Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
File: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft (raw, json)
Hash identifier: K1XzUKb4XVyVf06AOWfoPnD/d4wLx339wCg+LlxBetY=
Subject key identifier: 32:D8:6E:A9:1E:91:9C:23:E3:67:CC:36:98:32:02:8D:72:A8:0F:54
Authority key identifier: 4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
Certificate issuer: /CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Certificate serial: 0197586D17860C8B0E4E273C97D56B0AB9BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
Manifest number: 1481
Signing time: Tue 10 Jun 2025 06:00:33 +0000
Manifest this update: Tue 10 Jun 2025 06:00:33 +0000
Manifest next update: Wed 11 Jun 2025 06:00:33 +0000
Files and hashes: 1: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl (hash: 5cYqymRd3Jv7UD2O6bMieT77wF1HJBDfwV2jhteH69c=)
2: gLQdUENVXGMq4s0E2-s0exbZJTQ.roa (hash: qPXxxb8wbYIQ57DIruVSOJKF4C7lGWbN67ERbUHU99A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:17:86:0c:8b:0e:4e:27:3c:97:d5:6b:0a:b9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Validity
Not Before: Jun 10 06:00:33 2025 GMT
Not After : Jun 11 06:00:33 2025 GMT
Subject: CN=32d86ea91e919c23e367cc369832028d72a80f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5f:34:e0:bf:e0:40:50:4b:71:0d:1f:8f:1d:
ba:ee:88:87:02:4f:d9:ed:1c:3d:d8:28:b2:8d:cd:
81:4e:e3:ab:7f:b5:0d:e2:ad:e5:09:b0:83:44:45:
b0:ea:36:88:14:72:c9:c7:a5:32:6a:f4:15:e8:3f:
a3:6d:2b:6d:2e:3f:a8:df:ca:a8:4a:09:f5:cf:58:
33:09:aa:dc:01:e5:26:0e:82:16:3f:f8:64:5b:62:
02:bb:db:d5:cc:fe:33:21:b7:c2:63:08:bf:da:f2:
0c:cb:6d:48:88:75:ec:ea:9e:b8:09:7e:a0:1b:a3:
7c:fc:88:7e:b3:d3:ff:46:81:65:9f:06:bf:20:0b:
f0:4f:24:d3:aa:ef:38:bb:17:f8:4c:f6:54:8c:6d:
87:4d:d1:8d:f6:cd:56:9c:b6:1e:19:b7:ed:8b:f1:
16:49:be:69:36:48:ed:d0:87:9d:00:91:63:ba:3c:
46:91:c8:50:94:29:00:a0:24:50:e7:8a:13:9e:72:
98:7e:ac:58:75:27:cb:b5:6a:bf:21:c8:79:bf:36:
cc:e8:20:4e:86:6f:ed:6b:e1:bc:6d:cd:17:52:45:
aa:65:65:4e:e1:8a:ea:91:4d:17:c0:39:2c:05:14:
7e:cf:34:1c:99:68:88:30:55:e1:f2:94:d1:d7:90:
59:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D8:6E:A9:1E:91:9C:23:E3:67:CC:36:98:32:02:8D:72:A8:0F:54
X509v3 Authority Key Identifier:
keyid:4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4e:32:6d:59:3c:4a:56:33:c9:67:f5:be:00:1a:ae:d4:68:
aa:37:b7:93:97:c2:43:19:0c:e3:47:c8:51:14:7b:7a:91:e7:
83:3e:ca:91:33:fd:aa:a4:10:45:29:e2:e3:62:9e:40:49:93:
03:77:c8:56:3e:4e:4a:b7:09:49:20:c9:f9:0f:a1:ab:a3:bb:
60:6a:b3:ba:ac:bf:c9:58:a9:5a:ac:08:93:65:2c:50:26:7a:
2a:9e:9e:7a:79:64:85:f4:d2:1a:8f:f3:31:d7:d2:42:16:a6:
ad:0e:5f:51:00:01:9c:7d:03:02:2f:78:fb:69:0a:6b:9b:b2:
7e:eb:7d:8c:b3:36:39:0d:79:00:34:cf:9a:f6:34:60:1a:05:
86:2f:f6:72:9f:d8:a5:90:5c:91:b4:e1:4d:fe:09:b1:b7:ea:
7b:f9:38:0c:d1:97:3c:7d:8e:69:7a:2b:9a:f0:33:a4:d6:67:
5b:8c:d4:03:b3:04:08:e9:dc:7c:a5:7a:ed:c1:60:4a:39:3d:
d8:8e:b4:36:00:77:a6:1a:da:c4:8b:30:84:0a:0a:e0:9d:aa:
bb:a9:70:2b:fb:d1:fa:68:75:c3:3a:cc:33:46:92:ce:e9:b0:
73:66:e5:c2:5d:dd:80:82:c0:7a:84:b6:76:b8:fe:80:ce:71:
1c:6e:99:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdYbReGDIsOTic8l9VrCrm/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZTRmOTY3NzFkOTFmODdjMjFiZTlmMDBkMTIwMzI3ZjVi
YmYyZWEwHhcNMjUwNjEwMDYwMDMzWhcNMjUwNjExMDYwMDMzWjAzMTEwLwYDVQQD
EygzMmQ4NmVhOTFlOTE5YzIzZTM2N2NjMzY5ODMyMDI4ZDcyYTgwZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV804L/gQFBLcQ0fjx267oiHAk/Z
7Rw92Ciyjc2BTuOrf7UN4q3lCbCDREWw6jaIFHLJx6UyavQV6D+jbSttLj+o38qo
Sgn1z1gzCarcAeUmDoIWP/hkW2ICu9vVzP4zIbfCYwi/2vIMy21IiHXs6p64CX6g
G6N8/Ih+s9P/RoFlnwa/IAvwTyTTqu84uxf4TPZUjG2HTdGN9s1WnLYeGbfti/EW
Sb5pNkjt0IedAJFjujxGkchQlCkAoCRQ54oTnnKYfqxYdSfLtWq/Ich5vzbM6CBO
hm/ta+G8bc0XUkWqZWVO4YrqkU0XwDksBRR+zzQcmWiIMFXh8pTR15BZ3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLYbqkekZwj42fMNpgyAo1yqA9UMB8GA1UdIwQY
MBaAFE3k+Wdx2R+Hwhvp8A0SAyf1u/LqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGVUNVozSFpINGZDRy1ud0RSSURKX1c3OHVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wMmY5YmItNmU2YS00NzhhLWJhYzgt
NTkxMWZlNjNhZjc5LzEvVGVUNVozSFpINGZDRy1ud0RSSURKX1c3OHVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8wMmY5YmItNmU2YS00NzhhLWJhYzgtNTkxMWZlNjNhZjc5
LzEvVGVUNVozSFpINGZDRy1ud0RSSURKX1c3OHVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABU4ybVk8
SlYzyWf1vgAartRoqje3k5fCQxkM40fIURR7epHngz7KkTP9qqQQRSni42KeQEmT
A3fIVj5OSrcJSSDJ+Q+hq6O7YGqzuqy/yVipWqwIk2UsUCZ6Kp6eenlkhfTSGo/z
MdfSQhamrQ5fUQABnH0DAi94+2kKa5uyfut9jLM2OQ15ADTPmvY0YBoFhi/2cp/Y
pZBckbThTf4Jsbfqe/k4DNGXPH2OaXormvAzpNZnW4zUA7MECOncfKV67cFgSjk9
2I60NgB3phraxIswhAoK4J2qu6lwK/vR+mh1wzrMM0aSzumwc2blwl3dgILAeoS2
drj+gM5xHG6ZfA==
-----END CERTIFICATE-----
Generated at Tue Jun 10 09:48:29 2025 by rpki-client