Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
File: TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft (raw, json)
Hash identifier: bURzvMww6crpCrTG+04Rytidr/wJR4kmDrFrKKPM/bU=
Subject key identifier: 63:48:39:61:9B:5E:D8:92:30:0D:72:C2:BA:C0:BF:EF:4D:D8:BF:37
Authority key identifier: 4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
Certificate issuer: /CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Certificate serial: 0197C0B6C555D3F93BA1600C71D2E142D82F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
Manifest number: 0CFF
Signing time: Mon 30 Jun 2025 12:01:32 +0000
Manifest this update: Mon 30 Jun 2025 12:01:32 +0000
Manifest next update: Tue 01 Jul 2025 12:01:32 +0000
Files and hashes: 1: TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl (hash: XEdYQxl9ZkUiM4ylzj8IUYpSiAIOuGlvCjVk5SJT5O4=)
2: k_nIf6wVx1Xdxat4zYtnBqTL13Y.roa (hash: HaoM7rJ6dUREUsX3C7dLkVUY9dcgJCaHV1PnH/ISMtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:c5:55:d3:f9:3b:a1:60:0c:71:d2:e1:42:d8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Validity
Not Before: Jun 30 12:01:32 2025 GMT
Not After : Jul 1 12:01:32 2025 GMT
Subject: CN=634839619b5ed892300d72c2bac0bfef4dd8bf37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5d:15:c5:49:25:9b:8e:4d:9f:42:40:e6:96:
1d:cc:55:9b:31:5a:47:40:7b:8c:f5:f3:42:64:cf:
20:36:83:11:69:cf:cf:b6:5e:e8:8e:97:68:e4:fc:
9a:6c:00:d3:33:42:12:5e:ff:7f:1b:77:69:0f:bc:
80:bf:b1:5a:5e:b4:e5:cc:57:85:7a:0e:34:42:29:
87:94:55:38:18:cd:cd:4c:49:1c:b8:bb:c6:be:81:
da:dc:9c:07:7c:e1:c9:86:c6:22:b2:68:4e:c7:bb:
cf:2a:6a:9d:97:62:47:8c:b6:bb:d2:44:20:7b:40:
c7:02:43:d9:cd:9d:da:29:80:e0:53:14:79:45:17:
69:b9:d5:f6:81:66:0b:34:08:5a:63:6d:2f:7e:73:
b2:1a:9d:bc:8d:6c:b1:c5:40:65:9d:88:cd:5d:2b:
55:6b:57:3f:e8:04:a3:a8:d1:fb:ed:da:c1:e6:f8:
b7:e1:04:6f:85:db:5f:8b:06:4c:f4:d4:dc:9c:e8:
3f:b5:d0:be:be:78:04:4d:48:bb:a9:6b:fb:ae:ff:
6a:51:76:62:6f:e4:58:72:dc:05:d6:f7:4b:80:b2:
3b:48:c2:d2:4f:c9:b9:a5:7e:df:b8:82:fa:5b:46:
61:1a:9d:7e:c9:86:36:d1:38:d1:36:a6:c6:4d:31:
a0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:48:39:61:9B:5E:D8:92:30:0D:72:C2:BA:C0:BF:EF:4D:D8:BF:37
X509v3 Authority Key Identifier:
keyid:4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2c:15:ae:cc:61:84:e0:19:94:8c:2a:7f:5b:73:9d:d7:c6:
10:22:8a:12:e1:fe:76:c6:c9:e7:e1:32:62:52:ee:02:70:2f:
66:19:ac:79:2d:42:57:3d:79:e4:86:b1:34:fb:bd:d8:b0:34:
b7:d0:d7:25:9c:79:55:86:ab:76:c6:df:9e:37:3b:1a:b3:9c:
41:25:0e:2d:6a:d4:90:a1:0b:63:0c:45:54:d8:7a:ed:02:3e:
31:22:dc:80:73:58:89:26:d7:2e:54:63:d9:3a:e4:e6:55:24:
73:90:1e:65:18:cc:e9:9d:c3:e7:f6:1a:c4:6f:8a:5a:88:d4:
00:6e:ef:95:2a:11:c6:ca:14:55:46:c2:39:0d:0a:1b:f5:ba:
04:7f:45:17:84:3e:fb:6d:36:33:8d:67:bb:16:7f:15:9e:8a:
e7:8b:69:aa:2d:8f:eb:dd:0e:81:ed:17:e5:74:8a:da:b0:99:
8a:04:bb:bd:19:a2:62:96:d6:c4:b6:da:2c:0c:a1:e7:72:94:
4a:fa:15:b5:43:9c:4d:c6:d8:dc:b3:de:6b:89:55:07:15:25:
81:85:45:62:74:10:7c:1a:16:3c:be:5e:75:c5:29:c4:14:4e:
b0:d4:fd:27:2a:c0:1a:e1:a0:8e:69:69:3c:6c:01:8b:9e:ce:
c7:1e:fb:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfAtsVV0/k7oWAMcdLhQtgvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzNjMGUxNGQ1N2VhYmMzYjY1ZTM4YTc3MzZiZWJlNDkw
OTJlOWUwHhcNMjUwNjMwMTIwMTMyWhcNMjUwNzAxMTIwMTMyWjAzMTEwLwYDVQQD
Eyg2MzQ4Mzk2MTliNWVkODkyMzAwZDcyYzJiYWMwYmZlZjRkZDhiZjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1V0VxUklm45Nn0JA5pYdzFWbMVpH
QHuM9fNCZM8gNoMRac/Ptl7ojpdo5PyabADTM0ISXv9/G3dpD7yAv7FaXrTlzFeF
eg40QimHlFU4GM3NTEkcuLvGvoHa3JwHfOHJhsYismhOx7vPKmqdl2JHjLa70kQg
e0DHAkPZzZ3aKYDgUxR5RRdpudX2gWYLNAhaY20vfnOyGp28jWyxxUBlnYjNXStV
a1c/6ASjqNH77drB5vi34QRvhdtfiwZM9NTcnOg/tdC+vngETUi7qWv7rv9qUXZi
b+RYctwF1vdLgLI7SMLST8m5pX7fuIL6W0ZhGp1+yYY20TjRNqbGTTGgVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNIOWGbXtiSMA1ywrrAv+9N2L83MB8GA1UdIwQY
MBaAFEwzwOFNV+q8O2Xjinc2vr5JCS6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERQQTRVMVg2cnc3WmVPS2R6YS12a2tKTHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9jNzJhYmUtMzJkYy00ZjE4LTkwNWYt
YzFmZjA1NmZjNzZmLzEvVERQQTRVMVg2cnc3WmVPS2R6YS12a2tKTHA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9jNzJhYmUtMzJkYy00ZjE4LTkwNWYtYzFmZjA1NmZjNzZm
LzEvVERQQTRVMVg2cnc3WmVPS2R6YS12a2tKTHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSwVrsxh
hOAZlIwqf1tzndfGECKKEuH+dsbJ5+EyYlLuAnAvZhmseS1CVz155IaxNPu92LA0
t9DXJZx5VYardsbfnjc7GrOcQSUOLWrUkKELYwxFVNh67QI+MSLcgHNYiSbXLlRj
2Trk5lUkc5AeZRjM6Z3D5/YaxG+KWojUAG7vlSoRxsoUVUbCOQ0KG/W6BH9FF4Q+
+202M41nuxZ/FZ6K54tpqi2P690Oge0X5XSK2rCZigS7vRmiYpbWxLbaLAyh53KU
SvoVtUOcTcbY3LPea4lVBxUlgYVFYnQQfBoWPL5edcUpxBROsNT9JyrAGuGgjmlp
PGwBi57Oxx77vg==
-----END CERTIFICATE-----
Generated at Mon Jun 30 18:40:00 2025 by rpki-client