Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft
File: TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft (raw, json)
Hash identifier: Se7UffasQqpoT27TbDM8vkkij2yySBnyNeDfuqa5VMA=
Subject key identifier: BF:04:82:7B:92:AE:F7:19:86:56:99:26:85:FD:66:B9:55:6E:98:ED
Authority key identifier: 4E:91:16:2B:B0:D9:B5:51:BF:5F:7B:1C:15:EE:31:5A:51:A6:77:F4
Certificate issuer: /CN=4e91162bb0d9b551bf5f7b1c15ee315a51a677f4
Certificate serial: 0199247ABF70E4FE9DA4AB19B38D8E4578E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TpEWK7DZtVG_X3scFe4xWlGmd_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft
Manifest number: 0BE5
Signing time: Sun 07 Sep 2025 14:00:48 +0000
Manifest this update: Sun 07 Sep 2025 14:00:48 +0000
Manifest next update: Mon 08 Sep 2025 14:00:48 +0000
Files and hashes: 1: TpEWK7DZtVG_X3scFe4xWlGmd_Q.crl (hash: rP88RAfIYUU9h2t5ZRy+gDV/9OOsiMHSrGkJpUE9vH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/TpEWK7DZtVG_X3scFe4xWlGmd_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:7a:bf:70:e4:fe:9d:a4:ab:19:b3:8d:8e:45:78:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e91162bb0d9b551bf5f7b1c15ee315a51a677f4
Validity
Not Before: Sep 7 14:00:48 2025 GMT
Not After : Sep 8 14:00:48 2025 GMT
Subject: CN=bf04827b92aef7198656992685fd66b9556e98ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bc:ad:b0:54:0a:2d:69:92:3d:45:39:f8:f6:
59:3e:d5:7d:48:36:3d:c5:f9:f3:6d:a8:7a:b0:d4:
7b:74:d7:3b:c6:c1:4a:1d:dd:52:40:1f:50:09:45:
5e:0c:8d:76:df:4d:94:28:5a:6a:77:35:cb:46:c9:
b4:d6:a1:83:7d:ad:8d:15:43:18:a9:ae:1f:6f:5e:
72:04:39:81:a3:56:54:aa:7b:02:82:4a:c6:7a:e4:
e7:7a:d0:73:03:85:0b:40:2e:4f:67:c8:ab:e5:59:
bc:2f:12:0e:56:f1:08:20:8e:78:ea:17:3d:1b:89:
c4:8a:18:30:c9:50:e3:17:62:eb:00:23:ad:99:df:
be:53:cf:b1:ea:b2:7b:5e:5f:05:6f:8c:0e:c1:bf:
df:33:82:6c:e8:92:40:11:27:fe:71:5b:1d:ab:1c:
7e:c8:15:7f:b2:27:3a:03:36:c2:30:cf:4b:c8:86:
90:c4:b8:39:02:58:6e:2b:b4:46:19:8f:db:a8:0b:
05:4c:22:e6:d5:b7:b3:a5:78:95:77:07:59:ec:d4:
a9:3e:67:d8:ce:fa:f1:e4:48:eb:a5:45:db:f0:fc:
9d:ef:6f:0f:ce:ff:66:9b:2b:5a:b4:61:b4:04:7e:
c3:21:1c:92:54:00:ae:0a:8b:c7:9e:92:a0:ec:a9:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:04:82:7B:92:AE:F7:19:86:56:99:26:85:FD:66:B9:55:6E:98:ED
X509v3 Authority Key Identifier:
keyid:4E:91:16:2B:B0:D9:B5:51:BF:5F:7B:1C:15:EE:31:5A:51:A6:77:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TpEWK7DZtVG_X3scFe4xWlGmd_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:ac:37:07:6c:17:ae:aa:e8:83:1d:b2:2f:78:01:ed:e7:fb:
52:42:94:cd:fa:03:bf:83:bd:95:fb:e5:6a:64:9c:13:fc:a5:
71:e0:48:aa:a5:a0:e9:57:a0:a4:db:f3:1a:70:e3:de:47:95:
b9:51:29:89:fa:1d:e2:10:ae:57:b9:3b:4d:b5:4e:d2:4f:b3:
98:ac:f3:ad:71:67:3e:e4:b4:2b:3a:8c:f6:79:6d:50:a0:28:
24:85:70:41:34:f3:fa:bf:a8:bf:49:57:a9:d7:ed:13:72:06:
03:5a:d5:64:5b:34:af:1f:ff:ba:a4:24:ec:7b:f8:b5:08:af:
e1:1c:a3:c1:58:7d:a0:4e:45:ea:ce:15:86:39:3b:c5:35:11:
97:dc:46:d2:0f:3f:44:0d:19:9a:16:e2:90:d0:e4:48:38:c1:
9a:02:ce:ad:ca:30:41:43:5a:59:bb:d8:dc:4e:62:d5:a1:89:
5c:c3:18:9b:ed:57:35:fe:73:29:6a:0d:7f:b9:d8:cf:2c:63:
94:93:6d:49:06:e7:cc:c8:ce:c1:cf:38:48:90:b8:68:a7:e0:
37:f4:ae:05:d6:c5:21:d5:dc:35:7f:76:05:02:3b:84:a7:37:
bc:2f:bb:dd:85:4e:16:ce:a0:92:e8:bb:51:0c:b4:1b:56:af:
23:43:16:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkker9w5P6dpKsZs42ORXjpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlOTExNjJiYjBkOWI1NTFiZjVmN2IxYzE1ZWUzMTVhNTFh
Njc3ZjQwHhcNMjUwOTA3MTQwMDQ4WhcNMjUwOTA4MTQwMDQ4WjAzMTEwLwYDVQQD
EyhiZjA0ODI3YjkyYWVmNzE5ODY1Njk5MjY4NWZkNjZiOTU1NmU5OGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbytsFQKLWmSPUU5+PZZPtV9SDY9
xfnzbah6sNR7dNc7xsFKHd1SQB9QCUVeDI12302UKFpqdzXLRsm01qGDfa2NFUMY
qa4fb15yBDmBo1ZUqnsCgkrGeuTnetBzA4ULQC5PZ8ir5Vm8LxIOVvEIII546hc9
G4nEihgwyVDjF2LrACOtmd++U8+x6rJ7Xl8Fb4wOwb/fM4Js6JJAESf+cVsdqxx+
yBV/sic6AzbCMM9LyIaQxLg5AlhuK7RGGY/bqAsFTCLm1bezpXiVdwdZ7NSpPmfY
zvrx5EjrpUXb8Pyd728Pzv9mmytatGG0BH7DIRySVACuCovHnpKg7Km7LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8EgnuSrvcZhlaZJoX9ZrlVbpjtMB8GA1UdIwQY
MBaAFE6RFiuw2bVRv197HBXuMVpRpnf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHBFV0s3RFp0VkdfWDNzY0ZlNHhXbEdtZF9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yMjljM2YtOTk3Mi00M2Q2LThlNDIt
NTcxM2YxNzQ5YzFkLzEvVHBFV0s3RFp0VkdfWDNzY0ZlNHhXbEdtZF9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8yMjljM2YtOTk3Mi00M2Q2LThlNDItNTcxM2YxNzQ5YzFk
LzEvVHBFV0s3RFp0VkdfWDNzY0ZlNHhXbEdtZF9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx6w3B2wX
rqrogx2yL3gB7ef7UkKUzfoDv4O9lfvlamScE/ylceBIqqWg6VegpNvzGnDj3keV
uVEpifod4hCuV7k7TbVO0k+zmKzzrXFnPuS0KzqM9nltUKAoJIVwQTTz+r+ov0lX
qdftE3IGA1rVZFs0rx//uqQk7Hv4tQiv4RyjwVh9oE5F6s4Vhjk7xTURl9xG0g8/
RA0ZmhbikNDkSDjBmgLOrcowQUNaWbvY3E5i1aGJXMMYm+1XNf5zKWoNf7nYzyxj
lJNtSQbnzMjOwc84SJC4aKfgN/SuBdbFIdXcNX92BQI7hKc3vC+73YVOFs6gkui7
UQy0G1avI0MWAg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:02 2025 by rpki-client