Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
File: T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft (raw, json)
Hash identifier: LrUyjqwaqgjyPdsjgvOHwDuM3oF/XcN3aOdaWP8j/CY=
Subject key identifier: 02:E5:65:E9:7A:FD:3C:9E:BB:00:22:91:4C:49:83:55:42:BF:0A:57
Authority key identifier: 4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
Certificate issuer: /CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Certificate serial: 019749D5F76EBC6523D1FDB7517127233C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
Manifest number: 06C6
Signing time: Sat 07 Jun 2025 10:00:48 +0000
Manifest this update: Sat 07 Jun 2025 10:00:48 +0000
Manifest next update: Sun 08 Jun 2025 10:00:48 +0000
Files and hashes: 1: O4ZnlVhhx3zd5V2McWkK5lXbTfU.roa (hash: 1/S6pfTZfcr0nY65o+eT5Gg2Gukw2uRx/s1OdeKWKmE=)
2: T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl (hash: stdBOTTk4Asb8vSjimKCjardLi0OFynzCKbwTKVhIUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:f7:6e:bc:65:23:d1:fd:b7:51:71:27:23:3c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Validity
Not Before: Jun 7 10:00:48 2025 GMT
Not After : Jun 8 10:00:48 2025 GMT
Subject: CN=02e565e97afd3c9ebb0022914c49835542bf0a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:66:71:3b:a2:14:76:83:ca:95:e6:ff:7f:4c:
6a:5b:98:0e:ab:11:db:4c:0a:bf:14:b0:df:7b:6c:
f4:90:16:13:09:0a:e4:e2:60:6e:bc:38:ce:fe:a8:
cf:2a:de:0b:5a:82:88:fc:c5:cf:71:72:7c:69:84:
96:a0:08:9d:44:38:7f:32:cc:af:45:c8:59:f7:db:
ab:ce:1a:aa:35:c5:ea:5b:ea:da:44:be:78:39:85:
3d:db:3d:e3:2b:c5:6a:68:a7:89:34:65:b1:ff:55:
ff:00:dd:d6:81:ea:67:50:84:a3:3f:71:fd:8f:16:
05:b9:cc:12:08:71:bd:30:af:93:04:39:e4:fc:a8:
06:40:ff:e1:3a:84:eb:b5:21:a0:66:10:1a:b3:99:
80:52:eb:53:7e:eb:e1:a9:10:e6:7c:63:6b:bd:d3:
c9:38:60:e1:d4:50:45:e4:c2:a8:d6:14:e7:a7:67:
0b:9e:d7:18:89:57:86:c1:2e:ea:81:a0:eb:6c:95:
b5:3a:c1:9f:95:2c:ea:b1:de:bc:57:45:69:db:4f:
09:f8:06:11:5f:5f:12:70:4d:59:39:70:00:12:6a:
3d:a3:a2:aa:45:91:b4:8c:25:3f:f9:e7:8f:f2:d2:
c3:2a:cd:b0:99:df:97:37:d1:d4:d2:24:02:60:48:
ac:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E5:65:E9:7A:FD:3C:9E:BB:00:22:91:4C:49:83:55:42:BF:0A:57
X509v3 Authority Key Identifier:
keyid:4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:48:1f:e5:36:40:e3:bd:27:84:14:f3:b7:a0:07:e0:33:fa:
50:47:e0:fe:55:cd:98:40:67:ec:3a:56:98:e2:9a:69:c6:66:
93:55:24:b8:1d:68:70:47:c4:82:7b:3b:e1:13:68:73:35:ac:
c5:8b:2e:5f:3c:19:31:47:02:e2:06:ff:b9:26:21:5d:5d:65:
99:91:f6:2c:de:78:85:1f:0a:80:61:fa:35:ec:71:db:c5:d4:
69:bc:e4:d1:e3:0e:b9:6c:3b:e0:65:cf:a1:2f:5c:47:ec:d9:
19:e5:7b:49:e4:1a:ec:40:a2:62:eb:66:4b:66:39:b6:40:28:
ce:7c:eb:34:98:c8:15:71:ca:90:7f:ca:23:c3:96:1f:9a:b1:
6f:2f:20:c3:41:a8:9d:51:ac:8f:20:fb:0d:48:47:f0:13:c7:
c7:47:82:7d:2b:67:50:0e:f0:65:46:e9:fb:2a:80:ed:32:b2:
8f:cd:c2:cc:92:52:7e:1d:ed:79:1f:06:17:b1:fe:d4:86:25:
8e:b4:ce:e4:89:95:bb:fa:6c:e0:c3:51:01:ad:bb:26:c7:d0:
04:6b:62:ec:01:f5:df:74:58:53:1b:72:32:3b:f3:aa:ba:4b:
3a:47:96:38:1f:87:49:6c:af:8f:c6:69:ab:ea:54:60:b0:c1:
6d:65:b7:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1fduvGUj0f23UXEnIzwgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNTBhMGRjYzcxYzQyOTIzZTQwNzAxMWJkMjEyYWZhNWM2
MmU1OWQwHhcNMjUwNjA3MTAwMDQ4WhcNMjUwNjA4MTAwMDQ4WjAzMTEwLwYDVQQD
EygwMmU1NjVlOTdhZmQzYzllYmIwMDIyOTE0YzQ5ODM1NTQyYmYwYTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42ZxO6IUdoPKleb/f0xqW5gOqxHb
TAq/FLDfe2z0kBYTCQrk4mBuvDjO/qjPKt4LWoKI/MXPcXJ8aYSWoAidRDh/Msyv
RchZ99urzhqqNcXqW+raRL54OYU92z3jK8VqaKeJNGWx/1X/AN3WgepnUISjP3H9
jxYFucwSCHG9MK+TBDnk/KgGQP/hOoTrtSGgZhAas5mAUutTfuvhqRDmfGNrvdPJ
OGDh1FBF5MKo1hTnp2cLntcYiVeGwS7qgaDrbJW1OsGflSzqsd68V0Vp208J+AYR
X18ScE1ZOXAAEmo9o6KqRZG0jCU/+eeP8tLDKs2wmd+XN9HU0iQCYEisswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALlZel6/TyeuwAikUxJg1VCvwpXMB8GA1UdIwQY
MBaAFE9QoNzHHEKSPkBwEb0hKvpcYuWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDFDZzNNY2NRcEktUUhBUnZTRXEtbHhpNVowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zMGEyYmYtYjUxZS00ZDcyLWI0MDkt
Y2E4YjI3NThiZTE1LzEvVDFDZzNNY2NRcEktUUhBUnZTRXEtbHhpNVowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8zMGEyYmYtYjUxZS00ZDcyLWI0MDktY2E4YjI3NThiZTE1
LzEvVDFDZzNNY2NRcEktUUhBUnZTRXEtbHhpNVowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzkgf5TZA
470nhBTzt6AH4DP6UEfg/lXNmEBn7DpWmOKaacZmk1UkuB1ocEfEgns74RNoczWs
xYsuXzwZMUcC4gb/uSYhXV1lmZH2LN54hR8KgGH6Nexx28XUabzk0eMOuWw74GXP
oS9cR+zZGeV7SeQa7ECiYutmS2Y5tkAoznzrNJjIFXHKkH/KI8OWH5qxby8gw0Go
nVGsjyD7DUhH8BPHx0eCfStnUA7wZUbp+yqA7TKyj83CzJJSfh3teR8GF7H+1IYl
jrTO5ImVu/ps4MNRAa27JsfQBGti7AH133RYUxtyMjvzqrpLOkeWOB+HSWyvj8Zp
q+pUYLDBbWW3Mw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:44:40 2025 by rpki-client