Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
File: TCuJw8V6PilqpAYelihAvnro8Bg.mft (raw, json)
Hash identifier: TcwJPyyuLbbYLR+QMxsyUDcIW0cSRxbZQzOYnNXUqSs=
Subject key identifier: A8:B9:07:73:37:55:FC:DC:3D:9E:0A:D1:B8:46:4E:58:1D:B0:7C:47
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial: 01976DAB2F59FEE1E390891D7043EE9DB588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
Manifest number: 15A4
Signing time: Sat 14 Jun 2025 09:00:24 +0000
Manifest this update: Sat 14 Jun 2025 09:00:24 +0000
Manifest next update: Sun 15 Jun 2025 09:00:24 +0000
Files and hashes: 1: 1-dPM2O3Cq9rlPw_b3Bu58i_7ZQ.roa (hash: XqoYwMiUKjvv4+p3alYpBpdcCSNGWvnPPZeCLArAN1Y=)
2: AW8f1Sghrh8luWoSov2j0EZGy_0.roa (hash: U2vLNq7NQxJcwwJPbea0BifLKX9AZzxjKL7mEvlEow4=)
3: TCuJw8V6PilqpAYelihAvnro8Bg.crl (hash: RN1MCRo9dfufRY7r3JiuXjgwK1MfmGzJ8UVShtCYBRc=)
4: Vr7IufA3C9NGikBSGaXPWfPn02s.roa (hash: X+swUdsmsoD9I6W5uD/P9WRwAMBsf3kXls0seEffEoQ=)
5: Y09DAS9bLh1xAHqahYhLrCah7Do.roa (hash: KsGpd22HLjZmnPLG6DA0cJZZzK6h+S5QA/ADl1ffSag=)
6: _EI-DCtehkQJuSEZGP7N7ioX6Zg.roa (hash: uPXDlP3jf6C/noTaAyluTTWys0GZfmXGo9pUC5iBPfs=)
7: mYNoys889JEKo9j4oNdbRCLL9Zk.roa (hash: ZoVXON/ZR01LA7q9fnPxWvUyfhqGTxcjz/v5GxIUwf0=)
8: tIGmW-EI2nrWk4qC7j5FTTvEcKw.roa (hash: KGRsrUvfWuNnw7M6OrT2LhIDhaEzLkzjBqoyrd5RfaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:2f:59:fe:e1:e3:90:89:1d:70:43:ee:9d:b5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Validity
Not Before: Jun 14 09:00:24 2025 GMT
Not After : Jun 15 09:00:24 2025 GMT
Subject: CN=a8b907733755fcdc3d9e0ad1b8464e581db07c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:47:7c:1b:18:11:83:64:9f:ab:ec:88:3f:
46:ff:81:44:d9:c8:1d:8f:4d:3d:25:e0:1b:db:1d:
8c:b7:ea:40:8d:fe:54:2e:cf:f3:8b:b5:03:04:19:
54:1f:47:1a:67:17:5e:3f:cc:b1:f1:73:54:15:46:
f5:da:15:f5:74:9d:08:b9:b0:c5:cc:ee:a9:89:54:
c6:07:b5:db:25:5f:ff:c1:3d:78:dd:11:89:ce:04:
19:5d:f2:4c:9d:42:84:90:6f:8a:f0:fb:22:e0:d5:
32:f9:84:7c:7a:f2:de:1f:e6:9b:cc:98:c3:0a:be:
59:bf:53:f7:ca:fb:a3:1e:74:d3:97:02:1e:47:63:
51:73:8b:44:a4:7f:90:21:19:0e:79:dc:6b:a3:3d:
e3:cc:dd:6d:54:e8:b8:99:ab:08:6e:c0:9f:3c:00:
b0:bc:c9:e5:f8:54:1f:66:42:18:1d:5e:1e:b0:39:
df:f8:7b:4f:c8:19:ce:cb:7f:ee:c1:54:ba:e1:02:
a9:19:7d:f7:00:20:b6:62:11:67:6c:4d:66:89:12:
4a:1c:53:cb:9c:be:b3:6f:54:d5:26:d4:4b:b2:9d:
3f:79:27:90:7d:04:fd:67:f1:94:91:bb:6d:d1:64:
de:af:6b:4d:b4:ab:cd:8b:c8:50:c9:e5:63:81:8f:
74:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B9:07:73:37:55:FC:DC:3D:9E:0A:D1:B8:46:4E:58:1D:B0:7C:47
X509v3 Authority Key Identifier:
keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5e:b2:25:10:a5:e3:08:63:a8:b3:7b:ce:68:d4:41:31:6c:
d9:73:e9:ee:6f:ae:0f:33:5c:bd:0e:ac:61:9c:c7:d9:b6:62:
23:1c:c4:bf:0e:e9:2a:39:88:06:ae:19:d6:3d:08:04:18:82:
15:78:45:67:8d:41:4c:7a:fe:4d:cb:58:20:c0:6d:3c:35:66:
78:7e:95:b8:3d:60:63:be:92:d3:8d:79:fa:5b:a3:bb:05:b7:
9a:bd:9c:eb:05:8d:37:10:be:19:b3:d7:bd:78:1c:a9:d1:ba:
55:f7:a8:21:15:22:0e:55:47:5b:32:7f:1e:63:00:19:6e:b3:
79:ee:71:92:54:13:5e:09:0e:99:cb:c9:59:ed:6f:10:42:2e:
f2:9c:89:90:b8:cb:1f:70:a7:53:7b:ed:9f:e5:ca:cb:a0:13:
12:6c:49:17:8c:5a:a2:57:29:e9:fd:82:4d:7c:71:72:e1:4b:
a0:87:05:66:76:d3:f6:10:43:cd:43:96:91:e2:79:5d:26:33:
6c:21:40:d8:3d:3e:ba:28:8a:64:a7:4c:a9:0d:79:2c:bb:63:
ea:77:78:89:34:64:b8:a3:43:b7:53:e9:07:6b:93:fb:0d:9e:
ee:a5:0e:79:75:3a:93:75:21:3a:fa:ae:b5:5c:67:04:82:1d:
cb:30:42:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtqy9Z/uHjkIkdcEPunbWIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMmI4OWMzYzU3YTNlMjk2YWE0MDYxZTk2Mjg0MGJlN2Fl
OGYwMTgwHhcNMjUwNjE0MDkwMDI0WhcNMjUwNjE1MDkwMDI0WjAzMTEwLwYDVQQD
EyhhOGI5MDc3MzM3NTVmY2RjM2Q5ZTBhZDFiODQ2NGU1ODFkYjA3YzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbNHfBsYEYNkn6vsiD9G/4FE2cgd
j009JeAb2x2Mt+pAjf5ULs/zi7UDBBlUH0caZxdeP8yx8XNUFUb12hX1dJ0IubDF
zO6piVTGB7XbJV//wT143RGJzgQZXfJMnUKEkG+K8Psi4NUy+YR8evLeH+abzJjD
Cr5Zv1P3yvujHnTTlwIeR2NRc4tEpH+QIRkOedxroz3jzN1tVOi4masIbsCfPACw
vMnl+FQfZkIYHV4esDnf+HtPyBnOy3/uwVS64QKpGX33ACC2YhFnbE1miRJKHFPL
nL6zb1TVJtRLsp0/eSeQfQT9Z/GUkbtt0WTer2tNtKvNi8hQyeVjgY90AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKi5B3M3VfzcPZ4K0bhGTlgdsHxHMB8GA1UdIwQY
MBaAFEwricPFej4paqQGHpYoQL566PAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQt
MTEyOGU1Y2U2YTViLzEvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQtMTEyOGU1Y2U2YTVi
LzEvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGl6yJRCl
4whjqLN7zmjUQTFs2XPp7m+uDzNcvQ6sYZzH2bZiIxzEvw7pKjmIBq4Z1j0IBBiC
FXhFZ41BTHr+TctYIMBtPDVmeH6VuD1gY76S0415+lujuwW3mr2c6wWNNxC+GbPX
vXgcqdG6VfeoIRUiDlVHWzJ/HmMAGW6zee5xklQTXgkOmcvJWe1vEEIu8pyJkLjL
H3CnU3vtn+XKy6ATEmxJF4xaolcp6f2CTXxxcuFLoIcFZnbT9hBDzUOWkeJ5XSYz
bCFA2D0+uiiKZKdMqQ15LLtj6nd4iTRkuKNDt1PpB2uT+w2e7qUOeXU6k3UhOvqu
tVxnBIIdyzBCwg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:04:12 2025 by rpki-client