Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
File: TVg7b1bPCSco3lk62VKuoZzjGIY.mft (raw, json)
Hash identifier: /Pt3/xFkTbNPxvErpmvBdZlYtMmLb97gdmRS925SUy8=
Subject key identifier: F8:9A:DD:DA:8C:B1:69:BB:10:3A:00:27:E7:BE:C6:67:ED:9E:EA:B0
Authority key identifier: 4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
Certificate issuer: /CN=4d583b6f56cf092728de593ad952aea19ce31886
Certificate serial: 0197C4270A87DEFEEB2A5BD1488F8808230B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
Manifest number: 1512
Signing time: Tue 01 Jul 2025 04:03:02 +0000
Manifest this update: Tue 01 Jul 2025 04:03:02 +0000
Manifest next update: Wed 02 Jul 2025 04:03:02 +0000
Files and hashes: 1: TVg7b1bPCSco3lk62VKuoZzjGIY.crl (hash: eLeDKC/+BXY7W7LkEkLXO0x06KW07pIn6qk+cRk+rUk=)
2: bOLohqMKHagd_oJ4fhpVo7NmmeM.roa (hash: zc2jSYa3eGI9kHGQfF97SUcixmU4Ya6CBO+chtxYjPg=)
3: rAEXG8LVncu-VzH6pWQ3O-v7vJk.roa (hash: pHtLRGskuQm7vCqkOegxgViLMoHSueDTg44n3jic3FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:27:0a:87:de:fe:eb:2a:5b:d1:48:8f:88:08:23:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d583b6f56cf092728de593ad952aea19ce31886
Validity
Not Before: Jul 1 04:03:02 2025 GMT
Not After : Jul 2 04:03:02 2025 GMT
Subject: CN=f89addda8cb169bb103a0027e7bec667ed9eeab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0d:79:df:55:43:75:21:da:8e:2c:a4:b0:62:
67:34:5c:b5:b0:0d:da:10:69:92:9c:fa:b8:c6:00:
00:57:1e:22:2c:6d:88:97:45:cd:1e:50:66:90:9d:
76:8f:4f:4b:c9:66:58:05:1b:45:50:05:42:ed:d4:
78:87:18:11:d0:64:8b:ae:4c:c7:ad:79:37:be:87:
4b:66:0e:4b:97:66:a2:42:73:d7:9d:23:94:0c:f3:
c5:59:a5:1e:8f:12:20:21:80:5d:c0:a7:6d:db:ce:
4c:f0:98:5a:5a:7f:11:27:dc:64:67:cc:27:1a:cc:
22:f4:13:a6:a8:a7:0c:e5:cf:31:6e:b6:bf:9a:94:
45:52:eb:0e:d3:19:77:c9:cc:4f:ee:7f:e5:27:ff:
4a:ef:42:97:12:0c:14:2e:3c:c6:68:b4:b7:e0:cb:
ac:b2:d1:97:51:2e:e4:9a:b3:16:8f:52:a6:08:34:
0c:86:e3:51:8e:34:20:43:25:ff:a9:93:e7:3e:f7:
b0:a8:41:9f:8a:58:11:e1:5c:e8:d5:68:a9:3f:20:
66:03:c7:85:e3:ac:f8:6a:5e:49:88:9e:c7:19:b0:
c8:c4:39:77:68:76:52:05:c3:2f:92:fe:95:0a:4a:
83:24:b4:09:44:75:5a:18:58:c4:0b:63:ff:11:64:
36:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9A:DD:DA:8C:B1:69:BB:10:3A:00:27:E7:BE:C6:67:ED:9E:EA:B0
X509v3 Authority Key Identifier:
keyid:4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c1:a5:b3:25:4e:35:76:3f:b8:ff:92:c6:b9:ab:46:85:94:
8b:18:26:57:41:c7:0f:fd:86:c3:91:66:7e:eb:20:03:77:7f:
34:97:3f:d3:d6:69:b6:bd:e0:93:a7:32:73:15:ec:bd:cc:ab:
3b:4b:34:e2:c7:e9:64:c1:0c:74:91:b5:6e:01:f5:16:c8:dd:
ce:97:7c:49:ba:5e:10:49:50:56:9d:b4:6e:b2:f2:c5:1d:87:
d1:64:9b:e4:68:89:75:64:8c:58:b5:06:f6:08:4a:19:12:60:
60:a2:93:3e:a6:09:42:e6:8d:77:c4:3f:ad:f3:a7:90:02:89:
0e:55:19:08:f5:5d:cf:bf:60:74:5e:56:1b:7c:62:e9:f0:a0:
70:75:db:1f:52:95:c2:e3:c0:0b:b0:59:78:70:9f:fc:f7:98:
ae:14:03:5e:a9:fb:70:0b:51:ec:24:55:6c:e5:67:4a:f6:7d:
8d:89:ed:02:38:60:17:d0:37:80:cd:ac:92:d2:ff:a7:b6:41:
5e:72:03:72:1d:af:cd:0a:7e:82:d7:bd:36:51:86:33:9b:b8:
fc:50:09:69:cc:b0:5a:99:54:33:52:42:87:90:40:2b:ad:04:
0a:ff:eb:bd:4f:73:23:19:c6:be:96:6b:cd:f0:93:49:bc:e4:
58:d5:6f:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEJwqH3v7rKlvRSI+ICCMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNTgzYjZmNTZjZjA5MjcyOGRlNTkzYWQ5NTJhZWExOWNl
MzE4ODYwHhcNMjUwNzAxMDQwMzAyWhcNMjUwNzAyMDQwMzAyWjAzMTEwLwYDVQQD
EyhmODlhZGRkYThjYjE2OWJiMTAzYTAwMjdlN2JlYzY2N2VkOWVlYWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg1531VDdSHajiyksGJnNFy1sA3a
EGmSnPq4xgAAVx4iLG2Il0XNHlBmkJ12j09LyWZYBRtFUAVC7dR4hxgR0GSLrkzH
rXk3vodLZg5Ll2aiQnPXnSOUDPPFWaUejxIgIYBdwKdt285M8JhaWn8RJ9xkZ8wn
Gswi9BOmqKcM5c8xbra/mpRFUusO0xl3ycxP7n/lJ/9K70KXEgwULjzGaLS34Mus
stGXUS7kmrMWj1KmCDQMhuNRjjQgQyX/qZPnPvewqEGfilgR4Vzo1WipPyBmA8eF
46z4al5JiJ7HGbDIxDl3aHZSBcMvkv6VCkqDJLQJRHVaGFjEC2P/EWQ28wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPia3dqMsWm7EDoAJ+e+xmftnuqwMB8GA1UdIwQY
MBaAFE1YO29WzwknKN5ZOtlSrqGc4xiGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZnN2IxYlBDU2NvM2xrNjJWS3VvWnpqR0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83MzU4YmQtYzcyZi00ZDliLWJiMGQt
MGI0ZjcxN2FhMzYzLzEvVFZnN2IxYlBDU2NvM2xrNjJWS3VvWnpqR0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83MzU4YmQtYzcyZi00ZDliLWJiMGQtMGI0ZjcxN2FhMzYz
LzEvVFZnN2IxYlBDU2NvM2xrNjJWS3VvWnpqR0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcGlsyVO
NXY/uP+SxrmrRoWUixgmV0HHD/2Gw5FmfusgA3d/NJc/09Zptr3gk6cycxXsvcyr
O0s04sfpZMEMdJG1bgH1Fsjdzpd8SbpeEElQVp20brLyxR2H0WSb5GiJdWSMWLUG
9ghKGRJgYKKTPqYJQuaNd8Q/rfOnkAKJDlUZCPVdz79gdF5WG3xi6fCgcHXbH1KV
wuPAC7BZeHCf/PeYrhQDXqn7cAtR7CRVbOVnSvZ9jYntAjhgF9A3gM2sktL/p7ZB
XnIDch2vzQp+gte9NlGGM5u4/FAJacywWplUM1JCh5BAK60ECv/rvU9zIxnGvpZr
zfCTSbzkWNVvgQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 06:13:07 2025 by rpki-client