Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
File: TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft (raw, json)
Hash identifier: msryt3lJIiZKUjGRHE2Ys43YnCB4MAPQ5peuEXO/N+8=
Subject key identifier: EC:5A:E5:97:53:61:33:08:F0:13:52:BB:C3:C9:60:51:55:6E:D9:DA
Authority key identifier: 4D:F1:81:1F:39:97:B9:50:AC:89:E4:10:EA:3E:F0:18:A6:73:D5:FC
Certificate issuer: /CN=4df1811f3997b950ac89e410ea3ef018a673d5fc
Certificate serial: 0197CDCCE42F2D1E99F9694A79E90FDFFEF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
Manifest number: 0580
Signing time: Thu 03 Jul 2025 01:00:46 +0000
Manifest this update: Thu 03 Jul 2025 01:00:46 +0000
Manifest next update: Fri 04 Jul 2025 01:00:46 +0000
Files and hashes: 1: 4m_ZlqWE1YEBP4kWtbELic7ECzg.roa (hash: t8PO7dqvDfBV4dwcfBXHsLynSbU2oXoJqnNbzqZG81g=)
2: TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl (hash: u70gNlsWAkAAZp4LfP3QVqattG4ql4w+Z/YOTge5eGQ=)
3: risExVobQciJpjckh7R5a6pHayQ.roa (hash: smtSJjRXs0E72dzCfhCCARBzkZPKWKCqhHgp8E/C6HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cc:e4:2f:2d:1e:99:f9:69:4a:79:e9:0f:df:fe:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df1811f3997b950ac89e410ea3ef018a673d5fc
Validity
Not Before: Jul 3 01:00:46 2025 GMT
Not After : Jul 4 01:00:46 2025 GMT
Subject: CN=ec5ae59753613308f01352bbc3c96051556ed9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d9:54:36:ac:8d:76:32:13:8c:99:e3:57:67:
eb:ed:cd:c6:a0:32:11:26:51:5d:84:05:c1:bd:a1:
d1:e0:dc:b3:67:2a:4a:ea:5b:56:3e:00:5c:0f:54:
b4:70:53:56:90:56:50:50:aa:8c:85:47:7f:92:57:
d6:55:13:b8:eb:43:3c:95:b5:71:cb:d9:9a:5e:61:
e1:44:68:d8:1e:d8:ed:19:66:08:92:72:0d:62:8f:
86:05:f6:fb:7e:29:cc:aa:e0:5e:e9:fe:05:01:a0:
92:5c:50:36:32:e6:4e:0f:44:d8:5d:a3:35:35:6b:
50:0f:a0:cd:1a:d4:03:2b:ab:1f:71:25:c9:7d:a8:
a6:9e:c3:b6:96:d5:d5:d1:92:00:98:fe:7f:54:03:
7d:98:a3:d7:a0:fc:73:e0:2f:1e:0f:aa:73:7a:17:
49:97:29:ac:20:62:8f:b7:6e:d7:b0:65:2e:ff:7b:
db:3d:41:35:9d:c2:79:51:9f:5a:ac:20:17:cb:f3:
41:02:45:61:ef:ee:98:e1:da:f1:22:dc:df:07:0b:
d7:30:bf:15:11:02:77:4a:e5:da:cc:d1:00:52:59:
58:f4:e9:96:4a:0a:f1:b6:b4:4b:3a:a1:a1:12:05:
c0:3a:8f:d9:f8:02:71:6d:87:18:44:30:26:d1:3e:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5A:E5:97:53:61:33:08:F0:13:52:BB:C3:C9:60:51:55:6E:D9:DA
X509v3 Authority Key Identifier:
keyid:4D:F1:81:1F:39:97:B9:50:AC:89:E4:10:EA:3E:F0:18:A6:73:D5:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:82:17:72:18:7c:a8:83:bf:9a:70:34:5f:84:d8:16:e1:c3:
87:97:7e:37:2d:aa:3a:8b:42:ba:44:a2:68:ba:d6:35:0e:3f:
5e:d8:47:06:01:47:44:f7:e6:cf:b9:16:a2:62:32:30:07:df:
77:d2:fd:7e:59:65:03:16:df:2d:80:26:0b:56:19:1d:eb:b9:
37:cd:35:89:11:7b:fc:73:ef:96:bb:b4:48:c7:e9:06:f6:eb:
4d:7a:72:58:cc:bc:00:09:1a:66:0a:ab:f7:ad:61:90:25:9f:
64:4d:cc:16:3d:79:30:33:21:1a:27:4f:08:d1:e3:b1:36:94:
c6:a1:cf:f1:5d:da:70:86:b8:1d:07:4a:5f:b6:4b:19:95:95:
f1:6b:63:f3:96:6b:87:74:bf:52:41:42:2e:76:26:e5:1a:6b:
17:ea:21:91:5e:fb:a0:ab:eb:01:39:b3:ee:38:e2:6b:d8:2c:
1b:55:8c:d4:cc:ed:8c:d1:46:ef:b2:91:54:39:31:2c:f8:39:
f6:51:1e:28:6f:7a:1e:1d:b4:3b:d5:f6:6d:86:4b:03:c2:f7:
7b:83:8a:4b:d9:af:1e:d6:be:dc:db:0d:d6:18:c1:3a:42:a2:
76:10:69:6a:a9:47:bf:78:ed:88:48:73:de:49:fd:49:2b:8f:
dd:68:c9:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfNzOQvLR6Z+WlKeekP3/7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZjE4MTFmMzk5N2I5NTBhYzg5ZTQxMGVhM2VmMDE4YTY3
M2Q1ZmMwHhcNMjUwNzAzMDEwMDQ2WhcNMjUwNzA0MDEwMDQ2WjAzMTEwLwYDVQQD
EyhlYzVhZTU5NzUzNjEzMzA4ZjAxMzUyYmJjM2M5NjA1MTU1NmVkOWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29lUNqyNdjITjJnjV2fr7c3GoDIR
JlFdhAXBvaHR4NyzZypK6ltWPgBcD1S0cFNWkFZQUKqMhUd/klfWVRO460M8lbVx
y9maXmHhRGjYHtjtGWYIknINYo+GBfb7finMquBe6f4FAaCSXFA2MuZOD0TYXaM1
NWtQD6DNGtQDK6sfcSXJfaimnsO2ltXV0ZIAmP5/VAN9mKPXoPxz4C8eD6pzehdJ
lymsIGKPt27XsGUu/3vbPUE1ncJ5UZ9arCAXy/NBAkVh7+6Y4drxItzfBwvXML8V
EQJ3SuXazNEAUllY9OmWSgrxtrRLOqGhEgXAOo/Z+AJxbYcYRDAm0T4tWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxa5ZdTYTMI8BNSu8PJYFFVbtnaMB8GA1UdIwQY
MBaAFE3xgR85l7lQrInkEOo+8Bimc9X8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGZHQkh6bVh1VkNzaWVRUTZqN3dHS1p6MWZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zZmU5MzEtN2RkNi00NDNiLWFhZGUt
ZDlhNjE5MzdhMWU1LzEvVGZHQkh6bVh1VkNzaWVRUTZqN3dHS1p6MWZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zZmU5MzEtN2RkNi00NDNiLWFhZGUtZDlhNjE5MzdhMWU1
LzEvVGZHQkh6bVh1VkNzaWVRUTZqN3dHS1p6MWZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACoIXchh8
qIO/mnA0X4TYFuHDh5d+Ny2qOotCukSiaLrWNQ4/XthHBgFHRPfmz7kWomIyMAff
d9L9flllAxbfLYAmC1YZHeu5N801iRF7/HPvlru0SMfpBvbrTXpyWMy8AAkaZgqr
961hkCWfZE3MFj15MDMhGidPCNHjsTaUxqHP8V3acIa4HQdKX7ZLGZWV8Wtj85Zr
h3S/UkFCLnYm5RprF+ohkV77oKvrATmz7jjia9gsG1WM1MztjNFG77KRVDkxLPg5
9lEeKG96Hh20O9X2bYZLA8L3e4OKS9mvHta+3NsN1hjBOkKidhBpaqlHv3jtiEhz
3kn9SSuP3WjJ0A==
-----END CERTIFICATE-----
Generated at Thu Jul 3 03:46:30 2025 by rpki-client