Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
File: tTRCGKSIC1AMAzMh52vXi088Flg.mft (raw, json)
Hash identifier: QUeDwIKbfA0ZdsJZ5HMLjXtiU0w/yCJGdy2Wz+d+lrY=
Subject key identifier: BD:B4:F2:61:CF:5C:DA:95:35:97:F8:52:52:68:FC:90:C3:1E:E9:6E
Authority key identifier: B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
Certificate issuer: /CN=b5344218a4880b500c033321e76bd78b4f3c1658
Certificate serial: 0197789CEBEBA520522EA313ACC685BEB447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
Manifest number: 159A
Signing time: Mon 16 Jun 2025 12:00:39 +0000
Manifest this update: Mon 16 Jun 2025 12:00:39 +0000
Manifest next update: Tue 17 Jun 2025 12:00:39 +0000
Files and hashes: 1: 8Pm542mxmtNx79Ipw8aJ3MUUUlw.roa (hash: wUyn8TfNac0yPrEyoAGwGRLxadfovmjunsKwqoO4Tic=)
2: MK5kvHBNAAlnKRq0I1CvZhVF9Ng.roa (hash: ku7EY/yVBZoDpf18kdWwR04OCaLbQDYij0LYSvbt0Ho=)
3: tTRCGKSIC1AMAzMh52vXi088Flg.crl (hash: vlfDnMxC+rbOM728X0zFJU8LjQTpjY2q0p10OFXYECA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:9c:eb:eb:a5:20:52:2e:a3:13:ac:c6:85:be:b4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5344218a4880b500c033321e76bd78b4f3c1658
Validity
Not Before: Jun 16 12:00:39 2025 GMT
Not After : Jun 17 12:00:39 2025 GMT
Subject: CN=bdb4f261cf5cda953597f8525268fc90c31ee96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:ef:7a:48:98:34:72:b6:d9:e8:d2:62:57:
3c:13:24:2d:c9:34:be:92:ae:d4:2d:4b:c2:2a:51:
e9:30:82:85:a6:39:b5:0a:2a:fe:62:a0:2f:cb:5d:
25:07:0c:80:fd:b1:43:dd:87:ab:cc:6f:a2:b7:ab:
ba:fe:6a:01:de:a4:06:c4:4b:99:43:01:4b:79:a3:
0e:70:09:ae:db:d0:f8:86:f8:86:46:a9:ca:35:15:
d9:3f:38:45:cc:29:74:6d:72:94:4c:c5:5a:17:48:
07:de:89:6b:5a:92:48:57:d5:cf:26:51:aa:05:a5:
13:40:92:ba:7a:d0:e6:5f:ab:e7:1e:f3:3e:e4:c7:
85:e4:e6:67:a8:66:ac:6a:9e:76:a2:b4:6b:9c:92:
4e:ed:e1:12:8d:62:6e:31:86:bf:96:36:d0:35:1c:
4a:e1:14:88:eb:33:70:3f:21:1d:b0:0b:ba:d0:4c:
79:07:81:f2:d6:2e:3f:e8:45:fe:3c:ea:28:20:40:
00:07:bf:8d:2d:41:52:bb:98:ff:13:21:c7:80:a4:
b0:af:01:68:95:88:60:33:9a:10:30:43:ab:6e:a6:
39:53:0b:67:8a:3c:15:1f:14:eb:81:db:f9:1d:f4:
10:50:53:d8:6c:44:41:74:8f:4a:77:c5:ce:3c:4a:
11:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B4:F2:61:CF:5C:DA:95:35:97:F8:52:52:68:FC:90:C3:1E:E9:6E
X509v3 Authority Key Identifier:
keyid:B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:40:5e:67:e6:f1:25:19:1a:e8:de:10:2a:b5:fc:9f:9a:28:
17:70:94:e9:94:55:2c:48:74:c9:3b:d0:db:13:0e:9d:e8:55:
c6:35:82:68:00:74:bf:37:d0:12:5a:f0:81:fc:fc:4e:cb:f4:
19:96:3f:71:a5:57:e6:04:ad:74:6a:35:20:74:71:ca:f1:75:
ff:0f:22:ea:af:1e:a4:a4:ed:df:4b:05:33:79:b9:2f:b6:15:
24:0f:5b:7a:ee:dd:bb:f2:ac:ef:96:10:ba:6a:9e:a2:af:da:
9d:55:4a:df:19:f4:50:82:e4:c9:fb:5f:0c:4f:34:0e:10:da:
2b:aa:5e:d1:00:52:b1:a0:c0:ae:2e:71:c0:64:0b:9b:6e:d6:
96:46:54:c0:6a:ea:b0:a1:df:f0:6a:7c:0e:04:97:af:82:2d:
f0:14:66:8e:d8:d2:2e:16:27:e0:73:07:0b:12:a2:c1:7f:54:
b9:76:89:fe:55:81:24:b6:d7:5d:de:5a:01:83:2a:dd:a8:9d:
21:e7:be:50:b5:dd:91:e6:05:73:c6:31:79:5a:7a:08:95:25:
90:d0:5d:ba:64:33:72:71:94:57:55:9c:73:f6:12:d4:2d:d5:
fc:e5:ca:b5:8e:86:aa:5f:6b:7d:96:20:ad:13:55:6e:ee:ef:
a7:09:c9:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd4nOvrpSBSLqMTrMaFvrRHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MzQ0MjE4YTQ4ODBiNTAwYzAzMzMyMWU3NmJkNzhiNGYz
YzE2NTgwHhcNMjUwNjE2MTIwMDM5WhcNMjUwNjE3MTIwMDM5WjAzMTEwLwYDVQQD
EyhiZGI0ZjI2MWNmNWNkYTk1MzU5N2Y4NTI1MjY4ZmM5MGMzMWVlOTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6PvekiYNHK22ejSYlc8EyQtyTS+
kq7ULUvCKlHpMIKFpjm1Cir+YqAvy10lBwyA/bFD3YerzG+it6u6/moB3qQGxEuZ
QwFLeaMOcAmu29D4hviGRqnKNRXZPzhFzCl0bXKUTMVaF0gH3olrWpJIV9XPJlGq
BaUTQJK6etDmX6vnHvM+5MeF5OZnqGasap52orRrnJJO7eESjWJuMYa/ljbQNRxK
4RSI6zNwPyEdsAu60Ex5B4Hy1i4/6EX+POooIEAAB7+NLUFSu5j/EyHHgKSwrwFo
lYhgM5oQMEOrbqY5UwtnijwVHxTrgdv5HfQQUFPYbERBdI9Kd8XOPEoR2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL208mHPXNqVNZf4UlJo/JDDHuluMB8GA1UdIwQY
MBaAFLU0QhikiAtQDAMzIedr14tPPBZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFRSQ0dLU0lDMUFNQXpNaDUydlhpMDg4RmxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9kMjgyYmUtN2NhNS00MDBmLWJlODQt
Y2ZhYjEwZDMwNjkzLzEvdFRSQ0dLU0lDMUFNQXpNaDUydlhpMDg4RmxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9kMjgyYmUtN2NhNS00MDBmLWJlODQtY2ZhYjEwZDMwNjkz
LzEvdFRSQ0dLU0lDMUFNQXpNaDUydlhpMDg4RmxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiEBeZ+bx
JRka6N4QKrX8n5ooF3CU6ZRVLEh0yTvQ2xMOnehVxjWCaAB0vzfQElrwgfz8Tsv0
GZY/caVX5gStdGo1IHRxyvF1/w8i6q8epKTt30sFM3m5L7YVJA9beu7du/Ks75YQ
umqeoq/anVVK3xn0UILkyftfDE80DhDaK6pe0QBSsaDAri5xwGQLm27WlkZUwGrq
sKHf8Gp8DgSXr4It8BRmjtjSLhYn4HMHCxKiwX9UuXaJ/lWBJLbXXd5aAYMq3aid
Iee+ULXdkeYFc8YxeVp6CJUlkNBdumQzcnGUV1Wcc/YS1C3V/OXKtY6Gql9rfZYg
rRNVbu7vpwnJzQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:19:35 2025 by rpki-client