Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
File: t4OAtB43tXV9PU4u7N8G2TCnC50.mft (raw, json)
Hash identifier: L3Blz9k8WsLB97LowPpPfyBZqMrGizxMrP/HyYyVIp0=
Subject key identifier: F2:38:89:3E:52:A8:06:42:3A:EC:6D:6A:0E:92:1F:AC:FE:FC:A4:12
Authority key identifier: B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
Certificate issuer: /CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Certificate serial: 01984A417D8D9922E58684D6119F854C43C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
Manifest number: 1608
Signing time: Sun 27 Jul 2025 05:01:02 +0000
Manifest this update: Sun 27 Jul 2025 05:01:02 +0000
Manifest next update: Mon 28 Jul 2025 05:01:02 +0000
Files and hashes: 1: FFNfocwWW0AfwhIbyh5sOWKp-YQ.roa (hash: +IQV10jr/ct4eRg1uckgNvPR/qQ6+ipg5/BVGvg6xW8=)
2: t4OAtB43tXV9PU4u7N8G2TCnC50.crl (hash: eUSOyIlvkBJ1zjY0flltqlqw28DeoGIUsYTTRoNWfh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:7d:8d:99:22:e5:86:84:d6:11:9f:85:4c:43:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Validity
Not Before: Jul 27 05:01:02 2025 GMT
Not After : Jul 28 05:01:02 2025 GMT
Subject: CN=f238893e52a806423aec6d6a0e921facfefca412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:02:4c:cc:b4:f3:3a:ac:a9:ee:cf:ed:dc:58:
91:28:5f:2c:5e:5c:9b:55:39:47:c8:cb:b9:c7:5c:
55:16:91:3c:34:af:5d:0b:05:48:76:c8:40:a6:dd:
e8:f4:fb:4d:08:b7:a9:ce:4f:ed:ce:3e:77:49:54:
71:84:f8:53:81:4a:1d:63:32:0e:9c:76:b3:22:b9:
e5:9f:dc:44:bb:07:70:0b:cf:8e:f3:22:8b:07:e2:
6f:c4:4d:b9:02:4c:6d:99:12:ca:57:f0:07:c8:be:
4f:ca:b2:3f:d5:26:f4:c9:02:d5:6b:da:47:c9:33:
8f:aa:80:05:2e:8d:54:3d:6f:bf:9b:de:31:4f:a8:
9a:de:09:e5:d1:d5:1e:c8:f4:40:c9:b5:3a:c3:d3:
9f:5a:04:01:88:e8:cd:7b:d4:3f:cf:db:eb:13:18:
1a:ce:22:47:13:8e:83:d5:0d:45:2d:f0:60:41:99:
3d:77:74:97:a2:f0:e9:16:bf:e2:6c:d2:08:55:c3:
78:06:57:d3:43:08:ec:67:82:de:bc:50:44:d6:92:
a4:04:67:c0:7e:c4:be:8e:e9:d2:88:f3:8a:2d:e7:
39:47:41:51:39:39:7d:2c:28:76:b1:30:eb:54:49:
8f:f6:ce:5e:4c:86:de:d6:ec:ce:37:69:77:d6:37:
3d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:38:89:3E:52:A8:06:42:3A:EC:6D:6A:0E:92:1F:AC:FE:FC:A4:12
X509v3 Authority Key Identifier:
keyid:B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:71:ba:10:7f:fe:87:c1:22:3d:b7:63:6a:9e:c8:ba:40:cc:
25:f5:29:30:5e:85:37:ec:83:b5:ff:c7:d4:1b:cc:9c:0c:33:
82:a8:cc:d8:be:6c:78:15:42:10:72:8c:fe:1c:84:ac:68:29:
d7:39:1d:f4:ac:9e:83:78:f8:fe:8c:15:34:df:43:2e:ce:a5:
94:7d:9b:6b:00:70:91:c3:2b:86:77:d6:d0:c3:e8:9b:85:f0:
c6:2e:e1:b2:a3:04:09:bf:42:d2:51:3d:53:b4:92:99:cc:db:
fa:9f:6f:f4:66:c4:93:2b:98:19:ce:44:e4:ab:e8:b1:1b:a6:
4c:07:e8:42:6b:6c:9f:78:41:ff:2b:30:72:08:59:1d:a5:bc:
c1:d4:e6:bd:17:68:3d:53:a2:b3:59:6c:36:64:8f:1c:a8:5c:
20:5d:f6:c0:a2:f8:48:5c:f3:d3:65:b5:a9:37:0a:85:da:b0:
c4:9d:37:fb:a6:20:15:ab:cb:43:03:74:3a:96:39:5d:09:95:
61:f9:2c:be:c3:21:5c:db:14:59:88:c9:7c:c0:a9:b7:ca:bf:
1d:dc:a1:cd:d0:ee:75:c2:29:d9:da:cd:cf:41:e0:e9:e5:3a:
ae:d4:7c:14:95:d2:54:73:38:21:aa:f1:4f:0f:a2:0b:3e:6f:
32:ce:90:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQX2NmSLlhoTWEZ+FTEPEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODM4MGI0MWUzN2I1NzU3ZDNkNGUyZWVjZGYwNmQ5MzBh
NzBiOWQwHhcNMjUwNzI3MDUwMTAyWhcNMjUwNzI4MDUwMTAyWjAzMTEwLwYDVQQD
EyhmMjM4ODkzZTUyYTgwNjQyM2FlYzZkNmEwZTkyMWZhY2ZlZmNhNDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gJMzLTzOqyp7s/t3FiRKF8sXlyb
VTlHyMu5x1xVFpE8NK9dCwVIdshApt3o9PtNCLepzk/tzj53SVRxhPhTgUodYzIO
nHazIrnln9xEuwdwC8+O8yKLB+JvxE25AkxtmRLKV/AHyL5PyrI/1Sb0yQLVa9pH
yTOPqoAFLo1UPW+/m94xT6ia3gnl0dUeyPRAybU6w9OfWgQBiOjNe9Q/z9vrExga
ziJHE46D1Q1FLfBgQZk9d3SXovDpFr/ibNIIVcN4BlfTQwjsZ4LevFBE1pKkBGfA
fsS+junSiPOKLec5R0FROTl9LCh2sTDrVEmP9s5eTIbe1uzON2l31jc9xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPI4iT5SqAZCOuxtag6SH6z+/KQSMB8GA1UdIwQY
MBaAFLeDgLQeN7V1fT1OLuzfBtkwpwudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRPQXRCNDN0WFY5UFU0dTdOOEcyVENuQzUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yZTY2MTMtNDMzMi00YzE5LWFkZGYt
ZGVkYWY3OTM1NmNlLzEvdDRPQXRCNDN0WFY5UFU0dTdOOEcyVENuQzUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8yZTY2MTMtNDMzMi00YzE5LWFkZGYtZGVkYWY3OTM1NmNl
LzEvdDRPQXRCNDN0WFY5UFU0dTdOOEcyVENuQzUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnG6EH/+
h8EiPbdjap7IukDMJfUpMF6FN+yDtf/H1BvMnAwzgqjM2L5seBVCEHKM/hyErGgp
1zkd9Kyeg3j4/owVNN9DLs6llH2bawBwkcMrhnfW0MPom4Xwxi7hsqMECb9C0lE9
U7SSmczb+p9v9GbEkyuYGc5E5KvosRumTAfoQmtsn3hB/yswcghZHaW8wdTmvRdo
PVOis1lsNmSPHKhcIF32wKL4SFzz02W1qTcKhdqwxJ03+6YgFavLQwN0OpY5XQmV
YfksvsMhXNsUWYjJfMCpt8q/HdyhzdDudcIp2drNz0Hg6eU6rtR8FJXSVHM4Iarx
Tw+iCz5vMs6QMA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:22:49 2025 by rpki-client