Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft
File: T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft (raw, json)
Hash identifier: n6673PgZQUdjq461gvDyjUPRsO6+qoM4kwxvO53eifA=
Subject key identifier: 1B:B9:91:33:5F:E9:8F:3E:A4:47:50:B8:75:7F:72:E4:0D:C6:CD:CE
Authority key identifier: 4F:49:FE:07:46:35:1C:87:C3:41:8A:CD:39:86:E7:62:8C:45:87:67
Certificate issuer: /CN=4f49fe0746351c87c3418acd3986e7628c458767
Certificate serial: 0197CA952024ED45A8CF04BD2A949CE41BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft
Manifest number: 3C
Signing time: Wed 02 Jul 2025 10:00:59 +0000
Manifest this update: Wed 02 Jul 2025 10:00:59 +0000
Manifest next update: Thu 03 Jul 2025 10:00:59 +0000
Files and hashes: 1: T0n-B0Y1HIfDQYrNOYbnYoxFh2c.crl (hash: o6KeILv+5NOhTmeZDsSPxFK4gnFelRZsJeHkqzeXj9g=)
2: d4w4xxcWDAqyLqbgWT3EJnLoy6o.roa (hash: brOB9FNZkSJh8TLBEcKXXcmOw1w3mH+eTmmqITITff0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:95:20:24:ed:45:a8:cf:04:bd:2a:94:9c:e4:1b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f49fe0746351c87c3418acd3986e7628c458767
Validity
Not Before: Jul 2 10:00:59 2025 GMT
Not After : Jul 3 10:00:59 2025 GMT
Subject: CN=1bb991335fe98f3ea44750b8757f72e40dc6cdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8f:24:2c:03:f2:d8:1c:ec:f1:bb:19:f4:db:
4f:b6:76:83:22:91:c2:89:c0:43:2f:70:8d:8a:52:
f7:c8:08:ca:cb:a9:ca:67:27:14:b6:da:b5:15:73:
7e:e6:16:45:d9:d0:e5:a7:a3:fe:de:88:64:ec:6f:
22:b4:24:ed:b6:c5:58:b5:ba:82:87:7f:c6:5e:b6:
b9:9d:11:fe:27:0c:f8:dc:16:9b:10:d6:95:ab:28:
c6:17:a8:78:74:86:76:1a:bb:89:1a:40:91:b7:2a:
f6:4c:4c:de:12:9f:f5:5f:d2:74:5c:15:e8:6d:aa:
bd:16:d4:43:d2:8f:f9:af:5e:6d:b6:73:09:e3:99:
22:10:6f:8e:57:20:60:ec:81:7a:a5:e2:2c:fa:0a:
f1:0f:84:42:c0:5a:e9:bb:7a:01:6e:8a:e9:73:24:
59:ff:aa:19:35:7b:ab:6b:92:0b:bb:ca:04:fb:14:
56:01:f8:67:f6:67:24:ad:ad:3c:99:48:17:f4:09:
8e:45:2c:32:bf:ad:4f:28:2a:d6:85:20:1a:de:b6:
d9:c7:34:c4:b2:f6:94:52:f1:d0:6d:03:86:68:fe:
d5:28:ab:b1:b7:3c:81:b5:56:4a:6e:19:78:2f:db:
d2:63:0e:4c:43:ed:fd:7e:5b:26:f2:92:c3:67:13:
0a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B9:91:33:5F:E9:8F:3E:A4:47:50:B8:75:7F:72:E4:0D:C6:CD:CE
X509v3 Authority Key Identifier:
keyid:4F:49:FE:07:46:35:1C:87:C3:41:8A:CD:39:86:E7:62:8C:45:87:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c5:a2:77:d0:fd:e4:db:90:6f:5c:8b:3d:19:0d:e7:f8:f7:
72:4b:82:a2:1b:8c:5f:1b:e0:57:af:22:77:e6:42:86:32:8a:
9a:95:a3:c1:9c:66:7c:64:31:fc:6f:6c:4c:77:e0:d4:03:78:
9c:a5:1d:14:53:13:20:e2:ed:ab:e1:5a:ea:db:6b:ce:7f:2a:
d8:64:03:26:af:be:67:fa:bb:5a:0b:5d:2d:d8:cd:92:0e:fc:
c6:e0:2c:ab:87:b5:71:a3:5e:3c:ba:ec:f4:69:f4:d1:78:5c:
f6:73:fb:26:10:42:bc:41:4c:e2:75:c1:de:eb:21:c3:3b:99:
74:42:ae:36:cc:1b:06:f9:05:6c:06:c9:29:36:c8:4b:2a:fb:
35:7e:20:4b:9e:3f:ab:6f:58:bf:16:06:9f:b2:4e:52:59:dc:
43:be:8a:d5:e4:6c:03:6b:6a:b4:a3:80:ea:9c:76:88:22:3c:
8c:08:27:52:ec:77:e7:ec:38:3c:8f:fe:72:80:98:f9:8b:ab:
ff:b4:31:4d:aa:b6:27:4c:58:f6:9c:fd:40:5a:c6:db:6f:dd:
ea:f1:e9:16:79:80:02:35:fa:45:ad:5b:6c:2a:30:b2:87:24:
15:d6:99:b6:45:62:92:f4:e2:19:8d:c8:a9:08:3b:5f:11:58:
80:5d:2d:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKlSAk7UWozwS9KpSc5BvSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNDlmZTA3NDYzNTFjODdjMzQxOGFjZDM5ODZlNzYyOGM0
NTg3NjcwHhcNMjUwNzAyMTAwMDU5WhcNMjUwNzAzMTAwMDU5WjAzMTEwLwYDVQQD
EygxYmI5OTEzMzVmZTk4ZjNlYTQ0NzUwYjg3NTdmNzJlNDBkYzZjZGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA348kLAPy2Bzs8bsZ9NtPtnaDIpHC
icBDL3CNilL3yAjKy6nKZycUttq1FXN+5hZF2dDlp6P+3ohk7G8itCTttsVYtbqC
h3/GXra5nRH+Jwz43BabENaVqyjGF6h4dIZ2GruJGkCRtyr2TEzeEp/1X9J0XBXo
baq9FtRD0o/5r15ttnMJ45kiEG+OVyBg7IF6peIs+grxD4RCwFrpu3oBborpcyRZ
/6oZNXura5ILu8oE+xRWAfhn9mckra08mUgX9AmORSwyv61PKCrWhSAa3rbZxzTE
svaUUvHQbQOGaP7VKKuxtzyBtVZKbhl4L9vSYw5MQ+39flsm8pLDZxMKIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBu5kTNf6Y8+pEdQuHV/cuQNxs3OMB8GA1UdIwQY
MBaAFE9J/gdGNRyHw0GKzTmG52KMRYdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDBuLUIwWTFISWZEUVlyTk9ZYm5Zb3hGaDJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yMGU5NWItYWYwYy00Nzk2LWFiZTIt
ZTdjYzg3MDIzOTYxLzEvVDBuLUIwWTFISWZEUVlyTk9ZYm5Zb3hGaDJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yMGU5NWItYWYwYy00Nzk2LWFiZTItZTdjYzg3MDIzOTYx
LzEvVDBuLUIwWTFISWZEUVlyTk9ZYm5Zb3hGaDJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcWid9D9
5NuQb1yLPRkN5/j3ckuCohuMXxvgV68id+ZChjKKmpWjwZxmfGQx/G9sTHfg1AN4
nKUdFFMTIOLtq+Fa6ttrzn8q2GQDJq++Z/q7WgtdLdjNkg78xuAsq4e1caNePLrs
9Gn00Xhc9nP7JhBCvEFM4nXB3ushwzuZdEKuNswbBvkFbAbJKTbISyr7NX4gS54/
q29YvxYGn7JOUlncQ76K1eRsA2tqtKOA6px2iCI8jAgnUux35+w4PI/+coCY+Yur
/7QxTaq2J0xY9pz9QFrG22/d6vHpFnmAAjX6Ra1bbCowsockFdaZtkVikvTiGY3I
qQg7XxFYgF0t0A==
-----END CERTIFICATE-----
Generated at Wed Jul 2 14:14:17 2025 by rpki-client