Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
File: Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft (raw, json)
Hash identifier: tZIUxSdX5IjEk2KLJKRVQsT8PxQNNb4FAumpMCR2ZeU=
Subject key identifier: 8D:CF:8C:BD:C3:32:B1:31:89:02:59:84:79:A5:28:88:A7:46:B6:C8
Authority key identifier: 4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
Certificate issuer: /CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Certificate serial: 01974D0DCF9F1D7EB023D6F4253C861D22CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 01:00:40 +0000
Manifest this update: Sun 08 Jun 2025 01:00:40 +0000
Manifest next update: Mon 09 Jun 2025 01:00:40 +0000
Files and hashes: 1: Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl (hash: KRxdjeQ+x6zLO+grVMwDZ4QzEtRmptevDqDWvyCS7jc=)
2: ZPx2mzUkeOD00cVnYPqjI9aytDo.roa (hash: 9BSbx2wnbDuYyWn09oP3MayodoEwoQbrU6xTUmUCOR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:cf:9f:1d:7e:b0:23:d6:f4:25:3c:86:1d:22:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Validity
Not Before: Jun 8 01:00:40 2025 GMT
Not After : Jun 9 01:00:40 2025 GMT
Subject: CN=8dcf8cbdc332b1318902598479a52888a746b6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bd:4e:9a:21:98:71:b0:3e:6d:56:96:6b:a2:
c4:9c:10:a7:5a:ee:e9:01:ec:aa:ed:b9:04:2b:e2:
da:1f:9f:cb:1f:3b:26:0d:7d:5e:91:28:fc:f5:99:
04:a2:1f:1c:90:45:46:c1:90:1b:11:dd:91:ba:2c:
eb:72:be:e8:57:2d:83:e3:91:73:9e:a7:e7:a7:65:
ea:d5:47:a0:13:32:80:ee:7f:02:da:f1:fc:f0:2a:
36:cc:76:d7:03:26:38:c8:f9:54:0e:75:03:bf:2f:
90:23:ee:fa:30:21:0c:70:2d:ae:6d:7e:25:cb:f7:
6d:df:72:1d:55:76:04:54:57:60:57:fe:41:6d:71:
ca:f0:92:1f:4c:29:47:42:27:5e:02:d6:94:a3:27:
05:e8:a5:cc:45:88:56:18:88:e1:ed:a2:58:ee:8f:
7a:e5:2e:a4:52:ab:62:30:16:08:fc:24:8c:d1:b4:
62:4d:17:27:f0:bf:c0:83:2f:08:c4:bc:47:b0:df:
5e:c6:4f:dc:74:97:17:05:02:f9:a1:1f:10:d5:7e:
f3:87:e4:18:27:9b:1b:4e:6c:a0:fe:47:82:12:ce:
5f:48:0a:53:ba:62:ee:fc:04:1e:4e:89:47:ff:b0:
15:5d:af:d5:02:58:fa:3a:60:ed:3a:c3:ed:60:82:
14:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CF:8C:BD:C3:32:B1:31:89:02:59:84:79:A5:28:88:A7:46:B6:C8
X509v3 Authority Key Identifier:
keyid:4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1b:93:29:20:ae:c7:25:20:3c:95:20:55:f0:88:9a:31:3c:
9d:fd:73:ed:f9:69:05:38:f1:10:fc:47:6b:3b:43:fa:7f:45:
38:a4:42:75:2b:ab:6a:78:2d:28:65:4f:1f:44:2e:18:b2:a4:
3b:3e:1f:42:0f:0a:5a:bd:c8:df:65:83:a3:db:30:0c:3a:e1:
40:65:05:aa:10:f2:ce:e5:05:d5:12:3f:96:56:c5:3d:9e:86:
da:dd:54:90:08:72:29:c2:ca:54:c3:55:39:d5:ba:f0:f5:3b:
af:02:9a:91:4c:f1:14:e0:14:a3:e1:69:34:e7:66:37:38:fb:
e4:01:ad:e6:a9:c2:e0:eb:52:a6:a2:e9:d7:87:ca:37:03:72:
03:43:7a:06:44:56:8e:a7:dc:1f:a4:2f:05:90:8c:72:54:37:
7f:04:72:68:7a:38:02:95:71:5d:92:0a:41:0c:82:e6:84:7c:
4d:f7:20:68:32:a7:05:38:b9:74:83:b5:0f:b8:26:02:79:ba:
aa:d0:0a:11:c6:15:33:8e:2e:7f:ba:e0:97:82:03:22:51:d4:
fe:14:2a:cb:30:81:cf:6b:11:d9:25:8b:4a:65:ed:51:8b:92:
98:e3:ee:41:12:01:ef:4c:36:ef:2d:7e:ef:29:c1:4d:b8:40:
c4:22:a7:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDc+fHX6wI9b0JTyGHSLNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYWU2ZjUyNGVlZDBmNzNjODQ5YjA2NDM4MjdiODBlMzdj
NDZjNzEwHhcNMjUwNjA4MDEwMDQwWhcNMjUwNjA5MDEwMDQwWjAzMTEwLwYDVQQD
Eyg4ZGNmOGNiZGMzMzJiMTMxODkwMjU5ODQ3OWE1Mjg4OGE3NDZiNmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5L1OmiGYcbA+bVaWa6LEnBCnWu7p
Aeyq7bkEK+LaH5/LHzsmDX1ekSj89ZkEoh8ckEVGwZAbEd2Ruizrcr7oVy2D45Fz
nqfnp2Xq1UegEzKA7n8C2vH88Co2zHbXAyY4yPlUDnUDvy+QI+76MCEMcC2ubX4l
y/dt33IdVXYEVFdgV/5BbXHK8JIfTClHQideAtaUoycF6KXMRYhWGIjh7aJY7o96
5S6kUqtiMBYI/CSM0bRiTRcn8L/Agy8IxLxHsN9exk/cdJcXBQL5oR8Q1X7zh+QY
J5sbTmyg/keCEs5fSApTumLu/AQeTolH/7AVXa/VAlj6OmDtOsPtYIIUAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3PjL3DMrExiQJZhHmlKIinRrbIMB8GA1UdIwQY
MBaAFE6ub1JO7Q9zyEmwZDgnuA43xGxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHE1dlVrN3REM1BJU2JCa09DZTREamZFYkhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lZDM4NGUtOTk0OS00Y2MwLThhMzct
M2JiMmNkODBhMmM5LzEvVHE1dlVrN3REM1BJU2JCa09DZTREamZFYkhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9lZDM4NGUtOTk0OS00Y2MwLThhMzctM2JiMmNkODBhMmM5
LzEvVHE1dlVrN3REM1BJU2JCa09DZTREamZFYkhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhuTKSCu
xyUgPJUgVfCImjE8nf1z7flpBTjxEPxHaztD+n9FOKRCdSurangtKGVPH0QuGLKk
Oz4fQg8KWr3I32WDo9swDDrhQGUFqhDyzuUF1RI/llbFPZ6G2t1UkAhyKcLKVMNV
OdW68PU7rwKakUzxFOAUo+FpNOdmNzj75AGt5qnC4OtSpqLp14fKNwNyA0N6BkRW
jqfcH6QvBZCMclQ3fwRyaHo4ApVxXZIKQQyC5oR8TfcgaDKnBTi5dIO1D7gmAnm6
qtAKEcYVM44uf7rgl4IDIlHU/hQqyzCBz2sR2SWLSmXtUYuSmOPuQRIB70w27y1+
7ynBTbhAxCKn4A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:17:55 2025 by rpki-client