Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
File: tPM_b9KbrwPMTUha9fa3DaawCZ8.mft (raw, json)
Hash identifier: mK0WiCvbYenn18oOIZqaP9+vXZqk3/lzkHdVlvHUb7w=
Subject key identifier: 13:33:86:82:BC:8B:2E:1B:A6:A1:23:EA:5B:8A:DC:35:0B:5C:98:8E
Authority key identifier: B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
Certificate issuer: /CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Certificate serial: 0197B7458A03C4517D8EF09541A12EA55A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
Manifest number: 0E8E
Signing time: Sat 28 Jun 2025 16:01:17 +0000
Manifest this update: Sat 28 Jun 2025 16:01:17 +0000
Manifest next update: Sun 29 Jun 2025 16:01:17 +0000
Files and hashes: 1: tPM_b9KbrwPMTUha9fa3DaawCZ8.crl (hash: MX1CufhjlnfRGUwYaoT2wF3E/V7WIfIVQnU4UhPMqOI=)
2: tYPVw8LB8i24cvigRIjHBmA1vkA.roa (hash: PLxJfAKIcmuKybJlU2Vop9ZELJyvcamyBgkEBw419jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:8a:03:c4:51:7d:8e:f0:95:41:a1:2e:a5:5a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Validity
Not Before: Jun 28 16:01:17 2025 GMT
Not After : Jun 29 16:01:17 2025 GMT
Subject: CN=13338682bc8b2e1ba6a123ea5b8adc350b5c988e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:fd:31:f9:2a:60:02:c9:c4:d8:86:91:85:
12:a1:e0:72:cd:5a:68:fc:20:14:b5:be:f3:73:46:
0d:c2:f1:f5:fc:05:4f:0a:6d:fc:76:81:1b:70:e0:
ff:71:46:3f:b3:00:53:ac:d5:3e:ca:bb:8f:97:31:
e3:a4:0a:32:50:58:f6:09:db:3b:e4:15:18:88:5a:
a8:76:b3:5f:9c:1a:2a:af:ac:47:f1:85:42:37:91:
1e:a3:19:7e:c6:f8:31:bc:54:75:c9:de:98:c6:33:
d1:af:27:36:4c:99:e4:97:27:31:af:e0:46:53:d6:
74:0a:cb:ee:82:e0:b5:6e:6d:6b:35:27:50:b0:cf:
f5:fb:77:75:cc:9c:23:c5:c1:50:51:b6:06:8a:6e:
b5:a9:a1:53:e0:e7:52:08:fe:9f:c2:87:0e:36:32:
aa:a9:5c:86:30:4a:6e:1e:df:22:3d:d6:0c:47:e8:
8a:13:72:fc:15:65:40:6c:b8:ea:cf:06:6e:12:48:
71:8e:24:1e:06:96:f9:0c:72:1b:92:f1:f0:32:a3:
29:63:33:41:95:a6:dd:93:25:fc:1d:05:16:88:f5:
73:79:fe:59:92:59:0c:63:b6:23:ec:e2:17:2e:08:
f7:34:85:5d:d1:de:ee:d6:06:25:23:ec:2f:99:1a:
e0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:33:86:82:BC:8B:2E:1B:A6:A1:23:EA:5B:8A:DC:35:0B:5C:98:8E
X509v3 Authority Key Identifier:
keyid:B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:04:c7:da:05:23:b1:fa:90:aa:99:5e:91:0d:ab:c9:42:56:
62:c3:fc:5d:75:7c:66:b3:4c:d0:d7:e9:72:81:dd:dd:78:19:
66:4d:f1:94:9b:59:72:1f:94:fc:e7:5b:cc:27:19:65:de:b1:
bf:06:df:c1:89:d9:27:aa:fa:88:44:79:5f:5a:36:6e:38:7e:
ba:6f:1e:28:b2:28:0f:fb:d3:8b:3b:68:01:ff:0a:63:c7:ff:
6b:49:65:d6:6d:1c:38:fc:4c:c6:a7:7c:e4:f8:d9:bc:a4:bc:
46:6b:d8:a5:2c:ef:c8:63:6e:a5:d3:23:42:f5:42:c8:14:28:
51:16:d0:42:88:bb:0b:e4:a8:4f:c7:1b:bd:9b:28:b4:f7:42:
ee:3f:ae:4a:a7:51:72:f6:00:56:c6:e6:0b:fc:b2:24:c9:b3:
53:7c:44:ee:13:28:0a:73:fd:99:90:92:81:22:07:fb:ac:d8:
b1:59:87:4e:fa:0e:14:da:55:89:78:4d:f0:61:14:ad:66:c0:
c4:76:30:39:e5:e5:33:06:11:5d:97:e0:54:4b:34:90:c3:3c:
f1:a1:b2:8c:77:e8:db:86:c6:3d:f1:5c:b5:ff:a4:90:64:3e:
18:9c:ac:ae:ad:6c:7c:68:49:f4:12:e3:12:c2:68:eb:97:8c:
3e:f5:db:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RYoDxFF9jvCVQaEupVqIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZjMzZjZmZDI5YmFmMDNjYzRkNDg1YWY1ZjZiNzBkYTZi
MDA5OWYwHhcNMjUwNjI4MTYwMTE3WhcNMjUwNjI5MTYwMTE3WjAzMTEwLwYDVQQD
EygxMzMzODY4MmJjOGIyZTFiYTZhMTIzZWE1YjhhZGMzNTBiNWM5ODhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcT9MfkqYALJxNiGkYUSoeByzVpo
/CAUtb7zc0YNwvH1/AVPCm38doEbcOD/cUY/swBTrNU+yruPlzHjpAoyUFj2Cds7
5BUYiFqodrNfnBoqr6xH8YVCN5Eeoxl+xvgxvFR1yd6YxjPRryc2TJnklycxr+BG
U9Z0CsvuguC1bm1rNSdQsM/1+3d1zJwjxcFQUbYGim61qaFT4OdSCP6fwocONjKq
qVyGMEpuHt8iPdYMR+iKE3L8FWVAbLjqzwZuEkhxjiQeBpb5DHIbkvHwMqMpYzNB
labdkyX8HQUWiPVzef5ZklkMY7Yj7OIXLgj3NIVd0d7u1gYlI+wvmRrgWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMzhoK8iy4bpqEj6luK3DULXJiOMB8GA1UdIwQY
MBaAFLTzP2/Sm68DzE1IWvX2tw2msAmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85MGE1Y2YtZTQ4NC00YmIyLWEyODUt
NmE0OWI1YTMxMjk0LzEvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC85MGE1Y2YtZTQ4NC00YmIyLWEyODUtNmE0OWI1YTMxMjk0
LzEvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgTH2gUj
sfqQqplekQ2ryUJWYsP8XXV8ZrNM0NfpcoHd3XgZZk3xlJtZch+U/OdbzCcZZd6x
vwbfwYnZJ6r6iER5X1o2bjh+um8eKLIoD/vTiztoAf8KY8f/a0ll1m0cOPxMxqd8
5PjZvKS8RmvYpSzvyGNupdMjQvVCyBQoURbQQoi7C+SoT8cbvZsotPdC7j+uSqdR
cvYAVsbmC/yyJMmzU3xE7hMoCnP9mZCSgSIH+6zYsVmHTvoOFNpViXhN8GEUrWbA
xHYwOeXlMwYRXZfgVEs0kMM88aGyjHfo24bGPfFctf+kkGQ+GJysrq1sfGhJ9BLj
EsJo65eMPvXbZw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:57 2025 by rpki-client