Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
File: TuQFf56gFAzvfOR4k2nFzwH3xo4.mft (raw, json)
Hash identifier: sdyQ1mZebMGLlbQ+HDg8Z3IZYg5ktwyiuHW97KWacPk=
Subject key identifier: 1A:A8:BB:FC:C9:4F:5F:03:E1:28:43:72:14:01:94:20:B0:09:92:E7
Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Certificate serial: 01977E9F744F706C9A7D26C002D670F06C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
Manifest number: 13EE
Signing time: Tue 17 Jun 2025 16:01:08 +0000
Manifest this update: Tue 17 Jun 2025 16:01:08 +0000
Manifest next update: Wed 18 Jun 2025 16:01:08 +0000
Files and hashes: 1: CEuXJrDVGtc7Z4aBHwivyFbJk6I.roa (hash: YlEuDFYK1ghHbSy2lJ7W4OAiAQ8b74GXZr4K2Q1Nk+o=)
2: TuQFf56gFAzvfOR4k2nFzwH3xo4.crl (hash: yYkfPGktRz+h0ARGSpqqYGApu8bEqQYBv0G33NJWFuM=)
3: zQYGnUVB4bBy-t9A3BsXP2JPTI8.roa (hash: yYhiUqDeYjOIAS1CW8QCSgxrWRWrSjdPUM0N7RvDxVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:9f:74:4f:70:6c:9a:7d:26:c0:02:d6:70:f0:6c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Validity
Not Before: Jun 17 16:01:08 2025 GMT
Not After : Jun 18 16:01:08 2025 GMT
Subject: CN=1aa8bbfcc94f5f03e128437214019420b00992e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:10:0d:9c:5a:3d:55:ba:63:39:f9:3c:ba:06:
66:53:5d:65:d3:58:32:54:42:4f:9c:e2:70:97:f2:
48:45:62:0e:07:ad:10:43:49:da:9f:e9:28:1a:30:
ee:2e:7f:a8:5c:1f:d3:45:c0:a9:16:0e:d4:5d:9a:
e9:68:f0:28:96:69:5a:3d:25:de:96:00:3f:4d:cb:
6d:4d:6e:0f:b5:7c:06:79:b2:5a:56:68:75:7c:f0:
4c:a6:bd:99:62:9d:14:a1:17:e1:c3:98:82:f9:35:
ad:14:dc:21:bc:23:85:81:4a:f2:76:66:e0:19:99:
07:de:41:f8:3e:f5:74:93:14:01:41:7f:85:00:48:
36:3e:e1:49:1d:a8:a5:db:b7:7e:91:73:3f:b4:34:
58:91:ee:57:88:23:5e:c6:05:42:91:49:75:12:bf:
66:d0:b0:c1:0b:a5:71:96:50:0c:21:8b:ae:31:37:
9c:7a:c3:a2:07:e1:08:4b:1c:25:51:b2:41:43:8a:
b6:b3:a1:4b:ba:7c:f6:e0:66:08:2e:d7:1d:d5:ea:
7a:e8:01:05:40:84:4c:32:df:66:c8:eb:3d:17:7f:
9d:f1:1c:82:e1:1b:a7:8f:68:06:ab:1f:31:78:3d:
ae:90:40:cb:80:40:0f:b9:2a:e5:a5:71:de:d3:89:
18:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A8:BB:FC:C9:4F:5F:03:E1:28:43:72:14:01:94:20:B0:09:92:E7
X509v3 Authority Key Identifier:
keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a5:18:c9:b0:02:bd:9f:b9:19:70:38:2a:c3:af:06:20:61:
51:b0:85:27:87:2f:fe:54:d2:f2:69:23:45:58:d9:db:b7:5b:
c1:ad:40:5a:2a:a8:e7:f1:25:be:9e:6f:a0:a7:b8:c8:30:08:
37:e2:7e:f2:16:db:40:8c:c1:bc:16:7e:14:96:4f:c2:54:c0:
27:3b:b9:de:d0:aa:73:08:2f:ab:43:84:45:1b:41:69:0c:e9:
59:d4:5c:67:8b:08:33:49:d1:f6:b3:cb:82:7c:7f:66:77:7e:
0d:d1:75:40:ca:4a:82:32:a0:7c:ee:d8:45:f4:af:25:ad:fe:
60:c6:77:07:ac:13:8b:92:c0:b1:f4:6b:ce:c6:80:d2:db:f2:
6a:d2:41:9d:b4:87:3f:e1:29:71:77:e4:a0:85:ae:44:54:99:
64:c0:65:64:bc:a7:df:60:b2:fe:53:ec:b0:d3:a2:cd:7a:db:
3d:f7:cc:57:15:54:71:8a:5f:54:c9:d4:ac:fd:f8:75:a5:7f:
4e:5d:a3:93:8a:8d:24:0b:e4:f9:eb:69:6e:1e:83:fb:7a:6e:
de:25:80:6a:95:8b:4c:d2:58:72:fe:91:67:2a:26:7e:24:49:
0d:e6:b7:5f:d9:37:b1:9e:08:19:e9:b5:e6:ee:9f:af:9a:4d:
95:7b:68:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd+n3RPcGyafSbAAtZw8GwcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZTQwNTdmOWVhMDE0MGNlZjdjZTQ3ODkzNjljNWNmMDFm
N2M2OGUwHhcNMjUwNjE3MTYwMTA4WhcNMjUwNjE4MTYwMTA4WjAzMTEwLwYDVQQD
EygxYWE4YmJmY2M5NGY1ZjAzZTEyODQzNzIxNDAxOTQyMGIwMDk5MmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxANnFo9VbpjOfk8ugZmU11l01gy
VEJPnOJwl/JIRWIOB60QQ0nan+koGjDuLn+oXB/TRcCpFg7UXZrpaPAolmlaPSXe
lgA/TcttTW4PtXwGebJaVmh1fPBMpr2ZYp0UoRfhw5iC+TWtFNwhvCOFgUrydmbg
GZkH3kH4PvV0kxQBQX+FAEg2PuFJHail27d+kXM/tDRYke5XiCNexgVCkUl1Er9m
0LDBC6VxllAMIYuuMTecesOiB+EISxwlUbJBQ4q2s6FLunz24GYILtcd1ep66AEF
QIRMMt9myOs9F3+d8RyC4Runj2gGqx8xeD2ukEDLgEAPuSrlpXHe04kYZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqou/zJT18D4ShDchQBlCCwCZLnMB8GA1UdIwQY
MBaAFE7kBX+eoBQM73zkeJNpxc8B98aOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHVRRmY1NmdGQXp2Zk9SNGsybkZ6d0gzeG80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jZjJlYmYtMmEwOS00M2QyLWEyMjUt
YTE2NTM1OWE2MjExLzEvVHVRRmY1NmdGQXp2Zk9SNGsybkZ6d0gzeG80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jZjJlYmYtMmEwOS00M2QyLWEyMjUtYTE2NTM1OWE2MjEx
LzEvVHVRRmY1NmdGQXp2Zk9SNGsybkZ6d0gzeG80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqUYybAC
vZ+5GXA4KsOvBiBhUbCFJ4cv/lTS8mkjRVjZ27dbwa1AWiqo5/Elvp5voKe4yDAI
N+J+8hbbQIzBvBZ+FJZPwlTAJzu53tCqcwgvq0OERRtBaQzpWdRcZ4sIM0nR9rPL
gnx/Znd+DdF1QMpKgjKgfO7YRfSvJa3+YMZ3B6wTi5LAsfRrzsaA0tvyatJBnbSH
P+EpcXfkoIWuRFSZZMBlZLyn32Cy/lPssNOizXrbPffMVxVUcYpfVMnUrP34daV/
Tl2jk4qNJAvk+etpbh6D+3pu3iWAapWLTNJYcv6RZyomfiRJDea3X9k3sZ4IGem1
5u6fr5pNlXtoFQ==
-----END CERTIFICATE-----
Generated at Tue Jun 17 22:41:05 2025 by rpki-client