Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
File: TTpxp39MqbpTb5hhKpxW1AwMO50.mft (raw, json)
Hash identifier: jBYxDbkDMFQvLG8INepIBCYFTMro0M7S2LPBgRjbuRQ=
Subject key identifier: 99:78:51:59:C0:2A:DE:04:34:5A:CD:EC:9A:36:38:8D:7D:21:07:57
Authority key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
Certificate issuer: /CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Certificate serial: 01976D3D89CB5E3F62481F767FBD19B2D6E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 07:00:38 +0000
Manifest this update: Sat 14 Jun 2025 07:00:38 +0000
Manifest next update: Sun 15 Jun 2025 07:00:38 +0000
Files and hashes: 1: TTpxp39MqbpTb5hhKpxW1AwMO50.crl (hash: 1DYFpE8uFFf/vl64yMF3T9SQ0HaYt/JooQNSzi5WOvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:89:cb:5e:3f:62:48:1f:76:7f:bd:19:b2:d6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Validity
Not Before: Jun 14 07:00:38 2025 GMT
Not After : Jun 15 07:00:38 2025 GMT
Subject: CN=99785159c02ade04345acdec9a36388d7d210757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:80:31:80:5c:aa:7e:b0:ad:89:2c:5b:fe:16:
63:71:bb:46:85:64:00:60:86:df:2d:95:34:79:04:
20:e0:2e:c2:49:cc:2d:db:be:c2:99:36:6d:0b:eb:
6c:42:5a:17:5d:5e:a6:cf:20:41:46:15:40:13:d9:
25:5d:c6:b0:c7:db:cd:51:11:99:cd:a9:84:fb:4b:
07:ae:4c:48:4f:8d:e3:cc:d0:9d:83:bd:68:ce:24:
2e:13:06:0f:c3:25:ba:b5:5a:94:f7:77:d6:ec:96:
93:be:e8:e6:34:79:ae:e9:21:b5:83:9e:30:0c:45:
9f:aa:67:0f:35:54:6a:82:ec:a2:f8:75:88:ca:fb:
80:6b:d8:e1:72:8a:e5:db:c0:7c:d0:f3:e7:1d:c2:
07:12:25:10:fb:6b:4e:a8:d3:2e:38:c3:70:69:86:
de:5e:4c:c8:5d:c0:90:5f:fb:b9:8a:f2:56:c6:5e:
d5:a7:ea:7b:c5:4f:ef:e9:cf:33:94:d6:8a:36:60:
7e:b8:86:3b:fb:14:8d:2b:f8:24:a4:09:77:a1:37:
10:27:e8:6f:13:57:fb:58:aa:ac:08:f6:22:4c:cf:
60:a2:fa:7b:22:7d:79:eb:97:35:c6:3f:45:cc:d0:
d2:e7:85:87:ac:a6:60:97:b4:e4:85:db:1a:3b:e1:
7b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:78:51:59:C0:2A:DE:04:34:5A:CD:EC:9A:36:38:8D:7D:21:07:57
X509v3 Authority Key Identifier:
keyid:4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:4c:16:2a:46:ce:f5:a8:dd:0a:b9:e0:d4:20:dd:61:96:15:
da:22:82:fb:17:4d:12:18:78:18:43:ae:96:44:fa:ab:d2:39:
a5:9a:10:e9:d4:fe:dc:4a:ca:84:57:63:c3:93:32:ef:ab:11:
8b:b3:a8:b1:cd:b5:a9:c4:de:9c:c6:ea:b6:b0:26:97:70:72:
99:93:a4:4d:25:6a:8e:1d:f8:9b:6a:0e:34:de:1e:5d:55:6f:
e8:d7:7c:14:3a:f6:04:b9:57:4c:1b:23:fe:38:b3:cb:76:56:
bc:c8:f5:ef:9a:34:a8:64:cd:30:6e:d6:6a:08:c2:4d:a4:0e:
9c:6a:65:a3:3e:eb:05:76:2e:1a:3e:76:ac:99:4b:c8:e7:3f:
88:9a:fa:47:a7:57:ac:26:3e:f3:a9:85:62:ca:b7:04:b9:01:
5f:f7:87:f7:6b:45:02:71:40:39:ca:02:09:b1:79:3a:53:b7:
0a:ef:3e:84:90:2e:42:4b:63:d1:ef:20:32:97:da:72:ef:26:
80:f6:ba:2a:8c:b4:fe:36:9d:5a:a9:16:c7:1a:ab:12:d8:13:
7f:18:55:ce:fc:cf:c4:08:cc:a8:ba:ce:ec:80:1a:71:b8:12:
dc:fc:df:3c:f9:18:84:3e:6f:8f:1e:7e:f4:ee:1d:dd:50:60:
57:d8:fe:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPYnLXj9iSB92f70ZstbhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2E3MWE3N2Y0Y2E5YmE1MzZmOTg2MTJhOWM1NmQ0MGMw
YzNiOWQwHhcNMjUwNjE0MDcwMDM4WhcNMjUwNjE1MDcwMDM4WjAzMTEwLwYDVQQD
Eyg5OTc4NTE1OWMwMmFkZTA0MzQ1YWNkZWM5YTM2Mzg4ZDdkMjEwNzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4AxgFyqfrCtiSxb/hZjcbtGhWQA
YIbfLZU0eQQg4C7CScwt277CmTZtC+tsQloXXV6mzyBBRhVAE9klXcawx9vNURGZ
zamE+0sHrkxIT43jzNCdg71oziQuEwYPwyW6tVqU93fW7JaTvujmNHmu6SG1g54w
DEWfqmcPNVRqguyi+HWIyvuAa9jhcorl28B80PPnHcIHEiUQ+2tOqNMuOMNwaYbe
XkzIXcCQX/u5ivJWxl7Vp+p7xU/v6c8zlNaKNmB+uIY7+xSNK/gkpAl3oTcQJ+hv
E1f7WKqsCPYiTM9govp7In1565c1xj9FzNDS54WHrKZgl7TkhdsaO+F7ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJl4UVnAKt4ENFrN7Jo2OI19IQdXMB8GA1UdIwQY
MBaAFE06cad/TKm6U2+YYSqcVtQMDDudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84ODc1MDEtNGQ4ZS00YmViLTk1OTAt
NjUwNzliNzU4NjhhLzEvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84ODc1MDEtNGQ4ZS00YmViLTk1OTAtNjUwNzliNzU4Njhh
LzEvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArEwWKkbO
9ajdCrng1CDdYZYV2iKC+xdNEhh4GEOulkT6q9I5pZoQ6dT+3ErKhFdjw5My76sR
i7Oosc21qcTenMbqtrAml3BymZOkTSVqjh34m2oONN4eXVVv6Nd8FDr2BLlXTBsj
/jizy3ZWvMj175o0qGTNMG7WagjCTaQOnGploz7rBXYuGj52rJlLyOc/iJr6R6dX
rCY+86mFYsq3BLkBX/eH92tFAnFAOcoCCbF5OlO3Cu8+hJAuQktj0e8gMpfacu8m
gPa6Koy0/jadWqkWxxqrEtgTfxhVzvzPxAjMqLrO7IAacbgS3PzfPPkYhD5vjx5+
9O4d3VBgV9j+rg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:47:46 2025 by rpki-client