Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
File: TkJsh9-8xVLceQ_sPtHN56j4huk.mft (raw, json)
Hash identifier: r6Ai1vUuFEwfa7NII09Ny/VExZjH3VNDEqaZydy0+mQ=
Subject key identifier: 9F:DC:86:A4:D7:6D:08:1B:84:E7:B0:3D:97:1F:6B:9C:1E:B4:2E:3B
Authority key identifier: 4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
Certificate issuer: /CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Certificate serial: 0197488BF9639AF6C2A511DFB0A3EA796FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
Manifest number: 08BA
Signing time: Sat 07 Jun 2025 04:00:22 +0000
Manifest this update: Sat 07 Jun 2025 04:00:22 +0000
Manifest next update: Sun 08 Jun 2025 04:00:22 +0000
Files and hashes: 1: TkJsh9-8xVLceQ_sPtHN56j4huk.crl (hash: sexPVOlEhrUzGFK9AR7V6Peg25gNEzFTBp7SgmdVFNs=)
2: o1pkGMrhjFIHajUuas6hn3OkprM.roa (hash: vhDUewSi85hdhWxPSoEhr0a9lvOVAXD09OTRvqe5guU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8b:f9:63:9a:f6:c2:a5:11:df:b0:a3:ea:79:6f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Validity
Not Before: Jun 7 04:00:22 2025 GMT
Not After : Jun 8 04:00:22 2025 GMT
Subject: CN=9fdc86a4d76d081b84e7b03d971f6b9c1eb42e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fd:fe:c8:4c:a0:96:22:55:5a:e5:cb:09:15:
a8:4c:81:bc:6c:25:89:b8:49:dc:2e:a9:8e:7a:a8:
2c:ab:c8:cc:f6:40:bc:7c:dc:aa:b6:bf:38:53:72:
76:b9:1c:91:83:64:6e:a4:81:f3:3a:80:79:70:fe:
10:50:8b:81:ba:21:fc:f2:0f:c9:17:63:de:cf:db:
a8:10:c0:a5:87:fb:87:67:50:b1:ae:b1:20:cb:d0:
23:16:c0:ff:14:c2:15:5c:78:58:0a:19:49:8b:1f:
f7:9c:6c:5f:d2:07:a5:ba:94:dc:d1:d0:01:a4:99:
f4:36:63:1e:d4:5d:76:43:27:9b:67:6f:8b:21:31:
4e:d7:60:dc:8a:9c:d2:98:f0:9d:ec:c1:cd:e7:7f:
ed:46:c6:f1:60:5d:4d:72:5b:87:4e:f7:95:48:1d:
f4:be:d3:b0:00:76:c2:6c:7d:3f:22:51:e5:a1:e5:
0c:c4:99:f9:9a:cd:4f:69:f4:3e:df:30:59:48:20:
f1:91:20:9e:90:48:63:9b:31:14:7b:31:33:38:18:
c4:82:ca:ad:2b:51:e1:e5:33:d8:8c:11:90:00:e9:
95:c6:ce:ff:53:a9:32:bc:5f:5a:16:6b:df:08:5c:
a3:e4:7f:54:3e:f1:5e:0d:6f:62:e1:0a:78:1e:30:
68:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DC:86:A4:D7:6D:08:1B:84:E7:B0:3D:97:1F:6B:9C:1E:B4:2E:3B
X509v3 Authority Key Identifier:
keyid:4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f4:0c:a5:5f:6b:7e:94:30:e3:a6:48:e4:f9:5b:b9:b7:31:
e3:96:13:c0:b4:8b:c5:63:d6:36:45:84:5f:7d:23:aa:96:22:
54:ec:a0:ab:d9:a9:71:79:8a:de:aa:ba:e7:6d:7c:1c:1a:f2:
8d:9e:e7:58:61:13:95:a1:9e:ba:d4:d9:53:0b:1d:79:29:cc:
2f:4d:63:fe:10:c2:00:9b:96:cf:eb:15:62:d0:e5:29:33:b9:
a6:0d:91:32:26:44:b6:91:eb:ef:83:ad:76:5c:b6:56:22:54:
af:5b:1b:a0:66:67:89:77:b7:0e:b0:b8:c3:62:5e:6d:a5:67:
e1:85:99:11:d6:06:e3:29:8e:47:3c:d4:af:4c:3b:5c:52:2f:
56:d4:8a:26:fe:ac:0e:28:85:fa:dd:a0:49:f7:b2:a7:08:48:
b7:f0:6e:cf:3a:48:e7:c7:c6:13:c4:bf:fd:a4:c1:4a:68:0c:
c2:ae:2a:a2:49:d7:92:d6:01:1b:a7:42:d0:3b:98:7a:be:2f:
d8:0a:04:4e:a2:6c:f2:34:8e:3f:41:54:12:b6:33:ca:d4:da:
5a:89:b5:2a:60:09:79:01:9e:07:b5:a2:f5:20:7c:38:b8:39:
ab:ac:97:2b:0e:06:d9:2a:fd:6f:be:4e:1f:29:68:26:b6:e7:
ec:d1:b2:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIi/ljmvbCpRHfsKPqeW+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNDI2Yzg3ZGZiY2M1NTJkYzc5MGZlYzNlZDFjZGU3YThm
ODg2ZTkwHhcNMjUwNjA3MDQwMDIyWhcNMjUwNjA4MDQwMDIyWjAzMTEwLwYDVQQD
Eyg5ZmRjODZhNGQ3NmQwODFiODRlN2IwM2Q5NzFmNmI5YzFlYjQyZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov3+yEygliJVWuXLCRWoTIG8bCWJ
uEncLqmOeqgsq8jM9kC8fNyqtr84U3J2uRyRg2RupIHzOoB5cP4QUIuBuiH88g/J
F2Pez9uoEMClh/uHZ1CxrrEgy9AjFsD/FMIVXHhYChlJix/3nGxf0gelupTc0dAB
pJn0NmMe1F12QyebZ2+LITFO12DcipzSmPCd7MHN53/tRsbxYF1NcluHTveVSB30
vtOwAHbCbH0/IlHloeUMxJn5ms1PafQ+3zBZSCDxkSCekEhjmzEUezEzOBjEgsqt
K1Hh5TPYjBGQAOmVxs7/U6kyvF9aFmvfCFyj5H9UPvFeDW9i4Qp4HjBowQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/chqTXbQgbhOewPZcfa5wetC47MB8GA1UdIwQY
MBaAFE5CbIffvMVS3HkP7D7Rzeeo+IbpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGtKc2g5LTh4VkxjZVFfc1B0SE41Nmo0aHVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lNWJkYzctZWIwNi00NjI2LTg0ZDct
MTNkYTc0Y2QzNWE0LzEvVGtKc2g5LTh4VkxjZVFfc1B0SE41Nmo0aHVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9lNWJkYzctZWIwNi00NjI2LTg0ZDctMTNkYTc0Y2QzNWE0
LzEvVGtKc2g5LTh4VkxjZVFfc1B0SE41Nmo0aHVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafQMpV9r
fpQw46ZI5Plbubcx45YTwLSLxWPWNkWEX30jqpYiVOygq9mpcXmK3qq65218HBry
jZ7nWGETlaGeutTZUwsdeSnML01j/hDCAJuWz+sVYtDlKTO5pg2RMiZEtpHr74Ot
dly2ViJUr1sboGZniXe3DrC4w2JebaVn4YWZEdYG4ymORzzUr0w7XFIvVtSKJv6s
DiiF+t2gSfeypwhIt/BuzzpI58fGE8S//aTBSmgMwq4qoknXktYBG6dC0DuYer4v
2AoETqJs8jSOP0FUErYzytTaWom1KmAJeQGeB7Wi9SB8OLg5q6yXKw4G2Sr9b75O
HyloJrbn7NGyZQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:20:50 2025 by rpki-client