Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
File: TWFl5PGBPks_XEhyBjHHzAsjdNI.mft (raw, json)
Hash identifier: +B0fcGdAHINru/nCToXlcFzqRCdD5lAfRrKgOropzj8=
Subject key identifier: 5E:36:03:62:84:FB:81:E2:B4:4D:AF:50:2E:25:56:41:68:58:1D:BD
Authority key identifier: 4D:61:65:E4:F1:81:3E:4B:3F:5C:48:72:06:31:C7:CC:0B:23:74:D2
Certificate issuer: /CN=4d6165e4f1813e4b3f5c48720631c7cc0b2374d2
Certificate serial: 0197B70EF4FED4EE91251A48FEDE8147DAAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
Manifest number: 0BB0
Signing time: Sat 28 Jun 2025 15:01:40 +0000
Manifest this update: Sat 28 Jun 2025 15:01:40 +0000
Manifest next update: Sun 29 Jun 2025 15:01:40 +0000
Files and hashes: 1: NvJ8oLDEBqhT1H-zCdKolqnypws.roa (hash: aLhfn5rS031yK9YSuCvXO/dQvbflGZGOUFgblOZMFc4=)
2: TWFl5PGBPks_XEhyBjHHzAsjdNI.crl (hash: WgCSCc5sjSwUx71l98pmWa8IbBKetE8ofBT4g3X9w3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f4:fe:d4:ee:91:25:1a:48:fe:de:81:47:da:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d6165e4f1813e4b3f5c48720631c7cc0b2374d2
Validity
Not Before: Jun 28 15:01:40 2025 GMT
Not After : Jun 29 15:01:40 2025 GMT
Subject: CN=5e36036284fb81e2b44daf502e25564168581dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:a3:c6:95:29:7f:f5:fd:90:b0:88:f4:0e:
8b:db:47:2e:3f:7f:c5:d8:5c:5d:58:b2:71:ae:9a:
1d:d8:7c:ed:27:58:b9:81:86:92:90:ee:35:98:d8:
b7:5f:c4:b7:fa:62:38:90:69:fe:10:e4:0d:c3:8e:
23:2a:f4:06:6b:46:04:48:35:bb:4b:aa:25:77:8d:
c5:d0:20:93:12:05:9d:8f:d1:86:bc:f5:8a:61:74:
51:86:d3:e3:ed:7c:4b:8a:e8:25:1e:04:78:ed:25:
fd:89:c6:a7:74:50:c5:ad:3e:6c:67:52:c0:27:c1:
75:48:d1:29:9e:c1:f9:1c:da:a0:3e:59:c1:a5:ff:
ad:f1:c5:64:30:06:30:d3:d3:6c:4f:67:5c:bf:80:
08:e3:f4:3e:d4:ea:80:0b:62:be:ad:c3:af:d7:fc:
9d:36:94:e2:22:42:1d:86:df:18:0d:72:07:a6:62:
ad:16:22:64:09:3c:02:93:93:48:1a:e9:39:38:29:
26:ed:bc:e4:cc:07:00:d4:73:6a:8c:40:5c:5c:4a:
6d:91:e4:05:40:e3:74:ec:8b:41:86:fb:46:3e:04:
63:00:f4:f1:f1:5e:93:74:6b:07:79:43:65:ba:03:
92:83:71:5a:64:d9:1a:5a:f9:5a:2c:e9:01:26:93:
72:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:36:03:62:84:FB:81:E2:B4:4D:AF:50:2E:25:56:41:68:58:1D:BD
X509v3 Authority Key Identifier:
keyid:4D:61:65:E4:F1:81:3E:4B:3F:5C:48:72:06:31:C7:CC:0B:23:74:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:7d:cc:3e:e4:03:d9:55:b2:83:d1:18:d7:ba:0f:8c:b6:06:
fe:21:4d:7a:39:02:40:ea:ca:83:94:68:24:af:42:94:08:ea:
95:e2:41:40:46:8d:b1:6e:eb:78:ea:ec:ad:ca:a7:0f:5b:70:
5a:e8:f8:f3:f9:56:93:75:d9:7d:16:b8:7c:1b:c3:f5:9e:63:
3e:b7:af:b7:a9:e5:a8:a1:aa:94:d7:ff:2b:8a:7d:a5:a3:36:
81:1a:b2:14:89:64:58:4b:a6:7a:f4:ff:3c:71:0b:7d:d1:d8:
07:9a:fd:d3:ee:fc:53:0f:e9:16:7d:8b:b2:bc:23:c5:90:ee:
c6:83:9e:a7:df:58:b2:51:ef:96:2c:3a:49:af:b9:2f:01:29:
6e:5e:47:46:dc:c4:90:ee:a5:56:0d:c1:58:f2:82:63:92:bf:
2b:83:0c:b9:30:c0:99:c3:bf:70:ef:a6:30:15:96:fc:15:1a:
98:1d:9c:c4:ec:29:a8:74:c2:e6:b6:f9:ca:d5:09:fa:0c:f7:
c2:c4:f6:47:17:59:00:0f:9b:fd:9e:d2:14:ff:ea:18:d6:42:
60:87:97:a8:f9:7f:d4:b3:be:15:4b:3e:4b:18:5c:21:09:ff:
92:84:9e:f2:ab:c4:c1:19:50:7e:44:eb:ac:74:12:39:73:a6:
ea:1d:06:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DvT+1O6RJRpI/t6BR9qrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNjE2NWU0ZjE4MTNlNGIzZjVjNDg3MjA2MzFjN2NjMGIy
Mzc0ZDIwHhcNMjUwNjI4MTUwMTQwWhcNMjUwNjI5MTUwMTQwWjAzMTEwLwYDVQQD
Eyg1ZTM2MDM2Mjg0ZmI4MWUyYjQ0ZGFmNTAyZTI1NTY0MTY4NTgxZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQOjxpUpf/X9kLCI9A6L20cuP3/F
2FxdWLJxrpod2HztJ1i5gYaSkO41mNi3X8S3+mI4kGn+EOQNw44jKvQGa0YESDW7
S6old43F0CCTEgWdj9GGvPWKYXRRhtPj7XxLiuglHgR47SX9icandFDFrT5sZ1LA
J8F1SNEpnsH5HNqgPlnBpf+t8cVkMAYw09NsT2dcv4AI4/Q+1OqAC2K+rcOv1/yd
NpTiIkIdht8YDXIHpmKtFiJkCTwCk5NIGuk5OCkm7bzkzAcA1HNqjEBcXEptkeQF
QON07ItBhvtGPgRjAPTx8V6TdGsHeUNlugOSg3FaZNkaWvlaLOkBJpNy5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF42A2KE+4HitE2vUC4lVkFoWB29MB8GA1UdIwQY
MBaAFE1hZeTxgT5LP1xIcgYxx8wLI3TSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFdGbDVQR0JQa3NfWEVoeUJqSEh6QXNqZE5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8zYWU1NDEtNTdmNC00NDY2LTkxZDUt
MDJhM2JlNDc3M2EzLzEvVFdGbDVQR0JQa3NfWEVoeUJqSEh6QXNqZE5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8zYWU1NDEtNTdmNC00NDY2LTkxZDUtMDJhM2JlNDc3M2Ez
LzEvVFdGbDVQR0JQa3NfWEVoeUJqSEh6QXNqZE5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAun3MPuQD
2VWyg9EY17oPjLYG/iFNejkCQOrKg5RoJK9ClAjqleJBQEaNsW7reOrsrcqnD1tw
Wuj48/lWk3XZfRa4fBvD9Z5jPrevt6nlqKGqlNf/K4p9paM2gRqyFIlkWEumevT/
PHELfdHYB5r90+78Uw/pFn2LsrwjxZDuxoOep99YslHvliw6Sa+5LwEpbl5HRtzE
kO6lVg3BWPKCY5K/K4MMuTDAmcO/cO+mMBWW/BUamB2cxOwpqHTC5rb5ytUJ+gz3
wsT2RxdZAA+b/Z7SFP/qGNZCYIeXqPl/1LO+FUs+SxhcIQn/koSe8qvEwRlQfkTr
rHQSOXOm6h0GzA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:53 2025 by rpki-client