Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
File: TJMCnFsmOc0pufndUpTMlO9S1q8.mft (raw, json)
Hash identifier: raEU1RWyd3LtpxoPlvu3hiDNr0iBIANfhDp5tesvhGQ=
Subject key identifier: 22:D5:80:24:BD:EE:D4:12:7C:7C:E4:86:94:D3:CC:2B:71:CC:74:00
Authority key identifier: 4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
Certificate issuer: /CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Certificate serial: 0199228C2479787C4706881A33DFA5646CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
Manifest number: 0CA2
Signing time: Sun 07 Sep 2025 05:00:33 +0000
Manifest this update: Sun 07 Sep 2025 05:00:33 +0000
Manifest next update: Mon 08 Sep 2025 05:00:33 +0000
Files and hashes: 1: TJMCnFsmOc0pufndUpTMlO9S1q8.crl (hash: EcJ2nxDRsOUdR/9MJfCM/QcNzn8P9U6LrBshPmO75Hg=)
2: gm0FjeCIRrnMhU3d57SvCilXQ6Y.roa (hash: uUS5qc0jED6lwxU3POQRNrHoJ8s1cSrD4ysUmIZNtjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:24:79:78:7c:47:06:88:1a:33:df:a5:64:6c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Validity
Not Before: Sep 7 05:00:33 2025 GMT
Not After : Sep 8 05:00:33 2025 GMT
Subject: CN=22d58024bdeed4127c7ce48694d3cc2b71cc7400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:31:e7:b6:72:6c:b3:b8:05:0a:d1:a3:73:
19:a9:d2:72:fd:f8:be:3a:13:e5:b7:6a:50:1c:76:
e9:15:73:2c:77:4d:37:74:ca:ea:0c:13:53:80:e6:
aa:39:ee:bf:48:3b:1c:fa:0a:b8:00:f9:8c:31:ed:
96:26:e2:9c:25:9b:f5:91:c7:2d:a1:23:c5:5b:4d:
38:f0:5a:11:fe:d5:4f:2e:fc:13:bc:45:1f:f6:a3:
4b:bf:f5:09:c6:c6:aa:71:71:f2:79:ec:93:20:a2:
c3:10:5c:ff:31:8c:bd:3e:03:12:0e:92:78:e1:70:
25:a5:4b:1a:f4:a7:97:31:39:62:fa:bf:ec:89:66:
1b:c2:c9:a2:89:ed:5d:12:f2:7d:1c:9e:8e:c1:aa:
ce:09:f1:cc:ff:f6:67:2f:90:f3:66:60:d4:06:f3:
8d:88:2b:42:30:6f:5f:3e:47:d8:b2:c5:a8:31:02:
42:2a:e2:6b:87:99:75:6c:b7:17:00:9c:52:1b:a1:
34:77:4b:1d:eb:38:92:5a:11:32:09:1d:31:a0:69:
74:0d:74:a6:3a:5a:2c:05:fa:44:c8:b3:bb:7c:78:
52:c2:85:82:11:93:87:15:bb:62:16:ff:ad:24:92:
c5:3a:de:e3:86:06:58:4b:02:7e:02:2e:26:58:ac:
f5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D5:80:24:BD:EE:D4:12:7C:7C:E4:86:94:D3:CC:2B:71:CC:74:00
X509v3 Authority Key Identifier:
keyid:4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:81:73:e7:91:fd:3e:dd:c6:81:cb:ab:89:fb:e0:3f:47:95:
57:14:31:97:ad:7a:4f:4c:e3:82:58:3c:07:4d:42:29:71:a8:
ab:8f:1c:b9:3c:3d:e6:17:6c:64:4d:13:f6:54:d0:8f:0d:0a:
df:7b:ba:37:1d:16:5e:a0:88:95:1e:31:78:4f:97:aa:d3:a2:
1d:f9:f4:0d:b9:89:91:6a:03:c7:a7:50:86:11:39:50:50:e6:
4b:a6:2c:0c:b1:26:1c:7e:c5:40:3b:f1:89:d5:7a:e9:d2:1a:
98:eb:dc:55:b5:2d:1b:c3:40:ef:a8:f8:5d:4d:8d:12:66:23:
56:af:c4:d3:b7:b2:6c:62:2b:73:4d:17:6e:47:84:dd:1c:7c:
07:75:3b:9d:a1:64:bd:f8:be:2e:4d:37:59:78:50:72:5f:a7:
cc:f6:16:0b:7f:48:ed:de:77:bd:0b:c7:aa:e9:fa:10:fc:27:
8b:c1:a1:e6:26:17:a6:7f:f1:bc:e8:19:3f:81:c8:1b:c3:9e:
ec:48:d2:68:c1:f1:12:68:d5:ac:47:e3:3a:54:02:fc:bf:38:
13:6c:a5:89:3e:eb:bb:02:45:43:69:ab:5a:d0:06:e2:5c:91:
63:84:04:1f:e8:cf:96:53:65:40:d8:a2:c9:09:bd:59:49:9e:
7f:06:ff:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijCR5eHxHBogaM9+lZGzWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOTMwMjljNWIyNjM5Y2QyOWI5ZjlkZDUyOTRjYzk0ZWY1
MmQ2YWYwHhcNMjUwOTA3MDUwMDMzWhcNMjUwOTA4MDUwMDMzWjAzMTEwLwYDVQQD
EygyMmQ1ODAyNGJkZWVkNDEyN2M3Y2U0ODY5NGQzY2MyYjcxY2M3NDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJgx57ZybLO4BQrRo3MZqdJy/fi+
OhPlt2pQHHbpFXMsd003dMrqDBNTgOaqOe6/SDsc+gq4APmMMe2WJuKcJZv1kcct
oSPFW0048FoR/tVPLvwTvEUf9qNLv/UJxsaqcXHyeeyTIKLDEFz/MYy9PgMSDpJ4
4XAlpUsa9KeXMTli+r/siWYbwsmiie1dEvJ9HJ6OwarOCfHM//ZnL5DzZmDUBvON
iCtCMG9fPkfYssWoMQJCKuJrh5l1bLcXAJxSG6E0d0sd6ziSWhEyCR0xoGl0DXSm
OlosBfpEyLO7fHhSwoWCEZOHFbtiFv+tJJLFOt7jhgZYSwJ+Ai4mWKz13wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLVgCS97tQSfHzkhpTTzCtxzHQAMB8GA1UdIwQY
MBaAFEyTApxbJjnNKbn53VKUzJTvUtavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEpNQ25Gc21PYzBwdWZuZFVwVE1sTzlTMXE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83YmQ3MjktOThlNS00M2ZmLWFmZTYt
MTg3YjFmNzdjMWE1LzEvVEpNQ25Gc21PYzBwdWZuZFVwVE1sTzlTMXE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC83YmQ3MjktOThlNS00M2ZmLWFmZTYtMTg3YjFmNzdjMWE1
LzEvVEpNQ25Gc21PYzBwdWZuZFVwVE1sTzlTMXE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYoFz55H9
Pt3GgcurifvgP0eVVxQxl616T0zjglg8B01CKXGoq48cuTw95hdsZE0T9lTQjw0K
33u6Nx0WXqCIlR4xeE+XqtOiHfn0DbmJkWoDx6dQhhE5UFDmS6YsDLEmHH7FQDvx
idV66dIamOvcVbUtG8NA76j4XU2NEmYjVq/E07eybGIrc00XbkeE3Rx8B3U7naFk
vfi+Lk03WXhQcl+nzPYWC39I7d53vQvHqun6EPwni8Gh5iYXpn/xvOgZP4HIG8Oe
7EjSaMHxEmjVrEfjOlQC/L84E2yliT7ruwJFQ2mrWtAG4lyRY4QEH+jPllNlQNii
yQm9WUmefwb/xw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:30 2025 by rpki-client