Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
File: tsaaSiFb3h0yk03chd6vj9nJRHk.mft (raw, json)
Hash identifier: W8wodJudjhjHdCw08bDq+DVEoL2zhiCq3Ibub9QOPO0=
Subject key identifier: E1:3F:26:F1:38:21:BA:8D:39:1C:7C:07:DC:E3:53:7C:2A:29:2F:EA
Authority key identifier: B6:C6:9A:4A:21:5B:DE:1D:32:93:4D:DC:85:DE:AF:8F:D9:C9:44:79
Certificate issuer: /CN=b6c69a4a215bde1d32934ddc85deaf8fd9c94479
Certificate serial: 0197B70E9336421D7DBC07612100A30B425E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsaaSiFb3h0yk03chd6vj9nJRHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
Manifest number: 0D61
Signing time: Sat 28 Jun 2025 15:01:15 +0000
Manifest this update: Sat 28 Jun 2025 15:01:15 +0000
Manifest next update: Sun 29 Jun 2025 15:01:15 +0000
Files and hashes: 1: tsaaSiFb3h0yk03chd6vj9nJRHk.crl (hash: tc+j4+j0x2SfyPF7rn47yTxYJAnauQqXj6NkaAk0LUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsaaSiFb3h0yk03chd6vj9nJRHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:93:36:42:1d:7d:bc:07:61:21:00:a3:0b:42:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c69a4a215bde1d32934ddc85deaf8fd9c94479
Validity
Not Before: Jun 28 15:01:15 2025 GMT
Not After : Jun 29 15:01:15 2025 GMT
Subject: CN=e13f26f13821ba8d391c7c07dce3537c2a292fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:97:eb:c7:5f:98:30:18:7f:ce:7b:ed:cf:2e:
d1:53:7a:c1:d0:f7:90:e2:2e:03:26:80:83:68:ce:
8e:a3:61:c2:eb:6c:a8:c0:a1:a0:e2:f0:6c:9d:8b:
00:3d:91:59:84:2f:ad:49:13:c5:65:37:9c:1c:b8:
ba:87:4c:fe:60:8e:2b:5f:12:e2:0d:69:4f:1c:0b:
5c:8f:19:8e:bf:d4:54:88:4e:b2:f8:99:9f:5c:9d:
df:fa:9c:25:07:d5:20:db:ce:4c:4c:03:fd:94:da:
40:0d:29:50:9e:23:3a:c9:e8:51:b8:b4:27:c5:8e:
61:47:2d:ef:c3:0d:01:8e:4b:26:a0:00:b3:cf:d4:
2c:14:2d:4f:d5:67:3a:7d:89:25:dc:52:56:dd:21:
79:f1:d2:3f:1b:60:99:cb:e3:e6:4d:91:6d:da:41:
20:40:e1:5e:89:ff:d8:60:c7:6a:b4:05:cc:02:3f:
03:ae:fa:80:e4:00:88:5d:50:dc:77:a8:7d:47:8a:
db:d6:13:9e:1b:6b:57:df:10:81:5c:23:9d:01:31:
52:79:05:05:2d:0c:17:93:78:98:73:92:f2:39:77:
a9:93:08:83:4d:aa:67:0d:d5:27:97:d9:cf:ec:81:
a5:86:27:fc:1c:c8:d5:74:b7:4c:17:6c:ca:98:74:
a8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3F:26:F1:38:21:BA:8D:39:1C:7C:07:DC:E3:53:7C:2A:29:2F:EA
X509v3 Authority Key Identifier:
keyid:B6:C6:9A:4A:21:5B:DE:1D:32:93:4D:DC:85:DE:AF:8F:D9:C9:44:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsaaSiFb3h0yk03chd6vj9nJRHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a0:63:7c:77:5a:fa:87:46:bd:1f:30:a4:6c:37:81:c3:55:
ad:bc:87:7d:04:91:7c:33:00:12:03:26:81:a7:b9:43:94:97:
d3:25:2e:b5:d3:48:55:7a:7c:d3:32:c2:13:35:0b:c3:20:cd:
45:d9:5b:8f:c6:73:f8:d8:39:86:6e:4f:61:c2:5e:63:ec:f7:
6e:61:4e:e6:0c:30:9e:13:b9:c7:24:be:c4:42:25:b0:2e:50:
36:1b:98:7d:66:3b:bb:4c:4a:3d:a9:c7:68:34:f7:21:0b:90:
13:d9:d3:b5:57:f5:be:a7:d8:f3:c7:3a:33:9a:01:cc:c2:63:
2e:23:2b:fb:08:ae:7d:60:f7:45:dc:fd:3d:1d:b0:33:62:26:
bb:a5:19:34:14:cf:de:43:1b:23:0b:37:66:84:1e:fe:0e:75:
1c:4e:d8:5e:02:63:f7:cb:83:8a:09:f1:29:20:a1:c9:34:64:
c1:dc:af:50:1b:92:9f:9e:10:cb:79:26:f2:c8:ea:20:85:e5:
2d:0b:64:e3:c0:e4:16:af:e1:23:8b:a9:ab:37:39:63:ca:ce:
30:dd:d7:95:40:6e:ec:f7:37:55:51:94:2a:84:16:53:ff:74:
a1:be:2f:d2:d0:51:a5:c5:e8:5d:03:77:20:48:fd:a6:c0:49:
56:a0:2a:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DpM2Qh19vAdhIQCjC0JeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YzY5YTRhMjE1YmRlMWQzMjkzNGRkYzg1ZGVhZjhmZDlj
OTQ0NzkwHhcNMjUwNjI4MTUwMTE1WhcNMjUwNjI5MTUwMTE1WjAzMTEwLwYDVQQD
EyhlMTNmMjZmMTM4MjFiYThkMzkxYzdjMDdkY2UzNTM3YzJhMjkyZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pfrx1+YMBh/znvtzy7RU3rB0PeQ
4i4DJoCDaM6Oo2HC62yowKGg4vBsnYsAPZFZhC+tSRPFZTecHLi6h0z+YI4rXxLi
DWlPHAtcjxmOv9RUiE6y+JmfXJ3f+pwlB9Ug285MTAP9lNpADSlQniM6yehRuLQn
xY5hRy3vww0BjksmoACzz9QsFC1P1Wc6fYkl3FJW3SF58dI/G2CZy+PmTZFt2kEg
QOFeif/YYMdqtAXMAj8DrvqA5ACIXVDcd6h9R4rb1hOeG2tX3xCBXCOdATFSeQUF
LQwXk3iYc5LyOXepkwiDTapnDdUnl9nP7IGlhif8HMjVdLdMF2zKmHSoTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOE/JvE4IbqNORx8B9zjU3wqKS/qMB8GA1UdIwQY
MBaAFLbGmkohW94dMpNN3IXer4/ZyUR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHNhYVNpRmIzaDB5azAzY2hkNnZqOW5KUkhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NzdhN2ItNWRjYy00M2E3LWE4OWMt
ZTNiYzZiNDk5ZTdiLzEvdHNhYVNpRmIzaDB5azAzY2hkNnZqOW5KUkhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81NzdhN2ItNWRjYy00M2E3LWE4OWMtZTNiYzZiNDk5ZTdi
LzEvdHNhYVNpRmIzaDB5azAzY2hkNnZqOW5KUkhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6BjfHda
+odGvR8wpGw3gcNVrbyHfQSRfDMAEgMmgae5Q5SX0yUutdNIVXp80zLCEzULwyDN
Rdlbj8Zz+Ng5hm5PYcJeY+z3bmFO5gwwnhO5xyS+xEIlsC5QNhuYfWY7u0xKPanH
aDT3IQuQE9nTtVf1vqfY88c6M5oBzMJjLiMr+wiufWD3Rdz9PR2wM2Imu6UZNBTP
3kMbIws3ZoQe/g51HE7YXgJj98uDignxKSChyTRkwdyvUBuSn54Qy3km8sjqIIXl
LQtk48DkFq/hI4upqzc5Y8rOMN3XlUBu7Pc3VVGUKoQWU/90ob4v0tBRpcXoXQN3
IEj9psBJVqAqMA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:40 2025 by rpki-client