Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json)
Hash identifier: N6DgB1H9dVPWMp/z9whOI0WmnmbYQgIqDkQxhUHC/EE=
Subject key identifier: 5F:E4:86:10:13:A3:30:EB:EA:2C:E4:CA:78:7F:4E:4C:B3:C9:A5:67
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 0197439D303195B91E5BE0D6928EB4F65EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 05:01:04 +0000
Manifest this update: Fri 06 Jun 2025 05:01:04 +0000
Manifest next update: Sat 07 Jun 2025 05:01:04 +0000
Files and hashes: 1: pA8DlYtcvRNA-jdEe_3R7YRB6rk.roa (hash: XB3O2NdSBoC9ldQGDUty/6gqx/qt/ZpvhUOCQP6iI1c=)
2: rg67AeqtMD0wJ1IIvMd4YeaFTyI.roa (hash: po3w7Qi8ZlRiTSE2vYAsVYJZWCbY0SnfvN8Hrjn9vnc=)
3: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: C5x0/Vg0E8rZQFwMCapECkCK9rleuNYsOEcNhW1KE0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:9d:30:31:95:b9:1e:5b:e0:d6:92:8e:b4:f6:5e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: Jun 6 05:01:04 2025 GMT
Not After : Jun 7 05:01:04 2025 GMT
Subject: CN=5fe4861013a330ebea2ce4ca787f4e4cb3c9a567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a2:33:37:e8:e8:25:bf:e9:7c:67:f0:9e:ad:
45:38:c7:8f:85:4f:cc:87:88:ca:a7:d3:62:9b:c2:
e2:e3:98:ad:1d:0b:11:fa:45:29:c3:07:04:2e:1d:
1c:24:b9:2b:5a:a7:21:ef:48:05:ab:0f:38:da:31:
a9:7f:44:1f:92:b8:a2:7f:ed:e5:59:ce:bf:f2:2a:
f7:05:60:9a:af:26:5d:83:37:46:d4:64:77:75:c4:
a1:ed:28:b1:f9:fa:90:d7:88:8d:40:90:54:37:2e:
14:66:26:d4:a8:5f:51:e4:a6:bd:f8:52:66:80:df:
19:0a:4a:19:4c:48:9c:71:04:64:30:60:d9:4c:9c:
48:54:43:95:8a:52:e5:05:40:b6:ca:2a:1a:52:21:
c3:ad:7a:14:ca:f6:5e:7d:26:3c:26:c4:00:a7:6e:
c9:a7:df:24:60:ad:d1:b8:23:ce:97:cc:66:05:dd:
50:90:41:6b:9d:ba:71:61:21:ca:84:49:45:f4:04:
4f:d8:d0:0a:2e:37:06:f0:24:99:78:87:24:de:8e:
09:b7:da:e4:1e:40:83:43:20:2d:94:f1:31:e5:7b:
13:d2:fc:8f:1c:77:3c:a5:76:5c:6d:82:9e:9a:76:
14:80:7c:a3:9f:aa:52:c7:15:08:e6:f2:d7:fb:da:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E4:86:10:13:A3:30:EB:EA:2C:E4:CA:78:7F:4E:4C:B3:C9:A5:67
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:92:f3:10:4f:4f:a9:e6:d7:f8:8f:c6:a3:f5:c7:96:39:30:
36:bf:8a:74:f3:4f:9e:be:ca:a5:dd:cb:b5:a4:f0:7c:cf:7b:
7f:14:7f:36:9f:96:42:a6:96:10:78:44:0a:b6:d8:f4:0a:35:
9a:8e:0c:ad:52:6d:ab:ff:3f:56:01:a2:b6:29:4d:ae:aa:a6:
e2:fa:e6:07:41:b3:6e:a8:31:f4:57:90:1d:6b:2d:94:0f:48:
e7:ca:30:29:1e:96:6f:24:20:f7:19:2e:b7:5f:22:3a:be:69:
38:bd:6b:01:ce:e7:a1:a5:b3:1a:f5:ba:27:c0:23:6f:58:aa:
bd:fb:ce:e9:8c:5b:c3:4c:ba:91:79:50:58:6a:95:f6:14:71:
1d:c8:77:82:00:7c:b3:c8:40:cc:da:4c:c6:ef:d8:54:26:6c:
19:42:2e:f4:12:1b:9c:6a:b4:e3:cb:5f:5c:b2:d0:57:63:23:
dc:dc:aa:22:89:15:37:66:26:f5:ef:18:4f:e3:8c:00:a4:28:
96:73:a0:5e:d9:ef:04:be:73:d7:ce:40:af:5b:fc:44:59:14:
18:37:5c:6b:d0:4c:c8:f0:33:8e:8f:6b:3d:fc:89:e4:ce:78:
fb:ce:52:b7:73:5b:2d:f2:da:18:13:03:80:9f:64:a4:ac:cd:
41:a3:20:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdDnTAxlbkeW+DWko609l70MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OGY0MWFmZGM2MDk1NjhmYjIzMzhmZGIyMGIyZDBjNDIy
YjcyM2IwHhcNMjUwNjA2MDUwMTA0WhcNMjUwNjA3MDUwMTA0WjAzMTEwLwYDVQQD
Eyg1ZmU0ODYxMDEzYTMzMGViZWEyY2U0Y2E3ODdmNGU0Y2IzYzlhNTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KIzN+joJb/pfGfwnq1FOMePhU/M
h4jKp9Nim8Li45itHQsR+kUpwwcELh0cJLkrWqch70gFqw842jGpf0Qfkriif+3l
Wc6/8ir3BWCaryZdgzdG1GR3dcSh7Six+fqQ14iNQJBUNy4UZibUqF9R5Ka9+FJm
gN8ZCkoZTEiccQRkMGDZTJxIVEOVilLlBUC2yioaUiHDrXoUyvZefSY8JsQAp27J
p98kYK3RuCPOl8xmBd1QkEFrnbpxYSHKhElF9ARP2NAKLjcG8CSZeIck3o4Jt9rk
HkCDQyAtlPEx5XsT0vyPHHc8pXZcbYKemnYUgHyjn6pSxxUI5vLX+9qrxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/khhATozDr6izkynh/TkyzyaVnMB8GA1UdIwQY
MBaAFLSPQa/cYJVo+yM4/bILLQxCK3I7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYt
OGVjNjhlNzg4NmUyLzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYtOGVjNjhlNzg4NmUy
LzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJLzEE9P
qebX+I/Go/XHljkwNr+KdPNPnr7Kpd3LtaTwfM97fxR/Np+WQqaWEHhECrbY9Ao1
mo4MrVJtq/8/VgGitilNrqqm4vrmB0Gzbqgx9FeQHWstlA9I58owKR6WbyQg9xku
t18iOr5pOL1rAc7noaWzGvW6J8Ajb1iqvfvO6Yxbw0y6kXlQWGqV9hRxHch3ggB8
s8hAzNpMxu/YVCZsGUIu9BIbnGq048tfXLLQV2Mj3NyqIokVN2Ym9e8YT+OMAKQo
lnOgXtnvBL5z185Ar1v8RFkUGDdca9BMyPAzjo9rPfyJ5M54+85St3NbLfLaGBMD
gJ9kpKzNQaMg5Q==
-----END CERTIFICATE-----
Generated at Fri Jun 6 10:43:45 2025 by rpki-client