Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
File: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft (raw, json)
Hash identifier: KZ9QCeZ5HNaps9Ok84k82CeHhC9g+gPggrOkr0HeguE=
Subject key identifier: CF:39:79:74:52:19:E5:FC:94:F5:1B:0E:F1:B9:28:55:E5:F9:0E:29
Authority key identifier: 4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21
Certificate issuer: /CN=4c101ff51b67eefe0d67800e76d3606df4c94721
Certificate serial: 019752A29AB882A33717137927EB3B7EB44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
Manifest number: 04F2
Signing time: Mon 09 Jun 2025 03:01:17 +0000
Manifest this update: Mon 09 Jun 2025 03:01:17 +0000
Manifest next update: Tue 10 Jun 2025 03:01:17 +0000
Files and hashes: 1: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl (hash: jDFYHHpfjQFYlEtJaoLnN8tRDvrrRs3yIWKFKD9+rBg=)
2: cri3ULh6Rj8r6ZDUmdSIkYBmP1o.roa (hash: Lisc7jMorS/4tIMBDxqrdkl7lwX530FUMpT0ozDszqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:9a:b8:82:a3:37:17:13:79:27:eb:3b:7e:b4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c101ff51b67eefe0d67800e76d3606df4c94721
Validity
Not Before: Jun 9 03:01:17 2025 GMT
Not After : Jun 10 03:01:17 2025 GMT
Subject: CN=cf3979745219e5fc94f51b0ef1b92855e5f90e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d3:e5:11:03:2e:e0:9e:26:46:a5:12:71:9a:
ef:97:ab:d7:19:43:fa:f6:07:25:bf:d0:b1:0c:63:
dd:75:35:35:8a:30:0c:b8:a3:04:c1:d3:f0:1c:69:
0a:03:05:a5:ad:86:16:80:45:6f:f5:12:d5:89:60:
3c:48:da:59:2c:71:49:8d:10:fc:a3:92:d2:fa:cb:
c7:be:24:c7:03:80:31:59:65:b7:03:7d:a8:5b:2b:
0b:93:8c:9c:3a:aa:ff:2d:b8:fb:25:bb:a9:84:b3:
28:68:5e:b9:b5:cb:7a:c8:6c:ee:2d:3f:a4:29:99:
f5:a8:bf:4c:d1:18:c8:5b:a0:e9:08:3a:04:75:07:
55:60:0c:6a:c9:dd:45:e5:89:f2:f6:d0:00:7a:88:
1b:fc:37:56:ca:58:0e:4d:93:5e:94:4f:74:2f:5d:
c6:13:5b:49:25:49:39:37:0e:e6:36:39:64:9b:54:
28:81:bc:af:13:42:7a:58:8c:08:6a:f4:8c:1c:64:
60:45:aa:74:5d:da:8c:6c:95:67:97:b8:a5:54:6a:
7d:57:b0:f7:f8:42:b7:f9:af:17:62:c6:0c:bc:fc:
ab:9f:ed:bc:56:65:f6:74:9f:57:97:0d:1e:c9:11:
99:9f:90:73:67:21:c7:20:fc:f9:a1:a5:b2:68:66:
24:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:39:79:74:52:19:E5:FC:94:F5:1B:0E:F1:B9:28:55:E5:F9:0E:29
X509v3 Authority Key Identifier:
keyid:4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1a:49:59:7e:d4:1c:24:30:be:5f:1b:49:b7:b5:71:61:8f:
69:a1:98:71:6c:e7:24:a7:18:2b:eb:cd:b2:5a:61:61:53:fb:
9c:b7:84:09:93:e4:e1:d0:56:bf:71:a6:c0:c5:10:95:6e:5a:
e7:b7:c0:97:cd:92:ce:9f:80:01:9a:ed:ac:01:24:b3:fa:49:
f9:45:29:3b:63:77:95:c4:3a:4e:4d:d7:a1:c9:c0:a3:b1:a3:
9d:19:55:fa:b1:55:d5:36:c2:28:8a:cb:ed:99:23:0d:93:3d:
9e:c1:7d:cd:03:25:86:11:d1:20:68:28:85:d4:24:40:64:3f:
82:0b:99:05:76:81:2e:97:18:08:64:c3:b8:19:39:86:05:5a:
52:97:b7:e5:04:39:c0:8e:94:58:9d:f1:7b:f9:16:1c:15:22:
ff:46:ed:db:87:4c:16:01:f7:b1:a7:f9:5a:7b:41:02:0f:75:
99:dc:3e:89:b2:97:5e:8c:b0:7c:79:cd:78:8a:07:0c:31:fa:
05:dc:88:6b:1c:9c:ad:1a:e7:4f:a2:f5:f1:ac:f7:b6:b9:c0:
27:93:eb:50:8d:1f:72:b2:da:3a:71:70:83:f4:9c:d0:6d:31:
0b:9b:6f:58:07:be:ce:5e:1d:e0:32:18:86:ce:13:ce:c7:9d:
76:88:fc:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSopq4gqM3FxN5J+s7frRPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMTAxZmY1MWI2N2VlZmUwZDY3ODAwZTc2ZDM2MDZkZjRj
OTQ3MjEwHhcNMjUwNjA5MDMwMTE3WhcNMjUwNjEwMDMwMTE3WjAzMTEwLwYDVQQD
EyhjZjM5Nzk3NDUyMTllNWZjOTRmNTFiMGVmMWI5Mjg1NWU1ZjkwZTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9PlEQMu4J4mRqUScZrvl6vXGUP6
9gclv9CxDGPddTU1ijAMuKMEwdPwHGkKAwWlrYYWgEVv9RLViWA8SNpZLHFJjRD8
o5LS+svHviTHA4AxWWW3A32oWysLk4ycOqr/Lbj7JbuphLMoaF65tct6yGzuLT+k
KZn1qL9M0RjIW6DpCDoEdQdVYAxqyd1F5Yny9tAAeogb/DdWylgOTZNelE90L13G
E1tJJUk5Nw7mNjlkm1QogbyvE0J6WIwIavSMHGRgRap0XdqMbJVnl7ilVGp9V7D3
+EK3+a8XYsYMvPyrn+28VmX2dJ9Xlw0eyRGZn5BzZyHHIPz5oaWyaGYkxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM85eXRSGeX8lPUbDvG5KFXl+Q4pMB8GA1UdIwQY
MBaAFEwQH/UbZ+7+DWeADnbTYG30yUchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEJBZjlSdG43djROWjRBT2R0TmdiZlRKUnlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81OWRjYmQtNzhiZi00OGVkLTk1NGQt
Y2NhYTZlYjNjNTEzLzEvVEJBZjlSdG43djROWjRBT2R0TmdiZlRKUnlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC81OWRjYmQtNzhiZi00OGVkLTk1NGQtY2NhYTZlYjNjNTEz
LzEvVEJBZjlSdG43djROWjRBT2R0TmdiZlRKUnlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBpJWX7U
HCQwvl8bSbe1cWGPaaGYcWznJKcYK+vNslphYVP7nLeECZPk4dBWv3GmwMUQlW5a
57fAl82Szp+AAZrtrAEks/pJ+UUpO2N3lcQ6Tk3XocnAo7GjnRlV+rFV1TbCKIrL
7ZkjDZM9nsF9zQMlhhHRIGgohdQkQGQ/gguZBXaBLpcYCGTDuBk5hgVaUpe35QQ5
wI6UWJ3xe/kWHBUi/0bt24dMFgH3saf5WntBAg91mdw+ibKXXoywfHnNeIoHDDH6
BdyIaxycrRrnT6L18az3trnAJ5PrUI0fcrLaOnFwg/Sc0G0xC5tvWAe+zl4d4DIY
hs4Tzseddoj8OA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:50:49 2025 by rpki-client