Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
File: tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft (raw, json)
Hash identifier: 02Cn7RR/jTxa3oUUqMWnFess6ntCH5eUOge4Hmh67q8=
Subject key identifier: 3A:63:A0:C3:DE:22:54:F1:EE:D4:84:C0:2E:2C:2C:2B:6F:87:2E:89
Authority key identifier: B4:A6:C2:07:42:82:22:F6:3F:C9:CB:A8:39:D0:DB:D9:A6:95:0B:31
Certificate issuer: /CN=b4a6c207428222f63fc9cba839d0dbd9a6950b31
Certificate serial: 01976EF4D2972E67288675B862C0A07C44E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
Manifest number: 44
Signing time: Sat 14 Jun 2025 15:00:27 +0000
Manifest this update: Sat 14 Jun 2025 15:00:27 +0000
Manifest next update: Sun 15 Jun 2025 15:00:27 +0000
Files and hashes: 1: tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl (hash: u31JuKVGce7D5d1dX72T9xmLMNHMdYaruHyVK/2AKpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:d2:97:2e:67:28:86:75:b8:62:c0:a0:7c:44:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a6c207428222f63fc9cba839d0dbd9a6950b31
Validity
Not Before: Jun 14 15:00:27 2025 GMT
Not After : Jun 15 15:00:27 2025 GMT
Subject: CN=3a63a0c3de2254f1eed484c02e2c2c2b6f872e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bb:14:c4:20:24:f2:81:c4:b2:cb:88:89:27:
84:39:5d:47:21:67:dd:a4:48:63:19:99:32:b3:af:
15:87:b0:83:a8:56:af:58:2c:1e:d9:45:f8:9a:b2:
12:82:9a:f0:da:41:2b:2b:6e:a5:8f:c1:f5:6d:28:
5f:21:af:ad:fa:fd:45:0e:29:a7:a2:3d:58:65:65:
26:b1:52:c1:28:c0:43:f4:d4:d1:7d:16:a9:33:27:
00:1e:ea:43:a2:3c:be:6f:06:4c:b9:24:1a:93:fd:
80:c7:e1:1d:e1:96:65:47:3e:c8:8b:2e:6d:2f:7d:
68:29:90:34:24:30:dd:54:48:dc:0c:41:b3:2c:72:
12:20:74:2f:8e:eb:0b:3e:ba:7f:5b:ca:aa:3b:d0:
09:98:8c:e4:5f:9b:83:06:30:49:12:95:cf:7c:b2:
db:f3:8f:3d:96:d2:0c:3e:c3:62:ef:e7:d6:a8:96:
24:7f:a0:b9:9f:6e:de:4f:50:d9:cf:20:5f:bc:76:
f5:74:0c:fd:86:1d:81:99:f6:c2:9c:08:db:79:33:
c4:17:2f:56:c5:6b:dc:24:05:83:4f:9d:80:a2:19:
b0:ae:d3:d8:60:6a:de:25:b6:84:d3:df:90:0f:ec:
3a:d1:ef:b1:47:73:fd:cb:5e:6d:18:89:31:f3:68:
a9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:63:A0:C3:DE:22:54:F1:EE:D4:84:C0:2E:2C:2C:2B:6F:87:2E:89
X509v3 Authority Key Identifier:
keyid:B4:A6:C2:07:42:82:22:F6:3F:C9:CB:A8:39:D0:DB:D9:A6:95:0B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:24:dd:98:07:2e:ff:f1:96:32:be:ad:3c:d5:5f:5c:a7:ab:
7d:65:90:af:42:c5:9e:8c:bf:0a:e6:f8:22:19:dc:ba:b6:37:
30:9f:3e:fc:0d:fb:b7:63:c4:d8:23:7b:fc:69:b2:ce:49:e1:
7e:4b:ef:0b:5d:6a:9d:de:ea:5b:e5:e3:ae:c2:60:17:fb:db:
2d:d3:d5:e3:79:64:f1:c4:e9:be:43:dd:37:16:ce:e7:e4:60:
b0:c9:96:76:a0:cc:d7:78:26:9a:44:e4:5b:fe:4b:c6:f4:de:
53:1f:cf:7b:b6:b3:7e:af:ac:b0:27:85:81:39:69:7d:19:cb:
01:86:80:7a:46:f9:66:84:ad:b3:a2:7f:51:be:b7:d7:d3:66:
2e:16:3b:a5:43:82:5d:2b:78:0f:ac:c6:a6:bc:5d:f3:5a:46:
23:7b:05:7c:74:8a:c0:3f:91:f2:96:52:46:c7:4b:26:86:ad:
62:f3:13:9a:e9:87:d6:fb:ad:f5:43:7c:ae:43:07:36:4c:c9:
9c:2a:cc:7a:e5:a5:23:e9:78:08:f3:92:7f:0c:45:a0:35:33:
da:23:eb:a6:63:3d:11:27:4a:d8:b2:db:9b:83:d1:cf:13:8a:
9d:53:a4:36:f0:6b:38:f6:2c:1f:3c:ce:99:70:de:7b:32:f0:
9c:7b:30:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9NKXLmcohnW4YsCgfEToMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YTZjMjA3NDI4MjIyZjYzZmM5Y2JhODM5ZDBkYmQ5YTY5
NTBiMzEwHhcNMjUwNjE0MTUwMDI3WhcNMjUwNjE1MTUwMDI3WjAzMTEwLwYDVQQD
EygzYTYzYTBjM2RlMjI1NGYxZWVkNDg0YzAyZTJjMmMyYjZmODcyZTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobsUxCAk8oHEssuIiSeEOV1HIWfd
pEhjGZkys68Vh7CDqFavWCwe2UX4mrISgprw2kErK26lj8H1bShfIa+t+v1FDimn
oj1YZWUmsVLBKMBD9NTRfRapMycAHupDojy+bwZMuSQak/2Ax+Ed4ZZlRz7Iiy5t
L31oKZA0JDDdVEjcDEGzLHISIHQvjusLPrp/W8qqO9AJmIzkX5uDBjBJEpXPfLLb
8489ltIMPsNi7+fWqJYkf6C5n27eT1DZzyBfvHb1dAz9hh2BmfbCnAjbeTPEFy9W
xWvcJAWDT52AohmwrtPYYGreJbaE09+QD+w60e+xR3P9y15tGIkx82ipTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpjoMPeIlTx7tSEwC4sLCtvhy6JMB8GA1UdIwQY
MBaAFLSmwgdCgiL2P8nLqDnQ29mmlQsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEtiQ0IwS0NJdllfeWN1b09kRGIyYWFWQ3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82NTE0MjEtMzMwMC00ODg2LWJiZTUt
ODRhYmNmYmNkZjVlLzEvdEtiQ0IwS0NJdllfeWN1b09kRGIyYWFWQ3pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82NTE0MjEtMzMwMC00ODg2LWJiZTUtODRhYmNmYmNkZjVl
LzEvdEtiQ0IwS0NJdllfeWN1b09kRGIyYWFWQ3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESTdmAcu
//GWMr6tPNVfXKerfWWQr0LFnoy/Cub4IhncurY3MJ8+/A37t2PE2CN7/Gmyzknh
fkvvC11qnd7qW+XjrsJgF/vbLdPV43lk8cTpvkPdNxbO5+RgsMmWdqDM13gmmkTk
W/5LxvTeUx/Pe7azfq+ssCeFgTlpfRnLAYaAekb5ZoSts6J/Ub6319NmLhY7pUOC
XSt4D6zGprxd81pGI3sFfHSKwD+R8pZSRsdLJoatYvMTmumH1vut9UN8rkMHNkzJ
nCrMeuWlI+l4CPOSfwxFoDUz2iPrpmM9ESdK2LLbm4PRzxOKnVOkNvBrOPYsHzzO
mXDeezLwnHswKg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:11:34 2025 by rpki-client