Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
File: TmIrxVBoe20O9geIzq2w_IIKOB8.mft (raw, json)
Hash identifier: R66c4wecoOTLWws3c3z1y0LCvars34pNF2cWhU1IJmk=
Subject key identifier: 93:94:93:FF:9F:4E:D5:BC:88:1A:B3:90:CA:14:51:42:EF:90:DD:47
Authority key identifier: 4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F
Certificate issuer: /CN=4e622bc550687b6d0ef60788ceadb0fc820a381f
Certificate serial: 0197B77C6661412A7EC20D0823D31E4D048D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
Manifest number: 08FB
Signing time: Sat 28 Jun 2025 17:01:12 +0000
Manifest this update: Sat 28 Jun 2025 17:01:12 +0000
Manifest next update: Sun 29 Jun 2025 17:01:12 +0000
Files and hashes: 1: TmIrxVBoe20O9geIzq2w_IIKOB8.crl (hash: LvrWDB6iv5oqnoZNDgNzUxkszwnlnnpeAyDz96NnfZY=)
2: t4aglK9u5BBs2nCD-lvEdZGnyNE.roa (hash: poJOpqUdh9mquobj4xZre8xkqBntoXYzhaUhNLYqXsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:66:61:41:2a:7e:c2:0d:08:23:d3:1e:4d:04:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e622bc550687b6d0ef60788ceadb0fc820a381f
Validity
Not Before: Jun 28 17:01:12 2025 GMT
Not After : Jun 29 17:01:12 2025 GMT
Subject: CN=939493ff9f4ed5bc881ab390ca145142ef90dd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:c5:d9:e3:40:bc:79:91:79:6d:9f:b6:de:
a5:6e:49:b8:34:53:4e:72:a3:d8:37:d6:8b:a5:6f:
30:75:91:27:65:a1:c8:e7:32:de:18:bb:2e:ea:5c:
72:2b:0b:ff:10:b2:85:9b:ab:b7:e8:7f:9e:91:d0:
a1:45:33:5c:02:59:72:24:92:0a:46:9a:dc:49:fb:
ee:ed:b9:b8:6e:1c:34:c8:db:f9:1b:46:3f:ac:c5:
9f:f7:7c:a8:a2:ad:8d:78:b3:40:ef:b0:af:0d:7f:
75:1d:cd:56:3c:16:a0:f8:2b:dd:2b:1b:bc:15:33:
99:c1:d4:d3:c4:31:89:d5:de:3f:8c:a3:02:43:bd:
07:13:4d:97:09:37:3b:7d:30:b1:0b:7b:74:aa:0f:
b2:1f:5f:69:ec:40:79:a6:62:76:15:f1:b0:f7:c2:
32:bd:23:83:de:85:24:7d:c7:5d:c0:68:59:cf:13:
46:ff:8b:cc:56:e9:30:67:9e:35:25:ce:f6:47:b6:
04:2e:8c:fa:00:7a:6e:03:04:1a:48:9f:45:c9:f3:
2f:db:14:e7:43:e6:9d:8c:3b:82:7d:14:e1:48:73:
27:a6:d8:f7:23:cb:20:e4:11:48:16:10:ce:89:a3:
5b:0f:ea:62:8b:33:75:c7:d1:41:d7:f7:d9:9a:5f:
52:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:94:93:FF:9F:4E:D5:BC:88:1A:B3:90:CA:14:51:42:EF:90:DD:47
X509v3 Authority Key Identifier:
keyid:4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c5:f2:e0:a7:6a:5a:69:8c:50:10:25:14:27:be:5c:94:65:
e2:c3:ef:71:e8:c2:18:07:f5:90:30:ab:51:22:80:8e:9d:a5:
8d:34:4a:8a:b1:8b:25:10:4d:d5:4b:a7:84:c5:88:f8:1d:96:
56:24:aa:10:6b:10:e7:fb:b4:2a:b2:cb:34:55:15:0f:bf:10:
3b:31:0b:ac:e6:5d:1c:44:7d:04:04:dc:04:04:ea:6b:2e:3d:
c2:49:2b:e8:ff:dc:47:09:44:30:a6:8c:9b:cf:68:b1:8b:5c:
07:5b:9e:37:ac:89:1e:f6:dc:aa:61:9c:bc:4a:a5:3c:7f:f9:
eb:b0:a9:1d:71:21:ea:71:bd:61:5a:02:62:12:b0:69:dc:45:
a2:c4:5c:43:c6:2f:2e:88:97:00:b9:44:39:0a:f4:20:53:94:
f6:c7:12:b7:fc:26:1c:00:41:72:91:a9:d1:c3:a1:85:af:55:
5c:e2:25:8f:3e:ab:c1:99:89:50:ee:44:4e:e4:2e:35:06:11:
dc:d7:c0:c3:9b:ce:14:88:73:61:d1:22:1f:16:68:39:e5:4d:
ab:f5:31:78:ed:54:d2:3d:f3:ef:98:31:f0:f2:75:b2:a6:82:
21:55:fd:9a:1b:07:3f:7c:6d:f8:c3:f3:ac:22:07:84:42:02:
3d:bd:95:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fGZhQSp+wg0II9MeTQSNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNjIyYmM1NTA2ODdiNmQwZWY2MDc4OGNlYWRiMGZjODIw
YTM4MWYwHhcNMjUwNjI4MTcwMTEyWhcNMjUwNjI5MTcwMTEyWjAzMTEwLwYDVQQD
Eyg5Mzk0OTNmZjlmNGVkNWJjODgxYWIzOTBjYTE0NTE0MmVmOTBkZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulXF2eNAvHmReW2ftt6lbkm4NFNO
cqPYN9aLpW8wdZEnZaHI5zLeGLsu6lxyKwv/ELKFm6u36H+ekdChRTNcAllyJJIK
RprcSfvu7bm4bhw0yNv5G0Y/rMWf93yooq2NeLNA77CvDX91Hc1WPBag+CvdKxu8
FTOZwdTTxDGJ1d4/jKMCQ70HE02XCTc7fTCxC3t0qg+yH19p7EB5pmJ2FfGw98Iy
vSOD3oUkfcddwGhZzxNG/4vMVukwZ541Jc72R7YELoz6AHpuAwQaSJ9FyfMv2xTn
Q+adjDuCfRThSHMnptj3I8sg5BFIFhDOiaNbD+piizN1x9FB1/fZml9S/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOUk/+fTtW8iBqzkMoUUULvkN1HMB8GA1UdIwQY
MBaAFE5iK8VQaHttDvYHiM6tsPyCCjgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG1JcnhWQm9lMjBPOWdlSXpxMndfSUlLT0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jYTRjMzQtMjcwNC00ZjgyLWJmZjgt
YTdjY2QwMDk4NDc3LzEvVG1JcnhWQm9lMjBPOWdlSXpxMndfSUlLT0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9jYTRjMzQtMjcwNC00ZjgyLWJmZjgtYTdjY2QwMDk4NDc3
LzEvVG1JcnhWQm9lMjBPOWdlSXpxMndfSUlLT0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8Xy4Kdq
WmmMUBAlFCe+XJRl4sPvcejCGAf1kDCrUSKAjp2ljTRKirGLJRBN1UunhMWI+B2W
ViSqEGsQ5/u0KrLLNFUVD78QOzELrOZdHER9BATcBATqay49wkkr6P/cRwlEMKaM
m89osYtcB1ueN6yJHvbcqmGcvEqlPH/567CpHXEh6nG9YVoCYhKwadxFosRcQ8Yv
LoiXALlEOQr0IFOU9scSt/wmHABBcpGp0cOhha9VXOIljz6rwZmJUO5ETuQuNQYR
3NfAw5vOFIhzYdEiHxZoOeVNq/UxeO1U0j3z75gx8PJ1sqaCIVX9mhsHP3xt+MPz
rCIHhEICPb2V7w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:27 2025 by rpki-client