Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
File: TE38e6TewmWW3IrCMFqR7Y6SnGk.mft (raw, json)
Hash identifier: S8NhKMM7YKxR5mD5v8NaAc24AUbGFbYCvKAvkF1Afgc=
Subject key identifier: DE:9A:0B:C9:F0:7D:DF:08:6D:DE:2E:9A:0C:18:03:70:05:1E:34:FC
Authority key identifier: 4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69
Certificate issuer: /CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69
Certificate serial: 0197488C352527F46F4D58D22064DC974389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
Manifest number: 0FAE
Signing time: Sat 07 Jun 2025 04:00:37 +0000
Manifest this update: Sat 07 Jun 2025 04:00:37 +0000
Manifest next update: Sun 08 Jun 2025 04:00:37 +0000
Files and hashes: 1: TE38e6TewmWW3IrCMFqR7Y6SnGk.crl (hash: sSXGS3MvklN83zMt9f7oUXzBwJh7YBKIqOXhDZIP5lI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:35:25:27:f4:6f:4d:58:d2:20:64:dc:97:43:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69
Validity
Not Before: Jun 7 04:00:37 2025 GMT
Not After : Jun 8 04:00:37 2025 GMT
Subject: CN=de9a0bc9f07ddf086dde2e9a0c180370051e34fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:c4:82:13:5b:dd:90:91:8d:8a:fb:f5:4c:
66:6b:1c:c3:f7:29:d3:79:c2:f8:59:51:84:76:66:
12:b0:ce:40:43:e5:ad:74:97:6f:fb:d9:9d:da:0d:
77:b5:00:41:2b:c9:8b:3f:15:5e:7e:64:23:8c:ee:
28:6c:c8:21:5e:78:52:a9:b2:04:9f:ef:2c:af:32:
5c:4f:22:33:70:71:45:d1:22:f8:1a:b2:08:58:48:
13:44:d8:5e:e8:f4:0e:82:b9:6f:df:a1:ca:f2:47:
63:b3:65:4e:93:b1:9a:b4:8f:b8:ec:04:7b:8b:ef:
63:58:67:b6:1f:cb:10:6f:6f:90:bd:f2:fb:a0:7a:
98:3d:c4:0f:a4:0f:41:ad:d8:37:d1:4f:12:bf:65:
6f:16:d2:85:b1:99:3d:bb:56:08:d3:d2:b8:64:5d:
4b:68:af:ca:09:44:4f:dd:25:13:24:56:36:00:f6:
2d:78:f8:f3:c7:14:01:e5:14:d0:08:60:01:65:13:
cd:1a:ac:1a:b5:06:8c:ec:37:34:95:4d:8d:9e:2f:
ac:36:c9:84:9a:ef:63:b1:d9:6e:0d:6a:6a:c5:64:
8e:9d:17:3f:46:ac:37:93:3e:6f:05:f7:c0:a2:e1:
16:a6:22:e3:ce:db:d3:b1:87:d5:e0:76:92:96:c1:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9A:0B:C9:F0:7D:DF:08:6D:DE:2E:9A:0C:18:03:70:05:1E:34:FC
X509v3 Authority Key Identifier:
keyid:4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:96:e6:58:25:53:0a:ad:b1:c0:db:2f:ea:0b:d6:2f:f1:9f:
36:e8:7d:7e:92:0a:3c:96:50:7a:19:af:d7:11:5f:29:39:ee:
bd:49:8a:a3:bc:91:04:46:7d:2f:c6:02:22:b4:03:23:4d:10:
73:1c:46:b5:dd:94:c5:e3:87:f9:da:05:9e:ba:b7:d8:a8:59:
ab:20:b1:f2:bf:ce:c9:80:c3:3c:a3:f7:11:cc:8b:96:8d:f8:
82:3a:02:58:a0:52:75:ab:f5:bd:38:53:19:00:9e:77:61:1a:
5e:21:9b:d6:62:2d:e0:a9:ea:10:31:0f:a0:58:5c:1d:a7:33:
21:13:85:7c:de:f4:a2:36:4e:df:97:6e:6e:5d:ea:08:3b:d3:
05:80:d8:b8:95:02:40:41:1e:a8:e1:7d:e1:be:78:f7:ba:d1:
42:3a:2d:a9:a7:fc:6f:a4:31:e1:2f:60:ef:21:83:07:57:26:
7f:40:fd:47:69:3b:75:9a:46:9c:c5:b0:25:9e:8f:38:22:df:
a2:93:af:2b:ac:81:c9:8f:a9:90:91:f9:38:b7:27:73:4b:13:
af:4b:a8:22:f4:6a:d0:c8:ed:c5:75:53:98:96:b1:04:c0:e2:
20:75:37:ae:dc:92:d7:b1:13:0c:ce:d7:4d:2b:2c:3e:4b:42:
46:74:45:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjDUlJ/RvTVjSIGTcl0OJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNGRmYzdiYTRkZWMyNjU5NmRjOGFjMjMwNWE5MWVkOGU5
MjljNjkwHhcNMjUwNjA3MDQwMDM3WhcNMjUwNjA4MDQwMDM3WjAzMTEwLwYDVQQD
EyhkZTlhMGJjOWYwN2RkZjA4NmRkZTJlOWEwYzE4MDM3MDA1MWUzNGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukfEghNb3ZCRjYr79UxmaxzD9ynT
ecL4WVGEdmYSsM5AQ+WtdJdv+9md2g13tQBBK8mLPxVefmQjjO4obMghXnhSqbIE
n+8srzJcTyIzcHFF0SL4GrIIWEgTRNhe6PQOgrlv36HK8kdjs2VOk7GatI+47AR7
i+9jWGe2H8sQb2+QvfL7oHqYPcQPpA9Brdg30U8Sv2VvFtKFsZk9u1YI09K4ZF1L
aK/KCURP3SUTJFY2APYtePjzxxQB5RTQCGABZRPNGqwatQaM7Dc0lU2Nni+sNsmE
mu9jsdluDWpqxWSOnRc/Rqw3kz5vBffAouEWpiLjztvTsYfV4HaSlsFvnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6aC8nwfd8Ibd4umgwYA3AFHjT8MB8GA1UdIwQY
MBaAFExN/Huk3sJlltyKwjBake2OkpxpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEUzOGU2VGV3bVdXM0lyQ01GcVI3WTZTbkdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9lMmU0NDMtMTQ2Mi00YzRlLWJjMzMt
YjI5ZWZmMDkxYmM2LzEvVEUzOGU2VGV3bVdXM0lyQ01GcVI3WTZTbkdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9lMmU0NDMtMTQ2Mi00YzRlLWJjMzMtYjI5ZWZmMDkxYmM2
LzEvVEUzOGU2VGV3bVdXM0lyQ01GcVI3WTZTbkdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpbmWCVT
Cq2xwNsv6gvWL/GfNuh9fpIKPJZQehmv1xFfKTnuvUmKo7yRBEZ9L8YCIrQDI00Q
cxxGtd2UxeOH+doFnrq32KhZqyCx8r/OyYDDPKP3EcyLlo34gjoCWKBSdav1vThT
GQCed2EaXiGb1mIt4KnqEDEPoFhcHaczIROFfN70ojZO35dubl3qCDvTBYDYuJUC
QEEeqOF94b5497rRQjotqaf8b6Qx4S9g7yGDB1cmf0D9R2k7dZpGnMWwJZ6POCLf
opOvK6yByY+pkJH5OLcnc0sTr0uoIvRq0MjtxXVTmJaxBMDiIHU3rtyS17ETDM7X
TSssPktCRnRFoQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:23:04 2025 by rpki-client