Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
File: TKE73qVPdrioVxKv22FRhrM4OME.mft (raw, json)
Hash identifier: hHsuyTOxn5bV9FOwimLTNSSzJSnPMnprDli4YWkc8C0=
Subject key identifier: E8:67:6D:1F:2E:3B:A0:F8:A6:BA:EF:48:77:05:53:0E:88:60:1C:56
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial: 01976C98F294208FBC480319A260E314F120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 04:00:52 +0000
Manifest this update: Sat 14 Jun 2025 04:00:52 +0000
Manifest next update: Sun 15 Jun 2025 04:00:52 +0000
Files and hashes: 1: 8axKv1QeNdYLl5PRbdXwvujzyH4.roa (hash: P16odh3n69wKkHb8t7qySEeaYC3/LuUW9W8sAY8jUTo=)
2: TKE73qVPdrioVxKv22FRhrM4OME.crl (hash: zn4xlKwO/WMjwl6kHhE6bOVuoXnHE941Va7U2me7h2g=)
3: WNroR83uzcjISqXHww42f1zYgLY.roa (hash: ZAQula8xqSNg9/XEOBi+pmskOiJ5Nh7rkmicK30wwYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:f2:94:20:8f:bc:48:03:19:a2:60:e3:14:f1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Validity
Not Before: Jun 14 04:00:52 2025 GMT
Not After : Jun 15 04:00:52 2025 GMT
Subject: CN=e8676d1f2e3ba0f8a6baef487705530e88601c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a3:ac:74:e1:8f:2b:09:9c:ca:c2:b9:fa:2e:
62:7a:f2:55:6b:f5:35:7b:c6:09:81:8c:13:d2:87:
77:2c:cc:d4:9b:88:a1:33:57:83:55:5d:12:55:9b:
98:e6:24:d8:f5:2c:3e:0e:44:ea:de:e9:f3:17:b2:
11:02:b9:33:e7:19:5a:81:7d:c3:bf:dd:78:1f:2f:
49:6a:67:9f:62:b2:47:5a:09:c2:80:94:e7:1f:63:
71:fa:fe:59:24:44:6a:02:91:84:5f:45:b1:23:2d:
2d:0e:94:97:e3:de:61:53:91:f2:49:91:12:c5:0d:
00:f7:54:a2:ef:fc:7a:39:5b:44:91:4b:0f:ef:51:
27:b9:b4:3a:d5:2e:d8:20:d0:63:f3:ca:bb:78:5b:
2e:92:66:04:34:91:fe:8a:85:ea:dd:a6:cd:75:5c:
b0:36:29:68:0a:3a:a0:af:e8:76:c3:e0:f8:00:6e:
b6:6b:36:86:ce:77:35:c4:e6:6b:29:1e:8c:75:3c:
e9:e2:6c:ae:5a:ed:c2:d8:9e:ad:5c:fe:56:ed:42:
27:05:cf:23:73:5e:f1:83:71:ff:80:96:95:3f:a0:
d8:58:68:3e:2a:ee:27:a9:1c:66:b8:13:52:a2:e0:
14:c7:fb:a6:01:98:9d:a7:36:7c:ec:14:9a:17:ad:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:67:6D:1F:2E:3B:A0:F8:A6:BA:EF:48:77:05:53:0E:88:60:1C:56
X509v3 Authority Key Identifier:
keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b3:f3:29:ae:fb:c4:20:e4:11:3d:e8:78:5c:17:f8:d1:3a:
1b:f6:92:bd:7e:b5:cd:9b:84:b3:e5:b3:bb:fe:0f:11:41:e4:
05:ec:4b:fa:5f:b4:4c:af:9c:fe:72:9c:16:ea:76:6a:92:24:
71:5f:ed:91:f5:74:ab:ed:a2:d2:fe:49:45:db:48:6b:a9:6b:
e3:3d:60:3f:9a:fa:e3:69:82:6a:76:71:14:bb:63:2d:79:39:
0f:b8:37:b9:aa:e6:aa:27:5b:86:10:86:98:dd:30:03:19:96:
5c:dd:2f:16:5e:6e:a8:2c:71:f6:72:3a:e3:5e:e1:79:37:04:
5d:b8:3b:fe:63:3e:7d:91:5b:28:9c:4c:02:31:28:fe:b9:a5:
a6:bb:50:b3:3a:83:1f:00:63:d7:b1:6f:64:06:88:00:9e:ad:
2a:64:05:1c:6d:39:58:ac:72:8d:09:a0:90:57:2b:b1:e6:0b:
09:88:1c:64:51:2d:40:8e:fa:d7:ce:22:ad:48:d5:72:21:d0:
a5:13:db:bc:6a:8b:63:7e:6a:ba:80:05:cb:20:ba:63:f1:76:
9e:b9:ee:6c:9b:9a:0c:99:4b:ef:6b:c2:e9:2c:d5:23:54:fd:
10:8c:1d:e4:fc:50:3c:c3:72:b5:29:61:f1:bc:c8:f0:11:d1:
cf:78:71:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmPKUII+8SAMZomDjFPEgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYTEzYmRlYTU0Zjc2YjhhODU3MTJhZmRiNjE1MTg2YjMz
ODM4YzEwHhcNMjUwNjE0MDQwMDUyWhcNMjUwNjE1MDQwMDUyWjAzMTEwLwYDVQQD
EyhlODY3NmQxZjJlM2JhMGY4YTZiYWVmNDg3NzA1NTMwZTg4NjAxYzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqOsdOGPKwmcysK5+i5ievJVa/U1
e8YJgYwT0od3LMzUm4ihM1eDVV0SVZuY5iTY9Sw+DkTq3unzF7IRArkz5xlagX3D
v914Hy9JamefYrJHWgnCgJTnH2Nx+v5ZJERqApGEX0WxIy0tDpSX495hU5HySZES
xQ0A91Si7/x6OVtEkUsP71EnubQ61S7YINBj88q7eFsukmYENJH+ioXq3abNdVyw
NiloCjqgr+h2w+D4AG62azaGznc1xOZrKR6MdTzp4myuWu3C2J6tXP5W7UInBc8j
c17xg3H/gJaVP6DYWGg+Ku4nqRxmuBNSouAUx/umAZidpzZ87BSaF63UjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhnbR8uO6D4prrvSHcFUw6IYBxWMB8GA1UdIwQY
MBaAFEyhO96lT3a4qFcSr9thUYazODjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNjJkMTMtN2YwMy00ZDE5LThiNDYt
ZmM5MTQzM2QzNjdkLzEvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jNjJkMTMtN2YwMy00ZDE5LThiNDYtZmM5MTQzM2QzNjdk
LzEvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLPzKa77
xCDkET3oeFwX+NE6G/aSvX61zZuEs+Wzu/4PEUHkBexL+l+0TK+c/nKcFup2apIk
cV/tkfV0q+2i0v5JRdtIa6lr4z1gP5r642mCanZxFLtjLXk5D7g3uarmqidbhhCG
mN0wAxmWXN0vFl5uqCxx9nI6417heTcEXbg7/mM+fZFbKJxMAjEo/rmlprtQszqD
HwBj17FvZAaIAJ6tKmQFHG05WKxyjQmgkFcrseYLCYgcZFEtQI76184irUjVciHQ
pRPbvGqLY35quoAFyyC6Y/F2nrnubJuaDJlL72vC6SzVI1T9EIwd5PxQPMNytSlh
8bzI8BHRz3hx2w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:24:33 2025 by rpki-client