Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
File: TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft (raw, json)
Hash identifier: qfHCfD48IonZmCc3OCzbTEBNkVXxpDMID3xcQYkDg7g=
Subject key identifier: F2:47:BD:EA:29:53:84:B8:B7:CA:5E:AD:B2:B2:4F:D6:8E:8B:F6:BC
Authority key identifier: 4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
Certificate issuer: /CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Certificate serial: 0197B70E70C03CBC942D7693780F2A1A8392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 15:01:06 +0000
Manifest this update: Sat 28 Jun 2025 15:01:06 +0000
Manifest next update: Sun 29 Jun 2025 15:01:06 +0000
Files and hashes: 1: TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl (hash: 6nxSreEakvH4otCmRVqU8ETCtOGmPYxq5fTuFvyUyMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:70:c0:3c:bc:94:2d:76:93:78:0f:2a:1a:83:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Validity
Not Before: Jun 28 15:01:06 2025 GMT
Not After : Jun 29 15:01:06 2025 GMT
Subject: CN=f247bdea295384b8b7ca5eadb2b24fd68e8bf6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:c7:a7:a9:43:e3:d4:22:d1:c6:70:22:26:
15:72:ae:a2:0a:7c:00:ce:e4:3d:22:d4:98:2a:96:
9f:ba:d5:b7:9d:59:8d:50:41:7d:ba:21:30:2c:97:
55:a3:83:93:84:c3:f3:0b:56:b8:ba:97:2c:e6:b1:
a8:54:f0:6c:1c:ca:40:c6:a6:66:07:a5:e8:40:da:
bf:f9:a4:77:f3:2f:f7:a1:f6:cf:f0:76:46:19:40:
55:18:0f:77:43:17:64:85:46:5e:fc:44:88:53:9a:
a2:64:fb:52:38:fe:d9:8a:36:94:5f:f9:6f:9f:44:
19:4d:ba:4e:45:1c:ab:fa:89:16:48:3a:71:72:9e:
cf:d1:2f:57:5c:54:83:fd:04:b5:9a:8f:c1:a4:75:
95:85:72:d3:44:a9:1b:81:9e:ff:2c:2b:fb:e5:97:
31:5a:c0:50:43:b8:48:41:25:b6:8c:00:64:64:37:
28:e4:ba:e5:4a:9b:f5:f0:20:db:76:ad:61:b6:54:
7c:3e:fd:a5:b3:5c:57:4b:ad:29:ae:ca:fa:b6:c1:
0e:10:c5:b4:f8:fb:21:93:fe:1b:fc:fd:80:d3:0f:
ef:40:a7:b6:4b:f9:74:ff:3e:96:47:e8:2c:77:ab:
ca:34:1f:17:a1:a2:e3:f3:d3:06:cf:64:a6:4e:76:
5b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:47:BD:EA:29:53:84:B8:B7:CA:5E:AD:B2:B2:4F:D6:8E:8B:F6:BC
X509v3 Authority Key Identifier:
keyid:4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f3:99:fb:03:28:a1:cc:08:3e:6b:b4:b5:51:96:c7:ed:c5:
97:33:9b:35:38:b0:7c:f1:df:1e:00:96:94:18:1b:63:01:ee:
af:5f:64:00:2c:49:03:7c:a3:07:56:e2:8e:27:7e:5d:fe:85:
03:9b:8e:f9:dd:52:ff:b8:21:63:6d:1b:63:e7:89:d4:47:19:
f0:fa:5e:01:52:65:2d:14:63:e4:1a:57:0b:87:1a:21:80:de:
f9:a8:b8:eb:c3:69:4b:08:af:cf:61:16:29:07:8f:e1:00:2f:
9e:6b:ef:89:2c:93:ec:05:53:97:1b:37:e8:37:3a:d8:9f:6f:
24:c5:1f:e5:4f:93:5f:35:ac:93:d1:70:0c:1a:01:a1:69:9e:
e3:06:96:9b:3b:c3:aa:25:50:b9:81:f2:5b:24:5e:86:32:91:
70:c0:2c:dd:12:ef:3e:39:ae:28:f8:ba:ed:42:42:54:4e:d9:
70:b2:f1:7b:a5:71:c0:1c:c5:5d:85:d7:fc:ac:11:da:98:e3:
96:5e:f6:08:cf:3e:15:65:e8:1d:f1:b9:81:27:e5:0c:7f:91:
5b:00:db:12:0d:9c:88:43:de:24:91:bd:a6:6f:5a:52:36:2f:
ef:38:2f:92:fb:62:44:bd:ec:75:f2:b8:f3:dc:65:88:3d:a9:
65:c0:bb:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DnDAPLyULXaTeA8qGoOSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNGNmY2U2MGM5YjBmMmQ0N2IzNjI4NjRkOGZlYmIyMjVi
YjUyNDQwHhcNMjUwNjI4MTUwMTA2WhcNMjUwNjI5MTUwMTA2WjAzMTEwLwYDVQQD
EyhmMjQ3YmRlYTI5NTM4NGI4YjdjYTVlYWRiMmIyNGZkNjhlOGJmNmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCzHp6lD49Qi0cZwIiYVcq6iCnwA
zuQ9ItSYKpafutW3nVmNUEF9uiEwLJdVo4OThMPzC1a4upcs5rGoVPBsHMpAxqZm
B6XoQNq/+aR38y/3ofbP8HZGGUBVGA93QxdkhUZe/ESIU5qiZPtSOP7ZijaUX/lv
n0QZTbpORRyr+okWSDpxcp7P0S9XXFSD/QS1mo/BpHWVhXLTRKkbgZ7/LCv75Zcx
WsBQQ7hIQSW2jABkZDco5LrlSpv18CDbdq1htlR8Pv2ls1xXS60prsr6tsEOEMW0
+Pshk/4b/P2A0w/vQKe2S/l0/z6WR+gsd6vKNB8XoaLj89MGz2SmTnZbswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJHveopU4S4t8perbKyT9aOi/a8MB8GA1UdIwQY
MBaAFExM/OYMmw8tR7Nihk2P67Ilu1JEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEV6ODVneWJEeTFIczJLR1RZX3JzaVc3VWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iZjhiMGUtYmVkYS00YTU2LWJhZjAt
ODJhZDExNjI2ZWVkLzEvVEV6ODVneWJEeTFIczJLR1RZX3JzaVc3VWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9iZjhiMGUtYmVkYS00YTU2LWJhZjAtODJhZDExNjI2ZWVk
LzEvVEV6ODVneWJEeTFIczJLR1RZX3JzaVc3VWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfOZ+wMo
ocwIPmu0tVGWx+3FlzObNTiwfPHfHgCWlBgbYwHur19kACxJA3yjB1bijid+Xf6F
A5uO+d1S/7ghY20bY+eJ1EcZ8PpeAVJlLRRj5BpXC4caIYDe+ai468NpSwivz2EW
KQeP4QAvnmvviSyT7AVTlxs36Dc62J9vJMUf5U+TXzWsk9FwDBoBoWme4waWmzvD
qiVQuYHyWyRehjKRcMAs3RLvPjmuKPi67UJCVE7ZcLLxe6VxwBzFXYXX/KwR2pjj
ll72CM8+FWXoHfG5gSflDH+RWwDbEg2ciEPeJJG9pm9aUjYv7zgvkvtiRL3sdfK4
89xliD2pZcC7hw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:16 2025 by rpki-client