Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft (raw, json)
Hash identifier: jC6GbiDXcqCSGgHNqou+C6oL3NV8UtfsviF8th2pXps=
Subject key identifier: 9A:8D:22:FB:87:F4:99:3A:A3:36:BA:EB:67:2E:98:A1:90:A1:69:2A
Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
Certificate issuer: /CN=b4dd6d658e14571e839f7813da31f2217422818e
Certificate serial: 019747E72BF2CFCA04B7A7CEB8E9AD530F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 01:00:21 +0000
Manifest this update: Sat 07 Jun 2025 01:00:21 +0000
Manifest next update: Sun 08 Jun 2025 01:00:21 +0000
Files and hashes: 1: i7TTR0PMX6DAq8x2EEX7tvYEy2w.roa (hash: iWmz0ZT2uDCkIA/K5JDubPnWXPlf7zxHizjmswntW2Y=)
2: tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl (hash: wCd3Ud9jow9eAnnLKq+9DMwjMGJci+Po3xZ859DbezQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:2b:f2:cf:ca:04:b7:a7:ce:b8:e9:ad:53:0f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e
Validity
Not Before: Jun 7 01:00:21 2025 GMT
Not After : Jun 8 01:00:21 2025 GMT
Subject: CN=9a8d22fb87f4993aa336baeb672e98a190a1692a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:29:c9:5e:ac:25:7c:7d:5d:b0:ac:8a:fa:25:
07:0c:0f:f9:e3:af:84:20:98:69:1f:9f:12:f2:24:
5e:2a:01:d3:7d:81:e6:9c:bf:07:20:9e:a6:2e:55:
0a:47:d5:bf:da:9b:62:1f:2f:47:55:99:aa:cf:77:
06:dd:d4:75:ec:b8:28:26:fa:c1:ae:ad:f8:25:03:
14:ec:61:13:be:f7:be:7b:f1:46:64:43:c5:1f:2d:
64:e7:fe:f7:e4:71:37:d1:6f:2d:13:57:4a:76:9d:
96:8b:9e:38:63:08:f2:fb:e8:2f:1d:2c:1b:55:d6:
f6:a8:a4:52:2d:2b:58:5a:f3:9d:77:3b:e1:ec:a8:
02:d9:c4:71:27:4d:a8:78:cd:4d:37:ff:6d:58:77:
18:da:51:6a:ac:9e:eb:cd:2c:1e:7f:f7:cd:67:cd:
79:09:bb:10:c2:43:31:ee:2c:72:4b:6f:c4:60:cc:
45:60:e9:79:b6:05:7c:8f:89:f2:dc:a7:82:c0:8f:
72:3b:e2:40:b4:cf:2d:db:c9:81:f6:fa:8d:15:33:
b2:1f:19:3d:5b:57:41:3d:80:1f:9e:31:02:d5:60:
c1:cf:cf:5c:22:a4:41:53:c3:1f:10:aa:0a:b2:20:
62:b2:d9:c3:b3:c7:70:b2:e3:5f:82:79:b1:50:49:
2d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8D:22:FB:87:F4:99:3A:A3:36:BA:EB:67:2E:98:A1:90:A1:69:2A
X509v3 Authority Key Identifier:
keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d6:b9:b3:e6:9f:f0:45:1a:20:77:06:b3:88:a8:4f:cf:ba:
e2:b8:12:2e:f8:bb:15:84:6f:61:63:a7:69:9a:f3:24:7b:09:
f9:64:57:9d:5e:fc:51:7d:30:7a:c1:65:5a:89:a3:14:d9:c8:
2d:05:1e:48:6c:19:50:1e:20:05:87:dd:da:9e:bc:a8:8f:b4:
ff:4c:f2:0b:ba:a4:0a:0a:e2:41:e1:9b:b5:04:33:94:31:ef:
44:a3:bd:bc:df:fd:c8:0a:31:07:7e:17:f0:2a:f2:3f:c3:4f:
ee:e5:15:4d:56:87:16:6f:e7:bd:cc:75:14:1f:78:70:8b:fc:
43:8f:11:b7:0b:99:66:85:cb:26:4c:06:f2:e6:3f:0a:d6:c2:
46:16:62:22:dc:6f:ef:40:7e:5c:f2:24:bd:b9:27:98:25:bd:
a5:27:c6:53:1a:d3:d2:58:da:b3:c0:a3:0b:85:d2:29:cb:f7:
ea:bd:85:e2:c9:07:0c:bb:0f:b7:9a:01:06:e9:46:20:c3:fd:
a1:03:2d:1a:9c:6f:49:8e:d1:13:9f:3d:11:e9:3d:62:b9:19:
4d:05:90:fd:47:4b:6f:9b:44:d0:3a:c8:4b:44:b3:c3:94:7b:
8d:a1:fe:4f:9c:31:c6:e7:48:58:91:e6:7b:15:b9:e5:a6:f4:
08:c0:5c:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH5yvyz8oEt6fOuOmtUw8PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZGQ2ZDY1OGUxNDU3MWU4MzlmNzgxM2RhMzFmMjIxNzQy
MjgxOGUwHhcNMjUwNjA3MDEwMDIxWhcNMjUwNjA4MDEwMDIxWjAzMTEwLwYDVQQD
Eyg5YThkMjJmYjg3ZjQ5OTNhYTMzNmJhZWI2NzJlOThhMTkwYTE2OTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApinJXqwlfH1dsKyK+iUHDA/546+E
IJhpH58S8iReKgHTfYHmnL8HIJ6mLlUKR9W/2ptiHy9HVZmqz3cG3dR17LgoJvrB
rq34JQMU7GETvve+e/FGZEPFHy1k5/735HE30W8tE1dKdp2Wi544Ywjy++gvHSwb
Vdb2qKRSLStYWvOddzvh7KgC2cRxJ02oeM1NN/9tWHcY2lFqrJ7rzSwef/fNZ815
CbsQwkMx7ixyS2/EYMxFYOl5tgV8j4ny3KeCwI9yO+JAtM8t28mB9vqNFTOyHxk9
W1dBPYAfnjEC1WDBz89cIqRBU8MfEKoKsiBistnDs8dwsuNfgnmxUEkt7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqNIvuH9Jk6oza662cumKGQoWkqMB8GA1UdIwQY
MBaAFLTdbWWOFFceg594E9ox8iF0IoGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUt
ODFkMjE0ZWRmMjk4LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUtODFkMjE0ZWRmMjk4
LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIda5s+af
8EUaIHcGs4ioT8+64rgSLvi7FYRvYWOnaZrzJHsJ+WRXnV78UX0wesFlWomjFNnI
LQUeSGwZUB4gBYfd2p68qI+0/0zyC7qkCgriQeGbtQQzlDHvRKO9vN/9yAoxB34X
8CryP8NP7uUVTVaHFm/nvcx1FB94cIv8Q48RtwuZZoXLJkwG8uY/CtbCRhZiItxv
70B+XPIkvbknmCW9pSfGUxrT0ljas8CjC4XSKcv36r2F4skHDLsPt5oBBulGIMP9
oQMtGpxvSY7RE589Eek9YrkZTQWQ/UdLb5tE0DrIS0Szw5R7jaH+T5wxxudIWJHm
exW55ab0CMBcrg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:51:43 2025 by rpki-client