Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
File: TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json)
Hash identifier: FdP5+j3/+fevt5ICl2a0QF5k+X4zsjbFcxcyxExEf20=
Subject key identifier: 36:16:AD:45:AF:DC:B3:44:B4:DA:D3:38:CD:FD:1F:2D:71:AE:06:F5
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Certificate issuer: /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial: 01978959865402A09A46BEDCFA11CED2807A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
Manifest number: 15A4
Signing time: Thu 19 Jun 2025 18:00:35 +0000
Manifest this update: Thu 19 Jun 2025 18:00:35 +0000
Manifest next update: Fri 20 Jun 2025 18:00:35 +0000
Files and hashes: 1: BhaT-M-zQEVQbEPTvK_whwRLo3g.roa (hash: yoydrscKhHCdRvyWQAObyBBT0xMyfOzTOU389MtWZv4=)
2: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: VEpUc1GtQwtVYtQgQpZk9K3y+Hd3JfB5w/7jwBAwo+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:89:59:86:54:02:a0:9a:46:be:dc:fa:11:ce:d2:80:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Validity
Not Before: Jun 19 18:00:35 2025 GMT
Not After : Jun 20 18:00:35 2025 GMT
Subject: CN=3616ad45afdcb344b4dad338cdfd1f2d71ae06f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:84:4e:cc:74:0a:21:d8:0a:c0:22:d8:a7:
c4:d9:9e:f6:a1:35:f2:a0:15:60:04:b4:75:a3:fa:
89:1b:c9:67:ee:67:d2:b4:b8:30:f8:4f:15:2e:fd:
10:5b:6d:14:41:78:dd:b3:22:a2:d0:2b:d6:4f:cb:
34:00:ad:fe:4e:e2:34:03:52:06:c4:b0:11:78:6d:
b0:1d:8f:5f:6f:ae:10:84:37:bc:5c:f8:73:5b:7b:
d1:06:50:7e:f3:f1:a8:96:91:7c:70:70:f2:12:8e:
f7:e7:4c:bb:20:ba:12:de:09:f9:bd:78:f1:0c:a5:
f7:41:a8:ac:ac:0d:a7:9e:bf:b7:46:ee:45:dc:9e:
4f:e5:cc:80:e3:db:86:6c:ee:be:23:05:4f:e6:ee:
35:05:e1:f6:ee:38:9b:cd:8b:cd:2e:f2:a6:7e:4d:
9e:2a:3c:d0:7f:43:3d:ab:f0:2b:6e:54:2c:a6:6c:
c3:cd:c8:b1:e0:af:57:a6:8c:6a:1a:4d:d1:f9:77:
92:59:fd:8d:2a:ad:60:d2:4b:b4:a6:03:55:37:aa:
1d:0b:23:d0:8d:6b:e4:78:15:3c:ab:78:36:09:8a:
4f:c7:0d:84:5b:a1:85:c3:20:72:b6:74:00:d5:66:
e9:a0:be:df:85:34:fc:bd:dc:7a:14:a6:70:92:6f:
90:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:16:AD:45:AF:DC:B3:44:B4:DA:D3:38:CD:FD:1F:2D:71:AE:06:F5
X509v3 Authority Key Identifier:
keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:10:35:38:f7:1f:08:e7:13:21:c6:c6:cb:6c:f4:43:fd:ff:
35:fd:5b:9c:96:61:d5:d5:79:c0:12:bb:3a:91:e7:cc:10:ba:
5c:a6:10:1c:92:8d:76:16:9e:88:6b:4b:62:9c:b0:f9:b7:8f:
d8:c7:4e:98:c6:6c:7c:70:b2:ca:08:d5:97:ff:01:be:b3:f1:
61:2a:49:9e:0c:e0:fb:87:47:ea:4b:64:32:6e:e2:ed:d5:5c:
3b:52:40:46:ca:4b:5d:7e:ce:bd:b7:b0:f4:6e:89:72:71:ea:
0c:99:47:78:de:15:89:1a:ac:f9:32:ee:1c:f9:ea:41:0d:3f:
d0:f4:cf:c6:97:45:d5:a1:6b:55:0b:8a:3f:e9:3a:01:0a:c3:
8f:77:19:06:9a:ed:07:34:db:91:5d:62:70:96:38:66:4c:e7:
59:12:cd:21:75:34:bf:38:70:99:ff:ec:99:34:ec:1e:b9:ae:
91:0f:10:d5:98:28:75:9f:8d:b3:83:d7:67:4c:76:9a:f1:d8:
62:da:0d:02:0a:33:56:72:f7:da:ae:25:00:bf:eb:e6:a8:f9:
42:38:26:90:30:73:67:09:aa:50:db:95:f5:3e:ee:01:fe:b5:
60:43:5f:64:a7:ba:6c:dd:e5:b8:74:1e:1c:cf:8a:06:cb:0a:
8d:fb:9b:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeJWYZUAqCaRr7c+hHO0oB6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYTRkNjE5OWFlYzgyOGY2OTg5ZTJlODRjZWMxNzc2NWJh
YzVjZDUwHhcNMjUwNjE5MTgwMDM1WhcNMjUwNjIwMTgwMDM1WjAzMTEwLwYDVQQD
EygzNjE2YWQ0NWFmZGNiMzQ0YjRkYWQzMzhjZGZkMWYyZDcxYWUwNmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUaETsx0CiHYCsAi2KfE2Z72oTXy
oBVgBLR1o/qJG8ln7mfStLgw+E8VLv0QW20UQXjdsyKi0CvWT8s0AK3+TuI0A1IG
xLAReG2wHY9fb64QhDe8XPhzW3vRBlB+8/GolpF8cHDyEo7350y7ILoS3gn5vXjx
DKX3QaisrA2nnr+3Ru5F3J5P5cyA49uGbO6+IwVP5u41BeH27jibzYvNLvKmfk2e
KjzQf0M9q/ArblQspmzDzcix4K9XpoxqGk3R+XeSWf2NKq1g0ku0pgNVN6odCyPQ
jWvkeBU8q3g2CYpPxw2EW6GFwyBytnQA1WbpoL7fhTT8vdx6FKZwkm+Q1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYWrUWv3LNEtNrTOM39Hy1xrgb1MB8GA1UdIwQY
MBaAFE2k1hma7IKPaYni6EzsF3ZbrFzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yYzg0ODItNTMzMS00ZTU3LTk5NzQt
NDA4MzdkNDg0NzNkLzEvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yYzg0ODItNTMzMS00ZTU3LTk5NzQtNDA4MzdkNDg0NzNk
LzEvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARA1OPcf
COcTIcbGy2z0Q/3/Nf1bnJZh1dV5wBK7OpHnzBC6XKYQHJKNdhaeiGtLYpyw+beP
2MdOmMZsfHCyygjVl/8BvrPxYSpJngzg+4dH6ktkMm7i7dVcO1JARspLXX7Ovbew
9G6JcnHqDJlHeN4ViRqs+TLuHPnqQQ0/0PTPxpdF1aFrVQuKP+k6AQrDj3cZBprt
BzTbkV1icJY4ZkznWRLNIXU0vzhwmf/smTTsHrmukQ8Q1ZgodZ+Ns4PXZ0x2mvHY
YtoNAgozVnL32q4lAL/r5qj5QjgmkDBzZwmqUNuV9T7uAf61YENfZKe6bN3luHQe
HM+KBssKjfub9Q==
-----END CERTIFICATE-----
Generated at Thu Jun 19 20:50:31 2025 by rpki-client