Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: drzeym4BnVLmlHw/+eIu0y3YE1zCU5nzC+2d3a4S32g=
Subject key identifier: 2E:1B:19:2C:C1:20:62:01:52:A8:0F:06:32:D4:AE:8B:23:8C:4D:0B
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 0196783167B0CE069F03E6D2DA218101FF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 09C6
Signing time: Sun 27 Apr 2025 17:00:25 +0000
Manifest this update: Sun 27 Apr 2025 17:00:25 +0000
Manifest next update: Mon 28 Apr 2025 17:00:25 +0000
Files and hashes: 1: E8fqlMMExB61QIsEKMENcZNpWcs.roa (hash: BmnUAt4AevLzEKuzLNe+ibP+z5vcZguaEireBbRJdHM=)
2: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: 0v5WhSYE4S/cVp/LZoZJ0wXiv305VixUlENedly1je8=)
3: gXlhbbxVLQVqCMGvhejieNdtoBY.roa (hash: 8u7C6SqKmEB/oIEa7cYGrPkrur0B3bFj0WV0Kh36+qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:67:b0:ce:06:9f:03:e6:d2:da:21:81:01:ff:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Apr 27 17:00:25 2025 GMT
Not After : Apr 28 17:00:25 2025 GMT
Subject: CN=2e1b192cc120620152a80f0632d4ae8b238c4d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:95:70:d2:fc:a5:8c:3c:d4:ce:9a:4c:1c:
8e:93:cd:29:7c:44:7a:19:f8:6b:7d:9b:96:e1:2a:
19:eb:a5:9b:f7:10:83:df:15:b6:3b:3f:10:91:1e:
5d:1b:25:d5:94:a4:c6:8b:e3:ca:eb:b7:41:39:db:
85:e3:bb:7f:5a:d1:f3:b8:bc:26:3e:cd:6f:2b:e5:
e8:01:36:80:f7:e0:0f:42:14:19:e3:d7:77:3f:c8:
72:fe:1e:49:60:ec:f3:00:72:b8:2a:5b:10:18:7e:
e4:be:bd:49:08:4c:b5:85:7c:74:e7:2d:e3:92:8a:
f2:cf:b8:44:ee:22:2e:0e:2b:2d:a2:72:b2:e4:0e:
7d:b2:d5:7e:60:bb:7a:7e:2b:52:7b:5c:26:3d:5d:
d8:fc:47:ed:89:c2:57:68:d2:0f:82:24:02:ee:be:
e5:d4:08:0a:4a:34:d8:06:f5:56:77:2f:7e:71:50:
a0:9f:a3:31:17:37:d7:5e:bd:4a:c5:56:d0:fc:1a:
12:c0:2b:c3:94:51:08:8e:a3:db:df:42:67:54:42:
99:bb:d8:ac:73:76:17:8d:fb:7c:3f:77:87:10:2b:
05:3e:d5:ee:38:d3:16:ce:22:f8:be:c2:19:4e:bf:
9e:6a:8e:15:c0:ac:38:f1:d1:cb:d6:c1:07:61:ac:
9c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1B:19:2C:C1:20:62:01:52:A8:0F:06:32:D4:AE:8B:23:8C:4D:0B
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:bd:48:7a:d5:00:9f:21:0c:f9:f4:4b:82:52:f7:e5:6b:05:
4a:7e:98:c0:70:19:1e:2a:dd:98:1d:c7:5a:c9:e8:e0:a1:39:
b0:d2:4e:93:3a:6a:81:4b:98:33:b4:4f:10:09:f0:f4:0f:33:
9d:e2:81:40:95:41:d2:0e:88:15:f3:32:78:cc:e5:bc:e4:9e:
ea:b8:8f:1c:40:37:fb:89:95:d1:64:d9:2d:52:43:86:49:90:
d3:fa:00:80:df:27:31:ac:32:3a:52:fc:13:f8:a6:98:41:f9:
8f:17:8c:56:ee:d6:07:51:8c:a1:db:64:ea:b8:f7:15:77:a8:
da:bf:c0:7b:9a:a1:ff:da:29:ba:48:b1:cc:ff:0e:1a:14:3e:
72:f2:51:77:cb:57:de:f6:5f:aa:fa:68:57:ce:ca:ed:e3:aa:
b3:eb:6d:40:59:04:8e:d3:b3:25:cc:51:03:90:2d:9e:cd:b5:
6f:a0:45:d8:ac:2c:66:21:4a:b3:a2:f6:b9:96:a9:72:17:8d:
09:7c:d8:94:a8:bc:d3:c4:0c:8b:d7:4a:51:97:77:af:08:ce:
8e:41:c3:23:7c:2d:35:a8:fd:64:73:16:cc:8f:07:3d:6d:f4:
16:c5:50:cb:6d:d8:90:6b:15:07:92:34:16:55:50:14:df:ed:
62:cc:93:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4MWewzgafA+bS2iGBAf8gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMjNlMmVkYjMyMWUxYThhNWNlOWVlM2UyZDk1YWE0MGYw
ZGU4YTAwHhcNMjUwNDI3MTcwMDI1WhcNMjUwNDI4MTcwMDI1WjAzMTEwLwYDVQQD
EygyZTFiMTkyY2MxMjA2MjAxNTJhODBmMDYzMmQ0YWU4YjIzOGM0ZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa2VcNL8pYw81M6aTByOk80pfER6
GfhrfZuW4SoZ66Wb9xCD3xW2Oz8QkR5dGyXVlKTGi+PK67dBOduF47t/WtHzuLwm
Ps1vK+XoATaA9+APQhQZ49d3P8hy/h5JYOzzAHK4KlsQGH7kvr1JCEy1hXx05y3j
koryz7hE7iIuDistonKy5A59stV+YLt6fitSe1wmPV3Y/EfticJXaNIPgiQC7r7l
1AgKSjTYBvVWdy9+cVCgn6MxFzfXXr1KxVbQ/BoSwCvDlFEIjqPb30JnVEKZu9is
c3YXjft8P3eHECsFPtXuONMWziL4vsIZTr+eao4VwKw48dHL1sEHYaycXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4bGSzBIGIBUqgPBjLUrosjjE0LMB8GA1UdIwQY
MBaAFE0j4u2zIeGopc6e4+LZWqQPDeigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNGUwN2UtMTVmYy00OTQyLTg0MmEt
NTM4NTA5ZjNhNzg5LzEvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lNGUwN2UtMTVmYy00OTQyLTg0MmEtNTM4NTA5ZjNhNzg5
LzEvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXL1IetUA
nyEM+fRLglL35WsFSn6YwHAZHirdmB3HWsno4KE5sNJOkzpqgUuYM7RPEAnw9A8z
neKBQJVB0g6IFfMyeMzlvOSe6riPHEA3+4mV0WTZLVJDhkmQ0/oAgN8nMawyOlL8
E/immEH5jxeMVu7WB1GModtk6rj3FXeo2r/Ae5qh/9opukixzP8OGhQ+cvJRd8tX
3vZfqvpoV87K7eOqs+ttQFkEjtOzJcxRA5Atns21b6BF2KwsZiFKs6L2uZapcheN
CXzYlKi808QMi9dKUZd3rwjOjkHDI3wtNaj9ZHMWzI8HPW30FsVQy23YkGsVB5I0
FlVQFN/tYsyTzw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:38:04 2025 by rpki-client