Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
File: tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft (raw, json)
Hash identifier: 9InhVm7erVrSgWJs+LHxcGgl2J04xkNmzyJWyCpHGrQ=
Subject key identifier: 51:ED:7F:CD:2B:24:FC:7A:A2:A2:71:FE:2B:E8:8C:26:3B:A6:BF:E9
Authority key identifier: B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
Certificate issuer: /CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Certificate serial: 0197B8FD8C0BE345377A535B352BE9384C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 00:01:53 +0000
Manifest this update: Sun 29 Jun 2025 00:01:53 +0000
Manifest next update: Mon 30 Jun 2025 00:01:53 +0000
Files and hashes: 1: HeDUncvNrC9DXvqHmX3LCuEEQFk.roa (hash: pkL8awVC+vif3Sv8BEo/gQroGPTBLCBBOJrEXIA/gLU=)
2: tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl (hash: LlpWNuqG1XdB7itk6ZGV/qrfnnr9zBoCEzbB1MYclpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:8c:0b:e3:45:37:7a:53:5b:35:2b:e9:38:4c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Validity
Not Before: Jun 29 00:01:53 2025 GMT
Not After : Jun 30 00:01:53 2025 GMT
Subject: CN=51ed7fcd2b24fc7aa2a271fe2be88c263ba6bfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:75:85:3f:52:9c:05:53:8a:b0:4f:0f:28:39:
90:92:9f:e4:fb:0b:dc:a9:99:36:c2:9e:86:00:f5:
e6:e1:4a:84:97:27:52:e6:43:5a:64:21:73:fe:f6:
f1:7c:00:8f:d8:32:8b:2a:02:dc:3c:83:72:8c:0e:
4f:35:1b:09:a1:15:42:82:ee:e3:c4:28:d3:59:2d:
33:57:e5:2f:07:aa:4d:d8:8c:a3:22:1e:bd:a0:64:
f5:0e:30:a7:87:a8:2b:a6:96:60:4d:06:84:50:73:
5d:8b:d6:4e:b4:59:a6:01:16:6f:ef:7c:10:3a:9a:
d0:80:95:7f:8d:55:0b:db:f6:74:5d:45:df:91:77:
68:18:b3:54:9d:37:16:1b:80:ad:a8:fb:29:e7:4d:
32:95:ff:fe:3c:3a:d3:85:dd:67:88:99:ab:a7:d5:
32:86:da:c8:3f:b5:fe:73:7c:48:b0:e8:9c:5e:d6:
91:b0:a3:8e:28:13:dc:01:4e:f6:9d:4d:06:d9:95:
4c:15:91:ec:e5:be:f6:37:c2:a8:cd:bd:4e:a6:01:
84:ed:e9:62:a0:a8:d7:8e:82:0b:6b:2f:e7:d0:81:
ba:72:25:83:f8:da:ab:a2:d3:4a:2f:0b:c7:f3:c3:
5d:c2:ef:7b:b6:36:b9:07:c5:98:2a:ca:d9:bb:b2:
ef:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:ED:7F:CD:2B:24:FC:7A:A2:A2:71:FE:2B:E8:8C:26:3B:A6:BF:E9
X509v3 Authority Key Identifier:
keyid:B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:17:6f:da:8c:bc:42:02:91:65:f4:c2:bb:05:c6:58:7f:94:
81:80:c2:80:6f:8a:22:ee:6e:fc:a8:fc:f6:f9:25:de:9c:9e:
63:0b:6b:f3:3f:fb:41:2c:b5:65:03:62:ad:30:e7:9c:ab:33:
27:2f:08:c6:69:f2:d7:66:f9:8b:1e:c8:30:8b:52:b5:aa:7f:
62:f2:bc:3b:b4:6f:6b:f2:a1:26:ce:9e:5d:9a:97:ab:e8:a7:
5a:7d:8c:a0:5e:2f:e1:ea:d7:3b:2d:83:7f:12:ee:e0:66:f6:
9f:3f:de:16:34:92:eb:3e:87:6e:d6:37:e4:f1:eb:a1:6f:ea:
d1:e9:e6:25:43:23:84:ee:0d:50:41:71:a0:78:82:a1:03:8d:
41:4f:cb:77:90:74:e4:4c:e7:28:db:db:82:ed:3a:c9:18:aa:
5f:6c:3c:84:6e:a9:29:4a:43:35:84:5e:37:aa:10:52:7d:aa:
6e:30:ea:08:47:dc:e6:7e:9d:8c:6d:84:9c:5a:8f:58:ca:7a:
ea:4a:48:75:a8:4f:52:d5:47:66:4d:26:e3:8a:b2:0d:d0:12:
fa:3d:d3:ff:46:a9:8f:85:9d:e9:8f:cc:52:74:ea:2e:41:3d:
11:41:a1:14:d6:66:22:5a:9d:c9:4f:fa:d4:0e:dc:0a:2e:52:
32:4f:e6:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/YwL40U3elNbNSvpOEwfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZmE0ZDA4MWIzNjg4N2YzZTVjYTY1MzdmNzQ2OWVlZTIx
ZDcxYWUwHhcNMjUwNjI5MDAwMTUzWhcNMjUwNjMwMDAwMTUzWjAzMTEwLwYDVQQD
Eyg1MWVkN2ZjZDJiMjRmYzdhYTJhMjcxZmUyYmU4OGMyNjNiYTZiZmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HWFP1KcBVOKsE8PKDmQkp/k+wvc
qZk2wp6GAPXm4UqElydS5kNaZCFz/vbxfACP2DKLKgLcPINyjA5PNRsJoRVCgu7j
xCjTWS0zV+UvB6pN2IyjIh69oGT1DjCnh6grppZgTQaEUHNdi9ZOtFmmARZv73wQ
OprQgJV/jVUL2/Z0XUXfkXdoGLNUnTcWG4CtqPsp500ylf/+PDrThd1niJmrp9Uy
htrIP7X+c3xIsOicXtaRsKOOKBPcAU72nU0G2ZVMFZHs5b72N8Kozb1OpgGE7eli
oKjXjoILay/n0IG6ciWD+NqrotNKLwvH88Ndwu97tja5B8WYKsrZu7Lv5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHtf80rJPx6oqJx/ivojCY7pr/pMB8GA1UdIwQY
MBaAFLT6TQgbNoh/PlymU390ae7iHXGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBwTkNCczJpSDgtWEtaVGYzUnA3dUlkY2E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wY2ZlM2UtNzI5Zi00NDE4LTljZjQt
ODYzZGFlY2ZjMmU4LzEvdFBwTkNCczJpSDgtWEtaVGYzUnA3dUlkY2E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8wY2ZlM2UtNzI5Zi00NDE4LTljZjQtODYzZGFlY2ZjMmU4
LzEvdFBwTkNCczJpSDgtWEtaVGYzUnA3dUlkY2E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxdv2oy8
QgKRZfTCuwXGWH+UgYDCgG+KIu5u/Kj89vkl3pyeYwtr8z/7QSy1ZQNirTDnnKsz
Jy8Ixmny12b5ix7IMItStap/YvK8O7Rva/KhJs6eXZqXq+inWn2MoF4v4erXOy2D
fxLu4Gb2nz/eFjSS6z6HbtY35PHroW/q0enmJUMjhO4NUEFxoHiCoQONQU/Ld5B0
5EznKNvbgu06yRiqX2w8hG6pKUpDNYReN6oQUn2qbjDqCEfc5n6djG2EnFqPWMp6
6kpIdahPUtVHZk0m44qyDdAS+j3T/0apj4Wd6Y/MUnTqLkE9EUGhFNZmIlqdyU/6
1A7cCi5SMk/m8A==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:34:08 2025 by rpki-client