
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
File: TTxfCqFBARzi2_GMzOqsjSOoAlM.mft (raw, json)
Hash identifier: igUEVSmPp91jFBqrVYWAzR3lVJpXcKlGsOinXZwpMnY=
Subject key identifier: B5:B9:D1:EA:F2:8C:13:A5:26:A2:24:40:CC:EC:D6:88:44:0D:1E:24
Authority key identifier: 4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53
Certificate issuer: /CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253
Certificate serial: 0197B7453D159EA2312263EC3DAB9B5C3784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
Manifest number: 02E1
Signing time: Sat 28 Jun 2025 16:00:57 +0000
Manifest this update: Sat 28 Jun 2025 16:00:57 +0000
Manifest next update: Sun 29 Jun 2025 16:00:57 +0000
Files and hashes: 1: TTxfCqFBARzi2_GMzOqsjSOoAlM.crl (hash: IrEbzOTqXJB/RWhPoHs2Btqx34TqUg9Tbfre/xzlMMI=)
2: VzuF2DppIrspDzJ85GPpog256VM.roa (hash: NVhHykKnaNaKUFenioMV2s+C+yHI/RstE5ooTmdayhs=)
3: gl57ADSHY0k4ndDK_OjTyc2Vj-w.roa (hash: K2iUKBC94qqs+lcuU9alkOi5wrj2IpvPW1nPAtFGI+M=)
4: wVbnrxwKxuyFCykAZfTxIk8usp4.roa (hash: nUg8btnlBOx76JKnTAelqbIAdPi5nKQqhhSAdUCbOU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:3d:15:9e:a2:31:22:63:ec:3d:ab:9b:5c:37:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253
Validity
Not Before: Jun 28 16:00:57 2025 GMT
Not After : Jun 29 16:00:57 2025 GMT
Subject: CN=b5b9d1eaf28c13a526a22440ccecd688440d1e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f2:6c:f9:c0:5c:cc:3e:57:c1:96:d7:63:d9:
bc:92:34:33:d3:b9:9d:a2:45:50:a2:f3:23:8c:3f:
36:d3:d4:ab:ae:b6:2d:1c:39:1e:f2:5e:13:06:3d:
96:b2:ff:f4:4f:b8:5a:09:e7:d6:fa:5b:bc:52:56:
c4:a2:2b:49:b0:e6:90:79:f2:d1:35:56:98:bb:a8:
89:ce:0f:8a:1b:55:cf:e1:d3:4f:3b:5f:06:e6:97:
82:2c:9b:b0:fb:84:38:29:80:0e:96:a6:44:ba:d5:
89:fc:23:3b:29:32:70:e3:6e:30:9f:f8:ae:fd:c7:
48:69:8c:55:60:3e:00:b7:90:5e:9d:a6:43:c7:e7:
32:8d:1f:83:21:09:76:5a:66:ed:19:cf:cf:33:72:
24:a6:6e:b6:9b:99:a1:88:04:b8:3a:ba:fe:3b:93:
83:90:e9:37:a3:2f:0e:89:1d:51:56:5d:d0:b5:07:
57:08:cf:4b:23:64:9a:85:50:f8:e3:51:ff:35:af:
88:f2:45:ae:1b:49:16:f6:2a:6e:c0:7c:27:b6:1c:
a3:c4:2c:f6:70:a4:de:b5:7e:88:1f:5b:6b:ac:67:
c2:c8:6a:69:2a:cc:b5:ae:4e:0c:e8:e2:d3:b6:78:
70:4b:83:ac:fe:3b:68:52:97:8c:b2:b2:f5:03:0c:
c3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B9:D1:EA:F2:8C:13:A5:26:A2:24:40:CC:EC:D6:88:44:0D:1E:24
X509v3 Authority Key Identifier:
keyid:4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f6:60:1b:4e:a0:72:15:a7:fd:fb:b9:fc:3b:00:6a:2a:ef:
52:90:cf:14:c9:6e:2f:08:73:09:4a:5e:92:c1:84:da:fd:f3:
52:c2:b8:a0:58:1e:6f:8c:53:3f:00:67:f5:2a:59:6a:1f:01:
88:f1:f6:51:09:a1:3e:8a:14:2a:96:2a:f8:0f:29:b4:03:55:
d7:b1:89:2a:8d:81:0f:8c:ce:38:3b:02:53:df:1d:d6:95:01:
31:37:be:cb:6e:23:0f:78:0b:0a:19:2a:ef:d1:14:29:1c:6c:
75:e6:c7:2c:dc:e2:35:26:08:c0:3b:80:b9:11:b6:cb:78:0c:
13:f6:d4:ce:50:2f:7d:54:ed:04:cc:c0:86:53:fe:b5:c6:3b:
6b:5c:b1:b3:fb:77:b4:16:98:b0:53:95:b1:18:e0:0e:3d:52:
4c:89:72:22:b1:e5:dd:2e:87:d6:a5:80:8e:5e:ea:22:84:e3:
8c:85:db:c4:b8:84:f9:22:c2:e0:8d:f3:79:57:8b:cd:97:0e:
07:63:33:5a:c8:bd:94:a3:b4:4e:01:ef:4c:a6:fa:24:ef:fd:
d9:11:88:d9:47:35:a1:5c:1b:81:59:ed:06:f0:2f:66:7a:ec:
b1:db:0e:d2:81:fe:48:db:8a:10:5f:6b:67:5a:9a:1a:93:f6:
f5:2f:b6:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RT0VnqIxImPsPaubXDeEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2M1ZjBhYTE0MTAxMWNlMmRiZjE4Y2NjZWFhYzhkMjNh
ODAyNTMwHhcNMjUwNjI4MTYwMDU3WhcNMjUwNjI5MTYwMDU3WjAzMTEwLwYDVQQD
EyhiNWI5ZDFlYWYyOGMxM2E1MjZhMjI0NDBjY2VjZDY4ODQ0MGQxZTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/Js+cBczD5XwZbXY9m8kjQz07md
okVQovMjjD8209SrrrYtHDke8l4TBj2Wsv/0T7haCefW+lu8UlbEoitJsOaQefLR
NVaYu6iJzg+KG1XP4dNPO18G5peCLJuw+4Q4KYAOlqZEutWJ/CM7KTJw424wn/iu
/cdIaYxVYD4At5BenaZDx+cyjR+DIQl2WmbtGc/PM3Ikpm62m5mhiAS4Orr+O5OD
kOk3oy8OiR1RVl3QtQdXCM9LI2SahVD441H/Na+I8kWuG0kW9ipuwHwnthyjxCz2
cKTetX6IH1trrGfCyGppKsy1rk4M6OLTtnhwS4Os/jtoUpeMsrL1AwzDkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLW50eryjBOlJqIkQMzs1ohEDR4kMB8GA1UdIwQY
MBaAFE08XwqhQQEc4tvxjMzqrI0jqAJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFR4ZkNxRkJBUnppMl9HTXpPcXNqU09vQWxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8yZDA2N2MtZGY3Mi00MDQwLWJjNDMt
MTkzOTdmYzc2ZmVjLzEvVFR4ZkNxRkJBUnppMl9HTXpPcXNqU09vQWxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8yZDA2N2MtZGY3Mi00MDQwLWJjNDMtMTkzOTdmYzc2ZmVj
LzEvVFR4ZkNxRkJBUnppMl9HTXpPcXNqU09vQWxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfZgG06g
chWn/fu5/DsAairvUpDPFMluLwhzCUpeksGE2v3zUsK4oFgeb4xTPwBn9SpZah8B
iPH2UQmhPooUKpYq+A8ptANV17GJKo2BD4zOODsCU98d1pUBMTe+y24jD3gLChkq
79EUKRxsdebHLNziNSYIwDuAuRG2y3gME/bUzlAvfVTtBMzAhlP+tcY7a1yxs/t3
tBaYsFOVsRjgDj1STIlyIrHl3S6H1qWAjl7qIoTjjIXbxLiE+SLC4I3zeVeLzZcO
B2MzWsi9lKO0TgHvTKb6JO/92RGI2Uc1oVwbgVntBvAvZnrssdsO0oH+SNuKEF9r
Z1qaGpP29S+2vA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:09 2025 by rpki-client