Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: I4gBXVpZwcEhyAXc6+yN8owpqmAbT17k9oWfHCdzdU0=
Subject key identifier: D9:3A:84:41:A0:0B:89:2C:18:56:EC:1E:89:29:4F:FA:56:4D:25:81
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 01978C5A9AA91B75940D5312E4F4244CE47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 0A55
Signing time: Fri 20 Jun 2025 08:00:37 +0000
Manifest this update: Fri 20 Jun 2025 08:00:37 +0000
Manifest next update: Sat 21 Jun 2025 08:00:37 +0000
Files and hashes: 1: E8fqlMMExB61QIsEKMENcZNpWcs.roa (hash: BmnUAt4AevLzEKuzLNe+ibP+z5vcZguaEireBbRJdHM=)
2: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: fGBPQhK4/xlZrmlIKfW3ucaM8pqtzi4tnZ32t5zfn8c=)
3: gXlhbbxVLQVqCMGvhejieNdtoBY.roa (hash: 8u7C6SqKmEB/oIEa7cYGrPkrur0B3bFj0WV0Kh36+qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:5a:9a:a9:1b:75:94:0d:53:12:e4:f4:24:4c:e4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Jun 20 08:00:37 2025 GMT
Not After : Jun 21 08:00:37 2025 GMT
Subject: CN=d93a8441a00b892c1856ec1e89294ffa564d2581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:90:b3:09:20:73:92:d7:7b:c0:39:76:9b:58:
3c:b6:02:7f:b0:7a:28:df:3b:15:94:a4:ba:71:84:
79:1d:a4:66:33:1c:c2:2f:28:b4:91:43:b1:7e:8d:
f5:d3:96:16:f2:07:82:98:d0:64:62:6b:88:5f:55:
21:1d:82:c5:93:0d:20:62:77:05:d0:1c:0b:c5:7e:
b0:88:f3:ff:b1:b6:2c:a1:db:da:6e:a9:34:85:79:
3f:84:26:fc:16:57:e4:f7:b2:e6:3f:45:90:65:08:
16:d8:eb:ea:23:72:c0:12:51:a2:dc:2e:46:9f:fe:
a0:78:35:a1:92:a6:e4:76:97:b3:50:56:f8:5b:60:
36:b7:3c:fb:3a:19:8e:d3:83:0c:5f:29:41:dd:02:
eb:41:b8:db:e9:5f:5d:d1:73:d1:ad:ab:a1:0f:20:
40:8e:76:e2:77:cc:63:38:f7:ce:db:9c:ab:fc:94:
84:ca:3c:ae:83:1e:15:02:3d:cc:26:df:d9:20:59:
7b:7f:6b:84:1f:cf:64:17:da:0a:ac:9b:a5:02:a6:
a4:83:cf:64:18:a2:68:ac:ba:1c:9b:79:c2:38:8f:
1c:97:b6:22:ff:1c:7e:5b:b4:b1:ad:00:3c:48:0d:
59:08:66:4b:6b:6b:2a:60:f5:e9:5c:98:88:fd:ca:
f9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3A:84:41:A0:0B:89:2C:18:56:EC:1E:89:29:4F:FA:56:4D:25:81
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ce:09:e7:24:6f:c4:c8:93:de:65:03:ef:e4:d3:32:07:0b:
07:40:a9:6a:4b:b3:7c:ac:d8:5e:90:30:25:49:37:79:7e:6d:
5e:54:0e:44:39:5c:44:1a:a9:df:c3:91:55:70:e7:76:01:14:
56:56:78:06:4e:eb:36:e4:b1:39:4e:d5:5f:d3:60:e2:23:6f:
c4:4a:1e:e2:08:35:3f:bf:90:27:81:ea:c4:63:5c:e3:a3:f7:
06:dc:05:5e:e8:17:2f:9e:3c:d5:62:8e:c8:dd:5d:16:d3:37:
f2:2f:8c:91:0d:5b:53:af:d6:54:01:08:42:43:1d:2d:b5:cf:
77:26:61:3b:55:aa:0d:cb:06:56:99:13:58:71:77:de:29:b8:
1e:8b:5d:cf:ef:cc:29:b9:ed:c8:d3:c8:ce:fe:12:f9:64:5e:
07:05:dd:2e:e4:57:aa:03:d8:de:d1:bc:75:52:36:38:3f:3a:
fe:7d:dd:c7:8a:a9:84:ac:82:05:62:99:96:26:fb:4b:52:4b:
33:3d:bb:17:78:f2:e0:75:1a:9b:72:3f:b4:2d:ac:e0:94:c5:
c3:49:e7:13:5e:29:23:95:cc:c3:04:20:35:57:cd:9b:90:13:
96:cf:a6:64:ba:1b:22:67:5b:9a:6c:cb:56:a3:5c:bf:39:1d:
f6:2b:c2:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeMWpqpG3WUDVMS5PQkTOR7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMjNlMmVkYjMyMWUxYThhNWNlOWVlM2UyZDk1YWE0MGYw
ZGU4YTAwHhcNMjUwNjIwMDgwMDM3WhcNMjUwNjIxMDgwMDM3WjAzMTEwLwYDVQQD
EyhkOTNhODQ0MWEwMGI4OTJjMTg1NmVjMWU4OTI5NGZmYTU2NGQyNTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JCzCSBzktd7wDl2m1g8tgJ/sHoo
3zsVlKS6cYR5HaRmMxzCLyi0kUOxfo3105YW8geCmNBkYmuIX1UhHYLFkw0gYncF
0BwLxX6wiPP/sbYsodvabqk0hXk/hCb8Flfk97LmP0WQZQgW2OvqI3LAElGi3C5G
n/6geDWhkqbkdpezUFb4W2A2tzz7OhmO04MMXylB3QLrQbjb6V9d0XPRrauhDyBA
jnbid8xjOPfO25yr/JSEyjyugx4VAj3MJt/ZIFl7f2uEH89kF9oKrJulAqakg89k
GKJorLocm3nCOI8cl7Yi/xx+W7SxrQA8SA1ZCGZLa2sqYPXpXJiI/cr5WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNk6hEGgC4ksGFbsHokpT/pWTSWBMB8GA1UdIwQY
MBaAFE0j4u2zIeGopc6e4+LZWqQPDeigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNGUwN2UtMTVmYy00OTQyLTg0MmEt
NTM4NTA5ZjNhNzg5LzEvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lNGUwN2UtMTVmYy00OTQyLTg0MmEtNTM4NTA5ZjNhNzg5
LzEvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWM4J5yRv
xMiT3mUD7+TTMgcLB0CpakuzfKzYXpAwJUk3eX5tXlQORDlcRBqp38ORVXDndgEU
VlZ4Bk7rNuSxOU7VX9Ng4iNvxEoe4gg1P7+QJ4HqxGNc46P3BtwFXugXL5481WKO
yN1dFtM38i+MkQ1bU6/WVAEIQkMdLbXPdyZhO1WqDcsGVpkTWHF33im4Hotdz+/M
KbntyNPIzv4S+WReBwXdLuRXqgPY3tG8dVI2OD86/n3dx4qphKyCBWKZlib7S1JL
Mz27F3jy4HUam3I/tC2s4JTFw0nnE14pI5XMwwQgNVfNm5ATls+mZLobImdbmmzL
VqNcvzkd9ivCDw==
-----END CERTIFICATE-----
Generated at Fri Jun 20 12:13:51 2025 by rpki-client