Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
File: tcsrXq88wV3Us7I62LlHKlJAwDs.mft (raw, json)
Hash identifier: l0e1JEJlEv0cMsvkQ0uEOgsTor/3+q5ORoqQQYOJhdw=
Subject key identifier: 23:42:A2:09:D3:7C:88:CE:6D:CB:BE:5C:3C:2D:35:3E:3F:95:81:B4
Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Certificate serial: 019922FAE9F18CF3520749E855FD1253704A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
Manifest number: 54
Signing time: Sun 07 Sep 2025 07:01:33 +0000
Manifest this update: Sun 07 Sep 2025 07:01:33 +0000
Manifest next update: Mon 08 Sep 2025 07:01:33 +0000
Files and hashes: 1: 4I0Ig-sZsSlS-ISQfhvyI-hIXNs.roa (hash: JlPqPVzZ1fRapenzkzSS/av8yhZnv6+RiIsubYAxBXc=)
2: Ay7JoslT6EAyHRaULsBRtIZWwog.roa (hash: gTv3k9NPlg2vVpHAiGMl3DtLPA9ZFxKifPWXSsGIZk8=)
3: a9i8eCPzOCR2a7g49i_eP0oTcMg.roa (hash: CLgIXtXHGLkSKlPAdABLQyRziV9nANmmCJ4xG0uixD8=)
4: tcsrXq88wV3Us7I62LlHKlJAwDs.crl (hash: 6+tIIQwtuwnKESNzmQmFQpZDpvG2QQdWPRw9GekKc3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:e9:f1:8c:f3:52:07:49:e8:55:fd:12:53:70:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Validity
Not Before: Sep 7 07:01:33 2025 GMT
Not After : Sep 8 07:01:33 2025 GMT
Subject: CN=2342a209d37c88ce6dcbbe5c3c2d353e3f9581b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:5c:63:53:45:47:15:42:74:50:df:fb:12:
e5:82:34:17:4c:6a:73:9e:d2:93:1d:b1:bb:cb:f0:
bc:e9:a7:a6:cc:cd:b5:0a:f4:b8:8a:92:84:6e:51:
fa:f3:dd:50:43:92:4a:76:57:ef:5f:58:24:21:7d:
39:c3:d2:79:24:8f:87:83:0d:5f:c1:0c:b5:2f:98:
97:31:8c:cd:f2:86:63:20:fa:99:2e:f3:64:ee:e4:
81:21:3a:d6:8f:d3:a1:43:7e:59:65:d9:31:a5:7b:
24:c8:79:4d:81:cf:b1:a0:92:7e:28:83:79:46:56:
27:e7:56:e9:48:4e:0c:de:35:0f:37:24:68:73:ea:
13:d2:07:1f:45:aa:7c:91:ee:ac:94:5d:7e:b3:85:
19:e4:46:e4:6f:36:dd:1a:40:0d:8d:05:88:ab:2e:
e7:2f:72:5a:34:c7:bf:fd:f5:d7:5b:e6:4a:67:ae:
49:d5:97:01:70:08:91:bc:94:25:19:42:80:ea:9b:
68:3a:d9:c3:5e:79:a3:ba:2f:7a:6b:b3:92:42:b1:
52:02:3a:0d:0e:40:74:52:34:34:62:bd:6b:2a:9a:
51:c2:ac:b6:3b:4c:9e:9f:78:14:b2:6d:8a:be:f0:
be:f4:a1:dd:d8:bf:40:5c:c3:1e:8c:bd:27:13:80:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:42:A2:09:D3:7C:88:CE:6D:CB:BE:5C:3C:2D:35:3E:3F:95:81:B4
X509v3 Authority Key Identifier:
keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c9:81:b6:db:a4:43:fd:06:ba:e0:03:da:58:98:32:18:54:
c7:7c:5c:11:9c:cc:c1:8b:85:b9:e1:c8:27:b6:22:e6:0d:28:
8c:bb:01:4b:41:79:0d:a9:ae:90:b8:d6:08:50:e1:d7:77:98:
3d:a8:b9:66:66:8a:87:98:78:1e:5d:7b:8e:67:54:f4:c0:2d:
f0:5e:8e:d6:43:e8:d1:8f:4a:a7:61:cc:32:9d:eb:6f:d0:ca:
55:85:5e:eb:ee:35:f6:5b:be:60:13:1e:c2:d7:29:20:5e:2e:
78:0b:f0:95:23:fc:2d:71:2c:f5:b4:3b:3a:8a:5d:17:01:ed:
b2:a4:55:9a:dc:8c:12:22:51:7b:50:47:34:4c:a4:73:c0:32:
fd:a0:25:e1:f2:ae:05:26:84:ae:5b:7b:d0:77:29:ac:58:0e:
7d:82:4c:a9:9b:41:46:19:e4:e9:bb:2f:93:04:c4:f3:60:2b:
2c:64:84:40:78:ff:1a:27:1d:2b:4a:44:1d:e5:ef:e3:5f:0b:
6a:2d:a9:a2:4e:09:63:de:7d:43:93:10:fa:ab:50:78:d7:ae:
73:34:aa:73:6c:cb:6e:72:4a:2d:1f:71:83:27:ec:e4:a5:18:
ce:6e:fa:c9:b3:14:c6:89:17:1d:6d:70:0f:bd:7d:55:ed:a8:
b2:6a:d0:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+unxjPNSB0noVf0SU3BKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1Y2IyYjVlYWYzY2MxNWRkNGIzYjIzYWQ4Yjk0NzJhNTI0
MGMwM2IwHhcNMjUwOTA3MDcwMTMzWhcNMjUwOTA4MDcwMTMzWjAzMTEwLwYDVQQD
EygyMzQyYTIwOWQzN2M4OGNlNmRjYmJlNWMzYzJkMzUzZTNmOTU4MWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEFcY1NFRxVCdFDf+xLlgjQXTGpz
ntKTHbG7y/C86aemzM21CvS4ipKEblH6891QQ5JKdlfvX1gkIX05w9J5JI+Hgw1f
wQy1L5iXMYzN8oZjIPqZLvNk7uSBITrWj9OhQ35ZZdkxpXskyHlNgc+xoJJ+KIN5
RlYn51bpSE4M3jUPNyRoc+oT0gcfRap8ke6slF1+s4UZ5EbkbzbdGkANjQWIqy7n
L3JaNMe//fXXW+ZKZ65J1ZcBcAiRvJQlGUKA6ptoOtnDXnmjui96a7OSQrFSAjoN
DkB0UjQ0Yr1rKppRwqy2O0yen3gUsm2KvvC+9KHd2L9AXMMejL0nE4Ah9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNCognTfIjObcu+XDwtNT4/lYG0MB8GA1UdIwQY
MBaAFLXLK16vPMFd1LOyOti5RypSQMA7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83OTVlZDktOGZhZC00YzQ0LTg1ODMt
MDZjYTcwOWEzYzU5LzEvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83OTVlZDktOGZhZC00YzQ0LTg1ODMtMDZjYTcwOWEzYzU5
LzEvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcmBttuk
Q/0GuuAD2liYMhhUx3xcEZzMwYuFueHIJ7Yi5g0ojLsBS0F5DamukLjWCFDh13eY
Pai5ZmaKh5h4Hl17jmdU9MAt8F6O1kPo0Y9Kp2HMMp3rb9DKVYVe6+419lu+YBMe
wtcpIF4ueAvwlSP8LXEs9bQ7OopdFwHtsqRVmtyMEiJRe1BHNEykc8Ay/aAl4fKu
BSaErlt70HcprFgOfYJMqZtBRhnk6bsvkwTE82ArLGSEQHj/GicdK0pEHeXv418L
ai2pok4JY959Q5MQ+qtQeNeuczSqc2zLbnJKLR9xgyfs5KUYzm76ybMUxokXHW1w
D719Ve2osmrQWw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:07 2025 by rpki-client