Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
File: ts9OV8vBXOTs70T1DluFkvvu7qA.mft (raw, json)
Hash identifier: iAG8MWe0IWRw2GXK/AVofmA6t4zlbC26wYtwhQtyTN4=
Subject key identifier: 6E:53:8F:1C:78:84:8E:E4:6A:4C:C8:F8:F6:5C:A7:95:F3:0E:92:EB
Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
Certificate issuer: /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Certificate serial: 01974C9FF959BED250ADBA126E0F852FC509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
Manifest number: 0D37
Signing time: Sat 07 Jun 2025 23:00:41 +0000
Manifest this update: Sat 07 Jun 2025 23:00:41 +0000
Manifest next update: Sun 08 Jun 2025 23:00:41 +0000
Files and hashes: 1: 2bbjZnItd_WfSUsxeSim-v-qB-g.roa (hash: U3T6Blvywe2N+XOmN4d0Sfw2WTnfp19mqzXdb2WW/M8=)
2: hs7awmW5u-N7i3rafiPiNllc2Bo.roa (hash: zx9QQVE6GtEBw9ZKQW610wAAxlFBO5GbObUYOTrSVsA=)
3: ts9OV8vBXOTs70T1DluFkvvu7qA.crl (hash: hkS37W/AnLJoOa69FUzuKh5o5wUuic/F8ZU3BuWrP68=)
4: ucQNwDwE2vdn8aT5NeBfcaMP4xI.roa (hash: uOUVs3Rq9AKXwjmauSrDsTRXthAY0OABda9jaa1tn6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:f9:59:be:d2:50:ad:ba:12:6e:0f:85:2f:c5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Validity
Not Before: Jun 7 23:00:41 2025 GMT
Not After : Jun 8 23:00:41 2025 GMT
Subject: CN=6e538f1c78848ee46a4cc8f8f65ca795f30e92eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cf:8d:7a:22:34:14:0f:f9:ee:01:f1:59:ba:
c6:e7:af:af:80:4e:44:f6:1b:70:b2:44:94:bf:d0:
9f:e0:b0:33:68:ea:37:d4:12:93:76:04:88:1b:e8:
a7:33:98:47:5a:d9:c8:98:f8:bb:5b:43:e1:b2:c1:
3f:8a:72:8b:11:02:d9:59:f6:91:49:84:e3:5c:26:
75:52:bd:15:fc:0c:f2:ab:fd:e5:4a:10:9b:03:4d:
24:8e:aa:4f:55:db:93:74:8a:a7:99:f1:3d:35:89:
e3:0c:c8:43:2a:84:1e:b4:78:4c:75:05:d6:67:63:
aa:77:67:c1:0d:a3:8b:42:ab:a6:c7:ef:b8:38:e4:
84:02:d7:da:13:0e:a9:16:eb:d6:ba:d3:7e:3b:5c:
4e:c9:81:ac:74:81:56:40:3c:69:29:9b:41:c4:01:
b8:35:7c:28:a9:22:be:94:f6:2a:83:de:4b:6b:b2:
cb:bc:db:d6:3e:ff:c7:53:22:fb:e1:d9:d4:11:a4:
cb:b4:9f:b3:8a:86:34:68:92:b7:23:00:e5:f4:9e:
85:49:4f:d1:f9:79:58:f5:ff:70:f5:54:74:50:e6:
1b:9e:2c:52:cb:da:ba:d0:d7:e2:f4:ed:84:46:88:
f0:48:e6:60:8d:2c:c0:02:de:5f:e0:d1:cf:c6:3b:
b3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:53:8F:1C:78:84:8E:E4:6A:4C:C8:F8:F6:5C:A7:95:F3:0E:92:EB
X509v3 Authority Key Identifier:
keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c0:79:99:bd:ed:fe:79:e2:c6:eb:6e:19:94:7d:98:de:ca:
1c:02:66:a2:e4:c6:d6:89:75:70:3c:50:50:ba:ba:1f:21:04:
73:6c:58:71:da:01:fa:f3:78:79:4c:5a:1b:e6:3b:56:e2:82:
fd:ec:cd:d9:3f:de:c9:94:93:9a:1c:38:70:c3:54:5a:a8:84:
8c:67:d2:9e:03:bb:bd:27:69:8d:79:f9:b1:a6:dd:b8:08:2a:
4f:cc:48:c8:b4:8d:f1:6b:27:09:b9:99:ed:2a:8e:ec:ae:dc:
c0:45:a7:76:eb:da:88:bc:66:65:4e:5e:77:0d:df:91:f6:56:
41:d9:9f:6f:3c:5e:f1:da:c6:ab:39:4b:c0:e4:78:70:85:91:
53:d3:10:96:26:76:fd:b0:4d:4d:1b:d1:f8:a9:55:4a:66:5d:
22:0a:11:a9:39:77:23:da:7b:ed:cd:e3:42:83:93:40:92:a3:
38:7c:12:e1:38:c2:14:61:82:6b:2b:ce:07:bd:ac:23:86:29:
60:c8:f1:b9:31:7d:f8:dd:d6:45:10:63:9d:66:2a:14:ab:b7:
62:de:dc:cf:0d:cb:d9:bb:cb:c3:02:c9:31:f2:81:2d:58:82:
0c:aa:8c:06:88:5f:07:c3:37:d7:84:ba:af:d9:a0:9c:ee:fd:
bb:a7:e7:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMn/lZvtJQrboSbg+FL8UJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2Y2Y0ZTU3Y2JjMTVjZTRlY2VmNDRmNTBlNWI4NTkyZmJl
ZWVlYTAwHhcNMjUwNjA3MjMwMDQxWhcNMjUwNjA4MjMwMDQxWjAzMTEwLwYDVQQD
Eyg2ZTUzOGYxYzc4ODQ4ZWU0NmE0Y2M4ZjhmNjVjYTc5NWYzMGU5MmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8+NeiI0FA/57gHxWbrG56+vgE5E
9htwskSUv9Cf4LAzaOo31BKTdgSIG+inM5hHWtnImPi7W0PhssE/inKLEQLZWfaR
SYTjXCZ1Ur0V/Azyq/3lShCbA00kjqpPVduTdIqnmfE9NYnjDMhDKoQetHhMdQXW
Z2Oqd2fBDaOLQqumx++4OOSEAtfaEw6pFuvWutN+O1xOyYGsdIFWQDxpKZtBxAG4
NXwoqSK+lPYqg95La7LLvNvWPv/HUyL74dnUEaTLtJ+zioY0aJK3IwDl9J6FSU/R
+XlY9f9w9VR0UOYbnixSy9q60Nfi9O2ERojwSOZgjSzAAt5f4NHPxjuznQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5Tjxx4hI7kakzI+PZcp5XzDpLrMB8GA1UdIwQY
MBaAFLbPTlfLwVzk7O9E9Q5bhZL77u6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80ZTg5N2YtZTQzNS00NzE1LWEzYzUt
ODViZTQyNWQzMTk5LzEvdHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy80ZTg5N2YtZTQzNS00NzE1LWEzYzUtODViZTQyNWQzMTk5
LzEvdHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcB5mb3t
/nnixutuGZR9mN7KHAJmouTG1ol1cDxQULq6HyEEc2xYcdoB+vN4eUxaG+Y7VuKC
/ezN2T/eyZSTmhw4cMNUWqiEjGfSngO7vSdpjXn5sabduAgqT8xIyLSN8WsnCbmZ
7SqO7K7cwEWnduvaiLxmZU5edw3fkfZWQdmfbzxe8drGqzlLwOR4cIWRU9MQliZ2
/bBNTRvR+KlVSmZdIgoRqTl3I9p77c3jQoOTQJKjOHwS4TjCFGGCayvOB72sI4Yp
YMjxuTF9+N3WRRBjnWYqFKu3Yt7czw3L2bvLwwLJMfKBLViCDKqMBohfB8M314S6
r9mgnO79u6fn9w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:25:15 2025 by rpki-client