Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
File: TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft (raw, json)
Hash identifier: FSx0TOU8jEmurxknm2TFynLEMh1UFVzqBQhdL9pGcDI=
Subject key identifier: 14:B6:D4:D3:B6:80:96:39:68:85:D4:89:BB:4D:18:C9:D5:E7:A7:23
Authority key identifier: 4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
Certificate issuer: /CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Certificate serial: 0197B77C95EBA31B7E03305246B441970AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:01:24 +0000
Manifest this update: Sat 28 Jun 2025 17:01:24 +0000
Manifest next update: Sun 29 Jun 2025 17:01:24 +0000
Files and hashes: 1: TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl (hash: W7qhXU83fHABLV6hqdsOyAanpPE43Op94PLKml0XuW4=)
2: gtQnPoHQAssVploPdQKF3wMqPqg.roa (hash: oTvtYktXpzo6IvRkclIhI8X73gjSVVDXnm/5bjUENeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:95:eb:a3:1b:7e:03:30:52:46:b4:41:97:0a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Validity
Not Before: Jun 28 17:01:24 2025 GMT
Not After : Jun 29 17:01:24 2025 GMT
Subject: CN=14b6d4d3b68096396885d489bb4d18c9d5e7a723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:bd:0c:9e:d1:17:c2:1a:21:3f:83:ed:30:
75:54:15:47:e8:57:2b:e7:8a:84:11:fa:25:51:1e:
c3:f4:f4:d1:25:cb:78:1f:91:34:df:82:e0:62:88:
b5:d2:89:8c:aa:c7:be:31:09:a5:21:0d:b0:c9:68:
41:d8:2f:5c:f2:87:35:81:f1:7a:ad:b4:75:6c:ff:
1c:55:87:94:d8:03:df:98:6a:fa:3a:03:97:01:13:
f6:b5:3e:16:23:f3:70:57:f0:45:5e:bd:6b:94:3f:
eb:46:77:ef:53:6e:0a:f8:ce:f0:a7:3f:3e:57:8c:
31:9f:1e:ca:38:8f:e5:37:47:12:8a:99:c9:5c:3f:
ed:63:0a:88:6d:f2:38:88:e4:7a:11:f8:6b:d6:d9:
80:3e:ae:81:fa:ab:fe:b3:29:82:2c:fc:91:ef:b7:
08:ad:4c:07:0c:79:c1:7b:f8:bf:88:07:4f:68:e4:
f4:ad:96:14:c6:78:9c:ac:20:73:f1:21:14:09:2e:
36:b1:8d:b3:94:84:db:70:d8:36:c8:8e:80:a8:44:
64:85:db:f7:18:cf:9c:3f:a3:5f:4f:58:79:26:c3:
63:78:5f:6f:98:6a:32:8a:4b:f6:5f:20:d1:c4:e8:
4b:c8:66:da:d9:ef:f2:5b:70:30:7f:b4:72:c0:cf:
05:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B6:D4:D3:B6:80:96:39:68:85:D4:89:BB:4D:18:C9:D5:E7:A7:23
X509v3 Authority Key Identifier:
keyid:4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ae:98:e4:20:82:74:dd:55:e8:bc:ed:b7:9e:87:00:6e:d9:
fc:00:91:64:a9:c8:74:99:b3:b6:18:02:9e:7d:ac:64:d5:6a:
49:c5:f8:70:57:ec:d9:9a:4e:d3:df:95:f4:59:24:ce:c5:a3:
00:bf:b8:49:c0:2d:7e:ff:89:1b:69:d1:16:c7:b7:41:80:f3:
32:7d:da:86:61:70:ad:63:9b:5e:0c:e6:a3:7c:fc:6f:75:b8:
41:f7:bd:79:0b:4a:a1:9c:e5:5a:7b:a2:10:15:f8:c0:ce:69:
9e:28:7d:e2:f7:2a:d3:5c:8f:74:9a:d2:31:f5:a1:8c:d3:ca:
e1:67:2d:5e:91:de:e1:d0:ee:ad:b3:07:6c:d1:17:24:35:4e:
95:c4:97:a3:ed:31:40:1d:25:1c:5b:88:e8:a7:cb:3d:77:3d:
6a:fd:47:79:96:3a:57:71:0b:94:21:7c:08:50:af:13:93:42:
36:2c:49:0c:f0:91:76:ff:c6:4c:5c:ee:e8:42:02:f3:42:fa:
16:43:b4:5a:49:c7:4c:da:eb:dc:ce:2b:c1:fe:1e:4a:ed:15:
7a:28:e0:2a:73:30:c1:f9:10:03:bc:c1:a9:b0:7c:de:91:b9:
33:ef:2a:db:d4:1b:2f:a8:39:9a:cb:32:06:e6:64:78:67:a1:
d1:7b:88:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fJXroxt+AzBSRrRBlwr8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMGQ1OTQzYzI0MDM3MzBkZTgxOGUzMWI5YjVmZjFkOGMx
YzljNDcwHhcNMjUwNjI4MTcwMTI0WhcNMjUwNjI5MTcwMTI0WjAzMTEwLwYDVQQD
EygxNGI2ZDRkM2I2ODA5NjM5Njg4NWQ0ODliYjRkMThjOWQ1ZTdhNzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKe9DJ7RF8IaIT+D7TB1VBVH6Fcr
54qEEfolUR7D9PTRJct4H5E034LgYoi10omMqse+MQmlIQ2wyWhB2C9c8oc1gfF6
rbR1bP8cVYeU2APfmGr6OgOXARP2tT4WI/NwV/BFXr1rlD/rRnfvU24K+M7wpz8+
V4wxnx7KOI/lN0cSipnJXD/tYwqIbfI4iOR6Efhr1tmAPq6B+qv+symCLPyR77cI
rUwHDHnBe/i/iAdPaOT0rZYUxnicrCBz8SEUCS42sY2zlITbcNg2yI6AqERkhdv3
GM+cP6NfT1h5JsNjeF9vmGoyikv2XyDRxOhLyGba2e/yW3Awf7RywM8F+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBS21NO2gJY5aIXUibtNGMnV56cjMB8GA1UdIwQY
MBaAFE0NWUPCQDcw3oGOMbm1/x2MHJxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFExWlE4SkFOekRlZ1k0eHViWF9IWXdjbkVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jY2U1YmEtZmY5My00NDM4LWE4ZTMt
NGE2MzdjNmQ5OTM4LzEvVFExWlE4SkFOekRlZ1k0eHViWF9IWXdjbkVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9jY2U1YmEtZmY5My00NDM4LWE4ZTMtNGE2MzdjNmQ5OTM4
LzEvVFExWlE4SkFOekRlZ1k0eHViWF9IWXdjbkVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe66Y5CCC
dN1V6Lztt56HAG7Z/ACRZKnIdJmzthgCnn2sZNVqScX4cFfs2ZpO09+V9FkkzsWj
AL+4ScAtfv+JG2nRFse3QYDzMn3ahmFwrWObXgzmo3z8b3W4Qfe9eQtKoZzlWnui
EBX4wM5pnih94vcq01yPdJrSMfWhjNPK4WctXpHe4dDurbMHbNEXJDVOlcSXo+0x
QB0lHFuI6KfLPXc9av1HeZY6V3ELlCF8CFCvE5NCNixJDPCRdv/GTFzu6EIC80L6
FkO0WknHTNrr3M4rwf4eSu0VeijgKnMwwfkQA7zBqbB83pG5M+8q29QbL6g5mssy
BuZkeGeh0XuIcA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:11:50 2025 by rpki-client