Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
File: TuUnUqgb3-CkAfmiYdef7kthcRU.mft (raw, json)
Hash identifier: kldErs4dcHiqwSSHz8yV4eD66T9RY/lrcV1rQiAgcX8=
Subject key identifier: D6:96:BA:45:E6:C8:C9:42:76:5D:DA:0A:B1:57:60:41:47:21:A9:8F
Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Certificate issuer: /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Certificate serial: 0197B7B36337F4777FA61341DF57D8E1F6FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
Manifest number: 0F41
Signing time: Sat 28 Jun 2025 18:01:15 +0000
Manifest this update: Sat 28 Jun 2025 18:01:15 +0000
Manifest next update: Sun 29 Jun 2025 18:01:15 +0000
Files and hashes: 1: 55sTvowHGJg92qkZxcKwSCfNCK4.roa (hash: b91GQDkCCdywVY2XmrIvPHNucxaPtQ8aCIEGw0MjxvQ=)
2: TuUnUqgb3-CkAfmiYdef7kthcRU.crl (hash: eqMm77Py05sBsaBE/ntUeeTZDV2YnfGSfxGUdEXHTpI=)
3: lOXoXnSoYH-Ze2jDn-kLGtNui38.roa (hash: Pz0iJoXh4tIWOR42AxlitpnyK4ra9wQb5adMKDc9S9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:63:37:f4:77:7f:a6:13:41:df:57:d8:e1:f6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Validity
Not Before: Jun 28 18:01:15 2025 GMT
Not After : Jun 29 18:01:15 2025 GMT
Subject: CN=d696ba45e6c8c942765dda0ab15760414721a98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d8:2b:77:54:c6:82:e7:67:76:bb:e0:19:35:
8c:6a:bc:28:ff:9f:25:25:5f:6c:f9:d2:76:b9:34:
c3:15:a8:de:0a:71:d9:1d:6f:76:ad:09:87:c1:e5:
aa:30:66:3b:30:47:f4:97:c7:19:d1:28:58:c4:00:
3f:75:68:63:4d:1c:61:e6:da:4a:fe:47:a3:fb:1b:
e5:b5:f9:a5:a8:14:fe:7a:b8:7a:f0:db:db:bc:37:
15:d9:3f:0c:77:16:76:43:52:e1:29:da:4d:64:9c:
72:0b:d8:06:42:52:e2:16:ea:22:47:78:14:3a:78:
2b:fe:97:b6:ae:9d:d5:83:58:e7:25:be:92:79:3e:
bb:43:a8:d4:46:d3:03:47:ae:d7:29:4c:b4:55:df:
f2:5d:bf:8e:12:53:d6:9f:46:5f:4c:8b:a8:b7:13:
eb:5c:55:7f:e4:df:f5:a6:7b:4a:8f:d1:7c:21:02:
5a:d7:33:fc:71:11:cb:0c:15:ba:61:c3:11:4f:70:
e9:58:7d:ac:0b:cb:51:16:7c:06:89:4a:79:ce:5a:
1f:cc:11:e1:5f:8f:59:f9:87:8d:e0:b1:75:ef:09:
e5:23:f6:5a:56:96:df:e0:7e:8e:8e:7d:8b:03:6f:
69:6e:19:b4:57:4b:55:bd:78:ea:cb:0d:35:64:c7:
6d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:96:BA:45:E6:C8:C9:42:76:5D:DA:0A:B1:57:60:41:47:21:A9:8F
X509v3 Authority Key Identifier:
keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5a:03:23:4b:f7:d9:1e:e6:10:c1:86:47:47:1c:b9:55:9f:
61:95:fb:ea:d4:31:ba:9d:32:fe:0a:4f:f5:b6:bb:e2:1d:00:
02:40:5c:d6:a2:ec:59:21:6d:4b:27:c2:27:3b:ed:90:06:a1:
12:97:6b:61:7e:56:dd:54:f9:f7:e9:12:ac:5d:93:62:7e:ed:
f3:d8:ef:8f:b3:36:f4:cd:a1:c8:6a:bb:9c:94:a2:81:87:1a:
e6:66:0b:09:35:c2:b9:1e:9c:fc:e5:41:b2:4a:c0:c5:8a:c9:
35:97:2d:d6:d2:69:3c:1b:8c:7d:0f:ab:d9:dc:43:4b:7e:15:
ca:60:47:1b:57:ca:e7:ff:78:77:cf:f9:9e:09:54:bb:f1:3e:
7a:0a:84:7c:e2:d3:24:40:50:1a:0a:17:57:5b:b3:06:90:25:
19:41:f3:31:a6:f0:90:90:d6:a0:41:04:59:6d:98:02:2f:b5:
16:2f:43:ef:4e:7e:32:ff:52:4d:04:80:ec:61:1f:20:52:64:
98:62:7b:9e:35:82:09:e1:29:2a:8d:bc:34:dd:fd:3e:ec:7e:
84:ad:52:ff:f1:2f:fc:31:c0:45:13:6e:d8:8c:f8:1d:8b:37:
22:99:81:71:e7:7f:9d:80:aa:ff:dc:f9:6a:cd:47:51:ef:5d:
96:db:e9:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s2M39Hd/phNB31fY4fb/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZTUyNzUyYTgxYmRmZTBhNDAxZjlhMjYxZDc5ZmVlNGI2
MTcxMTUwHhcNMjUwNjI4MTgwMTE1WhcNMjUwNjI5MTgwMTE1WjAzMTEwLwYDVQQD
EyhkNjk2YmE0NWU2YzhjOTQyNzY1ZGRhMGFiMTU3NjA0MTQ3MjFhOThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdgrd1TGgudndrvgGTWMarwo/58l
JV9s+dJ2uTTDFajeCnHZHW92rQmHweWqMGY7MEf0l8cZ0ShYxAA/dWhjTRxh5tpK
/kej+xvltfmlqBT+erh68NvbvDcV2T8MdxZ2Q1LhKdpNZJxyC9gGQlLiFuoiR3gU
Ongr/pe2rp3Vg1jnJb6SeT67Q6jURtMDR67XKUy0Vd/yXb+OElPWn0ZfTIuotxPr
XFV/5N/1pntKj9F8IQJa1zP8cRHLDBW6YcMRT3DpWH2sC8tRFnwGiUp5zlofzBHh
X49Z+YeN4LF17wnlI/ZaVpbf4H6Ojn2LA29pbhm0V0tVvXjqyw01ZMdtyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaWukXmyMlCdl3aCrFXYEFHIamPMB8GA1UdIwQY
MBaAFE7lJ1KoG9/gpAH5omHXn+5LYXEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHVVblVxZ2IzLUNrQWZtaVlkZWY3a3RoY1JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zMWUwZDQtMzVjZS00ZDAyLTk3MzQt
ZDc4ZmI5N2Y5ODI4LzEvVHVVblVxZ2IzLUNrQWZtaVlkZWY3a3RoY1JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8zMWUwZDQtMzVjZS00ZDAyLTk3MzQtZDc4ZmI5N2Y5ODI4
LzEvVHVVblVxZ2IzLUNrQWZtaVlkZWY3a3RoY1JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1oDI0v3
2R7mEMGGR0ccuVWfYZX76tQxup0y/gpP9ba74h0AAkBc1qLsWSFtSyfCJzvtkAah
EpdrYX5W3VT59+kSrF2TYn7t89jvj7M29M2hyGq7nJSigYca5mYLCTXCuR6c/OVB
skrAxYrJNZct1tJpPBuMfQ+r2dxDS34VymBHG1fK5/94d8/5nglUu/E+egqEfOLT
JEBQGgoXV1uzBpAlGUHzMabwkJDWoEEEWW2YAi+1Fi9D705+Mv9STQSA7GEfIFJk
mGJ7njWCCeEpKo28NN39Pux+hK1S//Ev/DHARRNu2Iz4HYs3IpmBced/nYCq/9z5
as1HUe9dltvphQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:20 2025 by rpki-client