Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2aaf4a-e03f-4d61-b652-435e57fccdc9/1/tNkMTfZ2phH1alrtWAmwV-msV5E.mft
File: tNkMTfZ2phH1alrtWAmwV-msV5E.mft (raw, json)
Hash identifier: FpALtCBdYWtI/W2UmQw/WBh8fe1vGIFiebVa5S8phVg=
Subject key identifier: 6D:CD:7F:67:DF:84:F6:57:06:DE:90:87:B8:31:6C:BD:33:2F:A1:A3
Authority key identifier: B4:D9:0C:4D:F6:76:A6:11:F5:6A:5A:ED:58:09:B0:57:E9:AC:57:91
Certificate issuer: /CN=b4d90c4df676a611f56a5aed5809b057e9ac5791
Certificate serial: 0197B70EE666DD641F95067AE3A0519E433E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNkMTfZ2phH1alrtWAmwV-msV5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2aaf4a-e03f-4d61-b652-435e57fccdc9/1/tNkMTfZ2phH1alrtWAmwV-msV5E.mft
Manifest number: 083C
Signing time: Sat 28 Jun 2025 15:01:36 +0000
Manifest this update: Sat 28 Jun 2025 15:01:36 +0000
Manifest next update: Sun 29 Jun 2025 15:01:36 +0000
Files and hashes: 1: tNkMTfZ2phH1alrtWAmwV-msV5E.crl (hash: GxAIYj+OvcuGldOHl/0Dhue9pBlfR6eSX5MRsvVJXCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2aaf4a-e03f-4d61-b652-435e57fccdc9/1/tNkMTfZ2phH1alrtWAmwV-msV5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2aaf4a-e03f-4d61-b652-435e57fccdc9/1/tNkMTfZ2phH1alrtWAmwV-msV5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNkMTfZ2phH1alrtWAmwV-msV5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e6:66:dd:64:1f:95:06:7a:e3:a0:51:9e:43:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d90c4df676a611f56a5aed5809b057e9ac5791
Validity
Not Before: Jun 28 15:01:36 2025 GMT
Not After : Jun 29 15:01:36 2025 GMT
Subject: CN=6dcd7f67df84f65706de9087b8316cbd332fa1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:75:05:d4:29:5b:ce:a7:3d:c4:15:76:dd:
c1:46:7f:e7:4b:fc:6e:b2:28:17:44:57:0e:b1:1f:
51:01:92:eb:16:ac:95:b7:74:2b:21:31:cb:72:7a:
91:d7:08:ee:77:45:bf:86:fa:66:8f:a8:d1:ba:56:
9f:2d:c6:1a:c1:18:0e:dc:0f:2b:96:16:6f:db:fb:
66:53:a1:6c:5d:05:c6:b8:de:ac:b6:29:92:e1:37:
59:c9:ca:a1:4f:62:77:37:3d:17:2e:73:85:b1:68:
6d:ec:1d:d4:be:4e:cb:ef:87:f5:d3:5c:bf:d8:2a:
0f:c1:44:67:d0:1d:80:06:11:bf:5d:7e:70:eb:f4:
15:c0:8a:ee:bc:86:01:f2:9a:5a:fa:8c:56:b4:ad:
c9:00:87:b2:da:3b:5e:3e:bf:a7:fa:64:c5:6a:cd:
ce:37:4c:a1:48:f0:3d:ce:f6:26:51:65:f8:a5:0f:
ef:1a:f7:7b:75:12:a0:95:4d:a8:cd:be:bb:6c:f7:
f2:f4:8d:1d:35:51:91:61:f6:79:0e:7e:d0:c5:cd:
7b:c5:95:3e:f4:2b:44:a0:f2:4c:0c:bd:08:2c:1d:
ac:3e:b9:94:a0:f8:f7:9c:a5:c9:44:f4:4b:87:39:
bb:6c:fc:1b:74:e0:2c:cc:ee:0f:f4:c8:9b:60:a5:
82:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CD:7F:67:DF:84:F6:57:06:DE:90:87:B8:31:6C:BD:33:2F:A1:A3
X509v3 Authority Key Identifier:
keyid:B4:D9:0C:4D:F6:76:A6:11:F5:6A:5A:ED:58:09:B0:57:E9:AC:57:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNkMTfZ2phH1alrtWAmwV-msV5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2aaf4a-e03f-4d61-b652-435e57fccdc9/1/tNkMTfZ2phH1alrtWAmwV-msV5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2aaf4a-e03f-4d61-b652-435e57fccdc9/1/tNkMTfZ2phH1alrtWAmwV-msV5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e6:b4:9b:95:9a:e3:37:00:a6:69:39:b0:c0:a2:3d:67:65:
10:5a:5e:a9:b3:cc:2d:b5:84:2e:b5:b4:e5:6f:f6:3d:58:ef:
22:bb:92:3e:b9:3a:aa:0f:d7:94:b7:b8:67:31:4e:46:2f:32:
5b:dc:d7:54:cf:51:e2:2f:a4:38:d6:4d:e3:67:2d:c5:8d:b5:
03:4b:ad:af:04:d3:08:6a:d5:5d:c2:35:3c:25:22:4b:bc:a3:
e3:45:47:03:e9:08:2a:c7:48:e0:6a:e5:b3:de:da:10:81:f2:
18:a5:37:19:7c:06:7d:12:8a:6c:d9:74:83:fd:30:54:fd:ba:
c3:2d:cc:23:31:55:66:e9:08:30:aa:b1:59:c4:dc:d3:cf:ea:
33:d1:fd:04:82:8e:7c:6f:50:3d:3c:bc:a2:24:38:6a:b2:47:
23:b5:ac:de:48:9c:ab:37:ff:c1:74:a9:fb:fb:58:3b:d4:f8:
fb:10:a2:92:7b:a8:f5:88:79:d8:48:e1:de:94:78:7f:28:80:
a7:58:1f:e8:1f:70:30:f7:91:66:ef:ff:b1:6a:d6:6e:f5:41:
8c:a3:98:78:8e:10:f1:75:3a:b0:6a:46:a4:69:90:d5:d9:5e:
07:37:b1:f9:6c:bf:7e:ef:ad:20:12:40:2d:b1:ee:89:04:82:
97:74:d2:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DuZm3WQflQZ646BRnkM+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZDkwYzRkZjY3NmE2MTFmNTZhNWFlZDU4MDliMDU3ZTlh
YzU3OTEwHhcNMjUwNjI4MTUwMTM2WhcNMjUwNjI5MTUwMTM2WjAzMTEwLwYDVQQD
Eyg2ZGNkN2Y2N2RmODRmNjU3MDZkZTkwODdiODMxNmNiZDMzMmZhMWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2R1BdQpW86nPcQVdt3BRn/nS/xu
sigXRFcOsR9RAZLrFqyVt3QrITHLcnqR1wjud0W/hvpmj6jRulafLcYawRgO3A8r
lhZv2/tmU6FsXQXGuN6stimS4TdZycqhT2J3Nz0XLnOFsWht7B3Uvk7L74f101y/
2CoPwURn0B2ABhG/XX5w6/QVwIruvIYB8ppa+oxWtK3JAIey2jtePr+n+mTFas3O
N0yhSPA9zvYmUWX4pQ/vGvd7dRKglU2ozb67bPfy9I0dNVGRYfZ5Dn7Qxc17xZU+
9CtEoPJMDL0ILB2sPrmUoPj3nKXJRPRLhzm7bPwbdOAszO4P9MibYKWCdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3Nf2ffhPZXBt6Qh7gxbL0zL6GjMB8GA1UdIwQY
MBaAFLTZDE32dqYR9Wpa7VgJsFfprFeRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE5rTVRmWjJwaEgxYWxydFdBbXdWLW1zVjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yYWFmNGEtZTAzZi00ZDYxLWI2NTIt
NDM1ZTU3ZmNjZGM5LzEvdE5rTVRmWjJwaEgxYWxydFdBbXdWLW1zVjVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8yYWFmNGEtZTAzZi00ZDYxLWI2NTItNDM1ZTU3ZmNjZGM5
LzEvdE5rTVRmWjJwaEgxYWxydFdBbXdWLW1zVjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOa0m5Wa
4zcApmk5sMCiPWdlEFpeqbPMLbWELrW05W/2PVjvIruSPrk6qg/XlLe4ZzFORi8y
W9zXVM9R4i+kONZN42ctxY21A0utrwTTCGrVXcI1PCUiS7yj40VHA+kIKsdI4Grl
s97aEIHyGKU3GXwGfRKKbNl0g/0wVP26wy3MIzFVZukIMKqxWcTc08/qM9H9BIKO
fG9QPTy8oiQ4arJHI7Ws3kicqzf/wXSp+/tYO9T4+xCiknuo9Yh52Ejh3pR4fyiA
p1gf6B9wMPeRZu//sWrWbvVBjKOYeI4Q8XU6sGpGpGmQ1dleBzex+Wy/fu+tIBJA
LbHuiQSCl3TSgw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:46 2025 by rpki-client