
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
File: TsRiBLT4hZI6pKl4btWsr7HACd4.mft (raw, json)
Hash identifier: YxQ6FUYlQ1WmeMy2us75kwUy3S///6CF2ZXm7+0Qw0Y=
Subject key identifier: 55:47:2B:67:7D:72:E1:03:26:5B:FA:7F:20:89:88:A4:91:54:29:66
Authority key identifier: 4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
Certificate issuer: /CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Certificate serial: 01974BC410C7ED8DAA5974582036FDC7C80E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
Manifest number: 0A4D
Signing time: Sat 07 Jun 2025 19:00:29 +0000
Manifest this update: Sat 07 Jun 2025 19:00:29 +0000
Manifest next update: Sun 08 Jun 2025 19:00:29 +0000
Files and hashes: 1: TsRiBLT4hZI6pKl4btWsr7HACd4.crl (hash: roP2dHgnIZt7H9Fs6ARB4a+oQQnGmB9l/b2rIgPbQBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:10:c7:ed:8d:aa:59:74:58:20:36:fd:c7:c8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Validity
Not Before: Jun 7 19:00:29 2025 GMT
Not After : Jun 8 19:00:29 2025 GMT
Subject: CN=55472b677d72e103265bfa7f208988a491542966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:31:46:a0:ac:e0:b1:6f:82:5d:ff:7b:76:a7:
09:d3:6f:5f:3b:88:ce:1a:87:0e:67:9c:65:09:65:
64:fb:5c:f9:00:56:10:d8:ac:9c:ce:f4:db:5b:41:
bd:fd:91:09:43:4c:e3:07:16:50:c6:16:30:3f:be:
84:12:ce:16:3a:aa:12:0d:c3:98:23:a6:0a:c0:e5:
02:1a:22:1e:aa:d8:53:8c:0b:57:77:bb:f3:9a:9f:
bb:84:8b:bb:76:db:39:60:ee:a6:4f:2e:6b:d1:a9:
dd:b7:23:d9:b9:bc:8c:11:5c:45:27:fc:70:2d:eb:
e7:c3:3a:90:c9:0a:e2:2d:5c:c6:9b:ac:3b:56:a7:
d4:b5:6f:4b:26:1a:ed:72:ed:36:4a:11:5d:ee:1d:
80:94:03:8a:bb:30:01:24:91:4f:24:03:d2:4f:e9:
34:a4:4f:82:a1:a3:a4:d2:64:b9:01:27:27:12:f2:
72:4a:75:7d:14:9a:ce:85:e2:ec:b9:b2:2f:91:f5:
c6:13:82:d7:92:d6:86:0b:f2:31:d7:73:e4:91:93:
58:b4:d8:bd:15:1d:44:5d:03:34:00:42:bb:e2:96:
60:be:db:b9:cf:c0:7f:d3:60:9c:fe:dc:a5:c6:d1:
03:5e:e5:fb:1f:cf:ac:1e:eb:1b:31:7f:4b:f5:fd:
f4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:47:2B:67:7D:72:E1:03:26:5B:FA:7F:20:89:88:A4:91:54:29:66
X509v3 Authority Key Identifier:
keyid:4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b5:f8:25:cd:10:9c:f6:ac:28:40:b0:fd:ea:32:c2:6b:03:
52:bb:8f:64:2a:01:ac:39:ac:4c:c1:89:f9:3b:26:c4:48:9b:
8a:20:01:9c:e7:59:ab:78:bd:f2:54:65:6f:08:68:ba:bf:82:
ea:ef:54:6c:85:40:4f:14:dd:6c:bd:b6:45:da:24:bf:80:ba:
d7:d8:89:2f:68:64:cb:cf:fd:9e:0c:d6:76:e4:ec:e1:2c:f0:
68:e1:ae:36:11:8e:1f:f1:fb:eb:23:45:eb:15:bd:a3:ae:dc:
73:75:06:90:26:f0:72:bd:46:70:b2:5d:32:5f:78:da:6b:a6:
ad:4c:be:57:97:42:64:93:5d:a8:a0:6c:1c:01:7c:16:61:21:
fb:5a:81:41:c1:55:d2:eb:6f:3b:5c:74:c1:af:66:f3:b1:53:
48:e7:c2:85:0e:c2:93:27:b3:63:39:ed:e4:0b:aa:93:d0:19:
58:2e:91:b7:0e:2c:e7:45:5c:76:90:d8:cd:51:d2:e3:3c:5e:
0f:27:f7:d5:89:02:9f:d8:04:1f:6c:58:8b:38:5a:a9:4d:1a:
9c:cf:34:21:40:aa:a0:77:7f:2b:95:4d:39:38:51:5f:fb:4b:
97:ef:2d:64:a3:c7:6a:40:da:9d:fa:ff:d9:10:2a:56:fd:5e:
22:a6:13:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLxBDH7Y2qWXRYIDb9x8gOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYzQ2MjA0YjRmODg1OTIzYWE0YTk3ODZlZDVhY2FmYjFj
MDA5ZGUwHhcNMjUwNjA3MTkwMDI5WhcNMjUwNjA4MTkwMDI5WjAzMTEwLwYDVQQD
Eyg1NTQ3MmI2NzdkNzJlMTAzMjY1YmZhN2YyMDg5ODhhNDkxNTQyOTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjFGoKzgsW+CXf97dqcJ029fO4jO
GocOZ5xlCWVk+1z5AFYQ2KyczvTbW0G9/ZEJQ0zjBxZQxhYwP76EEs4WOqoSDcOY
I6YKwOUCGiIeqthTjAtXd7vzmp+7hIu7dts5YO6mTy5r0andtyPZubyMEVxFJ/xw
LevnwzqQyQriLVzGm6w7VqfUtW9LJhrtcu02ShFd7h2AlAOKuzABJJFPJAPST+k0
pE+CoaOk0mS5AScnEvJySnV9FJrOheLsubIvkfXGE4LXktaGC/Ix13PkkZNYtNi9
FR1EXQM0AEK74pZgvtu5z8B/02Cc/tylxtEDXuX7H8+sHusbMX9L9f30fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVHK2d9cuEDJlv6fyCJiKSRVClmMB8GA1UdIwQY
MBaAFE7EYgS0+IWSOqSpeG7VrK+xwAneMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHNSaUJMVDRoWkk2cEtsNGJ0V3NyN0hBQ2Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lOTRjZTEtMGQ3Yi00MzFiLTkxNDMt
ZmMzZjVlYzE0YTViLzEvVHNSaUJMVDRoWkk2cEtsNGJ0V3NyN0hBQ2Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lOTRjZTEtMGQ3Yi00MzFiLTkxNDMtZmMzZjVlYzE0YTVi
LzEvVHNSaUJMVDRoWkk2cEtsNGJ0V3NyN0hBQ2Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLX4Jc0Q
nPasKECw/eoywmsDUruPZCoBrDmsTMGJ+TsmxEibiiABnOdZq3i98lRlbwhour+C
6u9UbIVATxTdbL22Rdokv4C619iJL2hky8/9ngzWduTs4SzwaOGuNhGOH/H76yNF
6xW9o67cc3UGkCbwcr1GcLJdMl942mumrUy+V5dCZJNdqKBsHAF8FmEh+1qBQcFV
0utvO1x0wa9m87FTSOfChQ7CkyezYznt5Auqk9AZWC6Rtw4s50VcdpDYzVHS4zxe
Dyf31YkCn9gEH2xYizhaqU0anM80IUCqoHd/K5VNOThRX/tLl+8tZKPHakDanfr/
2RAqVv1eIqYTQg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:49:42 2025 by rpki-client