Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
File: TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft (raw, json)
Hash identifier: V0aW1IxJ5pc2i65PVy5PdrvnQ6gTwUESn86uZGXNo48=
Subject key identifier: 4B:06:80:64:DA:F6:BA:90:2B:E8:ED:BD:89:38:56:A7:FC:F4:3B:8D
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Certificate issuer: /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial: 0197D5190B6D4B866656169BAC3B3303E4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
Manifest number: 15C9
Signing time: Fri 04 Jul 2025 11:01:17 +0000
Manifest this update: Fri 04 Jul 2025 11:01:17 +0000
Manifest next update: Sat 05 Jul 2025 11:01:17 +0000
Files and hashes: 1: 3hSBBEtakLk1jIWXi3hchM-uTBM.roa (hash: NhWJmyJNB4sc9UZdlJ419SqvZ3IVwqNXUyuWTH42r1U=)
2: TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl (hash: RNFIVnW0XeAOq8jsncENwARv3ejsAVCxyuh5m+B9kk8=)
3: fziBQYI5VQChSmnvHhKXUMLYNKw.roa (hash: NEQyAGhhDS5WgZXodzUc9okNLj3B3fbMtY+K4TNZzLs=)
4: n7v5YOrSFGoXqVJ0PeytCrFgOLg.roa (hash: +oN44CijE7GRp64D6SkmoV+lAs+Tba+IrPKezC+0CLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:19:0b:6d:4b:86:66:56:16:9b:ac:3b:33:03:e4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
Validity
Not Before: Jul 4 11:01:17 2025 GMT
Not After : Jul 5 11:01:17 2025 GMT
Subject: CN=4b068064daf6ba902be8edbd893856a7fcf43b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:30:d4:be:e3:8a:ee:75:c4:14:4a:53:54:
34:8f:7c:f7:af:4f:ec:99:47:55:e4:02:38:99:22:
c8:8e:fd:ea:83:35:83:5a:41:89:29:1d:55:65:1b:
2a:1a:11:8a:98:f0:ad:8d:c3:07:f1:c4:b8:c1:ff:
5f:cf:d7:c4:ae:0e:f3:e6:04:88:60:72:97:79:30:
b2:b4:25:a9:be:b3:3e:94:3d:c6:08:d8:14:8e:65:
38:bf:1a:8a:31:0b:99:a2:6e:fe:ad:52:0e:0f:c3:
d4:2e:c3:b4:7b:ab:28:48:1d:03:52:76:4c:d5:ee:
d3:84:b5:38:b8:df:b5:c0:2b:e4:cb:8b:82:9a:3b:
1c:fb:32:06:42:38:5b:9f:1d:f3:33:8a:08:63:b4:
6b:e4:62:2f:68:c2:e9:57:77:f6:9e:e1:b4:e5:c2:
e6:c0:54:11:b7:10:4f:c2:4d:37:dd:16:92:9a:a3:
5d:9e:47:2e:cf:a6:c8:28:6a:0e:90:f3:fb:62:da:
8e:c3:a5:03:b3:00:92:1b:f9:e7:97:ba:7d:2d:e2:
51:89:96:9a:c6:7a:c5:0f:bf:0d:58:66:32:03:b9:
ba:da:22:f3:f0:ec:5d:73:7a:44:be:f8:82:96:b3:
25:cb:45:2c:a3:1b:5b:83:84:29:9b:d5:5e:c6:20:
12:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:06:80:64:DA:F6:BA:90:2B:E8:ED:BD:89:38:56:A7:FC:F4:3B:8D
X509v3 Authority Key Identifier:
keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ff:2f:f0:9a:95:a4:54:47:65:81:c2:a6:c1:ff:60:6a:05:
6e:52:73:6a:fb:89:d0:3e:26:03:06:25:46:b9:7e:7f:fb:a1:
34:82:e8:ad:6e:26:23:ae:ed:1b:3f:94:37:0c:7e:ef:43:83:
ab:c3:c7:ee:ba:d4:d9:54:7f:1c:78:8f:a6:19:d7:7c:95:e6:
23:7c:f9:01:31:0e:4d:5f:ab:c7:49:02:0d:0d:23:5c:34:c0:
bb:72:34:90:e5:ac:e8:c9:4d:6c:0e:40:72:c1:03:26:34:c3:
e8:a4:13:6a:fa:ad:94:e3:88:ce:c4:78:77:59:31:8a:e2:f0:
5d:4f:5b:f4:3c:7d:71:41:e7:2b:dd:3a:c3:5c:63:05:c9:00:
fc:a3:a7:36:a6:5f:33:95:02:fb:4b:b0:1a:6e:ca:88:c8:c2:
5f:c2:21:b4:dd:15:02:62:ec:ed:f8:bd:29:2d:d1:8e:d4:90:
63:67:de:c9:22:55:dd:5d:c4:af:d1:07:fa:3a:93:55:a9:69:
7a:33:9f:fc:52:94:c6:01:d8:ce:06:84:80:e2:69:54:81:36:
ca:2d:49:7d:2f:6c:67:83:1c:a0:5a:0d:5a:11:84:c3:46:98:
94:11:bd:49:95:c0:9b:ba:3e:83:17:d9:fa:f3:15:d9:27:09:
b1:fc:45:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfVGQttS4ZmVhabrDszA+ToMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYWQwMzk3NDg3Nzk5ZTIxMThmZjRjYmNmOGYxNTk3NDdm
MzU4OTEwHhcNMjUwNzA0MTEwMTE3WhcNMjUwNzA1MTEwMTE3WjAzMTEwLwYDVQQD
Eyg0YjA2ODA2NGRhZjZiYTkwMmJlOGVkYmQ4OTM4NTZhN2ZjZjQzYjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRkw1L7jiu51xBRKU1Q0j3z3r0/s
mUdV5AI4mSLIjv3qgzWDWkGJKR1VZRsqGhGKmPCtjcMH8cS4wf9fz9fErg7z5gSI
YHKXeTCytCWpvrM+lD3GCNgUjmU4vxqKMQuZom7+rVIOD8PULsO0e6soSB0DUnZM
1e7ThLU4uN+1wCvky4uCmjsc+zIGQjhbnx3zM4oIY7Rr5GIvaMLpV3f2nuG05cLm
wFQRtxBPwk033RaSmqNdnkcuz6bIKGoOkPP7YtqOw6UDswCSG/nnl7p9LeJRiZaa
xnrFD78NWGYyA7m62iLz8Oxdc3pEvviClrMly0Usoxtbg4Qpm9VexiASywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsGgGTa9rqQK+jtvYk4Vqf89DuNMB8GA1UdIwQY
MBaAFEytA5dId5niEY/0y8+PFZdH81iRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEswRGwwaDNtZUlSal9UTHo0OFZsMGZ6V0pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lYTAxOTYtYWI3OS00MmNmLWFiMmIt
ZmM0YjAzNzEwYWUwLzEvVEswRGwwaDNtZUlSal9UTHo0OFZsMGZ6V0pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lYTAxOTYtYWI3OS00MmNmLWFiMmItZmM0YjAzNzEwYWUw
LzEvVEswRGwwaDNtZUlSal9UTHo0OFZsMGZ6V0pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAif8v8JqV
pFRHZYHCpsH/YGoFblJzavuJ0D4mAwYlRrl+f/uhNILorW4mI67tGz+UNwx+70OD
q8PH7rrU2VR/HHiPphnXfJXmI3z5ATEOTV+rx0kCDQ0jXDTAu3I0kOWs6MlNbA5A
csEDJjTD6KQTavqtlOOIzsR4d1kxiuLwXU9b9Dx9cUHnK906w1xjBckA/KOnNqZf
M5UC+0uwGm7KiMjCX8IhtN0VAmLs7fi9KS3RjtSQY2feySJV3V3Er9EH+jqTValp
ejOf/FKUxgHYzgaEgOJpVIE2yi1JfS9sZ4McoFoNWhGEw0aYlBG9SZXAm7o+gxfZ
+vMV2ScJsfxF1w==
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:19:39 2025 by rpki-client