Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
File: TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft (raw, json)
Hash identifier: owukNeIh3WFCObFYqEUqaZInqCUvYIAAQ+Dt63aAVkI=
Subject key identifier: 56:5A:50:24:13:C0:D9:90:62:C2:B7:74:64:6C:C1:13:B7:1F:80:5A
Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
Certificate issuer: /CN=4c39055a6990b82408cf1abf29313780e249a4c9
Certificate serial: 01974C9FD8FFF20B388BE9BB76311EC6F119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
Manifest number: 10E7
Signing time: Sat 07 Jun 2025 23:00:33 +0000
Manifest this update: Sat 07 Jun 2025 23:00:33 +0000
Manifest next update: Sun 08 Jun 2025 23:00:33 +0000
Files and hashes: 1: 0Y15xTEGHWqAVJeDnj84hoOI0tg.roa (hash: x9AqfYccJqcsHyWL4/sbLsYAD4D5JWU2OTOL9ya8Qzo=)
2: IYab2KOA6Rs-FvpcDRNq2DIlRwA.roa (hash: IVe8cPHTrjQPMjYgTeQH7fMCvrM38QVBDNRacJOqgtc=)
3: TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl (hash: xrNeTsO9hV7QEAnRiHC6Hweckr8AH91OYbL7RWfgO8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:d8:ff:f2:0b:38:8b:e9:bb:76:31:1e:c6:f1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9
Validity
Not Before: Jun 7 23:00:33 2025 GMT
Not After : Jun 8 23:00:33 2025 GMT
Subject: CN=565a502413c0d99062c2b774646cc113b71f805a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:c0:b7:2b:dc:a6:7a:56:f3:6a:1b:94:90:
78:7a:36:1c:02:7b:b1:42:24:c4:b3:85:03:3a:af:
bd:f2:64:de:5d:df:b1:37:b5:c3:fa:1f:c3:bb:35:
36:b3:69:8f:a6:c9:2f:9e:b7:bc:85:06:d4:c5:59:
1a:91:9a:d9:16:ce:3c:2b:d3:3d:eb:cd:a0:30:a9:
7d:66:f1:25:80:a4:eb:42:41:03:33:85:4d:4a:43:
60:38:45:2b:01:d1:a1:59:eb:f0:53:bd:ca:f2:4d:
86:b7:4d:36:27:b8:93:cd:b5:e1:fc:5b:d1:68:27:
11:f2:dd:72:a4:b6:19:67:4e:0f:18:2d:17:9f:da:
f5:aa:3d:f3:43:89:02:86:39:d4:6d:b6:1d:30:7d:
0a:c5:55:53:eb:a9:df:74:73:14:fd:d2:c0:68:72:
c9:cd:15:62:d7:ab:9d:26:e0:20:4e:b4:8d:1f:0e:
f7:8d:ba:42:ba:f5:29:4c:b0:f3:76:22:76:78:2b:
70:9c:9e:d8:0a:8b:ca:4c:68:8e:53:e9:10:7f:7b:
ad:a1:1d:16:07:0b:ed:7f:e1:a3:8a:68:9f:d5:60:
e8:87:9a:ec:88:ce:e0:5f:6b:ba:e8:bb:3e:be:d4:
d3:3b:eb:e6:67:17:7d:1f:d5:2e:1e:62:76:5b:8a:
aa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5A:50:24:13:C0:D9:90:62:C2:B7:74:64:6C:C1:13:B7:1F:80:5A
X509v3 Authority Key Identifier:
keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:32:5f:16:4d:fa:0d:c9:df:c3:61:22:36:14:3d:69:7d:17:
4e:87:a7:54:9d:ab:84:22:ac:4d:c7:8c:b0:ec:68:60:70:0b:
65:81:71:d0:d8:d9:4b:ad:0d:25:c9:5f:d2:fe:ad:68:a3:4c:
06:0f:5b:a1:23:28:ff:ab:bb:fa:35:ea:bb:55:46:2e:ae:fe:
f6:3b:12:74:f1:44:0f:ab:2f:66:55:2f:34:9f:2b:ae:61:16:
35:8a:25:a3:a8:21:88:13:9f:5b:11:db:2f:f7:83:1f:7a:e4:
3e:f1:65:cb:8e:f3:27:06:4a:7f:e1:59:a5:ea:7b:25:d0:72:
5a:a8:ec:c7:00:61:99:0f:71:a7:d9:ce:77:87:70:2d:99:c3:
f3:6f:d3:8e:6d:21:44:44:4f:ad:0b:39:81:c5:d3:e8:de:58:
6e:9d:43:72:b6:24:df:3d:cd:11:e1:81:87:29:4c:75:a4:b9:
f1:e6:a6:58:11:23:9d:a8:38:0b:29:76:05:a0:4a:c1:2a:1b:
a9:ba:a5:ce:79:ae:91:bf:d6:bd:83:88:d3:33:73:30:07:78:
b8:04:aa:41:79:fd:ce:d6:c3:d8:1e:9d:af:bc:75:d2:a4:75:
a8:d6:8f:52:7b:af:be:b9:bc:dc:e8:05:f9:8a:71:d2:a1:74:
d0:ef:f8:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMn9j/8gs4i+m7djEexvEZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzkwNTVhNjk5MGI4MjQwOGNmMWFiZjI5MzEzNzgwZTI0
OWE0YzkwHhcNMjUwNjA3MjMwMDMzWhcNMjUwNjA4MjMwMDMzWjAzMTEwLwYDVQQD
Eyg1NjVhNTAyNDEzYzBkOTkwNjJjMmI3NzQ2NDZjYzExM2I3MWY4MDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAPAtyvcpnpW82oblJB4ejYcAnux
QiTEs4UDOq+98mTeXd+xN7XD+h/DuzU2s2mPpskvnre8hQbUxVkakZrZFs48K9M9
682gMKl9ZvElgKTrQkEDM4VNSkNgOEUrAdGhWevwU73K8k2Gt002J7iTzbXh/FvR
aCcR8t1ypLYZZ04PGC0Xn9r1qj3zQ4kChjnUbbYdMH0KxVVT66nfdHMU/dLAaHLJ
zRVi16udJuAgTrSNHw73jbpCuvUpTLDzdiJ2eCtwnJ7YCovKTGiOU+kQf3utoR0W
Bwvtf+Gjimif1WDoh5rsiM7gX2u66Ls+vtTTO+vmZxd9H9UuHmJ2W4qqYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZaUCQTwNmQYsK3dGRswRO3H4BaMB8GA1UdIwQY
MBaAFEw5BVppkLgkCM8avykxN4DiSaTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kZjZlMjUtOTIzYy00ODM4LTg2NGYt
ZDRiMzdlNDRhYjdjLzEvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kZjZlMjUtOTIzYy00ODM4LTg2NGYtZDRiMzdlNDRhYjdj
LzEvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTJfFk36
Dcnfw2EiNhQ9aX0XToenVJ2rhCKsTceMsOxoYHALZYFx0NjZS60NJclf0v6taKNM
Bg9boSMo/6u7+jXqu1VGLq7+9jsSdPFED6svZlUvNJ8rrmEWNYolo6ghiBOfWxHb
L/eDH3rkPvFly47zJwZKf+FZpep7JdByWqjsxwBhmQ9xp9nOd4dwLZnD82/Tjm0h
RERPrQs5gcXT6N5Ybp1DcrYk3z3NEeGBhylMdaS58eamWBEjnag4Cyl2BaBKwSob
qbqlznmukb/WvYOI0zNzMAd4uASqQXn9ztbD2B6dr7x10qR1qNaPUnuvvrm83OgF
+Ypx0qF00O/4rA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:23:43 2025 by rpki-client