Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
File: TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft (raw, json)
Hash identifier: JsFod/RzMg5PH9uz03WqP76559nmMqfmJWLk6f0ZgY8=
Subject key identifier: 7C:FA:8C:19:61:9B:C2:DE:C0:8C:AD:A4:6D:12:0B:ED:25:6C:0B:7F
Authority key identifier: 4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07
Certificate issuer: /CN=4ca509b35011ed71663952ba0e0c3c38457f9d07
Certificate serial: 01974931019BD0FE5DF561A026AD96AA6640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
Manifest number: 150E
Signing time: Sat 07 Jun 2025 07:00:37 +0000
Manifest this update: Sat 07 Jun 2025 07:00:37 +0000
Manifest next update: Sun 08 Jun 2025 07:00:37 +0000
Files and hashes: 1: TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl (hash: ePeu3Md0+rMdmDUEwX7yohwzjQROpq/VYKzPAvtr9Ng=)
2: ilNe5KDmG0o6LZVjHMLtOGd-0DQ.roa (hash: JkEgQ36ayeHC4m0mo3MRV7E4gABrbKLeaaxVJdDM2eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:01:9b:d0:fe:5d:f5:61:a0:26:ad:96:aa:66:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca509b35011ed71663952ba0e0c3c38457f9d07
Validity
Not Before: Jun 7 07:00:37 2025 GMT
Not After : Jun 8 07:00:37 2025 GMT
Subject: CN=7cfa8c19619bc2dec08cada46d120bed256c0b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:89:0e:4f:2b:34:d9:af:a9:36:bf:c8:2c:0a:
8d:71:c7:4f:80:75:f5:38:e5:7c:47:c9:ef:25:e1:
ae:66:70:e0:83:6d:a7:1b:08:f7:17:6b:fb:66:3b:
d5:30:59:39:95:f3:0f:2c:b9:d9:e9:45:97:76:d8:
c0:90:8c:34:da:24:7c:e6:6f:12:d3:77:2b:65:c6:
b3:9d:f7:0f:af:23:da:7c:bc:dd:a7:1b:a1:ba:dc:
66:75:ef:6c:88:aa:ec:61:31:85:84:9f:13:16:e9:
21:91:a8:b4:28:0a:5d:34:ae:06:e1:c2:b5:f3:d7:
bf:4a:20:e4:6e:be:19:3f:43:3f:ea:d1:cf:30:8f:
0e:24:37:c9:cf:8f:4c:cc:87:15:9f:12:0e:65:08:
9e:4e:43:e0:81:d5:f9:0b:d0:c3:57:f4:6c:24:5a:
e4:3b:72:b2:b4:a5:ac:ff:eb:dd:ab:a6:7d:e4:1a:
b4:c0:54:43:71:0c:68:47:71:73:dc:16:26:3f:b9:
fb:64:7d:a6:e1:4d:ff:51:eb:e2:86:48:6f:e7:40:
86:43:a8:a8:ee:30:40:3b:d8:d5:70:0b:20:c2:82:
9f:08:09:a6:83:41:7d:37:18:95:2a:8d:b3:87:a2:
c0:78:72:91:30:ae:23:dc:dd:14:8e:12:1f:26:68:
3e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FA:8C:19:61:9B:C2:DE:C0:8C:AD:A4:6D:12:0B:ED:25:6C:0B:7F
X509v3 Authority Key Identifier:
keyid:4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:93:fa:71:58:81:a4:0f:f2:41:e8:b4:7c:5d:91:15:de:b0:
c1:00:3b:4f:19:61:6e:71:77:fb:12:f0:76:8d:93:90:62:ac:
bf:a8:7a:35:dc:44:f8:e3:d9:31:50:b1:78:aa:45:5b:0f:81:
2a:c2:40:73:20:95:b0:b2:43:84:4c:f2:5a:44:c7:48:7e:f2:
fd:78:7a:f0:53:fe:ee:54:8d:49:9b:9a:f0:c0:70:e5:36:6c:
15:ee:3d:f4:0d:66:28:68:65:18:72:95:12:99:3f:44:90:1f:
55:41:1b:30:8c:6c:81:9e:92:d9:78:74:ea:5a:29:ed:77:28:
61:95:c5:60:09:6e:da:05:d7:2d:27:a3:f1:03:50:27:23:f0:
4b:52:86:76:6d:40:cc:cc:16:fc:37:8d:02:0d:f8:33:d2:77:
b6:7b:e3:17:66:7f:f4:2d:ed:b3:c7:cb:bf:47:58:0f:d6:8c:
d0:8d:71:79:fd:c5:85:13:cc:d0:e1:b4:3a:f6:f1:f0:b8:41:
40:52:6e:16:be:79:2f:2c:55:5e:98:65:d4:99:bd:73:de:75:
68:26:32:06:0b:75:87:66:97:17:f2:2e:9f:73:fe:f9:39:1b:
83:48:84:7b:88:55:db:c6:81:7c:6d:dd:ad:0e:48:8a:31:fc:
fa:f9:ac:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMQGb0P5d9WGgJq2WqmZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYTUwOWIzNTAxMWVkNzE2NjM5NTJiYTBlMGMzYzM4NDU3
ZjlkMDcwHhcNMjUwNjA3MDcwMDM3WhcNMjUwNjA4MDcwMDM3WjAzMTEwLwYDVQQD
Eyg3Y2ZhOGMxOTYxOWJjMmRlYzA4Y2FkYTQ2ZDEyMGJlZDI1NmMwYjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YkOTys02a+pNr/ILAqNccdPgHX1
OOV8R8nvJeGuZnDgg22nGwj3F2v7ZjvVMFk5lfMPLLnZ6UWXdtjAkIw02iR85m8S
03crZcaznfcPryPafLzdpxuhutxmde9siKrsYTGFhJ8TFukhkai0KApdNK4G4cK1
89e/SiDkbr4ZP0M/6tHPMI8OJDfJz49MzIcVnxIOZQieTkPggdX5C9DDV/RsJFrk
O3KytKWs/+vdq6Z95Bq0wFRDcQxoR3Fz3BYmP7n7ZH2m4U3/Uevihkhv50CGQ6io
7jBAO9jVcAsgwoKfCAmmg0F9NxiVKo2zh6LAeHKRMK4j3N0UjhIfJmg+mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHz6jBlhm8LewIytpG0SC+0lbAt/MB8GA1UdIwQY
MBaAFEylCbNQEe1xZjlSug4MPDhFf50HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEtVSnMxQVI3WEZtT1ZLNkRndzhPRVZfblFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wYTEzMWUtMzdjNi00NWNiLTk2ODIt
MGIwYzEyYjIyYmY5LzEvVEtVSnMxQVI3WEZtT1ZLNkRndzhPRVZfblFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wYTEzMWUtMzdjNi00NWNiLTk2ODItMGIwYzEyYjIyYmY5
LzEvVEtVSnMxQVI3WEZtT1ZLNkRndzhPRVZfblFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABpP6cViB
pA/yQei0fF2RFd6wwQA7TxlhbnF3+xLwdo2TkGKsv6h6NdxE+OPZMVCxeKpFWw+B
KsJAcyCVsLJDhEzyWkTHSH7y/Xh68FP+7lSNSZua8MBw5TZsFe499A1mKGhlGHKV
Epk/RJAfVUEbMIxsgZ6S2Xh06lop7XcoYZXFYAlu2gXXLSej8QNQJyPwS1KGdm1A
zMwW/DeNAg34M9J3tnvjF2Z/9C3ts8fLv0dYD9aM0I1xef3FhRPM0OG0Ovbx8LhB
QFJuFr55LyxVXphl1Jm9c951aCYyBgt1h2aXF/Iun3P++Tkbg0iEe4hV28aBfG3d
rQ5IijH8+vmscg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:16 2025 by rpki-client