Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
File: TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft (raw, json)
Hash identifier: bzliS3D6xQVH0NT5D5/j3PAmnocRZyvmivNAtjUCUs4=
Subject key identifier: A9:41:03:B2:AB:F9:00:A1:2B:53:DC:D3:31:F4:9F:55:D7:1F:E4:FD
Authority key identifier: 4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
Certificate issuer: /CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Certificate serial: 019769CF0CB381F10D0D95DB2FD0101C704E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 15:01:06 +0000
Manifest this update: Fri 13 Jun 2025 15:01:06 +0000
Manifest next update: Sat 14 Jun 2025 15:01:06 +0000
Files and hashes: 1: TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl (hash: dpy61W5EljQuyJcEo06aQKKCy08oeyLgR2u8MX9GhKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:0c:b3:81:f1:0d:0d:95:db:2f:d0:10:1c:70:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Validity
Not Before: Jun 13 15:01:06 2025 GMT
Not After : Jun 14 15:01:06 2025 GMT
Subject: CN=a94103b2abf900a12b53dcd331f49f55d71fe4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:b5:ca:24:df:de:b2:5c:0f:3d:62:1c:3a:
6d:e9:7b:65:1a:35:e3:bc:ff:d6:10:12:67:ba:54:
36:c3:e4:1b:2d:36:64:a4:73:e2:23:c0:c8:63:6f:
b6:eb:c9:b3:ae:e6:42:5f:39:07:b1:e2:2f:45:a3:
82:a4:ff:92:71:45:c2:72:01:be:49:f0:db:7c:8b:
fc:e8:bd:47:1e:87:49:cc:45:84:3f:12:e6:42:23:
b5:d1:e6:1b:5b:e7:28:2c:3b:a4:59:ba:2e:c1:9f:
5a:de:a7:65:eb:82:16:df:a4:e8:30:f4:81:ca:68:
85:d7:c5:db:e0:99:a4:9b:18:af:30:11:0e:05:12:
ee:6c:05:ef:64:db:51:29:55:58:7b:4b:ae:35:48:
ea:d1:cb:9e:00:35:68:26:85:2b:db:47:a3:aa:98:
ef:a3:d6:8a:4f:06:64:91:a7:09:de:7c:55:2f:55:
1f:82:e9:55:1f:5b:8f:ce:03:ff:11:f6:08:42:04:
3f:a7:6d:7c:33:a2:49:fd:5d:3a:cd:6c:d3:e5:66:
12:94:31:8c:c6:62:61:83:4f:eb:c9:0e:d8:2a:b5:
f6:84:e5:87:2c:8b:85:a8:46:29:18:07:f8:4f:5d:
e0:50:84:ea:91:0f:89:6b:26:08:3e:74:17:a1:2c:
d0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:41:03:B2:AB:F9:00:A1:2B:53:DC:D3:31:F4:9F:55:D7:1F:E4:FD
X509v3 Authority Key Identifier:
keyid:4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:71:45:ec:97:d9:97:8a:94:6d:bc:7a:fb:40:c4:fd:a2:e1:
11:57:69:b8:c8:b9:5f:95:05:9d:e4:1d:8a:aa:12:db:46:09:
51:8b:56:1c:a0:82:e2:71:c6:74:5b:d1:5b:21:9d:b2:38:4b:
73:13:07:a5:65:7c:6c:fe:30:38:46:6b:43:9c:f4:27:f0:1d:
f0:6b:2f:19:63:f0:48:a5:35:33:30:c4:ad:de:83:f3:23:78:
13:7c:34:b2:9b:8a:69:0c:54:b6:f6:5d:1e:de:2b:1f:b5:30:
5f:51:de:c9:8c:e3:1c:16:e7:1b:f4:77:29:cd:aa:cd:d0:fc:
1a:36:f8:3c:c0:4b:5b:f6:ee:f6:7f:d5:2d:c0:02:cb:a3:c4:
90:fb:1c:e9:49:d8:02:08:1d:d3:eb:51:42:67:3d:4c:c6:60:
a7:24:1d:80:f8:5f:cc:3d:8b:27:15:2e:bd:59:e7:a9:29:0a:
7a:6a:49:25:f5:e3:02:78:78:bc:d3:73:04:a6:00:34:12:02:
d8:8d:f2:23:e5:12:db:f7:35:43:de:7c:59:a7:dc:36:27:37:
5e:86:47:a3:b1:85:40:3f:cd:47:47:52:d7:76:30:dd:e3:36:
89:8f:cd:cc:4c:22:44:ee:82:e8:64:0a:b4:f9:a2:62:8f:db:
4d:0a:25:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzwyzgfENDZXbL9AQHHBOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNGNmY2U2MGM5YjBmMmQ0N2IzNjI4NjRkOGZlYmIyMjVi
YjUyNDQwHhcNMjUwNjEzMTUwMTA2WhcNMjUwNjE0MTUwMTA2WjAzMTEwLwYDVQQD
EyhhOTQxMDNiMmFiZjkwMGExMmI1M2RjZDMzMWY0OWY1NWQ3MWZlNGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlu1yiTf3rJcDz1iHDpt6XtlGjXj
vP/WEBJnulQ2w+QbLTZkpHPiI8DIY2+268mzruZCXzkHseIvRaOCpP+ScUXCcgG+
SfDbfIv86L1HHodJzEWEPxLmQiO10eYbW+coLDukWbouwZ9a3qdl64IW36ToMPSB
ymiF18Xb4JmkmxivMBEOBRLubAXvZNtRKVVYe0uuNUjq0cueADVoJoUr20ejqpjv
o9aKTwZkkacJ3nxVL1UfgulVH1uPzgP/EfYIQgQ/p218M6JJ/V06zWzT5WYSlDGM
xmJhg0/ryQ7YKrX2hOWHLIuFqEYpGAf4T13gUITqkQ+JayYIPnQXoSzQmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlBA7Kr+QChK1Pc0zH0n1XXH+T9MB8GA1UdIwQY
MBaAFExM/OYMmw8tR7Nihk2P67Ilu1JEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEV6ODVneWJEeTFIczJLR1RZX3JzaVc3VWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iZjhiMGUtYmVkYS00YTU2LWJhZjAt
ODJhZDExNjI2ZWVkLzEvVEV6ODVneWJEeTFIczJLR1RZX3JzaVc3VWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9iZjhiMGUtYmVkYS00YTU2LWJhZjAtODJhZDExNjI2ZWVk
LzEvVEV6ODVneWJEeTFIczJLR1RZX3JzaVc3VWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXFF7JfZ
l4qUbbx6+0DE/aLhEVdpuMi5X5UFneQdiqoS20YJUYtWHKCC4nHGdFvRWyGdsjhL
cxMHpWV8bP4wOEZrQ5z0J/Ad8GsvGWPwSKU1MzDErd6D8yN4E3w0spuKaQxUtvZd
Ht4rH7UwX1HeyYzjHBbnG/R3Kc2qzdD8Gjb4PMBLW/bu9n/VLcACy6PEkPsc6UnY
Aggd0+tRQmc9TMZgpyQdgPhfzD2LJxUuvVnnqSkKempJJfXjAnh4vNNzBKYANBIC
2I3yI+US2/c1Q958WafcNic3XoZHo7GFQD/NR0dS13Yw3eM2iY/NzEwiRO6C6GQK
tPmiYo/bTQolBQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:58:13 2025 by rpki-client