Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
File: Te9bj_uvfVavXTny-UyUbXL3cPM.mft (raw, json)
Hash identifier: QrzFsqu14fG9lqSFSVz16ZyEUbuE3Xfu7fz3AR1YQtE=
Subject key identifier: 3A:2D:C4:05:43:7D:5B:56:4B:53:B8:97:A6:A2:35:E9:1B:24:2A:5C
Authority key identifier: 4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
Certificate issuer: /CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Certificate serial: 0197499F56BDECBCBC4B6BEF4B90FB7F78A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
Manifest number: 11F4
Signing time: Sat 07 Jun 2025 09:01:08 +0000
Manifest this update: Sat 07 Jun 2025 09:01:08 +0000
Manifest next update: Sun 08 Jun 2025 09:01:08 +0000
Files and hashes: 1: C0P7fdeMbUq_SUkoUNzucceRO_o.roa (hash: IOK/1252dBZyKN3aeAn78pq+rzDgEYZNrHyoRwRIUaA=)
2: Te9bj_uvfVavXTny-UyUbXL3cPM.crl (hash: MjYDgb4ZKpDBylrIgKN/WbFrvicQyIi0L0pim/J7AwY=)
3: TgX6Ahejr8dFzzFT1WSFiJRu3Do.roa (hash: htkxM3uRu+UJ0kbLuQsKy6qnAb8htaldVtC4MZ15XTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:56:bd:ec:bc:bc:4b:6b:ef:4b:90:fb:7f:78:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Validity
Not Before: Jun 7 09:01:08 2025 GMT
Not After : Jun 8 09:01:08 2025 GMT
Subject: CN=3a2dc405437d5b564b53b897a6a235e91b242a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1d:9e:c1:cb:64:2a:36:33:3d:ab:e4:74:f8:
dd:c5:5d:2d:fd:84:f1:28:2f:7f:7f:25:cb:7e:f1:
e2:22:55:94:e0:28:be:ca:54:96:2e:0f:b2:df:6d:
73:3e:71:6f:62:0c:5c:d7:93:7a:6c:2b:ba:d7:bc:
c7:8f:cb:37:99:96:ea:6d:21:ff:59:18:99:30:0f:
b5:35:63:42:2a:1e:4a:f8:fc:8b:2f:12:b1:c5:9d:
4e:0e:fd:d0:96:da:bd:b5:51:5f:6f:e4:60:18:17:
aa:fc:99:0f:f5:15:2c:cd:70:23:4a:95:08:ff:d9:
d2:47:8e:14:cb:eb:7e:90:cc:fd:3d:94:8c:9e:aa:
0b:f9:fc:78:10:e2:40:4a:4a:6a:80:98:97:05:66:
4f:7e:1e:40:d0:4c:0a:d1:38:e1:6c:22:54:f9:1b:
76:9b:e2:82:a3:f3:89:e1:8c:8b:31:49:eb:01:d3:
87:75:1d:2a:55:ec:4a:18:28:47:d7:6b:e9:1e:5f:
e4:fa:ad:53:92:db:07:98:a1:55:f3:ad:41:06:df:
5a:36:cf:76:dd:0c:81:3a:a7:16:40:da:db:98:f5:
ea:92:fc:9c:36:e0:f1:f5:c8:1f:e5:05:fe:f3:f5:
4b:1b:74:93:01:6e:e1:0a:63:36:cf:be:ee:c8:9e:
cc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2D:C4:05:43:7D:5B:56:4B:53:B8:97:A6:A2:35:E9:1B:24:2A:5C
X509v3 Authority Key Identifier:
keyid:4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:57:5e:bc:f6:e5:e0:05:f9:86:d9:de:ad:ed:54:de:cc:2f:
06:27:62:24:45:22:4b:fd:d9:1a:ce:b0:22:90:96:12:d2:0e:
6c:64:e7:4a:1b:58:1a:f7:f7:a1:fd:96:6c:a5:61:0a:c8:64:
ee:8d:74:9b:0a:ea:3e:6d:6d:d6:eb:92:a0:cb:84:96:14:52:
7e:36:91:9d:6d:3f:46:19:ca:f9:f0:41:de:3b:66:e7:1a:37:
e3:23:2e:2e:da:f7:36:7a:67:36:a9:55:28:95:eb:ed:c6:05:
cf:cc:b7:2b:3e:06:54:a3:e0:1a:bf:b3:a1:c2:3d:4b:83:f7:
61:1e:8c:a9:99:cd:e1:d8:80:ed:97:d2:f0:81:d2:c5:ab:df:
18:a3:69:fa:fd:b4:f4:45:b4:f7:d8:08:dd:c0:98:c3:7c:4d:
43:9c:de:dd:d5:6c:4b:aa:d6:ba:89:d5:3d:2f:e6:04:f6:0c:
66:ca:d1:49:bd:94:99:db:a1:ca:4d:d8:2d:40:4f:f8:ac:4f:
37:5e:af:32:94:d4:06:09:36:e7:7b:d1:8b:8c:ec:10:0e:a7:
85:39:63:f6:32:b6:52:00:39:93:55:1c:91:15:39:d3:70:cd:
e2:6c:ab:1c:95:74:17:24:18:a7:87:b5:85:0a:2c:e2:65:d8:
c0:87:2f:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJn1a97Ly8S2vvS5D7f3ikMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZWY1YjhmZmJhZjdkNTZhZjVkMzlmMmY5NGM5NDZkNzJm
NzcwZjMwHhcNMjUwNjA3MDkwMTA4WhcNMjUwNjA4MDkwMTA4WjAzMTEwLwYDVQQD
EygzYTJkYzQwNTQzN2Q1YjU2NGI1M2I4OTdhNmEyMzVlOTFiMjQyYTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9R2ewctkKjYzPavkdPjdxV0t/YTx
KC9/fyXLfvHiIlWU4Ci+ylSWLg+y321zPnFvYgxc15N6bCu617zHj8s3mZbqbSH/
WRiZMA+1NWNCKh5K+PyLLxKxxZ1ODv3Qltq9tVFfb+RgGBeq/JkP9RUszXAjSpUI
/9nSR44Uy+t+kMz9PZSMnqoL+fx4EOJASkpqgJiXBWZPfh5A0EwK0TjhbCJU+Rt2
m+KCo/OJ4YyLMUnrAdOHdR0qVexKGChH12vpHl/k+q1TktsHmKFV861BBt9aNs92
3QyBOqcWQNrbmPXqkvycNuDx9cgf5QX+8/VLG3STAW7hCmM2z77uyJ7MeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDotxAVDfVtWS1O4l6aiNekbJCpcMB8GA1UdIwQY
MBaAFE3vW4/7r31Wr1058vlMlG1y93DzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGU5YmpfdXZmVmF2WFRueS1VeVViWEwzY1BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi80MDQyN2UtNzRmYS00YTY2LTgzN2Qt
YTUyM2JhY2RjMmJlLzEvVGU5YmpfdXZmVmF2WFRueS1VeVViWEwzY1BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi80MDQyN2UtNzRmYS00YTY2LTgzN2QtYTUyM2JhY2RjMmJl
LzEvVGU5YmpfdXZmVmF2WFRueS1VeVViWEwzY1BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVdevPbl
4AX5htnere1U3swvBidiJEUiS/3ZGs6wIpCWEtIObGTnShtYGvf3of2WbKVhCshk
7o10mwrqPm1t1uuSoMuElhRSfjaRnW0/RhnK+fBB3jtm5xo34yMuLtr3NnpnNqlV
KJXr7cYFz8y3Kz4GVKPgGr+zocI9S4P3YR6MqZnN4diA7ZfS8IHSxavfGKNp+v20
9EW099gI3cCYw3xNQ5ze3dVsS6rWuonVPS/mBPYMZsrRSb2Umduhyk3YLUBP+KxP
N16vMpTUBgk253vRi4zsEA6nhTlj9jK2UgA5k1UckRU503DN4myrHJV0FyQYp4e1
hQos4mXYwIcvdQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:10:23 2025 by rpki-client