Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
File: TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft (raw, json)
Hash identifier: rQrJvCRXGyAOoaiaelnAXczlv/dCuR6kMA48T4SIqAY=
Subject key identifier: F9:0A:E8:4E:0D:A3:B3:14:77:68:04:F0:2B:B7:BE:B0:9F:CC:6F:63
Authority key identifier: 4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F
Certificate issuer: /CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
Certificate serial: 01993492CEE15580CCE9FD103747A5665504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
Manifest number: 1095
Signing time: Wed 10 Sep 2025 17:01:00 +0000
Manifest this update: Wed 10 Sep 2025 17:01:00 +0000
Manifest next update: Thu 11 Sep 2025 17:01:00 +0000
Files and hashes: 1: TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl (hash: 0UMI5BDAS5U+se+2sD1Q0/+sOXdq/uvM+QIoAJ7QibU=)
2: WDEZ3ZaDac1rHXOITo0Y0_gA1WA.roa (hash: 2eqZynI8QAeqviBK64M0ctiXcb1WfCdmlsqvsre2oAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:ce:e1:55:80:cc:e9:fd:10:37:47:a5:66:55:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
Validity
Not Before: Sep 10 17:01:00 2025 GMT
Not After : Sep 11 17:01:00 2025 GMT
Subject: CN=f90ae84e0da3b314776804f02bb7beb09fcc6f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:7a:cc:e5:8d:25:16:a3:56:43:44:ce:78:
e9:4b:ce:fb:04:33:f4:d4:e7:c5:3d:80:31:bb:d3:
4a:ba:ee:6e:f1:2b:9c:fb:b8:41:95:7f:a2:1a:2b:
f6:63:a2:e0:37:e5:04:c6:a4:20:1b:28:26:16:38:
5a:7c:5e:11:d5:6c:b9:ae:7b:b3:7b:6c:73:b1:01:
67:39:56:ae:f8:2b:17:54:0b:29:35:c8:38:15:5e:
3e:8d:8b:44:36:db:bb:b9:c8:24:42:56:23:ea:4b:
ee:59:93:91:6e:ee:28:4b:8a:9f:e9:7a:08:0d:ec:
f3:d0:8a:0a:f7:55:c2:39:4d:33:36:de:78:9c:4e:
25:7e:0f:a6:ec:4b:af:72:94:5a:6a:bc:a8:69:8b:
93:9c:26:c9:72:45:c9:86:47:ec:f8:ff:d5:d1:49:
25:80:81:89:d5:ad:e0:b6:74:50:38:e4:3f:9c:f3:
fb:71:d0:cf:00:eb:fa:18:61:8e:67:39:44:cf:e7:
99:d4:b0:71:be:22:7d:84:80:1d:77:49:48:25:f0:
66:12:dd:49:27:21:ea:4a:a4:a8:70:fb:c5:1f:14:
56:00:c2:ce:8e:55:1e:7f:0d:42:6f:2b:b6:d1:37:
2d:7d:d4:1c:25:e0:25:38:0e:74:35:ba:0d:c6:a1:
9e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0A:E8:4E:0D:A3:B3:14:77:68:04:F0:2B:B7:BE:B0:9F:CC:6F:63
X509v3 Authority Key Identifier:
keyid:4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:05:b4:a9:4a:8e:8a:e2:fc:3d:43:65:3e:94:81:23:1b:37:
e0:b8:6f:d5:dc:e7:82:7f:3f:e0:79:d7:8e:4d:2d:96:f7:a6:
1a:76:16:d0:a6:26:6f:fb:3c:ab:bb:be:b2:b5:97:47:c1:56:
58:aa:53:89:36:fe:07:44:c6:d6:57:b1:c4:9a:8c:2f:c7:da:
9c:7e:a6:e6:1d:d7:22:a4:b8:b3:5f:99:f9:48:9a:6b:69:78:
ae:e8:57:c6:8c:0e:b7:5f:21:e9:59:31:a7:82:f6:9b:44:62:
a6:24:3f:48:b0:9d:eb:10:38:e3:cd:6a:ce:c5:98:af:13:cc:
c6:6b:e7:60:c2:2a:f7:9c:f4:e5:f0:3f:7a:e2:dd:7e:88:35:
67:26:df:2f:d7:50:67:09:62:38:c9:e1:fb:60:61:46:77:65:
5f:34:20:b5:9f:14:5d:88:de:0c:e4:45:8a:9c:3c:a8:45:83:
f4:98:26:e0:25:ba:9d:7e:be:4c:2e:60:61:36:f0:f6:16:b3:
76:29:e5:d3:00:04:f7:60:3c:56:e3:ef:0d:ad:87:1a:1f:e4:
66:dc:37:c0:42:e1:f7:74:1b:83:a6:6c:a6:39:af:f2:f9:24:
2e:cb:ce:4d:f3:22:d6:a2:e4:a6:66:c3:be:25:fc:6e:04:c0:
2f:ab:a9:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk0ks7hVYDM6f0QN0elZlUEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkY2JlZjA2YWQwNWZkNmU2ZTdlN2IxMDg0Y2IxZDdkNjVl
NjQyNmYwHhcNMjUwOTEwMTcwMTAwWhcNMjUwOTExMTcwMTAwWjAzMTEwLwYDVQQD
EyhmOTBhZTg0ZTBkYTNiMzE0Nzc2ODA0ZjAyYmI3YmViMDlmY2M2ZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeF6zOWNJRajVkNEznjpS877BDP0
1OfFPYAxu9NKuu5u8Suc+7hBlX+iGiv2Y6LgN+UExqQgGygmFjhafF4R1Wy5rnuz
e2xzsQFnOVau+CsXVAspNcg4FV4+jYtENtu7ucgkQlYj6kvuWZORbu4oS4qf6XoI
Dezz0IoK91XCOU0zNt54nE4lfg+m7EuvcpRaaryoaYuTnCbJckXJhkfs+P/V0Ukl
gIGJ1a3gtnRQOOQ/nPP7cdDPAOv6GGGOZzlEz+eZ1LBxviJ9hIAdd0lIJfBmEt1J
JyHqSqSocPvFHxRWAMLOjlUefw1Cbyu20TctfdQcJeAlOA50NboNxqGeuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkK6E4No7MUd2gE8Cu3vrCfzG9jMB8GA1UdIwQY
MBaAFE3L7watBf1ubn57EITLHX1l5kJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGN2dkJxMEZfVzV1Zm5zUWhNc2RmV1htUW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yYTZlYWEtZTQzNy00M2JjLTk3MmUt
M2UzYmZhYTE5MGRmLzEvVGN2dkJxMEZfVzV1Zm5zUWhNc2RmV1htUW04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8yYTZlYWEtZTQzNy00M2JjLTk3MmUtM2UzYmZhYTE5MGRm
LzEvVGN2dkJxMEZfVzV1Zm5zUWhNc2RmV1htUW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAugW0qUqO
iuL8PUNlPpSBIxs34Lhv1dzngn8/4HnXjk0tlvemGnYW0KYmb/s8q7u+srWXR8FW
WKpTiTb+B0TG1lexxJqML8fanH6m5h3XIqS4s1+Z+Uiaa2l4ruhXxowOt18h6Vkx
p4L2m0RipiQ/SLCd6xA4481qzsWYrxPMxmvnYMIq95z05fA/euLdfog1ZybfL9dQ
ZwliOMnh+2BhRndlXzQgtZ8UXYjeDORFipw8qEWD9Jgm4CW6nX6+TC5gYTbw9haz
dinl0wAE92A8VuPvDa2HGh/kZtw3wELh93Qbg6Zspjmv8vkkLsvOTfMi1qLkpmbD
viX8bgTAL6uprw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 22:52:46 2025 by rpki-client