Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
File: tpJFTBZpZIbPBx7Rjnl240BJCfs.mft (raw, json)
Hash identifier: 1+wZ5R/zlWjYQloayEwknDbMYomOW5eFx6jxGCHj8Fs=
Subject key identifier: 1E:87:BD:BE:9F:F4:07:99:D0:8F:AD:A5:77:42:83:03:95:36:83:69
Authority key identifier: B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
Certificate issuer: /CN=b692454c16696486cf071ed18e7976e3404909fb
Certificate serial: 019768BC0817F20E6FA89DD9AFA0C60B492C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
Manifest number: 09DB
Signing time: Fri 13 Jun 2025 10:00:42 +0000
Manifest this update: Fri 13 Jun 2025 10:00:42 +0000
Manifest next update: Sat 14 Jun 2025 10:00:42 +0000
Files and hashes: 1: 5czF8Od9k1lGzWbwlN6JD9EQv3o.roa (hash: xQiXSp/PKEr54Bt774G49z92F24A1eFshYT3vR6Fw2c=)
2: tpJFTBZpZIbPBx7Rjnl240BJCfs.crl (hash: KnzEcmD/4DTmm39HOftM3nhOUyWU7PaHKu8cTccqQYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:08:17:f2:0e:6f:a8:9d:d9:af:a0:c6:0b:49:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b692454c16696486cf071ed18e7976e3404909fb
Validity
Not Before: Jun 13 10:00:42 2025 GMT
Not After : Jun 14 10:00:42 2025 GMT
Subject: CN=1e87bdbe9ff40799d08fada57742830395368369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:17:53:86:9b:80:76:f6:6b:4d:04:5d:4f:c2:
4a:af:51:8b:3a:60:1d:e8:75:0e:08:d2:d8:a8:4c:
e5:18:3e:f0:ab:83:af:fd:d4:09:73:b3:fb:f3:25:
8e:d1:90:fc:ea:cb:da:c5:ae:67:08:bb:4f:f1:60:
be:09:ac:76:36:80:54:e7:f6:8a:5f:10:6f:de:11:
65:02:99:ed:2d:cf:d4:c1:65:25:db:c1:1f:85:bd:
a4:24:cd:39:dc:60:44:ed:03:68:15:c8:5e:a8:c0:
f7:0e:6f:da:2f:c4:8e:d0:a1:47:fe:b5:44:e2:e9:
96:60:f3:9b:43:67:ce:ae:a6:d0:8c:44:75:d3:59:
87:d3:1d:fb:36:3e:48:f5:20:33:09:ba:6a:ee:8f:
33:13:de:07:ad:0c:95:ad:8c:6f:41:8f:d7:5a:47:
a0:71:10:73:de:e3:d5:2c:6b:fa:95:a2:14:b7:07:
aa:55:34:c8:c5:77:8f:53:76:7d:31:c3:a6:2f:9e:
ef:48:9d:06:1e:34:a6:e6:0e:e2:86:7d:70:3e:7b:
b5:2b:1b:77:d6:61:77:dc:2b:26:65:87:b7:14:10:
e9:fc:6e:6d:4c:97:55:6d:59:bb:e5:2e:5c:cf:86:
73:34:2a:59:0d:e6:40:fc:92:d9:ba:d3:94:dd:f1:
57:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:87:BD:BE:9F:F4:07:99:D0:8F:AD:A5:77:42:83:03:95:36:83:69
X509v3 Authority Key Identifier:
keyid:B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b1:25:01:fe:d9:33:8d:37:96:7a:be:4d:d3:cf:27:33:1b:
9f:45:f9:df:a9:3b:b1:7d:85:ce:e0:2f:89:9d:03:f4:b1:0e:
4a:6d:bc:74:63:da:17:25:2b:fa:9b:77:63:aa:51:7d:c7:f4:
62:29:e4:b6:29:1c:46:03:c8:6e:a4:c2:48:55:00:03:0b:2b:
ba:52:c8:94:74:9b:1b:f7:4a:aa:d9:b8:86:24:25:fe:75:53:
60:43:82:70:82:75:57:29:0b:85:67:6b:7a:17:60:0b:d7:5c:
0a:68:fe:b6:b9:40:75:25:d2:32:bb:6f:db:c0:3c:a1:3b:b1:
55:23:96:f0:48:24:86:d2:9f:c7:85:f2:9e:fd:7f:a9:dc:4c:
d6:ae:8f:38:b4:bf:de:d0:60:61:c7:6e:ab:33:5d:aa:0f:da:
39:68:43:d3:a6:6f:e1:e9:00:4b:42:1b:1f:af:2b:ce:42:cf:
89:7e:93:0d:09:71:55:d5:db:2d:ef:e3:d3:9e:6f:76:93:8c:
2b:5f:9b:d7:a0:04:69:73:4f:d6:e0:dd:95:e0:94:e9:8c:be:
d6:18:a8:fe:d0:58:8d:76:09:48:98:b8:b5:86:5e:c9:06:48:
42:b6:cf:82:d1:db:ed:21:95:4d:91:16:a3:8e:34:bf:3a:7b:
82:65:10:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdovAgX8g5vqJ3Zr6DGC0ksMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OTI0NTRjMTY2OTY0ODZjZjA3MWVkMThlNzk3NmUzNDA0
OTA5ZmIwHhcNMjUwNjEzMTAwMDQyWhcNMjUwNjE0MTAwMDQyWjAzMTEwLwYDVQQD
EygxZTg3YmRiZTlmZjQwNzk5ZDA4ZmFkYTU3NzQyODMwMzk1MzY4MzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xdThpuAdvZrTQRdT8JKr1GLOmAd
6HUOCNLYqEzlGD7wq4Ov/dQJc7P78yWO0ZD86svaxa5nCLtP8WC+Cax2NoBU5/aK
XxBv3hFlApntLc/UwWUl28Efhb2kJM053GBE7QNoFcheqMD3Dm/aL8SO0KFH/rVE
4umWYPObQ2fOrqbQjER101mH0x37Nj5I9SAzCbpq7o8zE94HrQyVrYxvQY/XWkeg
cRBz3uPVLGv6laIUtweqVTTIxXePU3Z9McOmL57vSJ0GHjSm5g7ihn1wPnu1Kxt3
1mF33CsmZYe3FBDp/G5tTJdVbVm75S5cz4ZzNCpZDeZA/JLZutOU3fFX1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6Hvb6f9AeZ0I+tpXdCgwOVNoNpMB8GA1UdIwQY
MBaAFLaSRUwWaWSGzwce0Y55duNASQn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHBKRlRCWnBaSWJQQng3UmpubDI0MEJKQ2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9iZDE3M2QtNmNmNS00MjUwLWFhMjYt
NGE2ZjcxN2M3NTY0LzEvdHBKRlRCWnBaSWJQQng3UmpubDI0MEJKQ2ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9iZDE3M2QtNmNmNS00MjUwLWFhMjYtNGE2ZjcxN2M3NTY0
LzEvdHBKRlRCWnBaSWJQQng3UmpubDI0MEJKQ2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbElAf7Z
M403lnq+TdPPJzMbn0X536k7sX2FzuAviZ0D9LEOSm28dGPaFyUr+pt3Y6pRfcf0
YinktikcRgPIbqTCSFUAAwsrulLIlHSbG/dKqtm4hiQl/nVTYEOCcIJ1VykLhWdr
ehdgC9dcCmj+trlAdSXSMrtv28A8oTuxVSOW8EgkhtKfx4Xynv1/qdxM1q6POLS/
3tBgYcduqzNdqg/aOWhD06Zv4ekAS0IbH68rzkLPiX6TDQlxVdXbLe/j055vdpOM
K1+b16AEaXNP1uDdleCU6Yy+1hio/tBYjXYJSJi4tYZeyQZIQrbPgtHb7SGVTZEW
o440vzp7gmUQ+w==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:48 2025 by rpki-client