Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
File: tFBrzj9-GuOn4sua0gXEzfsC3bU.mft (raw, json)
Hash identifier: cz4xfJ65xAs6nnXh9n/XKCoJPNbekfzmBn1udAgB6dk=
Subject key identifier: 93:F4:C8:67:33:B9:EF:C1:51:32:DF:62:EA:BC:37:C7:99:DB:13:59
Authority key identifier: B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
Certificate issuer: /CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Certificate serial: 01974D452F547341C1C08366A7B13E8C953D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
Manifest number: 148C
Signing time: Sun 08 Jun 2025 02:01:08 +0000
Manifest this update: Sun 08 Jun 2025 02:01:08 +0000
Manifest next update: Mon 09 Jun 2025 02:01:08 +0000
Files and hashes: 1: Kd39P6546NpKkTMGeJ0Di1Tm-dg.roa (hash: whkcH/ShQkUqu7p697My2+ymwjNji4wGQLqM0wmvkYA=)
2: To-uv46-3XmiPKg6c_GrFJdFcf0.roa (hash: SmXcvoxvyvRm/BeOwyu47J7sKwYa3+1oFy5V9rexUqQ=)
3: tFBrzj9-GuOn4sua0gXEzfsC3bU.crl (hash: 5Z6NQOuVTRPHMWJdxJF5eoHEchIXZNbdzJb2fRGQN9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:2f:54:73:41:c1:c0:83:66:a7:b1:3e:8c:95:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Validity
Not Before: Jun 8 02:01:08 2025 GMT
Not After : Jun 9 02:01:08 2025 GMT
Subject: CN=93f4c86733b9efc15132df62eabc37c799db1359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ec:41:82:27:99:a2:21:cf:1c:fc:5a:54:c9:
aa:f4:63:78:31:b0:20:33:0a:9c:16:b3:8b:be:d8:
2b:24:66:bc:0f:d9:73:85:a6:40:84:d8:9d:1e:91:
73:64:17:e8:88:e2:9d:44:de:92:24:0d:48:44:38:
bf:17:e7:c8:89:19:c8:62:73:4b:e6:72:ca:42:79:
03:94:c3:1c:7f:8e:d8:21:0d:86:41:63:74:66:ca:
29:a8:cf:d7:11:f4:06:b1:ee:ca:87:f2:33:a4:75:
2a:e7:92:f0:b3:2b:e8:8c:60:80:ca:18:56:99:9e:
47:9f:3e:92:59:df:65:26:f2:38:07:15:52:68:16:
97:f0:ed:28:61:d3:4c:4d:ca:c0:a5:e7:88:a3:25:
af:ef:60:ae:c5:56:b8:1d:6a:9f:fc:b9:c9:50:90:
d6:f0:8c:b0:3c:11:75:ab:09:c5:af:7b:fd:8b:f7:
ba:ad:11:c1:a1:8e:c9:93:c4:9f:62:a7:d4:ea:f2:
d7:c0:10:90:94:f8:48:68:3c:30:73:0a:45:ab:4c:
c8:5c:7c:cf:8a:ff:63:8c:99:26:9f:fc:56:5a:bd:
e3:d5:f7:08:f4:c9:b2:7f:4a:60:ce:42:c3:54:94:
35:53:73:1f:60:cf:74:0e:9a:ce:19:2e:31:8d:12:
85:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F4:C8:67:33:B9:EF:C1:51:32:DF:62:EA:BC:37:C7:99:DB:13:59
X509v3 Authority Key Identifier:
keyid:B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c0:dd:34:79:20:06:bd:42:bb:e2:75:59:3a:a0:e0:d2:d3:
8b:be:68:00:5e:82:f9:5a:1f:89:79:7f:02:cf:15:8d:8e:f2:
9a:1f:1c:25:6e:3c:73:77:85:84:40:43:94:82:d5:96:7d:15:
66:e4:78:6e:23:7d:e7:2b:05:8a:b4:dc:60:a3:ae:e5:84:26:
44:64:84:ac:fd:33:4d:78:c4:52:d8:56:30:bb:db:06:26:30:
20:d4:f9:7c:11:b8:42:64:ca:bf:9a:4f:da:71:46:2d:a3:e2:
27:11:d4:c4:22:86:29:1d:c1:9f:86:97:51:e2:25:0a:46:b2:
89:7e:3a:49:59:b1:da:35:c1:ec:f0:06:ff:53:19:f3:90:73:
5c:92:cb:7a:c3:17:11:e9:96:f0:f4:34:4f:94:34:09:78:fd:
34:5c:6b:94:9c:d1:fc:37:7d:f1:35:57:4f:9c:7c:d3:c9:eb:
41:c2:ac:f2:08:4d:ce:86:7d:dc:f5:a1:cb:16:7c:f5:e4:59:
05:a1:69:d6:8e:59:4f:7b:b3:8a:92:c9:bc:34:46:6f:f4:9d:
dc:2a:6d:eb:09:5a:bd:14:da:fb:d4:fa:07:7f:6d:13:af:e0:
a5:dd:83:69:ea:f3:23:e2:89:82:c9:88:81:aa:51:f8:3a:04:
03:0e:2d:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRS9Uc0HBwINmp7E+jJU9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTA2YmNlM2Y3ZTFhZTNhN2UyY2I5YWQyMDVjNGNkZmIw
MmRkYjUwHhcNMjUwNjA4MDIwMTA4WhcNMjUwNjA5MDIwMTA4WjAzMTEwLwYDVQQD
Eyg5M2Y0Yzg2NzMzYjllZmMxNTEzMmRmNjJlYWJjMzdjNzk5ZGIxMzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOxBgieZoiHPHPxaVMmq9GN4MbAg
MwqcFrOLvtgrJGa8D9lzhaZAhNidHpFzZBfoiOKdRN6SJA1IRDi/F+fIiRnIYnNL
5nLKQnkDlMMcf47YIQ2GQWN0ZsopqM/XEfQGse7Kh/IzpHUq55LwsyvojGCAyhhW
mZ5Hnz6SWd9lJvI4BxVSaBaX8O0oYdNMTcrApeeIoyWv72CuxVa4HWqf/LnJUJDW
8IywPBF1qwnFr3v9i/e6rRHBoY7Jk8SfYqfU6vLXwBCQlPhIaDwwcwpFq0zIXHzP
iv9jjJkmn/xWWr3j1fcI9Mmyf0pgzkLDVJQ1U3MfYM90DprOGS4xjRKF7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJP0yGczue/BUTLfYuq8N8eZ2xNZMB8GA1UdIwQY
MBaAFLRQa84/fhrjp+LLmtIFxM37At21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZCcnpqOS1HdU9uNHN1YTBnWEV6ZnNDM2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9kYjU5ODktMTlmNi00NjhkLTlmYzMt
ZjhhMzc4MGMzNDhlLzEvdEZCcnpqOS1HdU9uNHN1YTBnWEV6ZnNDM2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9kYjU5ODktMTlmNi00NjhkLTlmYzMtZjhhMzc4MGMzNDhl
LzEvdEZCcnpqOS1HdU9uNHN1YTBnWEV6ZnNDM2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8DdNHkg
Br1Cu+J1WTqg4NLTi75oAF6C+VofiXl/As8VjY7ymh8cJW48c3eFhEBDlILVln0V
ZuR4biN95ysFirTcYKOu5YQmRGSErP0zTXjEUthWMLvbBiYwINT5fBG4QmTKv5pP
2nFGLaPiJxHUxCKGKR3Bn4aXUeIlCkayiX46SVmx2jXB7PAG/1MZ85BzXJLLesMX
EemW8PQ0T5Q0CXj9NFxrlJzR/Dd98TVXT5x808nrQcKs8ghNzoZ93PWhyxZ89eRZ
BaFp1o5ZT3uzipLJvDRGb/Sd3Cpt6wlavRTa+9T6B39tE6/gpd2DaerzI+KJgsmI
gapR+DoEAw4tQQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:07:28 2025 by rpki-client