
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
File: TFTszmy8nFSSnqpLIrM3sP2bNr8.mft (raw, json)
Hash identifier: Tp/Ra/+QOpEY+W39+yUjLKH4b7fU2sixCjTtAcvFD8E=
Subject key identifier: 02:8E:9E:43:C4:CA:BC:83:6F:E4:7D:3E:13:2B:D4:03:1A:B2:44:68
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial: 01973919E1627F3CF4D75411661AAA0FEB88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
Manifest number: 1575
Signing time: Wed 04 Jun 2025 04:01:26 +0000
Manifest this update: Wed 04 Jun 2025 04:01:26 +0000
Manifest next update: Thu 05 Jun 2025 04:01:26 +0000
Files and hashes: 1: TFTszmy8nFSSnqpLIrM3sP2bNr8.crl (hash: pohXC+hpXQrxfSJceqNN/TEyjUPhLdl8bnsd1Ot4yfM=)
2: eHPqpiMAvfqI-We9VzdWjZPR_bY.roa (hash: 2EtKDvjgQC4QGGaHfks3HUfVQC7NvALc/OB3oROL6rM=)
3: ePZ7Yuu3-_aTMfNEBfmL4fdhXII.roa (hash: ho6FnqARFfeawc2fVl+6U/A9evk5Ck/9UluGTSWRaEw=)
4: jEFUKY2bhw_vuBM1OshauBn8mvg.roa (hash: ZeWPCxGU+ldLXwfBechPAx21XNMieJ0auUVK9LjYs/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:19:e1:62:7f:3c:f4:d7:54:11:66:1a:aa:0f:eb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Validity
Not Before: Jun 4 04:01:26 2025 GMT
Not After : Jun 5 04:01:26 2025 GMT
Subject: CN=028e9e43c4cabc836fe47d3e132bd4031ab24468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:8e:9a:75:f2:a8:31:55:ba:f2:99:42:e8:
8d:19:51:12:23:9f:d9:e6:41:76:99:b6:29:5f:5a:
ca:e1:1c:f2:be:9d:b3:5a:76:81:18:d0:10:29:48:
4a:c8:ae:8e:5c:c9:65:e1:85:a6:05:1a:e7:1b:cf:
84:8b:72:8b:7b:5d:7b:da:85:82:9c:10:55:90:c4:
cb:f3:8f:54:bc:90:cb:7d:63:ad:92:4a:24:22:e9:
17:74:b2:4a:36:ba:12:25:fc:d3:15:e3:f7:4b:d4:
c0:c5:19:30:26:42:5e:99:09:b7:93:1a:e4:3f:77:
a7:8c:39:f2:d8:0b:e0:36:a3:bb:b4:fa:4d:11:0a:
10:c8:99:d9:e2:3e:5b:47:1a:28:6f:fc:1d:4b:97:
1a:a7:74:bd:fa:d0:4f:0b:b0:d6:4e:07:aa:bd:48:
1e:0b:16:b1:7c:a6:82:af:94:29:eb:d9:1d:ca:c3:
45:68:ce:62:c8:91:bd:fa:9d:93:f7:9c:8d:50:fc:
43:32:8c:35:5e:73:c5:83:8e:a5:90:32:98:fb:09:
bd:d0:3e:84:e4:3a:3f:31:69:d2:5f:04:e9:23:8d:
6d:98:0b:21:2e:0f:12:fd:96:15:e3:96:d5:42:80:
44:50:96:83:9a:e7:b4:70:17:2b:e8:3d:f9:39:7e:
1b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8E:9E:43:C4:CA:BC:83:6F:E4:7D:3E:13:2B:D4:03:1A:B2:44:68
X509v3 Authority Key Identifier:
keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:f3:79:d1:25:fc:5e:a8:ec:ba:5e:af:75:8c:04:f3:d5:28:
dd:01:78:36:b0:f5:23:c7:b0:8b:8b:e0:a3:1a:7e:6e:2b:b2:
03:07:5e:3c:7e:f8:4b:b4:8e:0e:f9:cb:92:c0:d6:9d:51:fe:
95:69:f1:38:cd:16:24:df:5f:6e:ab:4a:65:6e:24:2f:e4:5c:
ee:82:46:b0:19:b3:76:cf:72:8f:eb:af:52:3e:c0:e1:af:4b:
f3:d1:05:55:53:70:6e:b5:c6:01:63:21:7d:10:4c:de:6a:3b:
91:88:76:59:25:cb:ec:f7:62:eb:4c:9e:2b:d0:a4:09:1c:0f:
c8:ec:fa:cc:60:51:b9:d3:a4:92:72:6c:86:b2:5e:c9:67:3e:
cf:6c:c3:bc:eb:6c:0d:62:48:94:92:86:9a:fc:88:a8:53:a0:
04:32:6f:2a:61:5d:46:78:6e:f5:00:e3:09:ef:dc:8f:2a:e4:
34:2d:cc:52:44:69:b1:58:95:d9:ce:fd:ee:ae:be:d1:de:1b:
86:a6:fd:ba:cf:79:c4:2d:92:4c:9e:e8:49:17:20:bd:ab:b9:
e0:1b:e1:41:3e:60:be:67:17:b0:46:8d:5d:a4:71:f6:1c:3c:
7e:4e:59:84:33:3c:a4:fc:70:54:23:78:2c:b5:90:a4:c9:d5:
c5:6f:b1:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc5GeFifzz011QRZhqqD+uIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNTRlY2NlNmNiYzljNTQ5MjllYWE0YjIyYjMzN2IwZmQ5
YjM2YmYwHhcNMjUwNjA0MDQwMTI2WhcNMjUwNjA1MDQwMTI2WjAzMTEwLwYDVQQD
EygwMjhlOWU0M2M0Y2FiYzgzNmZlNDdkM2UxMzJiZDQwMzFhYjI0NDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSeOmnXyqDFVuvKZQuiNGVESI5/Z
5kF2mbYpX1rK4Rzyvp2zWnaBGNAQKUhKyK6OXMll4YWmBRrnG8+Ei3KLe1172oWC
nBBVkMTL849UvJDLfWOtkkokIukXdLJKNroSJfzTFeP3S9TAxRkwJkJemQm3kxrk
P3enjDny2AvgNqO7tPpNEQoQyJnZ4j5bRxoob/wdS5cap3S9+tBPC7DWTgeqvUge
CxaxfKaCr5Qp69kdysNFaM5iyJG9+p2T95yNUPxDMow1XnPFg46lkDKY+wm90D6E
5Do/MWnSXwTpI41tmAshLg8S/ZYV45bVQoBEUJaDmue0cBcr6D35OX4bVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKOnkPEyryDb+R9PhMr1AMaskRoMB8GA1UdIwQY
MBaAFExU7M5svJxUkp6qSyKzN7D9mza/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEZUc3pteThuRlNTbnFwTElyTTNzUDJiTnI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wMmM1ZWMtN2M2Zi00YWUyLTk4OTct
MzA1OWM4OWI3MmVhLzEvVEZUc3pteThuRlNTbnFwTElyTTNzUDJiTnI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8wMmM1ZWMtN2M2Zi00YWUyLTk4OTctMzA1OWM4OWI3MmVh
LzEvVEZUc3pteThuRlNTbnFwTElyTTNzUDJiTnI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw/N50SX8
Xqjsul6vdYwE89Uo3QF4NrD1I8ewi4vgoxp+biuyAwdePH74S7SODvnLksDWnVH+
lWnxOM0WJN9fbqtKZW4kL+Rc7oJGsBmzds9yj+uvUj7A4a9L89EFVVNwbrXGAWMh
fRBM3mo7kYh2WSXL7Pdi60yeK9CkCRwPyOz6zGBRudOkknJshrJeyWc+z2zDvOts
DWJIlJKGmvyIqFOgBDJvKmFdRnhu9QDjCe/cjyrkNC3MUkRpsViV2c797q6+0d4b
hqb9us95xC2STJ7oSRcgvau54BvhQT5gvmcXsEaNXaRx9hw8fk5ZhDM8pPxwVCN4
LLWQpMnVxW+x5Q==
-----END CERTIFICATE-----
Generated at Wed Jun 4 11:41:27 2025 by rpki-client