Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
File: tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft (raw, json)
Hash identifier: gLQzQKIedwkFwZQWZyRBv+ekP5HuyqucJOXH8zerkpw=
Subject key identifier: B5:D3:98:40:C9:1C:57:E3:00:2C:07:C0:54:7D:4D:B4:CD:DF:E7:F4
Authority key identifier: B4:A6:C2:07:42:82:22:F6:3F:C9:CB:A8:39:D0:DB:D9:A6:95:0B:31
Certificate issuer: /CN=b4a6c207428222f63fc9cba839d0dbd9a6950b31
Certificate serial: 019759B6DCFA43317B105A22A2873EDAE610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
Manifest number: 39
Signing time: Tue 10 Jun 2025 12:00:45 +0000
Manifest this update: Tue 10 Jun 2025 12:00:45 +0000
Manifest next update: Wed 11 Jun 2025 12:00:45 +0000
Files and hashes: 1: tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl (hash: pGhAzDO8VK+h5lpgdZgtbrCS7PvpMVzGEGVEXoLKS/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:b6:dc:fa:43:31:7b:10:5a:22:a2:87:3e:da:e6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a6c207428222f63fc9cba839d0dbd9a6950b31
Validity
Not Before: Jun 10 12:00:45 2025 GMT
Not After : Jun 11 12:00:45 2025 GMT
Subject: CN=b5d39840c91c57e3002c07c0547d4db4cddfe7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:69:8d:8d:77:58:8f:ee:b5:eb:17:80:1b:
4a:77:e2:d6:44:0d:d9:b5:28:cc:11:76:90:ff:0c:
e9:cc:87:8a:c2:00:b7:1c:01:4a:94:78:25:98:30:
34:b4:ca:a6:a1:be:62:fd:93:2b:0a:18:d1:1b:08:
b4:d6:6d:58:61:05:f4:82:16:72:84:2e:06:6a:25:
ba:c3:61:10:d8:ef:49:74:57:a4:28:17:35:95:79:
e0:42:8b:22:3f:9d:88:26:fe:75:0d:21:2f:83:46:
16:7b:81:17:e4:f3:bc:39:e5:f9:da:d4:45:3c:a2:
00:d1:8c:d6:36:1a:18:7f:ec:3e:f0:db:65:58:7b:
b4:43:d1:a0:7a:91:0e:94:93:d4:15:6f:61:ba:00:
a0:69:51:66:02:0a:b0:ae:56:04:3a:fe:2b:d6:70:
dc:73:50:8f:95:dd:ae:d8:4e:83:46:0f:75:e8:5b:
0a:52:c1:9d:de:ee:54:da:50:a2:57:b0:38:17:b8:
7b:cc:85:4c:c8:b4:5e:86:c6:79:3c:d5:18:e9:e2:
20:a9:70:79:23:16:0c:1d:5b:1c:74:71:81:8b:b1:
86:91:ee:80:51:e0:2b:bd:78:32:47:be:0f:01:a7:
3d:5d:b0:a8:6a:c7:66:03:3a:27:13:50:01:21:14:
78:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D3:98:40:C9:1C:57:E3:00:2C:07:C0:54:7D:4D:B4:CD:DF:E7:F4
X509v3 Authority Key Identifier:
keyid:B4:A6:C2:07:42:82:22:F6:3F:C9:CB:A8:39:D0:DB:D9:A6:95:0B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:17:86:4e:af:55:b6:71:f5:b3:aa:30:7d:b0:b5:8b:c3:b4:
23:18:9b:f1:bd:83:2a:0d:73:e1:39:04:11:7c:89:16:ed:84:
a6:e5:2a:7f:97:f5:7b:75:c7:e5:80:ba:66:e9:97:93:aa:50:
b5:dc:9b:f4:62:4e:a3:cd:8a:fd:63:71:41:11:40:70:b1:fb:
c2:c6:75:4e:c2:45:91:1e:38:d2:6d:91:43:e9:65:64:6e:9d:
d7:df:c7:ef:6c:05:b7:e1:18:c4:fc:1f:26:11:0f:0b:e8:f5:
ee:df:cc:9b:92:48:21:4c:4d:58:0c:9d:03:e7:91:d1:1e:76:
91:30:e5:35:32:79:76:f8:ec:2f:a0:93:73:ca:5d:35:b7:63:
a1:b6:f3:45:33:27:ef:c9:f7:f1:e2:21:56:36:31:58:1e:bd:
49:dd:8e:54:8c:ea:fb:f6:7e:f8:c1:5e:c0:21:f9:3d:56:7e:
a2:9d:87:42:9b:2e:9b:0f:6a:5c:75:11:a0:43:15:fb:a0:8f:
60:7a:3c:b1:b6:c5:ed:23:04:a4:03:51:1a:e4:2f:d0:71:29:
99:9c:bd:fe:12:81:e2:91:e4:8b:db:4e:d3:db:cc:db:86:54:
5d:0f:fa:cd:01:17:c3:ed:39:11:d4:d4:dd:70:d2:c8:a1:22:
0b:c6:f3:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZttz6QzF7EFoiooc+2uYQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YTZjMjA3NDI4MjIyZjYzZmM5Y2JhODM5ZDBkYmQ5YTY5
NTBiMzEwHhcNMjUwNjEwMTIwMDQ1WhcNMjUwNjExMTIwMDQ1WjAzMTEwLwYDVQQD
EyhiNWQzOTg0MGM5MWM1N2UzMDAyYzA3YzA1NDdkNGRiNGNkZGZlN2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs81pjY13WI/utesXgBtKd+LWRA3Z
tSjMEXaQ/wzpzIeKwgC3HAFKlHglmDA0tMqmob5i/ZMrChjRGwi01m1YYQX0ghZy
hC4GaiW6w2EQ2O9JdFekKBc1lXngQosiP52IJv51DSEvg0YWe4EX5PO8OeX52tRF
PKIA0YzWNhoYf+w+8NtlWHu0Q9GgepEOlJPUFW9hugCgaVFmAgqwrlYEOv4r1nDc
c1CPld2u2E6DRg916FsKUsGd3u5U2lCiV7A4F7h7zIVMyLRehsZ5PNUY6eIgqXB5
IxYMHVscdHGBi7GGke6AUeArvXgyR74PAac9XbCoasdmAzonE1ABIRR4NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXTmEDJHFfjACwHwFR9TbTN3+f0MB8GA1UdIwQY
MBaAFLSmwgdCgiL2P8nLqDnQ29mmlQsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEtiQ0IwS0NJdllfeWN1b09kRGIyYWFWQ3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82NTE0MjEtMzMwMC00ODg2LWJiZTUt
ODRhYmNmYmNkZjVlLzEvdEtiQ0IwS0NJdllfeWN1b09kRGIyYWFWQ3pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82NTE0MjEtMzMwMC00ODg2LWJiZTUtODRhYmNmYmNkZjVl
LzEvdEtiQ0IwS0NJdllfeWN1b09kRGIyYWFWQ3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBeGTq9V
tnH1s6owfbC1i8O0Ixib8b2DKg1z4TkEEXyJFu2EpuUqf5f1e3XH5YC6ZumXk6pQ
tdyb9GJOo82K/WNxQRFAcLH7wsZ1TsJFkR440m2RQ+llZG6d19/H72wFt+EYxPwf
JhEPC+j17t/Mm5JIIUxNWAydA+eR0R52kTDlNTJ5dvjsL6CTc8pdNbdjobbzRTMn
78n38eIhVjYxWB69Sd2OVIzq+/Z++MFewCH5PVZ+op2HQpsumw9qXHURoEMV+6CP
YHo8sbbF7SMEpANRGuQv0HEpmZy9/hKB4pHki9tO09vM24ZUXQ/6zQEXw+05EdTU
3XDSyKEiC8bzQA==
-----END CERTIFICATE-----
Generated at Tue Jun 10 20:47:24 2025 by rpki-client