Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
File: TK0YVBTBauXSKaiqK_oV_vxxoiI.mft (raw, json)
Hash identifier: e7XJPTnDNoRyD4mNaBaOOGfZpZ9BH1p+dUhTPisWGbk=
Subject key identifier: 10:FD:C6:0D:95:EE:99:03:6B:F1:00:94:5E:81:2C:52:6A:3A:82:C5
Authority key identifier: 4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
Certificate issuer: /CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Certificate serial: 0197B7B33E88417CA6714B039B6DCD60DC41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
Manifest number: 1549
Signing time: Sat 28 Jun 2025 18:01:06 +0000
Manifest this update: Sat 28 Jun 2025 18:01:06 +0000
Manifest next update: Sun 29 Jun 2025 18:01:06 +0000
Files and hashes: 1: TK0YVBTBauXSKaiqK_oV_vxxoiI.crl (hash: 4MwEzxWTFGOPLAAy1kNzoCdxIH+/LrUcyYZECqoEWa4=)
2: dxfaqcbOBYRpYzoiD3a-nfzNgyI.roa (hash: 9S4UtPoorxm2Y5jeo5Ht7EgjOkb+pCS05uOlyENLKPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:3e:88:41:7c:a6:71:4b:03:9b:6d:cd:60:dc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Validity
Not Before: Jun 28 18:01:06 2025 GMT
Not After : Jun 29 18:01:06 2025 GMT
Subject: CN=10fdc60d95ee99036bf100945e812c526a3a82c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:2f:3d:62:41:ae:38:b8:dc:62:0b:b7:89:
a9:47:78:70:8f:fb:2c:5d:cd:cd:87:cd:5e:98:52:
64:ce:76:6e:c9:3f:5d:fd:f5:15:35:a0:7d:fb:aa:
37:3e:ee:88:25:27:fd:9c:2f:37:b4:b9:e3:d6:be:
92:eb:e1:eb:e1:19:16:89:6e:d5:ed:b5:91:f4:17:
c4:19:f1:91:a2:1f:48:fc:46:86:e2:8c:3c:53:f2:
e0:3d:5a:0b:52:b4:56:67:94:d7:0b:58:f2:27:87:
0a:a9:7b:67:4f:be:f6:15:1b:fc:f0:3b:64:59:6a:
3e:a5:e7:fe:a0:e3:df:d0:5b:bd:ca:dd:0f:56:f4:
4f:fa:19:65:8a:08:38:37:e9:4c:52:cd:e3:d1:ab:
70:11:ba:cb:ac:c2:c9:7c:ad:96:c6:5f:4e:70:c0:
b6:1a:62:81:85:30:24:78:52:08:c3:08:20:4d:c0:
40:aa:b9:3e:74:ad:31:65:84:67:22:06:48:ba:dd:
9f:1c:db:3a:f0:15:4b:57:11:b7:a8:78:a4:28:ae:
ed:c9:21:4d:8e:1d:cd:ef:b3:d5:73:3e:52:02:ec:
25:55:3e:a3:2e:1c:f1:29:8b:c4:c3:8e:3e:1f:6c:
6d:45:b7:27:e7:14:7d:be:46:e8:89:fc:5f:2c:ca:
60:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FD:C6:0D:95:EE:99:03:6B:F1:00:94:5E:81:2C:52:6A:3A:82:C5
X509v3 Authority Key Identifier:
keyid:4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f0:21:3a:93:81:fb:ad:cb:61:a9:cb:96:31:14:49:6e:6f:
b0:72:5b:ed:7c:22:e4:52:5e:11:98:56:35:ea:66:04:73:e8:
9e:17:60:26:87:c8:ca:d2:c7:f7:3b:b4:fd:f8:96:e4:f6:e5:
31:cc:30:ec:3c:a5:7b:79:fa:60:bd:88:71:51:a4:ad:ba:d8:
53:b9:ba:57:80:30:b9:51:56:9f:d1:22:86:64:8c:0f:f9:1d:
ad:e7:f1:07:38:13:76:86:1f:a1:79:85:4e:ce:7d:63:eb:4c:
6a:40:fc:51:b2:07:36:50:89:6c:0d:08:b8:3d:24:99:6d:37:
6f:6e:e6:8d:de:b0:55:d6:3a:34:dc:14:82:61:83:0b:18:28:
39:d4:62:1e:36:a7:21:49:dd:78:38:74:e0:af:1e:94:30:b7:
d0:89:03:83:11:df:23:58:6f:b2:f8:ec:45:d5:f9:b5:f1:dc:
b6:d6:92:fe:6d:f5:6a:8a:9d:7e:30:bc:33:17:95:86:0e:26:
45:46:f4:d8:88:0e:92:00:79:e7:eb:2c:69:2e:f4:14:5a:5d:
c5:bc:94:91:64:42:ab:83:5b:4c:8d:53:0f:0a:8c:43:03:d8:
c4:f4:20:7c:f6:01:c1:eb:52:9c:de:43:9a:ee:ce:26:d4:08:
8d:35:bb:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sz6IQXymcUsDm23NYNxBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYWQxODU0MTRjMTZhZTVkMjI5YThhYTJiZmExNWZlZmM3
MWEyMjIwHhcNMjUwNjI4MTgwMTA2WhcNMjUwNjI5MTgwMTA2WjAzMTEwLwYDVQQD
EygxMGZkYzYwZDk1ZWU5OTAzNmJmMTAwOTQ1ZTgxMmM1MjZhM2E4MmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pAvPWJBrji43GILt4mpR3hwj/ss
Xc3Nh81emFJkznZuyT9d/fUVNaB9+6o3Pu6IJSf9nC83tLnj1r6S6+Hr4RkWiW7V
7bWR9BfEGfGRoh9I/EaG4ow8U/LgPVoLUrRWZ5TXC1jyJ4cKqXtnT772FRv88Dtk
WWo+pef+oOPf0Fu9yt0PVvRP+hlligg4N+lMUs3j0atwEbrLrMLJfK2Wxl9OcMC2
GmKBhTAkeFIIwwggTcBAqrk+dK0xZYRnIgZIut2fHNs68BVLVxG3qHikKK7tySFN
jh3N77PVcz5SAuwlVT6jLhzxKYvEw44+H2xtRbcn5xR9vkboifxfLMpgcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBD9xg2V7pkDa/EAlF6BLFJqOoLFMB8GA1UdIwQY
MBaAFEytGFQUwWrl0imoqiv6Ff78caIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEswWVZCVEJhdVhTS2FpcUtfb1Zfdnh4b2lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81Yjc4OGUtZjg0Ny00ZGY5LTkzMzQt
OTY0Y2NhNzIyZjczLzEvVEswWVZCVEJhdVhTS2FpcUtfb1Zfdnh4b2lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS81Yjc4OGUtZjg0Ny00ZGY5LTkzMzQtOTY0Y2NhNzIyZjcz
LzEvVEswWVZCVEJhdVhTS2FpcUtfb1Zfdnh4b2lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvAhOpOB
+63LYanLljEUSW5vsHJb7Xwi5FJeEZhWNepmBHPonhdgJofIytLH9zu0/fiW5Pbl
Mcww7Dyle3n6YL2IcVGkrbrYU7m6V4AwuVFWn9EihmSMD/kdrefxBzgTdoYfoXmF
Ts59Y+tMakD8UbIHNlCJbA0IuD0kmW03b27mjd6wVdY6NNwUgmGDCxgoOdRiHjan
IUndeDh04K8elDC30IkDgxHfI1hvsvjsRdX5tfHcttaS/m31aoqdfjC8MxeVhg4m
RUb02IgOkgB55+ssaS70FFpdxbyUkWRCq4NbTI1TDwqMQwPYxPQgfPYBwetSnN5D
mu7OJtQIjTW7tg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:16 2025 by rpki-client