVmMzg2NzQzZjMy
LzEvVG5pMjBBWVU5VlpkbllyNEpIekhMcW00Z3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJQFB691
iosnaOsS6zF1XNzgaDoNi9ozSw7Qvw64Jp7cgLzmIkio7OW/bQZGqPy5OzTdK0yO
N4XI4WUJ72IxovM+yZ2qc7HUOK4JQJjTkY0T5T2BNXG8vasXD5EF8Li4S8XOEgQp
HykcMYQGnBNTuek3ngYpfA6HKUN2KSZVP8uzgbT0lzlr309VQjjhPNxLTRNXu8q6
jJBHOZrvrSaiKnzWMvQNujiO6HKNHQUESma2P6EGVTVXeJHsNvd8CtFLHHo7WUg+
0UsGF7YX9xQjIRorkQuKp/YpDW1IB+mLv7xLdkJoY/rL8/cAnEv2/uo1mt6R8zk+
RSwZyaYO7I0dcQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:44 2025 by rpki-client