Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
File: Tc_QAaZn4WRatAxbvtifWScAT4U.mft (raw, json)
Hash identifier: /bYMXk7nekn9Tvm6pAY++nmXbUd+H/LMdsz72EmdGms=
Subject key identifier: 4B:7B:C4:46:54:8C:01:A1:C1:FC:7B:EF:61:E9:D4:A0:35:06:8A:81
Authority key identifier: 4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
Certificate issuer: /CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Certificate serial: 0197470BC8A95AAA7238B9329FAF07BFE13C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
Manifest number: 09A6
Signing time: Fri 06 Jun 2025 21:00:43 +0000
Manifest this update: Fri 06 Jun 2025 21:00:43 +0000
Manifest next update: Sat 07 Jun 2025 21:00:43 +0000
Files and hashes: 1: Tc_QAaZn4WRatAxbvtifWScAT4U.crl (hash: W86olDjX2ANKnuUJeQvPaPtsKRBMtY1a7NziyCnqSDQ=)
2: jdMFheDlAIgKvi6YF6C6Rm8zqwg.roa (hash: 0uopvNrGmCf9iLiAY1t8oTN34NZD3FhGP5c/aZny+2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:c8:a9:5a:aa:72:38:b9:32:9f:af:07:bf:e1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Validity
Not Before: Jun 6 21:00:43 2025 GMT
Not After : Jun 7 21:00:43 2025 GMT
Subject: CN=4b7bc446548c01a1c1fc7bef61e9d4a035068a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:f2:36:43:82:8b:b7:ad:68:d8:b4:8a:62:
fa:c5:2b:f5:3e:e4:9a:18:95:1b:03:0f:c3:69:de:
d2:94:a8:3b:fb:57:00:16:22:5f:f3:8a:8c:d2:33:
e0:25:ce:27:5e:e5:87:0e:80:fb:38:cb:14:28:20:
a8:58:8a:64:9b:6a:be:2e:16:24:32:bb:5a:f9:71:
bf:9e:cf:56:9e:58:a8:af:4c:13:d5:7e:c9:49:b4:
5f:8f:fe:fa:12:8c:80:34:af:ca:aa:f5:d0:da:6e:
f8:2f:53:bb:1d:37:ba:54:b5:b9:2c:cc:d2:14:fa:
66:ba:04:8a:59:ca:07:56:1d:b0:fa:43:f0:3c:c8:
66:af:f3:e3:6f:64:7a:14:a5:7d:75:48:35:93:12:
b9:6c:49:53:3b:71:b8:2c:e0:4d:f7:8b:52:31:f8:
05:d9:c2:4c:65:ac:a3:16:5e:3d:d2:43:51:74:50:
ea:3a:e1:2f:72:70:af:67:b2:42:90:0d:62:72:df:
c4:a0:20:76:22:09:86:d7:55:63:3f:46:09:d1:3d:
99:a3:c9:e4:38:4b:03:33:de:8a:dc:12:d4:78:3a:
6e:39:86:3b:df:a4:83:fb:58:4d:ae:59:56:31:82:
f6:79:d0:26:2c:64:29:63:43:e6:a1:7a:f8:7d:1b:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7B:C4:46:54:8C:01:A1:C1:FC:7B:EF:61:E9:D4:A0:35:06:8A:81
X509v3 Authority Key Identifier:
keyid:4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:64:d5:7b:ff:fb:20:c9:ac:bb:91:86:f6:5d:4f:03:c9:ae:
9d:50:73:af:46:8f:e8:ae:e6:ad:3f:ce:6c:00:be:4c:95:a7:
5d:e2:18:b9:12:5c:dd:ae:16:bf:f5:cb:b7:e3:6a:11:45:c4:
6f:1b:a7:45:66:06:83:57:ed:78:c0:be:bf:ab:c6:24:a4:82:
f1:9f:de:23:20:b5:a5:c3:f9:d1:9f:c4:21:5d:99:d3:ac:9b:
19:5f:b0:a6:ad:87:3c:d2:96:a9:8c:10:a9:a3:fc:31:28:65:
bd:90:4a:fe:d8:8b:43:b5:75:a9:ea:ed:85:6a:01:da:75:f7:
f4:16:5e:c4:73:63:37:63:d9:72:fe:19:f7:4f:6c:ec:7a:0e:
e2:50:5b:97:cf:25:72:b5:02:ab:da:1d:a7:cc:e6:43:33:c4:
7e:b8:eb:e4:a9:27:16:ca:15:2d:dc:be:6a:73:58:86:57:31:
67:51:d4:b2:83:00:18:a6:ac:80:02:0e:29:33:b7:e0:18:76:
20:a7:ea:22:e3:3d:f4:22:d3:42:d5:c4:98:f6:c5:1c:ea:30:
43:ed:63:15:af:6b:7e:b1:e1:7b:67:ca:07:ca:ee:8a:bf:28:
c5:74:29:b6:70:ac:32:55:c7:85:8c:a8:8b:04:16:da:be:d9:
24:35:bf:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHC8ipWqpyOLkyn68Hv+E8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkY2ZkMDAxYTY2N2UxNjQ1YWI0MGM1YmJlZDg5ZjU5Mjcw
MDRmODUwHhcNMjUwNjA2MjEwMDQzWhcNMjUwNjA3MjEwMDQzWjAzMTEwLwYDVQQD
Eyg0YjdiYzQ0NjU0OGMwMWExYzFmYzdiZWY2MWU5ZDRhMDM1MDY4YTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm/yNkOCi7etaNi0imL6xSv1PuSa
GJUbAw/Dad7SlKg7+1cAFiJf84qM0jPgJc4nXuWHDoD7OMsUKCCoWIpkm2q+LhYk
Mrta+XG/ns9Wnlior0wT1X7JSbRfj/76EoyANK/KqvXQ2m74L1O7HTe6VLW5LMzS
FPpmugSKWcoHVh2w+kPwPMhmr/Pjb2R6FKV9dUg1kxK5bElTO3G4LOBN94tSMfgF
2cJMZayjFl490kNRdFDqOuEvcnCvZ7JCkA1ict/EoCB2IgmG11VjP0YJ0T2Zo8nk
OEsDM96K3BLUeDpuOYY736SD+1hNrllWMYL2edAmLGQpY0PmoXr4fRsYRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEt7xEZUjAGhwfx772Hp1KA1BoqBMB8GA1UdIwQY
MBaAFE3P0AGmZ+FkWrQMW77Yn1knAE+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGNfUUFhWm40V1JhdEF4YnZ0aWZXU2NBVDRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81YmE4MWUtZTI3NC00YmEzLTk1NGQt
YmRmOTRhM2ZiMzJkLzEvVGNfUUFhWm40V1JhdEF4YnZ0aWZXU2NBVDRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81YmE4MWUtZTI3NC00YmEzLTk1NGQtYmRmOTRhM2ZiMzJk
LzEvVGNfUUFhWm40V1JhdEF4YnZ0aWZXU2NBVDRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmTVe//7
IMmsu5GG9l1PA8munVBzr0aP6K7mrT/ObAC+TJWnXeIYuRJc3a4Wv/XLt+NqEUXE
bxunRWYGg1fteMC+v6vGJKSC8Z/eIyC1pcP50Z/EIV2Z06ybGV+wpq2HPNKWqYwQ
qaP8MShlvZBK/tiLQ7V1qerthWoB2nX39BZexHNjN2PZcv4Z909s7HoO4lBbl88l
crUCq9odp8zmQzPEfrjr5KknFsoVLdy+anNYhlcxZ1HUsoMAGKasgAIOKTO34Bh2
IKfqIuM99CLTQtXEmPbFHOowQ+1jFa9rfrHhe2fKB8ruir8oxXQptnCsMlXHhYyo
iwQW2r7ZJDW/7Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:56:59 2025 by rpki-client