Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
File: TNN3vorxFHipq-Jx-L3i3j0zNAg.mft (raw, json)
Hash identifier: m1gE9NhPye9SRebFI+EcUUsqf/TsFuSjG9bw5eKdvEQ=
Subject key identifier: 82:4E:9D:D3:F2:F8:7E:DA:AB:BA:6B:0C:B1:A7:4E:B4:4B:C2:10:C2
Authority key identifier: 4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08
Certificate issuer: /CN=4cd377be8af11478a9abe271f8bde2de3d333408
Certificate serial: 0197794215B76DF05B5623CC49425854A741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
Manifest number: 07E5
Signing time: Mon 16 Jun 2025 15:01:03 +0000
Manifest this update: Mon 16 Jun 2025 15:01:03 +0000
Manifest next update: Tue 17 Jun 2025 15:01:03 +0000
Files and hashes: 1: TNN3vorxFHipq-Jx-L3i3j0zNAg.crl (hash: NUmWggYOXWiSPu9VBW5kSaOATJGySCkoT+VEKoaDA7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:42:15:b7:6d:f0:5b:56:23:cc:49:42:58:54:a7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd377be8af11478a9abe271f8bde2de3d333408
Validity
Not Before: Jun 16 15:01:03 2025 GMT
Not After : Jun 17 15:01:03 2025 GMT
Subject: CN=824e9dd3f2f87edaabba6b0cb1a74eb44bc210c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c2:54:4b:12:1a:fd:b1:9c:12:39:17:36:42:
56:20:38:a1:a6:81:6f:df:17:54:87:2d:c3:d3:bf:
e5:96:26:c6:e2:0c:fb:cf:aa:02:1d:60:9a:25:f7:
71:6a:61:db:19:c2:6f:c9:97:b7:d8:ac:12:17:89:
cb:16:d9:02:41:34:7e:40:06:01:8c:23:1a:2f:82:
4f:89:20:f2:a4:8d:47:58:47:65:bf:64:3c:f3:a8:
23:2c:38:c9:d6:7f:c4:45:3e:57:06:38:60:2c:1e:
65:31:83:7f:7a:88:94:f6:46:51:e4:10:67:4f:84:
28:de:cb:1f:93:0d:90:33:a5:da:e7:20:78:cc:11:
6a:0e:c9:e5:7b:f1:27:6d:24:85:ac:fa:88:4a:df:
94:39:de:8e:ca:dd:02:47:7d:40:13:84:49:88:42:
d3:89:75:a1:ce:54:9e:a3:de:a9:9e:8c:47:c1:6c:
d7:7e:f0:43:d6:2b:4c:12:eb:eb:4c:42:84:87:71:
69:cb:01:0a:63:dc:e8:67:a4:03:bf:38:5f:b8:47:
29:9a:4e:f1:a3:f6:a4:6a:d5:23:e4:01:cd:41:21:
f4:3b:7a:a5:d3:b0:fd:26:e3:23:99:3e:fe:14:45:
74:6d:ab:7b:a5:61:0d:d5:0f:ad:b6:b9:3b:0a:0a:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4E:9D:D3:F2:F8:7E:DA:AB:BA:6B:0C:B1:A7:4E:B4:4B:C2:10:C2
X509v3 Authority Key Identifier:
keyid:4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:55:e9:da:67:09:06:9b:75:66:61:2e:56:b0:03:34:23:81:
84:5c:f5:88:16:d2:22:3d:76:9e:1f:fa:50:64:e1:38:21:c7:
fc:c1:c4:18:0d:cc:0c:c7:b8:7e:88:71:a0:30:47:aa:b8:5d:
a6:fc:d0:d1:ac:91:57:a2:ba:57:6a:e8:49:59:86:e6:23:dd:
75:b0:dc:81:15:83:df:90:32:bf:6f:a4:40:16:8d:d8:81:be:
89:59:00:73:c7:7c:70:22:c3:26:98:fd:29:da:3a:b2:c9:c0:
3d:32:60:91:b0:27:fe:76:f1:b2:a7:b0:29:8a:66:23:e8:ba:
56:6a:6c:82:7c:16:9d:90:b2:d6:a0:67:1d:b4:db:09:cd:5a:
78:93:15:2f:f2:b4:56:d0:3b:e0:93:df:30:ba:54:89:05:24:
38:68:05:36:c2:40:5c:91:12:e9:a5:cb:4e:2f:d8:e3:72:a2:
c4:ca:d2:24:70:dd:dd:d0:d3:42:5f:8b:3a:2e:e3:0a:5c:be:
72:2d:4e:d2:d2:77:c0:b6:03:5b:fd:68:e4:63:c6:8e:b1:ee:
47:84:42:b8:90:a4:9d:8f:0d:88:4e:d7:ce:21:51:87:1c:93:
c1:ee:59:55:8f:ca:87:86:1e:8e:d0:41:f4:c8:00:88:e3:fe:
ba:45:b7:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5QhW3bfBbViPMSUJYVKdBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZDM3N2JlOGFmMTE0NzhhOWFiZTI3MWY4YmRlMmRlM2Qz
MzM0MDgwHhcNMjUwNjE2MTUwMTAzWhcNMjUwNjE3MTUwMTAzWjAzMTEwLwYDVQQD
Eyg4MjRlOWRkM2YyZjg3ZWRhYWJiYTZiMGNiMWE3NGViNDRiYzIxMGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsJUSxIa/bGcEjkXNkJWIDihpoFv
3xdUhy3D07/llibG4gz7z6oCHWCaJfdxamHbGcJvyZe32KwSF4nLFtkCQTR+QAYB
jCMaL4JPiSDypI1HWEdlv2Q886gjLDjJ1n/ERT5XBjhgLB5lMYN/eoiU9kZR5BBn
T4Qo3ssfkw2QM6Xa5yB4zBFqDsnle/EnbSSFrPqISt+UOd6Oyt0CR31AE4RJiELT
iXWhzlSeo96pnoxHwWzXfvBD1itMEuvrTEKEh3FpywEKY9zoZ6QDvzhfuEcpmk7x
o/akatUj5AHNQSH0O3ql07D9JuMjmT7+FEV0bat7pWEN1Q+ttrk7Cgo4dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJOndPy+H7aq7prDLGnTrRLwhDCMB8GA1UdIwQY
MBaAFEzTd76K8RR4qavicfi94t49MzQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE5OM3ZvcnhGSGlwcS1KeC1MM2kzajB6TkFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81MWU4YjUtN2UyYy00MDA4LWJmODMt
YjEyZWIxY2VhYTE0LzEvVE5OM3ZvcnhGSGlwcS1KeC1MM2kzajB6TkFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81MWU4YjUtN2UyYy00MDA4LWJmODMtYjEyZWIxY2VhYTE0
LzEvVE5OM3ZvcnhGSGlwcS1KeC1MM2kzajB6TkFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlXp2mcJ
Bpt1ZmEuVrADNCOBhFz1iBbSIj12nh/6UGThOCHH/MHEGA3MDMe4fohxoDBHqrhd
pvzQ0ayRV6K6V2roSVmG5iPddbDcgRWD35Ayv2+kQBaN2IG+iVkAc8d8cCLDJpj9
Kdo6ssnAPTJgkbAn/nbxsqewKYpmI+i6VmpsgnwWnZCy1qBnHbTbCc1aeJMVL/K0
VtA74JPfMLpUiQUkOGgFNsJAXJES6aXLTi/Y43KixMrSJHDd3dDTQl+LOi7jCly+
ci1O0tJ3wLYDW/1o5GPGjrHuR4RCuJCknY8NiE7XziFRhxyTwe5ZVY/Kh4YejtBB
9MgAiOP+ukW3Cg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:04:25 2025 by rpki-client