Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
File: TtTTbmM3JKGxeUm8QiR2lk518GU.mft (raw, json)
Hash identifier: jEu/Qm4N8mQmzv2nNN+eBgH2AzcQUn77oFFpYK2OpAc=
Subject key identifier: A1:2B:FC:C2:F2:3D:6A:14:09:64:07:05:8B:11:84:1F:C1:B1:3A:13
Authority key identifier: 4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
Certificate issuer: /CN=4ed4d36e633724a1b17949bc422476964e75f065
Certificate serial: 0197579131F08FCD286E2F3527F423A3A0BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
Manifest number: 1585
Signing time: Tue 10 Jun 2025 02:00:22 +0000
Manifest this update: Tue 10 Jun 2025 02:00:22 +0000
Manifest next update: Wed 11 Jun 2025 02:00:22 +0000
Files and hashes: 1: CnryW-h9KBqAbLH3yoElsj6kkME.roa (hash: LGWkYgge1+9ItWTLHb68eWMOdZQGepA7ESiUA3d7dLI=)
2: TtTTbmM3JKGxeUm8QiR2lk518GU.crl (hash: ar/jvk4E8HHXuTJSgDeIJbgCEuRF32ZhiyxNOkLSNbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:91:31:f0:8f:cd:28:6e:2f:35:27:f4:23:a3:a0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed4d36e633724a1b17949bc422476964e75f065
Validity
Not Before: Jun 10 02:00:22 2025 GMT
Not After : Jun 11 02:00:22 2025 GMT
Subject: CN=a12bfcc2f23d6a14096407058b11841fc1b13a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d8:3a:be:8d:29:73:d7:6e:70:35:8d:fb:bc:
31:20:22:4e:47:0c:6a:e6:9b:11:42:4a:20:58:79:
98:03:01:f2:3b:ff:2b:85:f3:25:97:98:7f:f4:bc:
38:9c:c5:77:c5:8d:d2:a1:4b:b4:7b:d5:d7:52:64:
d4:98:d4:fa:f6:d8:88:2b:d0:ac:c6:78:a4:9a:5f:
26:a5:62:d5:0c:54:84:4e:9f:73:34:79:8b:13:9a:
8b:c3:ad:3b:19:63:39:2d:b0:97:fa:88:3a:15:65:
cb:9d:a1:e7:2a:0c:8a:ff:d3:16:a5:e9:34:ed:0e:
7b:bc:9e:93:88:f0:8a:54:d9:b1:95:73:18:3a:24:
17:f8:f3:94:29:38:ee:d4:1a:f1:ba:33:df:24:0e:
48:03:87:f8:0f:be:d8:55:51:23:ee:31:6d:c3:0c:
04:49:11:dc:c7:21:b7:ae:e3:35:8f:50:89:c9:c7:
49:ed:3d:e6:e5:aa:c7:70:a8:fa:e5:aa:7c:b2:7a:
be:98:fa:ba:60:38:59:4b:42:df:d3:26:ea:83:76:
95:65:21:09:19:35:12:ac:f7:54:12:50:e8:da:df:
d4:6b:12:c2:1a:fb:8f:2c:f2:db:55:97:37:e0:65:
fa:f0:3b:68:a2:79:e0:11:28:28:c8:be:87:ef:f7:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2B:FC:C2:F2:3D:6A:14:09:64:07:05:8B:11:84:1F:C1:B1:3A:13
X509v3 Authority Key Identifier:
keyid:4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:97:37:06:98:31:4a:a1:ab:64:27:83:df:8a:81:cd:81:74:
ef:0f:53:cd:f7:52:15:42:75:88:41:b9:c1:3f:f3:a6:99:8d:
53:25:75:55:9b:dc:75:52:3a:b1:ce:85:73:4f:2a:50:a1:e6:
9b:fa:ae:f4:39:cd:a9:ed:b2:f9:6c:cf:fc:8d:20:dc:70:6b:
cf:16:3a:e3:ca:4b:cb:49:27:63:de:94:1f:0e:27:6f:60:77:
04:1e:bf:8e:11:1e:b7:06:c0:87:9a:fa:a6:a2:f6:4d:0a:1a:
d6:7e:59:09:3e:b3:a7:c1:f6:10:5e:e2:3d:40:4e:bf:f3:49:
33:50:2c:49:93:ce:e9:e7:2c:66:2d:50:dd:da:85:3f:e1:4b:
bd:75:12:ed:0b:42:5b:45:ff:a5:e2:1a:47:64:ca:61:ed:0a:
b6:43:79:ea:b6:f0:3c:62:2a:ba:3f:a9:d6:7f:d1:1b:4d:eb:
f3:cf:dc:de:35:b9:70:39:9f:62:89:dd:21:83:83:f3:27:94:
f9:69:8b:74:1b:8c:4c:20:2c:f7:44:5d:2d:d5:bd:70:5d:94:
9b:e9:fe:58:77:90:5b:12:1c:6c:b0:bb:c5:a1:ba:28:47:bd:
0b:c5:89:eb:88:4a:9a:fa:88:e9:13:18:dc:c6:16:c7:49:d5:
6a:71:c8:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdXkTHwj80obi81J/Qjo6C9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZDRkMzZlNjMzNzI0YTFiMTc5NDliYzQyMjQ3Njk2NGU3
NWYwNjUwHhcNMjUwNjEwMDIwMDIyWhcNMjUwNjExMDIwMDIyWjAzMTEwLwYDVQQD
EyhhMTJiZmNjMmYyM2Q2YTE0MDk2NDA3MDU4YjExODQxZmMxYjEzYTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dg6vo0pc9ducDWN+7wxICJORwxq
5psRQkogWHmYAwHyO/8rhfMll5h/9Lw4nMV3xY3SoUu0e9XXUmTUmNT69tiIK9Cs
xnikml8mpWLVDFSETp9zNHmLE5qLw607GWM5LbCX+og6FWXLnaHnKgyK/9MWpek0
7Q57vJ6TiPCKVNmxlXMYOiQX+POUKTju1BrxujPfJA5IA4f4D77YVVEj7jFtwwwE
SRHcxyG3ruM1j1CJycdJ7T3m5arHcKj65ap8snq+mPq6YDhZS0Lf0ybqg3aVZSEJ
GTUSrPdUElDo2t/UaxLCGvuPLPLbVZc34GX68DtoonngESgoyL6H7/cMHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEr/MLyPWoUCWQHBYsRhB/BsToTMB8GA1UdIwQY
MBaAFE7U025jNyShsXlJvEIkdpZOdfBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHRUVGJtTTNKS0d4ZVVtOFFpUjJsazUxOEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82ODZkNGItZjE1Yi00NTMwLWI5MWIt
ZTBjNDA2YjY0NjcyLzEvVHRUVGJtTTNKS0d4ZVVtOFFpUjJsazUxOEdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy82ODZkNGItZjE1Yi00NTMwLWI5MWItZTBjNDA2YjY0Njcy
LzEvVHRUVGJtTTNKS0d4ZVVtOFFpUjJsazUxOEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZc3Bpgx
SqGrZCeD34qBzYF07w9TzfdSFUJ1iEG5wT/zppmNUyV1VZvcdVI6sc6Fc08qUKHm
m/qu9DnNqe2y+WzP/I0g3HBrzxY648pLy0knY96UHw4nb2B3BB6/jhEetwbAh5r6
pqL2TQoa1n5ZCT6zp8H2EF7iPUBOv/NJM1AsSZPO6ecsZi1Q3dqFP+FLvXUS7QtC
W0X/peIaR2TKYe0KtkN56rbwPGIquj+p1n/RG03r88/c3jW5cDmfYondIYOD8yeU
+WmLdBuMTCAs90RdLdW9cF2Um+n+WHeQWxIcbLC7xaG6KEe9C8WJ64hKmvqI6RMY
3MYWx0nVanHI5w==
-----END CERTIFICATE-----
Generated at Tue Jun 10 09:49:37 2025 by rpki-client