Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
File: T7EQS7paPx3dLe67o0gZGfT5YaQ.mft (raw, json)
Hash identifier: CdNRYanf2Kow7vaTPoh8wDbZ2E7I+6b2HoVJH0j2JqM=
Subject key identifier: 82:40:94:E5:86:DD:31:5D:0A:88:EA:38:13:77:95:FA:C4:5B:F3:10
Authority key identifier: 4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
Certificate issuer: /CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Certificate serial: 01974D446BC434F03E47A4B18E110B82CCF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
Manifest number: 0F79
Signing time: Sun 08 Jun 2025 02:00:19 +0000
Manifest this update: Sun 08 Jun 2025 02:00:19 +0000
Manifest next update: Mon 09 Jun 2025 02:00:19 +0000
Files and hashes: 1: PHtHgmSOY6QlNjsIyECg_KW7ZYU.roa (hash: cSzW9+Tdn6riD70yyykVu3Jxk7SzmVYuL8aIL6ZeXmM=)
2: T7EQS7paPx3dLe67o0gZGfT5YaQ.crl (hash: 8jKmjbt8BD8jWZ5oIehw5VJC9FIy7ObbMQm25XUzgmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:6b:c4:34:f0:3e:47:a4:b1:8e:11:0b:82:cc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Validity
Not Before: Jun 8 02:00:19 2025 GMT
Not After : Jun 9 02:00:19 2025 GMT
Subject: CN=824094e586dd315d0a88ea38137795fac45bf310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:41:3b:36:02:78:14:f1:60:c4:b4:9c:8b:
fb:3f:4a:5e:b5:6a:62:6a:3f:c2:15:e7:6c:58:b1:
cc:d2:b7:99:87:2b:4a:aa:ce:d1:5a:ae:c4:f9:fa:
ec:33:b6:37:0d:c8:6a:5d:b3:90:ff:2a:c3:dd:fc:
6b:fc:cb:f6:c0:18:19:27:13:9f:bd:3d:c8:ee:ca:
ca:ef:37:ff:91:de:71:ef:08:3d:b8:83:f9:55:5a:
b0:24:4a:20:43:83:11:6c:21:a9:08:07:3d:09:35:
58:de:48:82:97:d9:fd:fb:44:8b:eb:f4:66:f4:41:
d4:3f:e5:78:38:f5:2e:ab:0d:cb:ab:0f:61:5d:8a:
b6:58:9d:8b:1b:f1:96:60:32:1b:0d:21:ce:9d:51:
e9:67:59:5c:79:39:31:50:57:0e:be:6c:d7:fa:16:
d6:95:9c:02:ec:8d:a5:4c:eb:ef:60:83:f3:96:09:
6f:1e:10:3a:78:9c:29:30:6e:bc:7d:80:4d:11:4d:
82:34:ec:0a:60:07:23:07:bb:87:cc:29:a3:53:a9:
05:74:fc:3a:ea:b4:42:20:c3:c5:1d:00:5c:76:ae:
e8:13:a2:71:a4:eb:8f:b1:82:85:8a:41:57:a0:9e:
5a:d5:33:af:ff:ab:08:59:ae:23:45:86:09:45:08:
41:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:40:94:E5:86:DD:31:5D:0A:88:EA:38:13:77:95:FA:C4:5B:F3:10
X509v3 Authority Key Identifier:
keyid:4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9e:7e:36:aa:ec:77:f5:ac:d1:b3:12:13:93:f1:46:5c:2e:
3f:85:28:b4:a9:f6:8c:60:00:b5:76:33:d6:93:4c:07:23:08:
0c:9f:b4:54:f8:32:67:fc:49:8a:b4:74:16:bf:06:45:71:9b:
7d:7f:c4:72:fd:c3:e1:dd:15:65:5a:48:43:81:c9:11:e0:cf:
a3:a4:e4:92:2f:26:c1:5d:96:f1:f4:22:2f:af:b7:5d:8d:ac:
a5:f9:b2:48:e6:db:f3:47:57:af:aa:bb:5a:02:d5:31:2d:15:
d6:16:d3:2c:db:91:f0:22:c7:e4:26:50:f0:39:88:9e:7a:56:
d3:6b:b1:86:0f:0a:37:e2:14:a3:71:78:60:05:f7:67:be:82:
24:fc:86:87:81:1e:3c:da:03:4e:37:75:1f:e9:12:5b:d2:05:
6f:6f:ff:67:9c:8a:34:bd:11:12:21:cc:96:a4:7c:bc:bc:15:
d4:18:af:71:55:61:35:a6:30:d0:b0:9a:da:f5:d6:13:41:9f:
a1:a5:6f:ce:3c:0f:99:4e:10:4b:5c:14:cd:bb:16:59:9e:ec:
74:ba:7b:d5:c3:cd:54:a8:ba:70:65:ed:1a:e9:20:54:d5:1f:
d6:8e:2a:7b:2b:92:47:4d:4b:9c:23:2a:d4:61:a3:06:63:33:
3d:24:91:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRGvENPA+R6SxjhELgszzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYjExMDRiYmE1YTNmMWRkZDJkZWViYmEzNDgxOTE5ZjRm
OTYxYTQwHhcNMjUwNjA4MDIwMDE5WhcNMjUwNjA5MDIwMDE5WjAzMTEwLwYDVQQD
Eyg4MjQwOTRlNTg2ZGQzMTVkMGE4OGVhMzgxMzc3OTVmYWM0NWJmMzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHpBOzYCeBTxYMS0nIv7P0petWpi
aj/CFedsWLHM0reZhytKqs7RWq7E+frsM7Y3DchqXbOQ/yrD3fxr/Mv2wBgZJxOf
vT3I7srK7zf/kd5x7wg9uIP5VVqwJEogQ4MRbCGpCAc9CTVY3kiCl9n9+0SL6/Rm
9EHUP+V4OPUuqw3Lqw9hXYq2WJ2LG/GWYDIbDSHOnVHpZ1lceTkxUFcOvmzX+hbW
lZwC7I2lTOvvYIPzlglvHhA6eJwpMG68fYBNEU2CNOwKYAcjB7uHzCmjU6kFdPw6
6rRCIMPFHQBcdq7oE6JxpOuPsYKFikFXoJ5a1TOv/6sIWa4jRYYJRQhB4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJAlOWG3TFdCojqOBN3lfrEW/MQMB8GA1UdIwQY
MBaAFE+xEEu6Wj8d3S3uu6NIGRn0+WGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDdFUVM3cGFQeDNkTGU2N28wZ1pHZlQ1WWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84OWVlOTQtNTAxMC00NGFkLTllMTct
NDM2YWI0YWRlMGE3LzEvVDdFUVM3cGFQeDNkTGU2N28wZ1pHZlQ1WWFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84OWVlOTQtNTAxMC00NGFkLTllMTctNDM2YWI0YWRlMGE3
LzEvVDdFUVM3cGFQeDNkTGU2N28wZ1pHZlQ1WWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZ5+Nqrs
d/Ws0bMSE5PxRlwuP4UotKn2jGAAtXYz1pNMByMIDJ+0VPgyZ/xJirR0Fr8GRXGb
fX/Ecv3D4d0VZVpIQ4HJEeDPo6Tkki8mwV2W8fQiL6+3XY2spfmySObb80dXr6q7
WgLVMS0V1hbTLNuR8CLH5CZQ8DmInnpW02uxhg8KN+IUo3F4YAX3Z76CJPyGh4Ee
PNoDTjd1H+kSW9IFb2//Z5yKNL0REiHMlqR8vLwV1BivcVVhNaYw0LCa2vXWE0Gf
oaVvzjwPmU4QS1wUzbsWWZ7sdLp71cPNVKi6cGXtGukgVNUf1o4qeyuSR01LnCMq
1GGjBmMzPSSRRg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:57:21 2025 by rpki-client