Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
File: TnKscetFB6wKZSpUWY2uRR_jP0c.mft (raw, json)
Hash identifier: xMQOwIpSWpAC4R791OrR8rSxexX23od9mNqWtmaNZqM=
Subject key identifier: AE:49:F0:44:AB:23:E6:45:1C:5B:CA:6C:B9:24:CC:D7:FD:36:AB:7F
Authority key identifier: 4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
Certificate issuer: /CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Certificate serial: 0197715171C4BCBEA6947F72E306E445A86B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
Manifest number: 12BC
Signing time: Sun 15 Jun 2025 02:00:52 +0000
Manifest this update: Sun 15 Jun 2025 02:00:52 +0000
Manifest next update: Mon 16 Jun 2025 02:00:52 +0000
Files and hashes: 1: 4zuoqc0Glu6ApY4rQHmNAlxxavo.roa (hash: qDD4JCBpI34S2Q624/ndlMxJa6qHAv5moxaFgFJvL3I=)
2: TnKscetFB6wKZSpUWY2uRR_jP0c.crl (hash: VxO7PjUpyiThLiASVVsszK0ESzMxLElXqFDP1/9tOnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:71:c4:bc:be:a6:94:7f:72:e3:06:e4:45:a8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Validity
Not Before: Jun 15 02:00:52 2025 GMT
Not After : Jun 16 02:00:52 2025 GMT
Subject: CN=ae49f044ab23e6451c5bca6cb924ccd7fd36ab7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7b:a6:50:de:56:60:a8:52:23:da:4f:36:6e:
03:a5:9d:68:38:07:ea:d8:5a:35:17:a6:9f:df:ef:
16:4f:64:d3:e9:2f:79:d9:3c:2f:47:61:b8:8f:3e:
d1:89:cd:5b:7f:3a:23:a6:3a:6b:8f:6e:dd:c9:4c:
48:35:ad:27:ee:5f:cf:89:4f:f4:eb:d7:59:55:0e:
7a:60:d6:25:f6:db:a2:92:2c:ac:cc:56:01:69:14:
db:9d:33:3c:e0:4e:37:0f:69:92:bb:a9:a7:e7:23:
4c:72:41:c0:0e:e0:98:54:a6:c3:f5:22:df:c4:4c:
8c:3f:e7:12:ea:19:e1:cf:3e:f4:76:6c:ee:b5:eb:
41:f6:cf:b3:c8:3f:37:90:45:cf:ae:2e:a6:b4:67:
8e:ef:cf:97:22:2d:c7:57:04:52:77:68:f4:2d:3f:
22:e8:c7:1b:2c:4f:2e:11:83:8b:3c:8f:a0:a9:38:
33:5b:9f:86:69:6d:06:71:e5:a9:17:9c:85:a7:ed:
99:f5:e2:f5:9c:2f:f1:27:1d:22:64:5a:0f:ef:43:
de:86:e5:80:ba:5d:8d:34:3a:f4:64:fc:1e:c1:02:
fa:ce:87:74:82:d8:b8:50:4d:49:76:2d:97:5a:06:
14:e3:f1:32:00:7d:7b:66:59:f5:d3:51:7c:e5:66:
58:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:49:F0:44:AB:23:E6:45:1C:5B:CA:6C:B9:24:CC:D7:FD:36:AB:7F
X509v3 Authority Key Identifier:
keyid:4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:02:68:6e:da:b0:10:7b:a4:dd:08:59:7b:ed:7a:9f:6e:48:
9a:c0:12:44:5e:b0:dc:99:f7:69:fb:37:43:7c:07:f5:c3:b1:
8b:f5:9c:ee:ea:c4:17:95:0e:76:13:0a:8f:ec:df:66:90:9c:
03:d1:44:43:75:c8:fa:7c:eb:d4:3e:dc:b2:5e:83:78:ef:00:
9a:df:97:1f:db:bc:20:bd:20:1a:1b:ec:0b:b7:c8:a9:df:5c:
52:45:03:3c:29:3c:6f:7a:a5:72:da:d2:20:2b:92:c9:1b:a7:
bf:8f:c8:7a:38:18:34:da:84:5a:82:60:66:03:d2:d0:9c:16:
75:1c:3a:7c:0c:79:a3:7f:0a:54:f4:cc:2b:fd:14:5c:44:4d:
95:ed:6b:ea:54:ed:9b:89:3a:40:36:08:5d:3d:e5:31:0a:4d:
21:57:c8:7f:d1:7a:cc:26:b5:61:32:8e:28:fb:79:fb:9c:c2:
6b:a3:b0:7f:5c:4b:9e:88:e3:38:1a:b4:e7:ec:f0:a4:87:45:
96:88:68:75:e0:3a:cc:42:e5:41:b5:eb:0f:61:0f:bc:0c:d9:
3e:04:d4:b4:af:3e:b4:58:ba:75:a6:03:4c:f6:5d:84:44:b4:
44:2f:fd:cb:9e:91:93:f0:dc:a2:16:f9:4f:70:01:fd:ff:87:
3b:ab:bc:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxUXHEvL6mlH9y4wbkRahrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNzJhYzcxZWI0NTA3YWMwYTY1MmE1NDU5OGRhZTQ1MWZl
MzNmNDcwHhcNMjUwNjE1MDIwMDUyWhcNMjUwNjE2MDIwMDUyWjAzMTEwLwYDVQQD
EyhhZTQ5ZjA0NGFiMjNlNjQ1MWM1YmNhNmNiOTI0Y2NkN2ZkMzZhYjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3umUN5WYKhSI9pPNm4DpZ1oOAfq
2Fo1F6af3+8WT2TT6S952TwvR2G4jz7Ric1bfzojpjprj27dyUxINa0n7l/PiU/0
69dZVQ56YNYl9tuikiyszFYBaRTbnTM84E43D2mSu6mn5yNMckHADuCYVKbD9SLf
xEyMP+cS6hnhzz70dmzutetB9s+zyD83kEXPri6mtGeO78+XIi3HVwRSd2j0LT8i
6McbLE8uEYOLPI+gqTgzW5+GaW0GceWpF5yFp+2Z9eL1nC/xJx0iZFoP70PehuWA
ul2NNDr0ZPwewQL6zod0gti4UE1Jdi2XWgYU4/EyAH17Zln101F85WZYXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5J8ESrI+ZFHFvKbLkkzNf9Nqt/MB8GA1UdIwQY
MBaAFE5yrHHrRQesCmUqVFmNrkUf4z9HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG5Lc2NldEZCNndLWlNwVVdZMnVSUl9qUDBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMDc1MjMtODM5Mi00N2Y1LTgyYjMt
MzBjNDMwYTM5OGU2LzEvVG5Lc2NldEZCNndLWlNwVVdZMnVSUl9qUDBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hMDc1MjMtODM5Mi00N2Y1LTgyYjMtMzBjNDMwYTM5OGU2
LzEvVG5Lc2NldEZCNndLWlNwVVdZMnVSUl9qUDBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAJobtqw
EHuk3QhZe+16n25ImsASRF6w3Jn3afs3Q3wH9cOxi/Wc7urEF5UOdhMKj+zfZpCc
A9FEQ3XI+nzr1D7csl6DeO8Amt+XH9u8IL0gGhvsC7fIqd9cUkUDPCk8b3qlctrS
ICuSyRunv4/IejgYNNqEWoJgZgPS0JwWdRw6fAx5o38KVPTMK/0UXERNle1r6lTt
m4k6QDYIXT3lMQpNIVfIf9F6zCa1YTKOKPt5+5zCa6Owf1xLnojjOBq05+zwpIdF
lohodeA6zELlQbXrD2EPvAzZPgTUtK8+tFi6daYDTPZdhES0RC/9y56Rk/Dcohb5
T3AB/f+HO6u8zA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:38:23 2025 by rpki-client