Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
File: TNkIkaeTL3NWqAMznaDM32OtLTU.mft (raw, json)
Hash identifier: wY/ArpaSaaNZfu8O152gU+WNeyD05RkAzo1+WAJlgMI=
Subject key identifier: BC:CF:5E:AD:B3:B6:95:E6:E0:83:A3:15:38:F2:2C:51:2D:7F:E1:CD
Authority key identifier: 4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
Certificate issuer: /CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Certificate serial: 01976C2B2C1FA379B6897D84CDFCBF847B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
Manifest number: 79
Signing time: Sat 14 Jun 2025 02:00:58 +0000
Manifest this update: Sat 14 Jun 2025 02:00:58 +0000
Manifest next update: Sun 15 Jun 2025 02:00:58 +0000
Files and hashes: 1: GPp0CA4dJEmXPt3FvKOuB6Y1Ajo.roa (hash: /WVZb52tGGnvS1Lpmu++5VCxojp2nMgaocCDFVDfPQY=)
2: TNkIkaeTL3NWqAMznaDM32OtLTU.crl (hash: W9jjpjg1cZAKrmX3ntzRqfPi3els0eBXjqaOLOW6Yko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:2c:1f:a3:79:b6:89:7d:84:cd:fc:bf:84:7b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Validity
Not Before: Jun 14 02:00:58 2025 GMT
Not After : Jun 15 02:00:58 2025 GMT
Subject: CN=bccf5eadb3b695e6e083a31538f22c512d7fe1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:90:87:65:fb:50:14:ad:dc:d2:13:b7:69:da:
d0:4a:b6:51:1d:60:02:7f:39:9e:08:e4:ff:1d:78:
2c:4f:7c:e2:90:bd:6e:29:52:31:54:aa:e7:1e:03:
f9:b7:5d:2a:3e:12:da:19:84:d8:70:84:73:59:88:
7f:0f:dc:2b:3d:75:76:04:17:a6:c0:2d:f3:a4:b5:
a3:09:61:4b:bc:87:68:6a:ee:e2:64:3b:33:36:a2:
a7:9d:8b:e8:6e:e3:97:38:de:41:5a:35:d6:f7:b6:
c1:85:d8:b8:e6:1a:3b:7a:24:2d:71:9e:c4:94:af:
f7:e5:fb:04:e0:e3:4e:2f:60:c3:ab:26:0c:9f:1c:
2b:69:cb:0b:03:7c:48:1d:c7:50:4e:86:68:09:08:
92:f9:12:42:bc:7e:c3:fd:7e:fe:8c:e6:73:06:d1:
c3:bc:b6:ed:a4:b5:5c:3e:3b:db:fb:b4:a4:36:b7:
2a:4f:47:f3:40:f5:61:08:78:fb:9d:d6:19:53:93:
b6:41:52:a8:c4:e9:50:5a:e7:83:8f:fb:8b:a6:53:
e0:f7:78:24:18:78:b3:fa:ff:ec:ef:24:1f:53:06:
4b:2c:11:b1:5c:c2:94:49:c3:df:95:74:f7:be:6c:
3e:53:71:fb:f1:1e:26:08:04:2f:a4:20:6a:64:8c:
00:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CF:5E:AD:B3:B6:95:E6:E0:83:A3:15:38:F2:2C:51:2D:7F:E1:CD
X509v3 Authority Key Identifier:
keyid:4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e9:ac:87:c9:fa:7c:b9:10:39:75:56:c9:e2:7f:76:4f:59:
40:57:90:83:bb:6b:37:d0:57:5b:50:52:0a:14:55:ef:95:a6:
a5:25:96:52:ee:7b:75:5e:14:ae:12:dc:a9:2b:18:98:b1:72:
dd:8b:76:5f:73:89:dd:16:8a:66:d7:81:ea:f3:8a:23:14:e7:
2d:e2:11:c9:15:a5:8a:f1:0e:e8:a2:07:74:ce:30:cb:4e:43:
ee:13:91:84:2a:07:c6:c8:be:02:79:ca:9c:54:df:b0:ce:6b:
2b:f1:77:f4:41:c8:ee:3a:ef:2b:e2:e9:25:e2:57:a1:b4:b7:
b0:dc:cf:b9:6f:0c:8c:2a:fb:9b:3a:29:b1:a6:d7:f5:ba:5a:
ab:db:dc:7e:bf:d4:2d:24:5e:f6:59:c4:eb:34:e3:ed:33:aa:
7d:19:ce:aa:3a:b4:c0:75:8a:bc:c2:90:0f:0d:c7:78:14:32:
0e:74:8b:6a:17:ce:1b:f8:4a:b8:29:36:3c:f8:b2:4c:7e:87:
fb:1f:c6:7d:bb:1e:1b:26:6f:25:b2:96:c5:6a:17:94:77:8a:
68:e6:cf:af:cd:35:a5:52:11:f8:1c:0a:0f:be:fb:54:eb:38:
2c:b6:4a:cb:1a:39:c9:c0:fc:78:08:2a:60:77:83:02:99:f1:
bb:50:74:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsKywfo3m2iX2Ezfy/hHtrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZDkwODkxYTc5MzJmNzM1NmE4MDMzMzlkYTBjY2RmNjNh
ZDJkMzUwHhcNMjUwNjE0MDIwMDU4WhcNMjUwNjE1MDIwMDU4WjAzMTEwLwYDVQQD
EyhiY2NmNWVhZGIzYjY5NWU2ZTA4M2EzMTUzOGYyMmM1MTJkN2ZlMWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JCHZftQFK3c0hO3adrQSrZRHWAC
fzmeCOT/HXgsT3zikL1uKVIxVKrnHgP5t10qPhLaGYTYcIRzWYh/D9wrPXV2BBem
wC3zpLWjCWFLvIdoau7iZDszNqKnnYvobuOXON5BWjXW97bBhdi45ho7eiQtcZ7E
lK/35fsE4ONOL2DDqyYMnxwracsLA3xIHcdQToZoCQiS+RJCvH7D/X7+jOZzBtHD
vLbtpLVcPjvb+7SkNrcqT0fzQPVhCHj7ndYZU5O2QVKoxOlQWueDj/uLplPg93gk
GHiz+v/s7yQfUwZLLBGxXMKUScPflXT3vmw+U3H78R4mCAQvpCBqZIwADQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzPXq2ztpXm4IOjFTjyLFEtf+HNMB8GA1UdIwQY
MBaAFEzZCJGnky9zVqgDM52gzN9jrS01MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE5rSWthZVRMM05XcUFNem5hRE0zMk90TFRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82YTkzNzgtMmZhNy00ODJkLThjN2Mt
NjljYTRjYjY1Zjk3LzEvVE5rSWthZVRMM05XcUFNem5hRE0zMk90TFRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82YTkzNzgtMmZhNy00ODJkLThjN2MtNjljYTRjYjY1Zjk3
LzEvVE5rSWthZVRMM05XcUFNem5hRE0zMk90TFRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApemsh8n6
fLkQOXVWyeJ/dk9ZQFeQg7trN9BXW1BSChRV75WmpSWWUu57dV4UrhLcqSsYmLFy
3Yt2X3OJ3RaKZteB6vOKIxTnLeIRyRWlivEO6KIHdM4wy05D7hORhCoHxsi+AnnK
nFTfsM5rK/F39EHI7jrvK+LpJeJXobS3sNzPuW8MjCr7mzopsabX9bpaq9vcfr/U
LSRe9lnE6zTj7TOqfRnOqjq0wHWKvMKQDw3HeBQyDnSLahfOG/hKuCk2PPiyTH6H
+x/GfbseGyZvJbKWxWoXlHeKaObPr801pVIR+BwKD777VOs4LLZKyxo5ycD8eAgq
YHeDApnxu1B0Vw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:13:15 2025 by rpki-client