Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
File: TfkmWGAQlO1kmFxkxpUr40FjAc4.mft (raw, json)
Hash identifier: BG9S1DiTaS5EI6BxB3N5Ys/HD3izpzI8AFNQ3VMVSoA=
Subject key identifier: 6C:F3:81:F1:35:1E:EE:80:69:11:0A:11:D7:AD:8F:8E:6A:28:ED:A8
Authority key identifier: 4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
Certificate issuer: /CN=4df92658601094ed64985c64c6952be3416301ce
Certificate serial: 0197488D2652C67C61F605F08B1A8CA6C0C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
Manifest number: 07E7
Signing time: Sat 07 Jun 2025 04:01:39 +0000
Manifest this update: Sat 07 Jun 2025 04:01:39 +0000
Manifest next update: Sun 08 Jun 2025 04:01:39 +0000
Files and hashes: 1: 42VDtF9LMj3RUZlBTr5Tpxb7XhY.roa (hash: 06Fp4iuAbTOsazThfCr6hEmyN81BPyfi3nXeyKKT6d0=)
2: TfkmWGAQlO1kmFxkxpUr40FjAc4.crl (hash: Dj64lVzmGU3NehLNJkhx9j6QyTSVo8+WwOXetZZiiYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:26:52:c6:7c:61:f6:05:f0:8b:1a:8c:a6:c0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df92658601094ed64985c64c6952be3416301ce
Validity
Not Before: Jun 7 04:01:39 2025 GMT
Not After : Jun 8 04:01:39 2025 GMT
Subject: CN=6cf381f1351eee8069110a11d7ad8f8e6a28eda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bd:8a:e5:f4:79:ba:a1:f6:1f:8c:b1:fa:d1:
97:4c:f7:13:c5:21:64:2e:38:37:8b:2d:3a:ee:a1:
ba:bf:d0:be:59:0a:c6:05:89:4e:ab:f8:a2:fc:da:
cd:1b:4d:1b:07:fd:12:59:9d:8b:3e:8c:f0:7a:16:
57:10:94:cb:34:77:4d:f2:11:ec:bf:f2:11:9e:9c:
c9:db:a7:c9:65:6b:3f:a4:3c:5b:5f:13:63:89:9e:
6f:86:01:46:28:06:be:97:72:d7:be:b6:91:f1:1c:
4b:a6:d2:a1:95:de:0f:84:7f:fc:87:a2:f7:91:0a:
49:b3:97:a4:64:ea:95:f2:a0:9a:b1:cc:2c:17:a8:
12:4e:cf:a4:48:6f:42:2a:ba:d7:94:29:b7:e7:0b:
2e:88:5d:9d:6e:4b:68:79:e5:e5:34:5d:1f:33:92:
53:52:f8:87:4f:27:7c:63:5d:c2:64:89:d5:87:0d:
21:33:4a:0f:f5:45:39:bc:cc:b0:32:f2:24:92:88:
bc:d9:62:46:4c:05:79:69:94:dc:e2:1e:e4:ab:8a:
55:70:0b:4b:3c:57:99:e4:67:cf:a1:4e:5b:57:35:
7e:6c:59:73:83:25:1d:25:6c:e0:ae:46:6d:14:34:
94:f2:28:fd:fb:45:d0:1b:7a:42:9f:fd:07:70:cc:
61:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F3:81:F1:35:1E:EE:80:69:11:0A:11:D7:AD:8F:8E:6A:28:ED:A8
X509v3 Authority Key Identifier:
keyid:4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:99:25:76:66:90:b3:03:29:02:55:9c:b8:af:e4:3c:91:89:
7c:81:92:57:00:7a:a7:b3:b1:56:6a:63:35:eb:62:e5:52:1d:
bc:7d:18:6e:94:36:2c:37:2c:58:f8:f7:aa:dc:60:f4:08:d2:
f4:bf:9b:25:00:1a:72:c3:63:f0:be:a2:20:21:a6:a8:ac:b9:
a2:8e:ba:7d:00:80:ea:ba:23:11:53:ec:a4:52:56:29:1d:0c:
dd:ad:f3:8b:4e:16:8d:91:3e:b0:f3:75:74:b0:ba:7b:f0:76:
d7:54:9b:73:be:a1:05:0f:ed:c4:9d:70:25:1f:fa:50:d1:3a:
63:90:4e:a1:d7:85:97:a7:7f:cd:98:01:7f:07:1f:91:02:ef:
e5:13:02:c4:ba:70:01:03:a4:0f:b5:a8:95:89:72:81:9d:55:
25:2a:2c:e2:1d:1a:e3:96:c3:cc:19:97:b3:4b:6e:5b:80:97:
54:0f:b7:20:a8:1e:0a:7c:3d:22:09:1a:df:34:22:46:44:4b:
4a:b9:65:9f:92:82:c3:0d:f9:4c:a3:83:82:94:80:97:c1:ee:
59:d1:da:82:a2:87:cc:3a:88:a5:22:13:16:c1:f1:19:fb:08:
ef:1f:a6:cb:4a:bb:93:5f:85:b1:e3:ee:39:0a:4b:22:e5:d8:
8d:04:3b:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjSZSxnxh9gXwixqMpsDDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZjkyNjU4NjAxMDk0ZWQ2NDk4NWM2NGM2OTUyYmUzNDE2
MzAxY2UwHhcNMjUwNjA3MDQwMTM5WhcNMjUwNjA4MDQwMTM5WjAzMTEwLwYDVQQD
Eyg2Y2YzODFmMTM1MWVlZTgwNjkxMTBhMTFkN2FkOGY4ZTZhMjhlZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm72K5fR5uqH2H4yx+tGXTPcTxSFk
Ljg3iy067qG6v9C+WQrGBYlOq/ii/NrNG00bB/0SWZ2LPozwehZXEJTLNHdN8hHs
v/IRnpzJ26fJZWs/pDxbXxNjiZ5vhgFGKAa+l3LXvraR8RxLptKhld4PhH/8h6L3
kQpJs5ekZOqV8qCascwsF6gSTs+kSG9CKrrXlCm35wsuiF2dbktoeeXlNF0fM5JT
UviHTyd8Y13CZInVhw0hM0oP9UU5vMywMvIkkoi82WJGTAV5aZTc4h7kq4pVcAtL
PFeZ5GfPoU5bVzV+bFlzgyUdJWzgrkZtFDSU8ij9+0XQG3pCn/0HcMxhzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGzzgfE1Hu6AaREKEdetj45qKO2oMB8GA1UdIwQY
MBaAFE35JlhgEJTtZJhcZMaVK+NBYwHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGZrbVdHQVFsTzFrbUZ4a3hwVXI0MEZqQWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9hOWU1N2UtMjQ3OS00NTc2LWIyNzUt
ODc0MzMxNTdhMjViLzEvVGZrbVdHQVFsTzFrbUZ4a3hwVXI0MEZqQWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9hOWU1N2UtMjQ3OS00NTc2LWIyNzUtODc0MzMxNTdhMjVi
LzEvVGZrbVdHQVFsTzFrbUZ4a3hwVXI0MEZqQWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhpkldmaQ
swMpAlWcuK/kPJGJfIGSVwB6p7OxVmpjNeti5VIdvH0YbpQ2LDcsWPj3qtxg9AjS
9L+bJQAacsNj8L6iICGmqKy5oo66fQCA6rojEVPspFJWKR0M3a3zi04WjZE+sPN1
dLC6e/B211Sbc76hBQ/txJ1wJR/6UNE6Y5BOodeFl6d/zZgBfwcfkQLv5RMCxLpw
AQOkD7WolYlygZ1VJSos4h0a45bDzBmXs0tuW4CXVA+3IKgeCnw9Igka3zQiRkRL
Srlln5KCww35TKODgpSAl8HuWdHagqKHzDqIpSITFsHxGfsI7x+my0q7k1+FsePu
OQpLIuXYjQQ7CQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:33:31 2025 by rpki-client