Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json)
Hash identifier: E+2yUUFrl/9xN5dygS0M5E1kvlEbp1BNh3SqQ3u4b/k=
Subject key identifier: 99:2A:33:A4:20:04:D7:F9:CC:D3:0C:93:C4:16:87:01:44:5B:2E:96
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 01976C2AA308AD073EF67EBF85F171F620AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
Manifest number: 0620
Signing time: Sat 14 Jun 2025 02:00:22 +0000
Manifest this update: Sat 14 Jun 2025 02:00:22 +0000
Manifest next update: Sun 15 Jun 2025 02:00:22 +0000
Files and hashes: 1: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: eAMkrhYLBVPwzyE2k0XDpF5pdsRPMosaZvyvCY9DIpI=)
2: fIoweheWq1JqzVdLBCrrD-x4kK4.roa (hash: yoQba86aaUs4p2P/E/UoxSeIL5NEm/wDobQOVMT4e5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:a3:08:ad:07:3e:f6:7e:bf:85:f1:71:f6:20:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: Jun 14 02:00:22 2025 GMT
Not After : Jun 15 02:00:22 2025 GMT
Subject: CN=992a33a42004d7f9ccd30c93c4168701445b2e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4d:fd:b1:40:0a:80:8f:43:dd:7f:60:9a:71:
be:e3:6f:7a:f6:ca:17:00:9f:5d:db:c5:e2:cc:4b:
6b:27:c9:56:eb:c9:13:c2:f0:a2:b5:66:2b:86:ba:
7b:79:26:43:03:8d:4b:23:3e:6e:0e:e9:6b:13:bb:
ce:d9:75:cc:7d:9c:f2:8d:32:b4:ac:a1:52:01:5e:
32:df:94:b3:9f:ea:03:e4:f4:80:3a:ff:97:f4:42:
c1:ea:45:52:67:70:f9:7b:ec:a4:ab:b0:3c:ba:07:
46:01:f0:6d:2e:5e:d3:75:49:03:0c:f8:d8:01:d1:
90:06:9d:aa:a2:09:8a:14:c5:59:96:63:22:9c:40:
e0:8a:5b:25:4c:59:44:0d:0e:29:d0:79:f7:d0:c3:
3e:b2:94:a2:e9:5a:76:c3:c2:20:3c:14:f5:2c:b9:
3d:d0:32:8f:a3:71:21:21:eb:b2:4a:3f:2b:5b:c9:
5b:7b:42:a4:7a:4d:dc:25:dd:6f:a9:0b:3d:e0:8a:
e2:f1:f0:b6:d8:d0:e5:f4:e7:85:a8:c4:ac:4e:2d:
1a:83:5f:30:ae:44:ee:cb:7e:2d:93:3e:f1:db:37:
93:ea:e1:29:a9:9b:c3:f7:b0:b6:ef:ba:cc:50:22:
67:65:da:5c:8e:9e:82:fa:f1:f5:57:0d:9b:3a:e3:
dc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2A:33:A4:20:04:D7:F9:CC:D3:0C:93:C4:16:87:01:44:5B:2E:96
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a0:1b:8d:68:fa:76:98:8c:5d:77:44:49:9e:d1:7d:d6:06:
d2:b5:79:6b:47:c6:49:04:90:ab:a1:13:86:37:9d:d1:e1:59:
a9:ea:82:ac:1d:8f:41:93:90:f1:f3:bc:1d:de:13:ed:6d:37:
cd:69:32:0e:6f:97:38:4c:7b:31:90:9d:ed:c5:57:07:8e:3c:
4c:b4:f2:33:21:76:81:3c:79:c6:16:0a:4d:76:be:b0:b1:83:
3f:5f:1c:45:c3:37:62:57:39:b9:a7:0a:97:0b:75:23:dc:c2:
de:a6:2e:25:fe:ae:70:08:68:4a:45:2d:43:4c:1b:7c:22:79:
ac:ad:5c:06:c2:81:f4:cc:66:d4:b9:2b:0f:2e:18:76:fa:71:
a6:09:42:3e:1b:3e:dd:22:00:07:07:2f:08:59:6c:6e:24:58:
ec:b1:df:98:a7:64:37:f7:af:fb:c5:20:64:27:f9:ff:08:53:
38:2f:aa:43:60:01:50:49:fd:d8:db:7a:be:bc:3e:5d:bf:93:
af:57:8a:1d:22:3a:85:83:64:86:71:2f:0a:fb:ec:9d:37:c9:
ca:e5:83:dc:56:3b:d9:96:84:33:00:0d:bd:07:64:c4:db:36:
06:8e:65:68:14:30:b5:7a:77:ea:d4:f8:f3:8e:24:b1:62:b4:
ef:d1:2d:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsKqMIrQc+9n6/hfFx9iCtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYTQ0N2Y3YjNhNzc2ZjcyNGQ4YmM4MTQwYmUzMTc2NjYy
YzI0ZDAwHhcNMjUwNjE0MDIwMDIyWhcNMjUwNjE1MDIwMDIyWjAzMTEwLwYDVQQD
Eyg5OTJhMzNhNDIwMDRkN2Y5Y2NkMzBjOTNjNDE2ODcwMTQ0NWIyZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU39sUAKgI9D3X9gmnG+42969soX
AJ9d28XizEtrJ8lW68kTwvCitWYrhrp7eSZDA41LIz5uDulrE7vO2XXMfZzyjTK0
rKFSAV4y35Szn+oD5PSAOv+X9ELB6kVSZ3D5e+ykq7A8ugdGAfBtLl7TdUkDDPjY
AdGQBp2qogmKFMVZlmMinEDgilslTFlEDQ4p0Hn30MM+spSi6Vp2w8IgPBT1LLk9
0DKPo3EhIeuySj8rW8lbe0Kkek3cJd1vqQs94Iri8fC22NDl9OeFqMSsTi0ag18w
rkTuy34tkz7x2zeT6uEpqZvD97C277rMUCJnZdpcjp6C+vH1Vw2bOuPcmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkqM6QgBNf5zNMMk8QWhwFEWy6WMB8GA1UdIwQY
MBaAFEykR/ezp3b3JNi8gUC+MXZmLCTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZjNlMGItMjZjMy00Y2Y5LTgwNTYt
MjlhZjMzYmM2Yjk4LzEvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wZjNlMGItMjZjMy00Y2Y5LTgwNTYtMjlhZjMzYmM2Yjk4
LzEvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6AbjWj6
dpiMXXdESZ7RfdYG0rV5a0fGSQSQq6EThjed0eFZqeqCrB2PQZOQ8fO8Hd4T7W03
zWkyDm+XOEx7MZCd7cVXB448TLTyMyF2gTx5xhYKTXa+sLGDP18cRcM3Ylc5uacK
lwt1I9zC3qYuJf6ucAhoSkUtQ0wbfCJ5rK1cBsKB9Mxm1LkrDy4YdvpxpglCPhs+
3SIABwcvCFlsbiRY7LHfmKdkN/ev+8UgZCf5/whTOC+qQ2ABUEn92Nt6vrw+Xb+T
r1eKHSI6hYNkhnEvCvvsnTfJyuWD3FY72ZaEMwANvQdkxNs2Bo5laBQwtXp36tT4
844ksWK079EtKg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:55:42 2025 by rpki-client