Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
File: TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json)
Hash identifier: Ptx3xoynxzjWTrWDOSudGpqObC/EC5NMuxjraRUPTzQ=
Subject key identifier: DD:7A:E1:6C:FE:AA:7E:B4:93:29:D0:79:4D:E4:AE:6C:50:2F:BF:3C
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial: 01976961712078334CD806FBFA8419E8785C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
Manifest number: 127B
Signing time: Fri 13 Jun 2025 13:01:22 +0000
Manifest this update: Fri 13 Jun 2025 13:01:22 +0000
Manifest next update: Sat 14 Jun 2025 13:01:22 +0000
Files and hashes: 1: H36xXwuB9FJ3ESjpo_XmH_KZ2R4.roa (hash: CUtTMRPtfP9rNsMoQeZ2J44Z+jwTnsWRsKW5k/0LKug=)
2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: oh7j3vBU0ZbqPdyYjmKBnS+dxOmJb9nID7zQBeC72dE=)
3: tpqvdlW8wuSttlFQd80uk4F5YQY.roa (hash: yDvp+gGPiyhARcManoLZEVb02KcZ7k4JkC3clhGu75w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:71:20:78:33:4c:d8:06:fb:fa:84:19:e8:78:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Validity
Not Before: Jun 13 13:01:22 2025 GMT
Not After : Jun 14 13:01:22 2025 GMT
Subject: CN=dd7ae16cfeaa7eb49329d0794de4ae6c502fbf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:fc:29:2d:ef:d4:ed:a5:9c:d9:92:41:eb:
4e:73:65:2b:76:51:a4:2a:4d:22:fe:ff:fc:ee:8c:
e6:24:5c:58:d1:30:bf:96:9c:cb:30:5d:33:e2:a1:
a7:5d:d6:43:b7:65:87:93:a4:28:39:6d:05:1e:cf:
11:60:49:d4:f6:f2:0b:17:9d:e0:e1:ca:03:6f:4d:
0b:4a:23:81:61:9d:93:18:9f:e8:63:57:2a:4f:2d:
47:13:27:32:44:1b:95:18:d9:eb:22:92:32:f7:ca:
5d:c1:af:c6:a2:dd:e6:84:bf:66:bc:c3:31:2a:68:
4f:86:0c:4c:f8:99:53:0b:d0:aa:8d:6e:2c:c4:12:
38:12:26:61:5b:64:45:7a:53:de:df:1c:86:e3:ee:
07:d6:8a:d8:65:1f:3c:55:bc:9d:9b:94:13:23:5a:
af:01:cd:0c:5d:e6:00:87:4f:4f:e3:1c:d5:a1:58:
50:87:68:59:b7:92:0e:61:01:13:e5:c5:4a:8e:04:
8c:2b:8e:e4:0a:e0:fb:bc:23:16:98:e9:4a:a6:c9:
94:0e:0a:00:8e:64:d1:ca:76:14:d6:80:d5:3c:f2:
ab:88:81:ae:29:ab:b9:04:2e:b8:fe:98:95:81:91:
d8:3d:b9:5c:f8:97:c5:1f:11:ee:60:1a:a3:4c:62:
e8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7A:E1:6C:FE:AA:7E:B4:93:29:D0:79:4D:E4:AE:6C:50:2F:BF:3C
X509v3 Authority Key Identifier:
keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2f:e3:45:8c:db:d1:c2:62:3d:58:4f:93:5b:06:ef:05:f4:
53:7e:c1:e8:13:6b:d6:af:dc:89:17:1c:8f:dc:cb:61:16:83:
9a:6c:78:c3:71:9a:14:36:da:9a:d7:b5:38:c8:de:aa:e1:1f:
21:0d:61:df:28:73:93:9d:c6:3b:e1:a6:92:5a:bb:f5:4f:89:
d6:f8:d6:4b:e3:dc:54:8f:11:d4:bd:81:00:a0:b6:13:a3:4a:
75:63:f4:68:62:8f:b9:83:f5:d0:67:d8:61:b8:41:29:af:d3:
4a:6f:35:03:47:51:94:52:4e:5a:9c:26:38:e4:5b:77:85:75:
9b:a0:7b:00:69:95:6e:2c:8d:9f:6e:de:2e:c0:d0:1f:47:af:
98:ea:b5:ce:5f:bb:20:b6:30:ea:55:0d:af:cc:a3:d7:04:be:
7a:c0:32:f3:57:b3:a5:13:f7:9b:60:50:f2:b2:fd:4c:c4:b0:
03:18:83:92:ea:24:29:0e:4c:78:a2:4f:f7:da:d9:06:02:9f:
46:b2:50:e3:a5:e8:31:16:a9:5b:9d:47:b6:2d:e6:ca:1e:74:
46:96:34:ad:ed:c5:c7:9b:5c:cf:ec:e4:ec:f9:a3:23:02:c6:
af:2e:b9:a3:72:ef:a9:ac:3f:9e:ee:60:85:bb:15:62:9a:2f:
80:e5:26:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYXEgeDNM2Ab7+oQZ6HhcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMWIwYzQwOTY5MDgwOTU3ZmNjZWUxZmI4YTNmYjRiYjM4
YmY1ZGMwHhcNMjUwNjEzMTMwMTIyWhcNMjUwNjE0MTMwMTIyWjAzMTEwLwYDVQQD
EyhkZDdhZTE2Y2ZlYWE3ZWI0OTMyOWQwNzk0ZGU0YWU2YzUwMmZiZjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhn8KS3v1O2lnNmSQetOc2UrdlGk
Kk0i/v/87ozmJFxY0TC/lpzLMF0z4qGnXdZDt2WHk6QoOW0FHs8RYEnU9vILF53g
4coDb00LSiOBYZ2TGJ/oY1cqTy1HEycyRBuVGNnrIpIy98pdwa/Got3mhL9mvMMx
KmhPhgxM+JlTC9CqjW4sxBI4EiZhW2RFelPe3xyG4+4H1orYZR88Vbydm5QTI1qv
Ac0MXeYAh09P4xzVoVhQh2hZt5IOYQET5cVKjgSMK47kCuD7vCMWmOlKpsmUDgoA
jmTRynYU1oDVPPKriIGuKau5BC64/piVgZHYPblc+JfFHxHuYBqjTGLoEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN164Wz+qn60kynQeU3krmxQL788MB8GA1UdIwQY
MBaAFEwbDECWkICVf8zuH7ij+0uzi/XcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMt
OTRjODI1NGJkM2I3LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMtOTRjODI1NGJkM2I3
LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaC/jRYzb
0cJiPVhPk1sG7wX0U37B6BNr1q/ciRccj9zLYRaDmmx4w3GaFDbamte1OMjequEf
IQ1h3yhzk53GO+Gmklq79U+J1vjWS+PcVI8R1L2BAKC2E6NKdWP0aGKPuYP10GfY
YbhBKa/TSm81A0dRlFJOWpwmOORbd4V1m6B7AGmVbiyNn27eLsDQH0evmOq1zl+7
ILYw6lUNr8yj1wS+esAy81ezpRP3m2BQ8rL9TMSwAxiDkuokKQ5MeKJP99rZBgKf
RrJQ46XoMRapW51Hti3myh50RpY0re3Fx5tcz+zk7PmjIwLGry65o3Lvqaw/nu5g
hbsVYpovgOUmpQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:13 2025 by rpki-client