Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
File: tn8bh-Z1L0VDm4UozJaLR3CloPs.mft (raw, json)
Hash identifier: xUIhZZxZrq2MquWzdj2EyCwyxwWLOpckHeOZsnk9cXk=
Subject key identifier: 29:B4:51:0E:0D:81:2E:C3:9E:F4:46:CC:55:0C:4B:1C:7D:B3:8E:B0
Authority key identifier: B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
Certificate issuer: /CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Certificate serial: 019769CE7C9DCB9B910D046B364EDB17EFD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 15:00:29 +0000
Manifest this update: Fri 13 Jun 2025 15:00:29 +0000
Manifest next update: Sat 14 Jun 2025 15:00:29 +0000
Files and hashes: 1: kYfhtSfEKW3P-62E9GiF_Ua9EUo.roa (hash: p1no5bz1+uk9Sv3KCtgs/QuEn0taiRhnvBxPn7m9ACY=)
2: tn8bh-Z1L0VDm4UozJaLR3CloPs.crl (hash: Fi/clNqi+Ydr4hgRpsTxPFR/fFeG08+al4zbdSusVBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:7c:9d:cb:9b:91:0d:04:6b:36:4e:db:17:ef:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Validity
Not Before: Jun 13 15:00:29 2025 GMT
Not After : Jun 14 15:00:29 2025 GMT
Subject: CN=29b4510e0d812ec39ef446cc550c4b1c7db38eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:85:de:02:ae:34:33:3f:14:96:ea:fc:46:aa:
56:00:bb:ce:b0:f8:5f:01:17:b2:f9:98:9c:67:b7:
af:d1:7f:9f:6e:9b:41:4d:d4:f0:52:7e:3b:d3:6c:
c0:37:d6:d2:78:c5:b4:a3:6e:10:85:d9:be:82:1d:
30:14:15:33:08:e9:b3:7e:75:c7:71:5c:36:df:01:
49:8c:29:c3:84:7e:ae:0b:b1:9e:2b:13:a4:2c:00:
f4:21:1e:49:2f:06:4e:9e:33:ac:ea:55:32:48:fe:
f4:40:6d:ba:82:3a:ea:80:f2:23:27:90:3d:fd:4a:
ab:f2:0c:ad:d9:c9:2c:87:21:85:d2:3d:27:8c:57:
c6:63:ba:af:4b:8e:be:57:ae:7b:52:50:9d:c1:67:
23:e0:ee:49:89:59:09:53:d4:3e:75:aa:02:d4:c3:
aa:bf:18:e4:73:c0:1c:d5:cc:8a:3a:93:c9:e7:61:
e0:fa:f1:01:97:8d:06:72:a2:96:9c:90:ca:fc:4f:
6d:cf:06:98:8a:22:0b:ce:81:d3:5f:bb:51:ba:ad:
c6:78:8c:26:70:a5:f3:2a:56:df:cd:38:c7:8d:1d:
e7:1a:73:4d:ee:a9:e2:36:af:9e:d3:2f:f3:99:24:
e0:60:c8:ce:ff:0a:b1:77:41:f8:07:b7:cd:27:82:
0a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B4:51:0E:0D:81:2E:C3:9E:F4:46:CC:55:0C:4B:1C:7D:B3:8E:B0
X509v3 Authority Key Identifier:
keyid:B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:53:17:1e:d3:e6:26:fb:26:fd:db:94:fd:59:7c:9b:e8:4d:
3d:7b:41:0c:27:b5:7b:86:89:b8:04:46:cc:6b:a3:76:87:65:
64:ac:de:d9:75:3b:b2:18:89:81:12:02:ae:e1:ef:a4:44:ca:
8f:62:9d:02:98:c1:c0:fb:5c:36:bd:0f:22:2e:48:48:c4:6f:
92:76:0a:96:ad:29:7d:db:d7:01:4b:0b:e2:91:0c:a9:54:62:
ea:0f:57:71:bf:e1:0e:fe:e2:d7:1f:a3:4d:d8:4e:5b:0e:24:
18:3f:cb:30:8b:87:91:6a:21:50:73:1d:e4:09:a4:f3:a4:db:
63:18:f4:1f:48:60:6c:ee:79:d6:f5:5d:5c:9e:cb:0a:e8:9e:
c8:f3:cf:39:3f:26:fa:bb:ea:b2:55:d9:55:d2:9a:a5:8a:34:
27:9e:c3:bb:5a:d7:dc:95:91:aa:c5:ac:76:31:3a:b6:8c:0e:
9b:ce:69:86:19:55:52:ba:b2:a8:5f:36:38:55:d2:90:74:35:
5e:f7:4c:c6:22:89:06:0e:e4:5a:bb:95:36:60:e3:ca:db:c1:
25:ee:5d:bb:9f:ca:0a:41:9c:48:80:d3:e1:d6:41:c8:bb:9e:
38:90:a7:de:9a:e7:fc:9a:c6:3f:c3:49:09:b8:95:f7:60:a2:
91:a4:4e:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpznydy5uRDQRrNk7bF+/XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2N2YxYjg3ZTY3NTJmNDU0MzliODUyOGNjOTY4YjQ3NzBh
NWEwZmIwHhcNMjUwNjEzMTUwMDI5WhcNMjUwNjE0MTUwMDI5WjAzMTEwLwYDVQQD
EygyOWI0NTEwZTBkODEyZWMzOWVmNDQ2Y2M1NTBjNGIxYzdkYjM4ZWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YXeAq40Mz8Ulur8RqpWALvOsPhf
ARey+ZicZ7ev0X+fbptBTdTwUn4702zAN9bSeMW0o24Qhdm+gh0wFBUzCOmzfnXH
cVw23wFJjCnDhH6uC7GeKxOkLAD0IR5JLwZOnjOs6lUySP70QG26gjrqgPIjJ5A9
/Uqr8gyt2ckshyGF0j0njFfGY7qvS46+V657UlCdwWcj4O5JiVkJU9Q+daoC1MOq
vxjkc8Ac1cyKOpPJ52Hg+vEBl40GcqKWnJDK/E9tzwaYiiILzoHTX7tRuq3GeIwm
cKXzKlbfzTjHjR3nGnNN7qniNq+e0y/zmSTgYMjO/wqxd0H4B7fNJ4IKWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCm0UQ4NgS7DnvRGzFUMSxx9s46wMB8GA1UdIwQY
MBaAFLZ/G4fmdS9FQ5uFKMyWi0dwpaD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG44YmgtWjFMMFZEbTRVb3pKYUxSM0Nsb1BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85ZmY0M2UtZjgxNy00ZWJlLWEwZDkt
N2ExODkzMWQ5ODViLzEvdG44YmgtWjFMMFZEbTRVb3pKYUxSM0Nsb1BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi85ZmY0M2UtZjgxNy00ZWJlLWEwZDktN2ExODkzMWQ5ODVi
LzEvdG44YmgtWjFMMFZEbTRVb3pKYUxSM0Nsb1BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFMXHtPm
Jvsm/duU/Vl8m+hNPXtBDCe1e4aJuARGzGujdodlZKze2XU7shiJgRICruHvpETK
j2KdApjBwPtcNr0PIi5ISMRvknYKlq0pfdvXAUsL4pEMqVRi6g9Xcb/hDv7i1x+j
TdhOWw4kGD/LMIuHkWohUHMd5Amk86TbYxj0H0hgbO551vVdXJ7LCuieyPPPOT8m
+rvqslXZVdKapYo0J57Du1rX3JWRqsWsdjE6towOm85phhlVUrqyqF82OFXSkHQ1
XvdMxiKJBg7kWruVNmDjytvBJe5du5/KCkGcSIDT4dZByLueOJCn3prn/JrGP8NJ
CbiV92CikaRO0A==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:28 2025 by rpki-client