Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
File: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json)
Hash identifier: 4u6N/NPddjL0HUIH000icUb+t7JoCKw8hSQ/ITqdOcM=
Subject key identifier: 8B:EF:26:4A:06:E2:EC:B4:94:11:ED:6F:67:EA:5C:3A:AD:A9:65:36
Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
Certificate issuer: /CN=4da3711dc5de45f2f5b47901659e956d938272fe
Certificate serial: 0197B5FBDFB5F95DF60FD79FE34C7977BC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 10:01:12 +0000
Manifest this update: Sat 28 Jun 2025 10:01:12 +0000
Manifest next update: Sun 29 Jun 2025 10:01:12 +0000
Files and hashes: 1: 7YKaewqyZbI9lVFIivFUL2FPVzU.roa (hash: wf42n7crwFg9XaXHUPxEE3NTHiwbzXO1xRDVNEMLG6A=)
2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: FTahUSHHXSarWj8rSw0APUQ5sIrvPi5ZMiicGcu8Ebg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:df:b5:f9:5d:f6:0f:d7:9f:e3:4c:79:77:bc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe
Validity
Not Before: Jun 28 10:01:12 2025 GMT
Not After : Jun 29 10:01:12 2025 GMT
Subject: CN=8bef264a06e2ecb49411ed6f67ea5c3aada96536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:cd:7c:a6:a1:94:72:ac:06:4f:14:32:be:
3b:1e:9f:3c:1f:38:f2:2a:84:82:e9:1a:55:bf:93:
f6:b5:39:f1:9d:c2:0e:fb:4e:18:be:96:57:7a:45:
99:7d:b2:9e:8d:94:64:5d:1a:0f:ef:12:b8:54:e9:
3f:86:bb:24:5b:fd:bc:f6:25:de:3a:3c:b2:a1:ad:
d0:bc:e6:76:b0:c5:57:76:61:06:36:df:1d:b2:65:
6b:69:04:6a:bc:59:f8:77:14:be:46:9b:34:4d:54:
58:61:63:21:54:69:50:f4:f1:f6:14:cf:a1:82:8e:
c9:10:d1:2e:3f:17:e7:20:af:b4:be:97:84:7c:1b:
b6:81:02:1c:ad:3c:0b:43:47:b8:b3:11:6d:02:3e:
35:5b:5d:40:af:9d:0c:d5:9f:67:73:3d:e6:c0:52:
6a:e8:ec:6e:e4:d0:c0:b3:ab:a0:f2:80:a3:a0:95:
38:9e:2f:1a:f7:51:88:19:94:6d:dd:94:22:74:ab:
0c:d6:cf:37:58:b6:e1:cd:00:14:ab:0e:36:2f:78:
6d:64:f3:a7:2b:c0:b8:05:1e:2a:74:f1:4a:f5:0a:
05:04:ba:d9:40:ed:d4:10:09:33:c3:65:70:fc:96:
b9:c9:d6:69:5c:85:56:45:fd:0e:16:dc:d6:c5:db:
56:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EF:26:4A:06:E2:EC:B4:94:11:ED:6F:67:EA:5C:3A:AD:A9:65:36
X509v3 Authority Key Identifier:
keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5b:7f:0e:bc:07:ef:96:c8:5a:54:91:11:52:2a:29:b0:1f:
81:ce:75:9f:74:80:5b:48:72:fc:04:7a:92:10:60:67:6d:8a:
f2:60:84:2e:ea:6c:47:b8:92:56:71:eb:52:90:15:7d:cd:5b:
a2:bf:a1:05:eb:2b:73:9a:29:32:23:b6:63:a1:09:59:bd:90:
a2:6b:9a:24:3c:50:fe:13:3a:83:a9:cf:b7:62:1a:ec:c7:87:
c4:e6:09:ca:bb:b0:c6:19:85:a2:8b:6e:5d:06:63:f2:68:45:
f3:1c:43:fe:84:76:ef:73:d1:e1:b6:d5:3f:20:79:48:55:40:
35:d8:49:96:6f:89:34:29:60:bb:20:68:4b:a7:62:51:de:36:
53:b9:23:bb:9d:0a:e4:ce:29:8d:52:ee:09:99:f6:22:25:5d:
7f:8e:11:55:c6:9c:57:91:c4:7d:59:dd:49:be:d7:62:ae:8c:
50:e0:b1:e4:98:e5:a7:60:5e:b9:0a:1c:83:7f:e8:65:71:9d:
f2:3d:1a:ba:73:61:7f:63:8a:12:e6:ec:f5:6b:a3:7c:79:bb:
23:48:43:79:05:41:0b:2a:93:05:fd:83:0a:93:3b:30:9b:d6:
dc:c8:54:c5:f0:22:6d:aa:c4:94:09:8c:0a:a6:e9:7a:e0:57:
b3:67:6e:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1+9+1+V32D9ef40x5d7xRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYTM3MTFkYzVkZTQ1ZjJmNWI0NzkwMTY1OWU5NTZkOTM4
MjcyZmUwHhcNMjUwNjI4MTAwMTEyWhcNMjUwNjI5MTAwMTEyWjAzMTEwLwYDVQQD
Eyg4YmVmMjY0YTA2ZTJlY2I0OTQxMWVkNmY2N2VhNWMzYWFkYTk2NTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9vNfKahlHKsBk8UMr47Hp88Hzjy
KoSC6RpVv5P2tTnxncIO+04YvpZXekWZfbKejZRkXRoP7xK4VOk/hrskW/289iXe
Ojyyoa3QvOZ2sMVXdmEGNt8dsmVraQRqvFn4dxS+Rps0TVRYYWMhVGlQ9PH2FM+h
go7JENEuPxfnIK+0vpeEfBu2gQIcrTwLQ0e4sxFtAj41W11Ar50M1Z9ncz3mwFJq
6Oxu5NDAs6ug8oCjoJU4ni8a91GIGZRt3ZQidKsM1s83WLbhzQAUqw42L3htZPOn
K8C4BR4qdPFK9QoFBLrZQO3UEAkzw2Vw/Ja5ydZpXIVWRf0OFtzWxdtWEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvvJkoG4uy0lBHtb2fqXDqtqWU2MB8GA1UdIwQY
MBaAFE2jcR3F3kXy9bR5AWWelW2TgnL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGFOeEhjWGVSZkwxdEhrQlpaNlZiWk9DY3Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hODMxYzAtNDU3Yy00YmE4LWJlYzct
ZTI1MTEwOWJmZDE5LzEvVGFOeEhjWGVSZkwxdEhrQlpaNlZiWk9DY3Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9hODMxYzAtNDU3Yy00YmE4LWJlYzctZTI1MTEwOWJmZDE5
LzEvVGFOeEhjWGVSZkwxdEhrQlpaNlZiWk9DY3Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFt/DrwH
75bIWlSREVIqKbAfgc51n3SAW0hy/AR6khBgZ22K8mCELupsR7iSVnHrUpAVfc1b
or+hBesrc5opMiO2Y6EJWb2QomuaJDxQ/hM6g6nPt2Ia7MeHxOYJyruwxhmFootu
XQZj8mhF8xxD/oR273PR4bbVPyB5SFVANdhJlm+JNClguyBoS6diUd42U7kju50K
5M4pjVLuCZn2IiVdf44RVcacV5HEfVndSb7XYq6MUOCx5Jjlp2BeuQocg3/oZXGd
8j0aunNhf2OKEubs9WujfHm7I0hDeQVBCyqTBf2DCpM7MJvW3MhUxfAibarElAmM
CqbpeuBXs2du8Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:08 2025 by rpki-client