Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
File: TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft (raw, json)
Hash identifier: d6AkKcQwNir18RdpIhRIV6pWsnEk1VrJsqwofyfwRjM=
Subject key identifier: C7:72:85:17:24:ED:7B:4E:96:34:F6:6D:58:7F:C1:27:32:DD:05:C8
Authority key identifier: 4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3
Certificate issuer: /CN=4c8343edc843542f529fbc3e650cb6578c9206c3
Certificate serial: 019769CE8E4D7BB56FA49A1FE50C58B48366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
Manifest number: 0DE8
Signing time: Fri 13 Jun 2025 15:00:33 +0000
Manifest this update: Fri 13 Jun 2025 15:00:33 +0000
Manifest next update: Sat 14 Jun 2025 15:00:33 +0000
Files and hashes: 1: TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl (hash: z87wPI0PqZaDOa4qN3gk/kZsnYFLGWrFgQioONnY7hc=)
2: yO8yGDlp-pgPsfCtW6-Sdqgf6z8.roa (hash: SH391E3HYBBZSzKR5WZ5E1ALuIU3dss9i9wIgwa0Lyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:8e:4d:7b:b5:6f:a4:9a:1f:e5:0c:58:b4:83:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8343edc843542f529fbc3e650cb6578c9206c3
Validity
Not Before: Jun 13 15:00:33 2025 GMT
Not After : Jun 14 15:00:33 2025 GMT
Subject: CN=c772851724ed7b4e9634f66d587fc12732dd05c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:ec:d2:ae:84:32:a9:d2:c1:9c:42:30:1e:
fe:83:3f:69:5d:06:57:84:0d:ec:00:09:2d:46:6d:
f0:19:1e:9c:9b:47:2d:72:ee:bd:04:e2:d5:e2:7b:
30:37:17:71:c8:22:8b:b6:2f:d8:d0:44:3d:24:55:
87:ef:87:6e:e2:02:68:51:33:6e:0e:6f:ba:c5:6c:
36:f4:0a:5b:48:bb:c7:d1:ca:f1:bd:cc:5d:ce:f4:
3d:41:bc:71:4f:17:c3:5f:af:72:6a:59:45:22:ac:
38:6e:b1:01:a3:69:17:17:cf:93:f4:3e:d0:f4:93:
09:47:2e:c7:d3:f8:14:d0:86:8e:75:1e:a3:9e:86:
9c:8e:26:30:f3:75:a0:76:a5:8b:98:52:a2:b8:cf:
da:cb:04:0e:f5:cf:2a:18:6a:6f:16:03:19:ad:b3:
6c:94:d7:9e:ef:6b:1b:76:33:0a:98:4f:37:1d:d4:
86:a7:45:6d:61:eb:68:d7:f4:20:26:4f:af:a2:80:
d9:3d:ed:46:e5:41:fb:45:05:b7:83:7a:10:17:6e:
2f:c7:aa:a7:67:e1:e3:fe:61:17:ee:8f:08:1c:2c:
5e:16:30:16:d8:31:bf:09:4f:33:a1:7d:9a:49:81:
c6:42:43:04:4b:02:a2:a1:9c:02:43:4c:04:d4:fc:
d7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:72:85:17:24:ED:7B:4E:96:34:F6:6D:58:7F:C1:27:32:DD:05:C8
X509v3 Authority Key Identifier:
keyid:4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b1:ab:e1:8f:8e:d4:e7:62:bc:44:b1:75:ea:70:31:dd:b7:
25:50:10:eb:df:16:e3:22:11:f9:35:57:dc:68:ac:10:94:e7:
e5:46:66:9a:5c:15:bb:95:31:fd:3d:b5:bb:b6:15:84:11:98:
46:15:7e:c5:39:9e:21:7e:d8:19:64:d3:38:8e:02:3b:bd:1b:
9f:bd:6a:12:56:f6:01:84:f5:90:e0:3b:52:a5:ad:72:78:88:
91:40:d1:27:17:58:0a:74:87:01:96:f5:8d:ee:10:e4:3e:09:
6f:7b:9d:7b:eb:91:e5:fe:f9:a5:ed:79:f4:07:2e:7d:51:7b:
9b:00:4b:5a:42:73:44:7e:64:ee:65:49:e7:7b:31:c5:bf:c8:
cf:f3:58:14:89:48:5b:8d:74:91:29:b9:e7:00:d1:9d:8f:d6:
99:4a:0b:a0:de:78:f3:1c:ee:83:96:df:15:d5:28:ca:ad:93:
bd:77:87:ad:2c:41:34:6c:23:96:a7:ba:b9:54:2a:e3:47:36:
29:13:e3:a6:4b:b3:65:65:62:e0:93:ef:b9:51:6c:61:bd:23:
cd:e8:54:54:32:c7:84:e1:7a:a0:96:60:9d:7f:46:d1:77:d0:
5c:12:97:f3:af:1f:aa:33:04:48:e6:18:42:d5:8e:19:5a:0a:
40:35:70:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzo5Ne7VvpJof5QxYtINmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjODM0M2VkYzg0MzU0MmY1MjlmYmMzZTY1MGNiNjU3OGM5
MjA2YzMwHhcNMjUwNjEzMTUwMDMzWhcNMjUwNjE0MTUwMDMzWjAzMTEwLwYDVQQD
EyhjNzcyODUxNzI0ZWQ3YjRlOTYzNGY2NmQ1ODdmYzEyNzMyZGQwNWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4bs0q6EMqnSwZxCMB7+gz9pXQZX
hA3sAAktRm3wGR6cm0ctcu69BOLV4nswNxdxyCKLti/Y0EQ9JFWH74du4gJoUTNu
Dm+6xWw29ApbSLvH0crxvcxdzvQ9QbxxTxfDX69yallFIqw4brEBo2kXF8+T9D7Q
9JMJRy7H0/gU0IaOdR6jnoacjiYw83WgdqWLmFKiuM/aywQO9c8qGGpvFgMZrbNs
lNee72sbdjMKmE83HdSGp0VtYeto1/QgJk+vooDZPe1G5UH7RQW3g3oQF24vx6qn
Z+Hj/mEX7o8IHCxeFjAW2DG/CU8zoX2aSYHGQkMESwKioZwCQ0wE1PzX9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdyhRck7XtOljT2bVh/wScy3QXIMB8GA1UdIwQY
MBaAFEyDQ+3IQ1QvUp+8PmUMtleMkgbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVElORDdjaERWQzlTbjd3LVpReTJWNHlTQnNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC84ZTgyMTgtNmZiNi00ZTY5LTkyZTYt
ZTljZTI5MWQyMThmLzEvVElORDdjaERWQzlTbjd3LVpReTJWNHlTQnNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC84ZTgyMTgtNmZiNi00ZTY5LTkyZTYtZTljZTI5MWQyMThm
LzEvVElORDdjaERWQzlTbjd3LVpReTJWNHlTQnNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLGr4Y+O
1OdivESxdepwMd23JVAQ698W4yIR+TVX3GisEJTn5UZmmlwVu5Ux/T21u7YVhBGY
RhV+xTmeIX7YGWTTOI4CO70bn71qElb2AYT1kOA7UqWtcniIkUDRJxdYCnSHAZb1
je4Q5D4Jb3ude+uR5f75pe159AcufVF7mwBLWkJzRH5k7mVJ53sxxb/Iz/NYFIlI
W410kSm55wDRnY/WmUoLoN548xzug5bfFdUoyq2TvXeHrSxBNGwjlqe6uVQq40c2
KRPjpkuzZWVi4JPvuVFsYb0jzehUVDLHhOF6oJZgnX9G0XfQXBKX868fqjMESOYY
QtWOGVoKQDVwEA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:17 2025 by rpki-client