Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
File: TAf2nWArfrt_YzDXFcnsPlq6MPo.mft (raw, json)
Hash identifier: 2EiS4wSHDOy8zK/IjBi/8QnrDWHmzNuTZyASxqPJ5c0=
Subject key identifier: 04:E0:46:87:1D:68:3C:0D:A4:9B:81:60:E9:FC:8A:6F:6C:7B:8B:98
Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
Certificate issuer: /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Certificate serial: 019745C29813513848F3F11E1E0ACBC7DAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
Manifest number: 096A
Signing time: Fri 06 Jun 2025 15:01:10 +0000
Manifest this update: Fri 06 Jun 2025 15:01:10 +0000
Manifest next update: Sat 07 Jun 2025 15:01:10 +0000
Files and hashes: 1: TAf2nWArfrt_YzDXFcnsPlq6MPo.crl (hash: IY1YjTGSVAXLaptp0iGurtDcFmrt0mq6l3+Tj5K5DS4=)
2: nXGx5bSqdUW_hrhQiJHYlpD8vR8.roa (hash: BZPTD4TDsLLlN6D+oiM71I+DEGQ39DwwkOK3NvmzOh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:98:13:51:38:48:f3:f1:1e:1e:0a:cb:c7:da:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Validity
Not Before: Jun 6 15:01:10 2025 GMT
Not After : Jun 7 15:01:10 2025 GMT
Subject: CN=04e046871d683c0da49b8160e9fc8a6f6c7b8b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b9:7c:27:5c:8f:4b:11:2e:1f:d4:fb:c7:b8:
a8:a3:8c:95:ff:b8:be:b3:18:1a:04:79:99:29:39:
32:93:a4:8f:02:04:7b:7b:fc:6c:8d:d3:c8:d2:8f:
92:16:57:5e:c5:92:3c:e7:2a:a7:e5:12:1f:a9:da:
5e:7d:f5:09:d2:8f:77:ed:d9:22:e1:d6:3a:c1:2f:
b4:39:12:96:cc:32:1e:20:98:c3:a0:7e:e1:93:09:
61:50:ae:7d:be:94:07:5d:da:3c:11:50:83:81:2c:
8d:ad:77:f8:79:c2:65:61:7c:3f:e9:bc:9e:82:33:
c5:ee:20:43:a3:3c:d1:a8:4d:44:d7:0d:fa:6d:ce:
2e:d9:67:1b:92:97:a4:9d:6c:23:36:74:6f:5e:b9:
02:af:aa:fe:8b:85:95:51:76:42:de:1f:18:4f:b1:
8f:40:de:e2:49:8e:3b:fb:a3:07:41:ed:e0:e2:29:
13:d0:e4:83:4e:f8:c2:2b:5e:df:82:7d:dd:2d:53:
74:45:0e:b2:f5:be:e5:4c:67:f1:32:2b:99:74:4a:
8c:53:2c:74:68:f1:3c:01:52:8d:19:14:e1:3e:0d:
8d:54:d8:8b:84:29:5e:ca:56:09:24:54:94:b1:a8:
f1:33:9d:b1:42:91:c2:9d:ee:17:a1:14:60:11:2a:
39:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E0:46:87:1D:68:3C:0D:A4:9B:81:60:E9:FC:8A:6F:6C:7B:8B:98
X509v3 Authority Key Identifier:
keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:04:8e:44:7b:ce:b2:27:21:91:2c:89:8d:e3:05:f3:1b:0e:
78:ca:a7:01:b6:04:dd:30:40:d8:dd:28:59:09:e2:42:d9:82:
79:1f:b0:9f:a8:38:d0:d2:d6:7c:22:7a:26:ac:9d:79:17:01:
5f:00:4b:c9:2b:d5:b5:b5:19:66:f5:21:5f:4e:c8:e7:c8:d9:
c9:19:01:79:4f:03:6b:03:5a:5a:a1:58:93:7b:61:31:ca:56:
2a:22:f8:0f:14:e1:52:3a:21:65:91:ef:c6:43:87:70:77:6d:
c7:7f:8b:0a:00:db:2c:50:4e:4e:f0:c7:41:53:1f:c2:9a:b0:
db:c5:e9:1d:b2:bb:f9:c6:08:e4:16:78:5c:22:da:a6:67:e6:
c1:42:c4:27:29:97:52:d7:e1:d1:54:5d:af:cb:a9:6c:8c:f9:
11:a7:cc:a6:41:15:6c:b2:10:f6:d5:f6:59:84:41:9e:14:8a:
ec:e5:96:0a:5f:28:bc:d0:c5:a5:93:36:f4:3c:71:3a:ce:09:
04:7a:67:65:2f:7b:da:ea:79:3c:a4:14:c8:a5:e3:c5:48:7a:
2a:10:9a:e7:d4:d2:ab:ca:6c:7f:18:48:d3:a0:00:c0:95:0e:
5c:81:4f:d8:80:5c:87:c3:bb:44:42:4a:b3:25:ef:b4:4d:4d:
1d:ac:c0:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdFwpgTUThI8/EeHgrLx9rRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMDdmNjlkNjAyYjdlYmI3ZjYzMzBkNzE1YzllYzNlNWFi
YTMwZmEwHhcNMjUwNjA2MTUwMTEwWhcNMjUwNjA3MTUwMTEwWjAzMTEwLwYDVQQD
EygwNGUwNDY4NzFkNjgzYzBkYTQ5YjgxNjBlOWZjOGE2ZjZjN2I4Yjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bl8J1yPSxEuH9T7x7ioo4yV/7i+
sxgaBHmZKTkyk6SPAgR7e/xsjdPI0o+SFldexZI85yqn5RIfqdpeffUJ0o937dki
4dY6wS+0ORKWzDIeIJjDoH7hkwlhUK59vpQHXdo8EVCDgSyNrXf4ecJlYXw/6bye
gjPF7iBDozzRqE1E1w36bc4u2WcbkpeknWwjNnRvXrkCr6r+i4WVUXZC3h8YT7GP
QN7iSY47+6MHQe3g4ikT0OSDTvjCK17fgn3dLVN0RQ6y9b7lTGfxMiuZdEqMUyx0
aPE8AVKNGRThPg2NVNiLhCleylYJJFSUsajxM52xQpHCne4XoRRgESo5yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATgRocdaDwNpJuBYOn8im9se4uYMB8GA1UdIwQY
MBaAFEwH9p1gK367f2Mw1xXJ7D5aujD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEFmMm5XQXJmcnRfWXpEWEZjbnNQbHE2TVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lZTcxYzYtMWJhZS00ODU4LWFmM2Et
YmMyODlkYzE3ZDIwLzEvVEFmMm5XQXJmcnRfWXpEWEZjbnNQbHE2TVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lZTcxYzYtMWJhZS00ODU4LWFmM2EtYmMyODlkYzE3ZDIw
LzEvVEFmMm5XQXJmcnRfWXpEWEZjbnNQbHE2TVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgSORHvO
sichkSyJjeMF8xsOeMqnAbYE3TBA2N0oWQniQtmCeR+wn6g40NLWfCJ6JqydeRcB
XwBLySvVtbUZZvUhX07I58jZyRkBeU8DawNaWqFYk3thMcpWKiL4DxThUjohZZHv
xkOHcHdtx3+LCgDbLFBOTvDHQVMfwpqw28XpHbK7+cYI5BZ4XCLapmfmwULEJymX
Utfh0VRdr8upbIz5EafMpkEVbLIQ9tX2WYRBnhSK7OWWCl8ovNDFpZM29DxxOs4J
BHpnZS972up5PKQUyKXjxUh6KhCa59TSq8psfxhI06AAwJUOXIFP2IBch8O7REJK
syXvtE1NHazABw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:59 2025 by rpki-client