Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
File: TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft (raw, json)
Hash identifier: vmPQtpwXmcWeGyGevo4tNGB4M+ODui7uWM4e3MDUDg0=
Subject key identifier: 85:01:ED:C0:16:48:8E:5F:D7:4F:8D:CD:1D:DB:F6:E9:CE:3E:4D:A2
Authority key identifier: 4C:00:06:E0:58:96:F6:FF:B3:01:61:E7:C8:DD:A2:F9:AD:05:B5:61
Certificate issuer: /CN=4c0006e05896f6ffb30161e7c8dda2f9ad05b561
Certificate serial: 01977753C41CCDC3D979ABFC7FD4209337A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
Manifest number: 14F1
Signing time: Mon 16 Jun 2025 06:01:07 +0000
Manifest this update: Mon 16 Jun 2025 06:01:07 +0000
Manifest next update: Tue 17 Jun 2025 06:01:07 +0000
Files and hashes: 1: TAAG4FiW9v-zAWHnyN2i-a0FtWE.crl (hash: GzHuRvTfGtBhRdKusI1/N+UX6z0iw5aAfN/tMgL3teY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:53:c4:1c:cd:c3:d9:79:ab:fc:7f:d4:20:93:37:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c0006e05896f6ffb30161e7c8dda2f9ad05b561
Validity
Not Before: Jun 16 06:01:07 2025 GMT
Not After : Jun 17 06:01:07 2025 GMT
Subject: CN=8501edc016488e5fd74f8dcd1ddbf6e9ce3e4da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d2:21:c3:ac:7c:28:06:cb:d3:d3:e6:59:8c:
8b:70:13:41:fc:1d:d0:8a:a6:8f:b6:aa:1d:33:10:
e5:61:03:55:94:c8:a8:31:53:18:37:3e:5e:a4:fb:
e8:9f:3e:78:15:94:84:15:d9:bf:a1:85:f1:3e:11:
65:51:79:aa:75:19:f5:fe:9f:8b:34:1a:22:38:e8:
8d:75:da:cb:f0:dd:d9:07:93:11:42:0f:52:be:f0:
4c:9c:54:e7:cb:f0:9b:26:28:66:1e:77:78:b5:1e:
51:7c:e6:13:90:74:1d:b1:b7:a4:81:65:e5:40:fc:
b2:17:ba:b4:0b:c9:5b:82:52:8a:d0:ea:f6:cb:28:
3f:72:2f:89:ec:93:41:6a:00:53:30:9d:69:c4:43:
6a:c2:dd:f4:7c:e6:52:54:d9:6b:8c:95:13:f0:ec:
74:1a:8c:a6:e4:f6:e5:20:57:03:dc:72:b5:3b:49:
43:e0:e7:fc:33:e4:8f:c0:89:3c:b8:9c:db:7f:5c:
b7:70:aa:a5:eb:41:f2:fa:cb:f5:b8:79:94:93:a3:
03:39:9d:a9:25:13:a2:2d:7b:71:d6:b7:ca:4b:48:
cb:81:66:85:94:34:4e:92:b2:bb:b4:a8:4d:d8:44:
43:9a:d1:51:02:0b:d8:db:68:c7:67:e9:74:fa:cd:
25:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:01:ED:C0:16:48:8E:5F:D7:4F:8D:CD:1D:DB:F6:E9:CE:3E:4D:A2
X509v3 Authority Key Identifier:
keyid:4C:00:06:E0:58:96:F6:FF:B3:01:61:E7:C8:DD:A2:F9:AD:05:B5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:30:5b:87:49:c5:90:6c:82:d6:bf:00:f8:40:b8:5c:c1:66:
37:e9:97:c4:b5:53:f7:fb:3a:1b:93:16:7d:04:2f:29:f8:c4:
87:05:e9:eb:a4:2f:fc:08:43:89:9b:09:eb:b4:88:7d:86:1d:
ec:93:eb:3f:76:c4:21:08:c5:1b:b7:cd:7e:c5:80:50:3f:85:
53:fc:d0:03:be:0c:22:fe:90:be:a7:83:b6:d3:42:e0:65:1a:
e1:af:9b:59:f5:16:6e:bb:90:01:fe:3e:a8:a1:8e:88:79:5e:
e7:a2:47:36:65:8d:44:e1:69:0c:bd:18:e1:91:06:0e:b7:87:
a3:2b:c0:10:85:f0:76:d6:da:8b:a1:60:f5:11:43:5f:20:54:
70:52:72:90:88:12:49:c5:78:6e:04:eb:2e:27:07:c4:71:92:
71:db:fb:13:4a:f9:da:a6:b2:1a:1b:f0:91:ed:19:13:4c:01:
a0:ed:97:33:ee:0f:a4:33:43:92:8a:eb:3a:6f:9f:fe:ec:44:
ef:93:1c:5e:e9:bf:1c:ec:95:3e:95:0c:b5:23:25:40:19:73:
65:dd:00:bf:d7:3d:24:32:ab:c5:5f:78:d7:99:d7:da:0c:05:
f6:74:84:46:33:4c:01:5d:79:ba:9b:ea:55:3b:8f:f8:f3:3f:
69:a6:26:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3U8QczcPZeav8f9QgkzejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMDAwNmUwNTg5NmY2ZmZiMzAxNjFlN2M4ZGRhMmY5YWQw
NWI1NjEwHhcNMjUwNjE2MDYwMTA3WhcNMjUwNjE3MDYwMTA3WjAzMTEwLwYDVQQD
Eyg4NTAxZWRjMDE2NDg4ZTVmZDc0ZjhkY2QxZGRiZjZlOWNlM2U0ZGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tIhw6x8KAbL09PmWYyLcBNB/B3Q
iqaPtqodMxDlYQNVlMioMVMYNz5epPvonz54FZSEFdm/oYXxPhFlUXmqdRn1/p+L
NBoiOOiNddrL8N3ZB5MRQg9SvvBMnFTny/CbJihmHnd4tR5RfOYTkHQdsbekgWXl
QPyyF7q0C8lbglKK0Or2yyg/ci+J7JNBagBTMJ1pxENqwt30fOZSVNlrjJUT8Ox0
Goym5PblIFcD3HK1O0lD4Of8M+SPwIk8uJzbf1y3cKql60Hy+sv1uHmUk6MDOZ2p
JROiLXtx1rfKS0jLgWaFlDROkrK7tKhN2ERDmtFRAgvY22jHZ+l0+s0lDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUB7cAWSI5f10+NzR3b9unOPk2iMB8GA1UdIwQY
MBaAFEwABuBYlvb/swFh58jdovmtBbVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEFBRzRGaVc5di16QVdIbnlOMmktYTBGdFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iN2Y4MzktYzY4MC00NWVhLWE4ZWUt
MTMwODdiZWJkMWU0LzEvVEFBRzRGaVc5di16QVdIbnlOMmktYTBGdFdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9iN2Y4MzktYzY4MC00NWVhLWE4ZWUtMTMwODdiZWJkMWU0
LzEvVEFBRzRGaVc5di16QVdIbnlOMmktYTBGdFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTBbh0nF
kGyC1r8A+EC4XMFmN+mXxLVT9/s6G5MWfQQvKfjEhwXp66Qv/AhDiZsJ67SIfYYd
7JPrP3bEIQjFG7fNfsWAUD+FU/zQA74MIv6QvqeDttNC4GUa4a+bWfUWbruQAf4+
qKGOiHle56JHNmWNROFpDL0Y4ZEGDreHoyvAEIXwdtbai6Fg9RFDXyBUcFJykIgS
ScV4bgTrLicHxHGScdv7E0r52qayGhvwke0ZE0wBoO2XM+4PpDNDkorrOm+f/uxE
75McXum/HOyVPpUMtSMlQBlzZd0Av9c9JDKrxV9415nX2gwF9nSERjNMAV15upvq
VTuP+PM/aaYmJQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:14:40 2025 by rpki-client