
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
File: TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft (raw, json)
Hash identifier: tuLY6axibkTlzfX5P+XZoqdpsGOpFpib0l409mCEQRo=
Subject key identifier: E1:4B:F9:40:C0:0B:B1:B3:C1:53:65:F4:7F:7D:EF:3F:11:B3:D0:E5
Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Certificate serial: 0197B6A237A4108109AEB7A4ACC0E3379AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:02:53 +0000
Manifest this update: Sat 28 Jun 2025 13:02:53 +0000
Manifest next update: Sun 29 Jun 2025 13:02:53 +0000
Files and hashes: 1: B9-Xs7dhnKZZ3y2oqYpIdAWmlNw.roa (hash: TgNafOFIPNxSy2OvvIzhsdKUEZp12L7C7S2Pd52eKm0=)
2: QNGb0gtG4GRClc-idD7pOZ3NKu4.roa (hash: RBMmyAJB99vMalTNtIMZJrCnoBdNekiveW7iLd5Zyt4=)
3: TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl (hash: w390BHPOlG3YyMSuwd1GqRNFDuiat/gxEntTvMDqnJg=)
4: uL8wQ5suTSJs6R1LegMqq0w_KnA.roa (hash: q1cpaZXwQ8FTgzr+1V+AjkI0yfC5jTYIkOuwUOw+jNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:37:a4:10:81:09:ae:b7:a4:ac:c0:e3:37:9a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Validity
Not Before: Jun 28 13:02:53 2025 GMT
Not After : Jun 29 13:02:53 2025 GMT
Subject: CN=e14bf940c00bb1b3c15365f47f7def3f11b3d0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ad:31:4f:be:f5:8d:d8:81:d0:46:08:d0:72:
d1:47:40:02:16:d6:c6:2f:c7:0a:de:7f:28:e8:dc:
c4:0c:7a:94:0f:1e:3e:09:e0:d3:01:d1:ec:49:25:
fe:a9:c9:57:f5:d9:5b:d6:ee:18:79:07:37:e3:8a:
80:fa:16:f4:87:ae:19:37:c7:bb:c4:a1:6b:88:e3:
f6:e8:51:cd:d7:6e:57:c9:30:c5:ba:7f:f1:f2:b0:
f3:30:49:c8:9b:ec:15:0d:41:7d:45:7d:81:41:ce:
95:97:45:61:39:da:8a:fd:3e:c2:b7:e8:41:72:20:
68:e3:2a:78:b0:e7:86:2f:cc:a0:da:b8:31:28:3b:
c4:dc:e0:48:87:28:0f:31:3f:33:b9:6f:23:c3:04:
1e:59:fc:65:9d:58:d4:4f:2d:dd:29:81:6c:99:52:
fe:47:d1:25:b2:23:98:78:93:9f:bd:5a:3c:39:23:
da:01:9f:57:27:6f:49:62:e7:f0:93:98:db:fd:88:
7f:36:ec:f6:f5:d5:4f:da:ac:36:fc:1f:27:08:20:
3d:14:b5:49:42:e3:d6:f5:25:81:7b:89:d9:43:6f:
d8:02:8a:b7:f8:93:a2:5a:04:47:61:ba:24:6a:06:
a7:1d:35:7d:92:32:25:7f:e5:df:bb:a6:6c:cd:1c:
b2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4B:F9:40:C0:0B:B1:B3:C1:53:65:F4:7F:7D:EF:3F:11:B3:D0:E5
X509v3 Authority Key Identifier:
keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7a:d0:aa:07:a9:87:60:dc:db:1b:a4:a7:25:ba:6c:10:59:
1c:90:09:f9:38:9a:12:0d:ad:a9:6c:b6:8d:76:a4:1d:33:02:
a5:3f:23:93:b5:65:90:70:8b:8b:dc:22:fb:c8:4f:2d:37:91:
bb:fc:2f:7c:76:04:f9:ee:8d:5d:a5:b4:74:aa:61:0a:82:ba:
14:97:a3:bf:c4:2f:e5:7c:44:38:7c:e0:e8:14:da:1b:2a:9b:
39:cd:87:ec:7c:1a:bd:a8:e1:15:57:42:0d:73:40:f7:42:0d:
99:ed:d5:21:f0:f0:c7:d3:32:e6:27:d2:49:62:4f:f3:44:b8:
d6:07:c0:42:46:ee:71:91:af:75:22:3c:b6:ed:3c:92:b2:2a:
c3:63:78:a5:5b:b3:1a:fb:91:95:35:51:24:d9:37:9b:d9:eb:
df:dc:51:b2:fb:33:a8:5c:e0:da:72:5c:7d:6d:72:4b:d3:77:
8b:62:78:cb:9b:5d:95:4e:44:a7:8a:e3:1c:4f:8d:34:82:50:
cd:fd:95:3e:bd:cc:c2:b2:d2:35:38:33:90:86:f2:de:05:3d:
96:27:e4:9f:0b:a1:f0:5b:2f:bb:5e:10:1f:25:60:1e:37:d6:
b4:1f:6a:64:9b:3d:fb:05:9c:5a:93:87:9f:0c:2a:ea:0a:d7:
dc:05:6d:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ojekEIEJrrekrMDjN5rFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYzM5MWRjNjE1ZmQ0YTNhZDEwYzBmMmFiOGIwYTUwNmQw
MzllZDgwHhcNMjUwNjI4MTMwMjUzWhcNMjUwNjI5MTMwMjUzWjAzMTEwLwYDVQQD
EyhlMTRiZjk0MGMwMGJiMWIzYzE1MzY1ZjQ3ZjdkZWYzZjExYjNkMGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+K0xT771jdiB0EYI0HLRR0ACFtbG
L8cK3n8o6NzEDHqUDx4+CeDTAdHsSSX+qclX9dlb1u4YeQc344qA+hb0h64ZN8e7
xKFriOP26FHN125XyTDFun/x8rDzMEnIm+wVDUF9RX2BQc6Vl0VhOdqK/T7Ct+hB
ciBo4yp4sOeGL8yg2rgxKDvE3OBIhygPMT8zuW8jwwQeWfxlnVjUTy3dKYFsmVL+
R9ElsiOYeJOfvVo8OSPaAZ9XJ29JYufwk5jb/Yh/Nuz29dVP2qw2/B8nCCA9FLVJ
QuPW9SWBe4nZQ2/YAoq3+JOiWgRHYbokaganHTV9kjIlf+Xfu6ZszRyyzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFL+UDAC7GzwVNl9H997z8Rs9DlMB8GA1UdIwQY
MBaAFE3DkdxhX9SjrRDA8quLClBtA57YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNjZhNTgtZmRmNS00OTFlLWI1MTEt
ZmQyOTE1ZDRjZDVhLzEvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kNjZhNTgtZmRmNS00OTFlLWI1MTEtZmQyOTE1ZDRjZDVh
LzEvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXrQqgep
h2Dc2xukpyW6bBBZHJAJ+TiaEg2tqWy2jXakHTMCpT8jk7VlkHCLi9wi+8hPLTeR
u/wvfHYE+e6NXaW0dKphCoK6FJejv8Qv5XxEOHzg6BTaGyqbOc2H7HwavajhFVdC
DXNA90INme3VIfDwx9My5ifSSWJP80S41gfAQkbucZGvdSI8tu08krIqw2N4pVuz
GvuRlTVRJNk3m9nr39xRsvszqFzg2nJcfW1yS9N3i2J4y5tdlU5Ep4rjHE+NNIJQ
zf2VPr3MwrLSNTgzkIby3gU9lifknwuh8Fsvu14QHyVgHjfWtB9qZJs9+wWcWpOH
nwwq6grX3AVt2w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:32 2025 by rpki-client