Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
File: Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft (raw, json)
Hash identifier: VJ0yJDm3yZdY3rhU/hMzJwVKuUQbQU5PMUknUZssa6w=
Subject key identifier: C2:8E:28:DF:92:92:F4:20:3D:9F:17:D0:12:6D:73:F4:CE:24:5F:F0
Authority key identifier: 4D:BD:0B:13:5A:7D:FD:6B:6A:A1:B1:84:9E:B1:63:40:2D:E8:E1:B1
Certificate issuer: /CN=4dbd0b135a7dfd6b6aa1b1849eb163402de8e1b1
Certificate serial: 0197470BC5C92FBED7B39AB72B7A4FBC90B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
Manifest number: 1258
Signing time: Fri 06 Jun 2025 21:00:43 +0000
Manifest this update: Fri 06 Jun 2025 21:00:43 +0000
Manifest next update: Sat 07 Jun 2025 21:00:43 +0000
Files and hashes: 1: Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl (hash: YoAzemEJTHGZR0MNveOJD5+rTcFEsok9vR1mDCyO1Q4=)
2: fQVuwKT50hbkCaxxsedkAc4v4DM.roa (hash: 7+f7vmuufbnUl5kubA16fvBKejBnvUX170UQ3Kwi8yM=)
3: yI_RXXqJUefuh1flF2oTn9wC4DI.roa (hash: j2h6Y5w4TEDmVG2v4OM8fOFhUfhpchqy4oEvpRV83t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:c5:c9:2f:be:d7:b3:9a:b7:2b:7a:4f:bc:90:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbd0b135a7dfd6b6aa1b1849eb163402de8e1b1
Validity
Not Before: Jun 6 21:00:43 2025 GMT
Not After : Jun 7 21:00:43 2025 GMT
Subject: CN=c28e28df9292f4203d9f17d0126d73f4ce245ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:06:44:3a:e5:8d:bc:40:13:53:e4:6c:db:
6d:80:af:2f:fb:69:26:1d:b4:e5:7f:85:ac:ae:a9:
a4:9d:19:53:b0:6a:4c:d2:42:a3:4b:a7:33:e7:6c:
c6:e7:b7:40:9d:b0:92:d8:40:b0:40:d3:65:f6:27:
2d:71:0b:1f:9b:23:93:d0:cb:ce:e5:9a:0e:96:12:
be:8a:17:66:07:b9:ec:dc:c6:5a:18:16:cd:e6:81:
bb:fa:33:51:2d:c0:58:ef:99:5a:c6:6a:c5:aa:df:
8c:f8:78:b3:c1:5f:f7:f1:4e:49:77:e3:62:15:54:
8e:5c:8b:95:a7:26:20:f5:7b:9a:bb:ed:d8:24:83:
54:a5:15:1a:2a:41:27:be:a7:a9:f8:ad:eb:40:2b:
31:c4:c9:d4:af:01:a4:10:fc:1e:03:3a:a5:8b:f7:
1a:71:0d:4c:1f:30:3e:04:52:fc:5b:36:e9:9c:8f:
f1:ba:f6:bf:f9:72:a5:a2:a8:72:10:b2:aa:8f:4d:
7c:f3:d1:c2:9b:b1:34:ea:bb:5f:26:26:c5:23:17:
70:50:79:4c:5b:4c:2f:78:65:4c:7b:18:ed:5b:ea:
da:8e:b2:64:62:ea:83:57:80:34:e6:e7:9c:28:53:
37:1f:78:52:d6:38:03:a1:3b:b1:bb:ee:bc:8e:8f:
50:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8E:28:DF:92:92:F4:20:3D:9F:17:D0:12:6D:73:F4:CE:24:5F:F0
X509v3 Authority Key Identifier:
keyid:4D:BD:0B:13:5A:7D:FD:6B:6A:A1:B1:84:9E:B1:63:40:2D:E8:E1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b4:4f:1e:36:7b:32:ba:d5:16:f7:ab:e3:67:53:19:4f:a0:
91:d1:8e:66:e4:1f:cf:f1:66:1f:34:82:24:57:f0:f3:f8:0c:
20:12:ab:65:74:11:b5:cf:01:55:a9:b8:71:9d:3d:96:2c:af:
25:2f:bb:bd:b7:fe:a8:cd:60:b9:2d:d3:c1:7e:22:15:c5:48:
f2:ae:40:69:f6:a3:2d:4b:4f:41:a6:78:13:d4:e6:71:17:9a:
7c:5c:b2:4a:d9:43:a3:c5:88:88:de:a2:64:1f:6d:2e:01:84:
4f:39:db:ab:68:2d:57:ac:fd:56:34:c9:9b:f2:bf:30:a7:3f:
ed:f9:de:17:8a:44:45:0a:72:ae:a4:3e:39:a1:92:ae:70:6c:
77:af:b7:9d:d6:33:2c:cb:c4:7e:7c:96:44:c9:aa:fc:b9:10:
80:25:94:40:f2:82:9c:b3:c8:3b:d2:c8:9b:ca:66:75:0b:36:
8f:8b:ca:e6:9b:a8:da:16:10:49:2e:fc:ab:bf:98:41:9d:6d:
09:6a:b3:cb:d0:3f:b0:c2:b1:a7:f4:a6:0a:2d:20:f5:05:1a:
0e:94:49:81:4e:8c:70:d6:e6:59:fe:da:08:0d:b2:3c:54:1f:
5b:db:86:ab:c4:66:d5:cf:24:4f:b3:1d:ba:fc:bd:41:ef:8a:
b8:b0:43:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHC8XJL77Xs5q3K3pPvJC3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYmQwYjEzNWE3ZGZkNmI2YWExYjE4NDllYjE2MzQwMmRl
OGUxYjEwHhcNMjUwNjA2MjEwMDQzWhcNMjUwNjA3MjEwMDQzWjAzMTEwLwYDVQQD
EyhjMjhlMjhkZjkyOTJmNDIwM2Q5ZjE3ZDAxMjZkNzNmNGNlMjQ1ZmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteQGRDrljbxAE1PkbNttgK8v+2km
HbTlf4WsrqmknRlTsGpM0kKjS6cz52zG57dAnbCS2ECwQNNl9ictcQsfmyOT0MvO
5ZoOlhK+ihdmB7ns3MZaGBbN5oG7+jNRLcBY75laxmrFqt+M+HizwV/38U5Jd+Ni
FVSOXIuVpyYg9Xuau+3YJINUpRUaKkEnvqep+K3rQCsxxMnUrwGkEPweAzqli/ca
cQ1MHzA+BFL8WzbpnI/xuva/+XKloqhyELKqj01889HCm7E06rtfJibFIxdwUHlM
W0wveGVMexjtW+rajrJkYuqDV4A05uecKFM3H3hS1jgDoTuxu+68jo9QfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKOKN+SkvQgPZ8X0BJtc/TOJF/wMB8GA1UdIwQY
MBaAFE29CxNaff1raqGxhJ6xY0At6OGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGIwTEUxcDlfV3Rxb2JHRW5yRmpRQzNvNGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8yNDdlZTItMjM2NS00NzY4LTk3N2Yt
ZmVmYTFhYmFlZGNmLzEvVGIwTEUxcDlfV3Rxb2JHRW5yRmpRQzNvNGJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8yNDdlZTItMjM2NS00NzY4LTk3N2YtZmVmYTFhYmFlZGNm
LzEvVGIwTEUxcDlfV3Rxb2JHRW5yRmpRQzNvNGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbRPHjZ7
MrrVFver42dTGU+gkdGOZuQfz/FmHzSCJFfw8/gMIBKrZXQRtc8BVam4cZ09liyv
JS+7vbf+qM1guS3TwX4iFcVI8q5AafajLUtPQaZ4E9TmcReafFyyStlDo8WIiN6i
ZB9tLgGETznbq2gtV6z9VjTJm/K/MKc/7fneF4pERQpyrqQ+OaGSrnBsd6+3ndYz
LMvEfnyWRMmq/LkQgCWUQPKCnLPIO9LIm8pmdQs2j4vK5puo2hYQSS78q7+YQZ1t
CWqzy9A/sMKxp/SmCi0g9QUaDpRJgU6McNbmWf7aCA2yPFQfW9uGq8Rm1c8kT7Md
uvy9Qe+KuLBDKQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:53 2025 by rpki-client