Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
File: tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json)
Hash identifier: 11xIscglZj7arPiWjyzaA39CKFN5BnRSaKePq5J+4Hc=
Subject key identifier: 79:6A:94:1B:64:AA:6B:E8:31:84:7D:51:43:1E:9E:29:DE:4E:FF:E2
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial: 0199391523E39C8BBEB45033C39C414D6937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
Manifest number: 1287
Signing time: Thu 11 Sep 2025 14:01:50 +0000
Manifest this update: Thu 11 Sep 2025 14:01:50 +0000
Manifest next update: Fri 12 Sep 2025 14:01:50 +0000
Files and hashes: 1: H053Wy1QhrY8__zrTCLE21aJSR0.roa (hash: XFp0BCIN9PEU3N2q5lPY5D5IjnQztsPMN//9DZ1mPWQ=)
2: kj9rgsBpPLepIKPHD5eAEuwwvw0.roa (hash: EHHLSrODdY/NFx0Xqw8ficGV0VFf608vkoi6uBTcBb0=)
3: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: 764hcmUp0iDKmHJnVzTvnSxTRE1Bd2sqF0zmTTITV18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:15:23:e3:9c:8b:be:b4:50:33:c3:9c:41:4d:69:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
Validity
Not Before: Sep 11 14:01:50 2025 GMT
Not After : Sep 12 14:01:50 2025 GMT
Subject: CN=796a941b64aa6be831847d51431e9e29de4effe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:60:80:8f:b7:94:c6:0c:ea:25:80:d0:9b:a1:
8f:f6:09:c5:29:8b:ad:6e:da:df:86:72:e3:b8:73:
cd:04:fa:c6:fb:60:b3:37:8a:54:15:d1:6e:06:03:
76:fa:c8:d0:58:b4:ce:dc:12:51:ae:31:cf:5e:fd:
11:3d:e1:68:7e:0d:1a:67:a0:37:c1:7b:74:ce:8c:
a0:f3:81:6f:e0:90:3b:9a:71:48:37:40:5e:aa:56:
a1:6c:55:c8:1e:39:24:94:2d:fd:15:e3:8b:1e:8e:
cc:81:d6:64:30:1e:10:94:4e:a8:20:3a:60:d5:f8:
07:01:89:d4:93:aa:4a:01:a7:c1:03:a0:0b:1a:9a:
e7:81:97:3a:71:96:29:dd:22:b0:d8:30:84:68:cb:
35:36:27:31:d6:90:14:7a:5f:b2:55:5b:3e:e3:ca:
68:bd:3f:57:dc:27:c3:80:d3:7b:1c:d5:6a:c2:4b:
19:e1:de:01:33:5c:b8:de:79:e9:25:28:db:08:d0:
7f:97:bd:0f:1b:65:63:54:8d:95:75:90:e0:02:04:
47:7e:bc:1d:4a:69:83:83:1c:d4:92:d9:f2:9a:f9:
3d:5e:86:20:27:0a:0a:d9:fe:ff:31:d6:5a:ca:97:
9c:e1:a0:f9:73:7e:67:95:6b:8b:f8:9c:20:0c:bc:
1b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6A:94:1B:64:AA:6B:E8:31:84:7D:51:43:1E:9E:29:DE:4E:FF:E2
X509v3 Authority Key Identifier:
keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bb:5a:0a:0c:66:7f:e5:2b:6b:44:ff:f3:60:81:1d:f7:0b:
91:b6:41:4b:6c:47:12:12:89:4a:7c:9a:b5:d4:95:6c:1e:90:
68:69:a2:e0:20:80:fb:b3:59:81:47:17:0d:99:95:a2:1c:43:
5d:a4:b9:7a:ed:e1:43:b9:7e:8f:7f:f2:5d:a8:9e:a3:3e:fb:
34:fb:35:69:6d:b0:be:ad:a3:51:a7:36:df:94:6b:42:df:db:
5e:53:f9:f3:e6:27:1b:f7:5d:04:bf:94:10:45:c8:ce:90:7d:
8d:99:97:e5:56:70:ac:1c:76:ee:86:a9:27:45:f5:03:bc:87:
25:98:49:ec:c1:f3:8e:de:46:59:72:47:0d:ff:9c:80:20:de:
13:cc:be:0e:e6:0a:5c:56:4d:7a:2f:34:47:57:dd:05:97:03:
dc:32:8b:1c:0c:38:a9:9d:1c:cb:65:00:94:66:2b:e6:5c:3f:
ab:17:cf:47:81:9b:e8:5b:36:7f:ef:9f:d7:30:17:56:a9:a4:
8b:b1:09:5d:0a:33:4b:49:e4:4b:8a:12:1b:52:65:e7:6f:7d:
aa:fa:7f:be:11:84:51:40:69:fd:6d:69:ef:af:8b:b0:19:59:
64:da:2b:12:53:5d:4e:06:57:71:a7:f5:d4:49:b8:42:27:9c:
2b:92:69:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk5FSPjnIu+tFAzw5xBTWk3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NDI1Y2Y1NTAxMzQ0YWM1YWNjMzA3YWJkMGFmMDEzZmFj
NjcwNzMwHhcNMjUwOTExMTQwMTUwWhcNMjUwOTEyMTQwMTUwWjAzMTEwLwYDVQQD
Eyg3OTZhOTQxYjY0YWE2YmU4MzE4NDdkNTE0MzFlOWUyOWRlNGVmZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomCAj7eUxgzqJYDQm6GP9gnFKYut
btrfhnLjuHPNBPrG+2CzN4pUFdFuBgN2+sjQWLTO3BJRrjHPXv0RPeFofg0aZ6A3
wXt0zoyg84Fv4JA7mnFIN0BeqlahbFXIHjkklC39FeOLHo7MgdZkMB4QlE6oIDpg
1fgHAYnUk6pKAafBA6ALGprngZc6cZYp3SKw2DCEaMs1Nicx1pAUel+yVVs+48po
vT9X3CfDgNN7HNVqwksZ4d4BM1y43nnpJSjbCNB/l70PG2VjVI2VdZDgAgRHfrwd
SmmDgxzUktnymvk9XoYgJwoK2f7/MdZaypec4aD5c35nlWuL+JwgDLwbZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlqlBtkqmvoMYR9UUMenineTv/iMB8GA1UdIwQY
MBaAFLRCXPVQE0SsWswwer0K8BP6xnBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEVKYzlWQVRSS3hhekRCNnZRcndFX3JHY0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82YWMwYTItNWM2Yy00MzU3LTk3ZTQt
Y2ViOGFiNmQxMTJlLzEvdEVKYzlWQVRSS3hhekRCNnZRcndFX3JHY0hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82YWMwYTItNWM2Yy00MzU3LTk3ZTQtY2ViOGFiNmQxMTJl
LzEvdEVKYzlWQVRSS3hhekRCNnZRcndFX3JHY0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7taCgxm
f+Ura0T/82CBHfcLkbZBS2xHEhKJSnyatdSVbB6QaGmi4CCA+7NZgUcXDZmVohxD
XaS5eu3hQ7l+j3/yXaieoz77NPs1aW2wvq2jUac235RrQt/bXlP58+YnG/ddBL+U
EEXIzpB9jZmX5VZwrBx27oapJ0X1A7yHJZhJ7MHzjt5GWXJHDf+cgCDeE8y+DuYK
XFZNei80R1fdBZcD3DKLHAw4qZ0cy2UAlGYr5lw/qxfPR4Gb6Fs2f++f1zAXVqmk
i7EJXQozS0nkS4oSG1Jl5299qvp/vhGEUUBp/W1p76+LsBlZZNorElNdTgZXcaf1
1Em4QiecK5Jp7g==
-----END CERTIFICATE-----
Generated at Thu Sep 11 16:24:15 2025 by rpki-client