Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
File: Tm_7mQbuvrofWxpVju1jcvZTzoY.mft (raw, json)
Hash identifier: +M03/hZXCdr+9u3Udj7I2O002Mix3HdU9T1L+8tNAJg=
Subject key identifier: 9B:E5:66:85:42:BC:06:C0:96:B8:93:9B:70:D4:60:32:82:33:18:9C
Authority key identifier: 4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86
Certificate issuer: /CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
Certificate serial: 0197B70F2EA96583032D96ECD55E979AF874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 15:01:54 +0000
Manifest this update: Sat 28 Jun 2025 15:01:54 +0000
Manifest next update: Sun 29 Jun 2025 15:01:54 +0000
Files and hashes: 1: Tm_7mQbuvrofWxpVju1jcvZTzoY.crl (hash: uA4trq+xWj7X+Ci/2l/uOBRQ+8nKxYFdNi0Ld2U/TSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:2e:a9:65:83:03:2d:96:ec:d5:5e:97:9a:f8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
Validity
Not Before: Jun 28 15:01:54 2025 GMT
Not After : Jun 29 15:01:54 2025 GMT
Subject: CN=9be5668542bc06c096b8939b70d460328233189c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bc:e3:7a:52:5f:7e:e8:1f:d4:76:dc:4f:55:
ab:8c:af:fb:6b:34:7b:c1:30:0b:0d:f0:d2:a3:54:
9c:12:94:ec:c5:10:45:d9:1b:c3:c9:4a:a8:4a:74:
60:65:ee:6e:7c:93:9f:26:00:69:fc:4d:49:6e:e3:
09:f9:f0:90:2f:64:f4:2f:57:5b:1c:8a:c3:86:85:
df:1a:89:5a:54:1e:27:68:37:70:17:fb:bb:d4:09:
8d:0c:ad:89:ce:9e:73:37:e3:b5:d1:be:82:7e:dc:
92:f1:93:99:cd:27:07:4b:08:e3:5a:f2:e5:45:4a:
d7:ae:f5:11:6c:a9:d4:5c:32:af:4b:97:a6:18:e4:
b3:65:1e:25:f1:53:83:e5:1b:af:c6:c0:52:a1:e6:
50:b1:50:ec:ef:ae:0a:6e:1c:57:8a:e4:a4:99:d1:
2e:ca:b4:2e:5c:a3:18:cb:a7:d8:78:ea:d6:36:b7:
ee:7e:31:1d:c6:7e:2a:57:a1:4d:0c:10:50:08:6c:
29:f2:dc:d3:46:99:58:0e:ce:8e:17:85:fc:cf:80:
9f:1d:7c:1b:ce:27:29:7b:3d:b2:1d:47:f4:be:a3:
62:67:dd:7b:f7:d2:a7:ea:fb:a8:c4:d8:4e:33:5d:
ac:31:48:c7:3a:35:30:b3:fa:fa:12:7b:27:d2:73:
21:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E5:66:85:42:BC:06:C0:96:B8:93:9B:70:D4:60:32:82:33:18:9C
X509v3 Authority Key Identifier:
keyid:4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:56:e4:45:65:51:e1:35:61:d8:d4:94:49:77:f1:fd:aa:73:
25:da:88:04:99:92:11:d5:c6:96:93:35:78:ad:c4:3f:14:2a:
c7:07:1c:18:49:b4:86:87:72:7b:60:78:30:92:11:e2:eb:ca:
38:f5:d2:cd:32:6b:30:f7:6b:13:34:74:93:fb:1c:7c:4d:8a:
df:f6:a2:13:d1:d2:ee:c9:24:08:be:b1:15:36:0e:1f:51:26:
a9:62:e6:c5:a3:3f:cd:9a:35:b9:1a:91:5f:83:41:ef:cd:0e:
4f:bf:9e:f4:00:1f:53:b4:8a:af:a8:f0:33:82:6e:aa:c4:78:
c9:02:e9:10:1e:28:d5:e7:e3:71:15:cb:1a:37:fd:0a:98:24:
64:85:30:8f:8b:be:5b:5a:8e:f0:c7:3e:e0:5a:e2:6d:c5:6f:
47:47:93:4a:a7:9c:dc:44:f6:95:4f:cf:74:2f:28:94:cd:ee:
aa:ed:8d:a9:46:3c:3b:24:ae:7a:e8:ca:17:5a:16:1d:41:fe:
67:a9:22:74:49:e0:77:de:b2:ca:99:b7:6b:37:c8:ba:e8:71:
ed:3b:ec:7d:d1:94:88:40:94:da:af:2e:11:cc:b4:cd:71:22:
f4:b4:d6:e4:89:75:5c:dd:66:f8:81:fe:85:cc:19:56:b0:8b:
a0:6a:78:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dy6pZYMDLZbs1V6Xmvh0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNmZmYjk5MDZlZWJlYmExZjViMWE1NThlZWQ2MzcyZjY1
M2NlODYwHhcNMjUwNjI4MTUwMTU0WhcNMjUwNjI5MTUwMTU0WjAzMTEwLwYDVQQD
Eyg5YmU1NjY4NTQyYmMwNmMwOTZiODkzOWI3MGQ0NjAzMjgyMzMxODljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bzjelJffugf1HbcT1WrjK/7azR7
wTALDfDSo1ScEpTsxRBF2RvDyUqoSnRgZe5ufJOfJgBp/E1JbuMJ+fCQL2T0L1db
HIrDhoXfGolaVB4naDdwF/u71AmNDK2Jzp5zN+O10b6CftyS8ZOZzScHSwjjWvLl
RUrXrvURbKnUXDKvS5emGOSzZR4l8VOD5RuvxsBSoeZQsVDs764KbhxXiuSkmdEu
yrQuXKMYy6fYeOrWNrfufjEdxn4qV6FNDBBQCGwp8tzTRplYDs6OF4X8z4CfHXwb
zicpez2yHUf0vqNiZ91799Kn6vuoxNhOM12sMUjHOjUws/r6Ensn0nMhPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvlZoVCvAbAlriTm3DUYDKCMxicMB8GA1UdIwQY
MBaAFE5v+5kG7r66H1saVY7tY3L2U86GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xOTgwYmQtMDc1My00MTYxLWI2ZjUt
OWM3MmUxNTdhYmIzLzEvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8xOTgwYmQtMDc1My00MTYxLWI2ZjUtOWM3MmUxNTdhYmIz
LzEvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApFbkRWVR
4TVh2NSUSXfx/apzJdqIBJmSEdXGlpM1eK3EPxQqxwccGEm0hodye2B4MJIR4uvK
OPXSzTJrMPdrEzR0k/scfE2K3/aiE9HS7skkCL6xFTYOH1EmqWLmxaM/zZo1uRqR
X4NB780OT7+e9AAfU7SKr6jwM4JuqsR4yQLpEB4o1efjcRXLGjf9CpgkZIUwj4u+
W1qO8Mc+4FribcVvR0eTSqec3ET2lU/PdC8olM3uqu2NqUY8OySueujKF1oWHUH+
Z6kidEngd96yypm3azfIuuhx7TvsfdGUiECU2q8uEcy0zXEi9LTW5Il1XN1m+IH+
hcwZVrCLoGp4GQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:23 2025 by rpki-client