Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
File: tIoonrst1oBtYLjFrQNseY9mugY.mft (raw, json)
Hash identifier: PA920bmtvhSzSEUxlMguvpuXabCE/kQD4e0/i4dV7pg=
Subject key identifier: A6:C5:82:A8:8B:60:44:91:ED:37:BC:27:FE:F1:B3:51:D8:8F:68:7B
Authority key identifier: B4:8A:28:9E:BB:2D:D6:80:6D:60:B8:C5:AD:03:6C:79:8F:66:BA:06
Certificate issuer: /CN=b48a289ebb2dd6806d60b8c5ad036c798f66ba06
Certificate serial: 01974D7BC5993345C75871D2BE12C5889409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
Manifest number: 0439
Signing time: Sun 08 Jun 2025 03:00:46 +0000
Manifest this update: Sun 08 Jun 2025 03:00:46 +0000
Manifest next update: Mon 09 Jun 2025 03:00:46 +0000
Files and hashes: 1: nKxswHwUBE_XIOIyQ1Qpw5XOFvo.roa (hash: xZYcCOMTf00TiuBXWvG+qaD8S6ouJ5YlmrR2oW0i9z0=)
2: tIoonrst1oBtYLjFrQNseY9mugY.crl (hash: C5bh4buionB0mIoj2rVGiyycNb0fMWpWtxMaQOqEjH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:c5:99:33:45:c7:58:71:d2:be:12:c5:88:94:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48a289ebb2dd6806d60b8c5ad036c798f66ba06
Validity
Not Before: Jun 8 03:00:46 2025 GMT
Not After : Jun 9 03:00:46 2025 GMT
Subject: CN=a6c582a88b604491ed37bc27fef1b351d88f687b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:14:6a:22:66:af:51:84:30:2e:36:65:72:
22:fe:63:dc:48:00:12:28:3f:f1:1a:55:28:a9:ff:
cf:a0:d9:15:71:5d:9f:4c:a2:1a:a2:9e:d1:b0:e3:
88:55:e3:ff:38:23:2e:35:44:86:2f:db:a8:86:f7:
be:5d:06:f8:3d:de:d0:23:68:77:9f:61:cd:46:81:
ec:b1:c7:8d:b1:40:01:bf:84:b7:69:48:c0:03:0f:
e5:ed:e3:83:0d:67:8a:78:3a:33:61:5b:3c:33:2b:
a5:ec:b5:d0:df:54:62:ee:e9:fa:af:49:50:8a:06:
73:a7:43:bb:7f:14:cf:4a:77:16:ea:0e:84:71:f5:
18:af:da:c6:55:79:41:70:c9:8c:1b:89:15:95:8c:
b8:e8:6c:55:ea:38:c9:c5:8f:43:38:bf:52:99:c3:
5a:66:18:b1:65:65:3a:5f:97:01:dd:64:87:25:5d:
71:0f:81:dd:5f:8c:cc:4e:5b:47:6d:71:29:ea:ed:
df:0a:cc:92:1a:e4:7f:a4:ab:c5:f3:e5:3d:e3:b8:
4d:0e:c4:98:92:07:b9:58:ad:69:ba:65:64:56:b1:
01:a8:39:fc:b7:d5:70:7c:65:f3:cf:96:d8:3c:1b:
f1:ff:01:64:24:ee:03:5d:e4:cd:26:c5:cd:6f:b7:
89:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C5:82:A8:8B:60:44:91:ED:37:BC:27:FE:F1:B3:51:D8:8F:68:7B
X509v3 Authority Key Identifier:
keyid:B4:8A:28:9E:BB:2D:D6:80:6D:60:B8:C5:AD:03:6C:79:8F:66:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:38:ab:8a:30:da:07:49:b3:f7:30:e4:5d:b5:0c:35:48:99:
80:5b:7e:1e:d2:41:e6:41:1a:9d:f2:c3:a8:d9:ed:42:5c:fe:
8f:b5:91:d9:c1:97:77:49:87:ef:82:6f:50:9a:d2:f5:58:5e:
5e:35:9c:a4:37:d9:95:02:b8:62:c6:b7:1b:e1:cd:16:10:7e:
79:f0:3d:c4:71:18:65:18:50:6c:4e:ce:ab:52:fe:1b:aa:b7:
48:3e:91:9a:3d:e9:90:3f:8f:a5:64:24:d1:2e:36:65:8c:20:
34:87:46:6e:3b:f5:e2:70:bf:5e:3f:fe:f7:0d:9b:a1:65:a3:
21:f3:e8:bf:74:6b:d1:80:cc:64:e3:41:4b:2f:d2:e0:28:c1:
60:7f:d8:ec:d2:30:40:4f:d1:53:0b:b1:1d:0b:a7:23:5c:fe:
38:38:69:5e:df:18:ef:bb:da:4a:62:d6:63:51:ad:be:3d:30:
f9:c2:e1:4b:e5:85:72:44:a5:46:3b:f8:e2:6d:35:b9:4f:48:
48:b0:94:34:38:92:6f:50:e6:5f:5c:5f:d1:c1:6e:4e:91:f0:
78:c1:3c:05:bc:88:13:c8:c6:16:19:41:fd:2d:0f:ac:84:0e:
c3:0e:bf:15:5d:49:f8:8f:72:9b:5b:a2:9c:3c:87:8d:3c:50:
51:3d:7b:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNe8WZM0XHWHHSvhLFiJQJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OGEyODllYmIyZGQ2ODA2ZDYwYjhjNWFkMDM2Yzc5OGY2
NmJhMDYwHhcNMjUwNjA4MDMwMDQ2WhcNMjUwNjA5MDMwMDQ2WjAzMTEwLwYDVQQD
EyhhNmM1ODJhODhiNjA0NDkxZWQzN2JjMjdmZWYxYjM1MWQ4OGY2ODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy4UaiJmr1GEMC42ZXIi/mPcSAAS
KD/xGlUoqf/PoNkVcV2fTKIaop7RsOOIVeP/OCMuNUSGL9uohve+XQb4Pd7QI2h3
n2HNRoHssceNsUABv4S3aUjAAw/l7eODDWeKeDozYVs8Myul7LXQ31Ri7un6r0lQ
igZzp0O7fxTPSncW6g6EcfUYr9rGVXlBcMmMG4kVlYy46GxV6jjJxY9DOL9SmcNa
ZhixZWU6X5cB3WSHJV1xD4HdX4zMTltHbXEp6u3fCsySGuR/pKvF8+U947hNDsSY
kge5WK1pumVkVrEBqDn8t9VwfGXzz5bYPBvx/wFkJO4DXeTNJsXNb7eJlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbFgqiLYESR7Te8J/7xs1HYj2h7MB8GA1UdIwQY
MBaAFLSKKJ67LdaAbWC4xa0DbHmPZroGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdElvb25yc3Qxb0J0WUxqRnJRTnNlWTltdWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81OTkyZWItNGI4Mi00ZmQzLTkxMjEt
ZmVlMTM3Yzg5MGJjLzEvdElvb25yc3Qxb0J0WUxqRnJRTnNlWTltdWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC81OTkyZWItNGI4Mi00ZmQzLTkxMjEtZmVlMTM3Yzg5MGJj
LzEvdElvb25yc3Qxb0J0WUxqRnJRTnNlWTltdWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzirijDa
B0mz9zDkXbUMNUiZgFt+HtJB5kEanfLDqNntQlz+j7WR2cGXd0mH74JvUJrS9Vhe
XjWcpDfZlQK4Ysa3G+HNFhB+efA9xHEYZRhQbE7Oq1L+G6q3SD6Rmj3pkD+PpWQk
0S42ZYwgNIdGbjv14nC/Xj/+9w2boWWjIfPov3Rr0YDMZONBSy/S4CjBYH/Y7NIw
QE/RUwuxHQunI1z+ODhpXt8Y77vaSmLWY1Gtvj0w+cLhS+WFckSlRjv44m01uU9I
SLCUNDiSb1DmX1xf0cFuTpHweME8BbyIE8jGFhlB/S0PrIQOww6/FV1J+I9ym1ui
nDyHjTxQUT17SQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:06:29 2025 by rpki-client