Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
File: TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json)
Hash identifier: mAg0aRGRGee3mgSa49gBnN3AMX8hZ6pP2uIeGn61nDg=
Subject key identifier: 24:ED:CB:64:ED:65:DF:69:1C:B6:8F:77:1C:CD:9B:10:98:9A:11:64
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Certificate issuer: /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial: 0197B9A16671011DFF3687A71E51B9E8C270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
Manifest number: 15BD
Signing time: Sun 29 Jun 2025 03:00:51 +0000
Manifest this update: Sun 29 Jun 2025 03:00:51 +0000
Manifest next update: Mon 30 Jun 2025 03:00:51 +0000
Files and hashes: 1: BhaT-M-zQEVQbEPTvK_whwRLo3g.roa (hash: yoydrscKhHCdRvyWQAObyBBT0xMyfOzTOU389MtWZv4=)
2: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: fKQVrpYDIPIaqtuI3SKPV9h292ZWP5vQrOYO+8/tf20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:66:71:01:1d:ff:36:87:a7:1e:51:b9:e8:c2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Validity
Not Before: Jun 29 03:00:51 2025 GMT
Not After : Jun 30 03:00:51 2025 GMT
Subject: CN=24edcb64ed65df691cb68f771ccd9b10989a1164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:05:be:ea:7d:08:4f:7f:ce:3f:02:76:03:93:
90:58:8c:73:c4:31:25:35:fa:c1:01:5c:a0:05:d9:
28:b6:9e:ce:01:4b:25:ff:b5:e5:11:66:a4:06:15:
37:da:ee:7a:28:1b:61:37:7c:29:cc:5a:c3:1e:22:
77:58:dc:f6:2d:43:72:53:ba:85:4c:87:36:f2:7f:
ac:8e:b6:46:e8:f4:82:80:d5:9b:a8:fb:a2:bd:4f:
91:25:94:dc:ce:9d:83:b0:4a:9a:7f:f5:06:38:d7:
7f:a8:5c:2e:34:a8:ce:f6:0b:93:24:7d:00:61:8e:
6d:a8:fd:d3:90:40:23:42:51:40:70:3a:52:3d:3c:
4b:9d:60:99:69:f2:22:47:ff:a5:64:73:62:ba:1b:
70:5d:ee:bf:76:a5:b5:6c:f6:39:7e:a5:0b:ea:f9:
36:d2:ba:02:9a:16:d4:59:56:e7:5f:2d:e4:26:27:
61:d2:24:e2:83:34:0f:bf:31:ec:b3:eb:21:5e:12:
2b:95:30:aa:d6:9a:31:73:bb:52:cb:8d:58:03:ef:
13:c6:7b:93:49:f4:0a:62:7c:49:11:9b:73:0e:98:
38:3c:df:e1:8c:27:f4:28:ab:7f:7b:ae:85:58:be:
2c:f3:69:ae:14:85:8f:5a:0a:a7:dc:f9:2a:f9:d0:
3b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:ED:CB:64:ED:65:DF:69:1C:B6:8F:77:1C:CD:9B:10:98:9A:11:64
X509v3 Authority Key Identifier:
keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ca:0f:9a:42:ae:4f:af:bc:ae:6b:bb:5c:af:c7:2f:d6:74:
e7:e8:05:42:65:0d:4c:d4:e3:0c:ef:37:8e:68:ed:4d:ae:ac:
cb:e1:82:a5:c9:03:dc:78:e6:8a:eb:39:9b:25:92:40:e4:61:
4d:8f:fb:fb:67:ab:c4:7f:4a:39:7e:a5:f0:41:fe:6e:de:c1:
5b:48:80:ca:36:d5:e7:42:5a:8c:87:88:6f:35:cc:4d:f0:ab:
fa:dd:4d:50:e7:12:14:fc:1a:dd:a6:d1:c9:14:13:f3:49:cc:
71:fe:1e:90:da:f5:42:3b:59:8c:85:a9:19:e0:f3:38:88:ba:
d5:de:e5:7b:a1:31:f4:81:fc:f6:58:0c:8d:19:45:66:d6:94:
40:7b:a4:54:d9:01:e6:c3:79:01:94:bf:cc:70:6c:47:e6:83:
83:54:30:7b:59:2f:37:5f:e9:23:d1:c2:e0:65:9c:a8:37:6b:
81:18:d4:2c:74:99:31:34:b6:94:82:74:52:e6:43:55:a6:cd:
d4:ac:eb:81:ae:2f:79:78:8a:58:43:95:a7:54:3b:c0:c8:da:
64:0d:a5:a6:a1:cc:d6:c0:49:42:fc:ae:44:bb:4c:6d:79:2c:
c6:00:db:bc:80:f5:ef:77:87:77:28:ae:67:cf:c5:9a:16:e5:
59:14:3a:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5oWZxAR3/NoenHlG56MJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYTRkNjE5OWFlYzgyOGY2OTg5ZTJlODRjZWMxNzc2NWJh
YzVjZDUwHhcNMjUwNjI5MDMwMDUxWhcNMjUwNjMwMDMwMDUxWjAzMTEwLwYDVQQD
EygyNGVkY2I2NGVkNjVkZjY5MWNiNjhmNzcxY2NkOWIxMDk4OWExMTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogW+6n0IT3/OPwJ2A5OQWIxzxDEl
NfrBAVygBdkotp7OAUsl/7XlEWakBhU32u56KBthN3wpzFrDHiJ3WNz2LUNyU7qF
TIc28n+sjrZG6PSCgNWbqPuivU+RJZTczp2DsEqaf/UGONd/qFwuNKjO9guTJH0A
YY5tqP3TkEAjQlFAcDpSPTxLnWCZafIiR/+lZHNiuhtwXe6/dqW1bPY5fqUL6vk2
0roCmhbUWVbnXy3kJidh0iTigzQPvzHss+shXhIrlTCq1poxc7tSy41YA+8TxnuT
SfQKYnxJEZtzDpg4PN/hjCf0KKt/e66FWL4s82muFIWPWgqn3Pkq+dA7jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTty2TtZd9pHLaPdxzNmxCYmhFkMB8GA1UdIwQY
MBaAFE2k1hma7IKPaYni6EzsF3ZbrFzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yYzg0ODItNTMzMS00ZTU3LTk5NzQt
NDA4MzdkNDg0NzNkLzEvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yYzg0ODItNTMzMS00ZTU3LTk5NzQtNDA4MzdkNDg0NzNk
LzEvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWsoPmkKu
T6+8rmu7XK/HL9Z05+gFQmUNTNTjDO83jmjtTa6sy+GCpckD3Hjmius5myWSQORh
TY/7+2erxH9KOX6l8EH+bt7BW0iAyjbV50JajIeIbzXMTfCr+t1NUOcSFPwa3abR
yRQT80nMcf4ekNr1QjtZjIWpGeDzOIi61d7le6Ex9IH89lgMjRlFZtaUQHukVNkB
5sN5AZS/zHBsR+aDg1Qwe1kvN1/pI9HC4GWcqDdrgRjULHSZMTS2lIJ0UuZDVabN
1Kzrga4veXiKWEOVp1Q7wMjaZA2lpqHM1sBJQvyuRLtMbXksxgDbvID173eHdyiu
Z8/FmhblWRQ6xw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:19:04 2025 by rpki-client