Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
File: t8jfPaM5OL8bJF8cRHn9JN2flPA.mft (raw, json)
Hash identifier: CqAf7Hyp6bnu40TxBqxBb79YXEfiGLyOOU9SV4/0NL0=
Subject key identifier: 50:AA:F4:B8:33:36:80:C1:45:95:39:F8:2A:66:D8:CB:28:4B:A0:68
Authority key identifier: B7:C8:DF:3D:A3:39:38:BF:1B:24:5F:1C:44:79:FD:24:DD:9F:94:F0
Certificate issuer: /CN=b7c8df3da33938bf1b245f1c4479fd24dd9f94f0
Certificate serial: 01976A733AE317695687EDA16CCECE7EFF9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
Manifest number: 155A
Signing time: Fri 13 Jun 2025 18:00:26 +0000
Manifest this update: Fri 13 Jun 2025 18:00:26 +0000
Manifest next update: Sat 14 Jun 2025 18:00:26 +0000
Files and hashes: 1: rnBvIUiPG215g2G4TvJ3vJPLCJg.roa (hash: QymikogB0QXOb1awGtB0gQkLWC08JbHRqFZVMECKiDM=)
2: t8jfPaM5OL8bJF8cRHn9JN2flPA.crl (hash: PKtRlapy8p2UZzXnkt/d0RWSgrd52zM8ohne1g5c+gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:73:3a:e3:17:69:56:87:ed:a1:6c:ce:ce:7e:ff:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c8df3da33938bf1b245f1c4479fd24dd9f94f0
Validity
Not Before: Jun 13 18:00:26 2025 GMT
Not After : Jun 14 18:00:26 2025 GMT
Subject: CN=50aaf4b8333680c1459539f82a66d8cb284ba068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:81:2c:94:a7:c8:9a:57:68:3a:97:57:46:4b:
97:2c:6d:f0:b2:b2:fe:b3:ba:43:88:de:13:9f:0a:
45:34:cb:0e:f0:5d:85:ee:2a:20:0a:cd:35:4f:83:
9d:d4:01:6f:bf:bc:27:23:ef:3e:e0:37:e4:04:f4:
1c:7c:fb:c7:9f:8d:aa:9f:9c:04:55:eb:e5:44:29:
9c:6f:83:91:40:38:da:0e:fd:a1:23:dd:c9:bd:eb:
d6:ee:cd:25:35:bb:89:4b:1b:6a:0a:e4:c9:cc:4a:
f5:74:ef:0b:dd:aa:33:94:53:7b:5d:56:29:c1:98:
8a:38:77:a7:cb:21:a3:e1:9e:06:77:d5:fa:dd:6a:
72:9a:26:1c:35:86:4e:41:be:6b:9e:9a:b4:5a:77:
9d:c8:ad:b9:af:3f:a4:da:b1:83:ec:34:cd:fa:34:
97:a2:36:7c:60:01:86:b6:00:8f:d1:51:cd:26:19:
d4:96:dc:db:bc:8b:9d:46:fd:ef:00:42:e7:58:58:
ce:45:36:ca:ef:57:27:a8:ea:03:ca:e3:97:17:18:
43:f2:b5:23:07:55:1e:36:f3:74:02:a9:c1:b0:c7:
0d:26:f1:8a:1a:d2:6a:6f:a8:40:4f:df:23:fb:6c:
7b:05:58:bd:84:9a:7f:dc:08:0d:c5:74:46:00:b5:
39:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AA:F4:B8:33:36:80:C1:45:95:39:F8:2A:66:D8:CB:28:4B:A0:68
X509v3 Authority Key Identifier:
keyid:B7:C8:DF:3D:A3:39:38:BF:1B:24:5F:1C:44:79:FD:24:DD:9F:94:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:81:14:a6:d8:2f:b1:5f:5f:76:19:41:d8:18:15:ca:af:f2:
18:0b:ba:47:41:a2:18:e4:53:15:05:ed:04:e4:94:6e:0c:94:
c0:7f:6a:82:28:52:5c:4e:d8:84:73:44:ca:57:1f:12:e8:49:
a0:52:b8:34:3b:0c:42:23:2b:f6:49:c5:4f:e6:4e:e0:0c:f8:
eb:cf:df:7e:ae:97:79:23:73:aa:9b:61:09:eb:53:3c:f9:3d:
45:f9:9a:3a:aa:1e:3f:01:25:ca:49:64:98:6d:a9:87:36:13:
0e:6b:23:fe:8d:b6:ac:48:17:d2:e0:7c:1b:60:e8:d7:41:8b:
67:89:eb:c5:8e:5e:c8:83:3b:46:1f:da:dc:23:d2:6d:bd:19:
b3:e3:ec:c5:41:49:1c:58:e1:68:85:25:0b:71:8d:f6:22:8c:
aa:04:ee:86:5e:46:05:f7:ae:c2:5a:c9:6e:05:f4:9a:09:01:
51:4e:1a:2c:c7:db:f0:4b:38:de:d8:99:ed:af:bc:17:78:cc:
fd:7b:ce:97:c6:bf:b4:8c:62:24:eb:3c:03:0e:fe:9c:db:47:
51:71:8c:75:58:a6:c8:8a:dc:d1:bf:c0:86:d4:79:f5:df:e8:
5e:81:64:eb:07:d1:95:14:7d:ba:82:f6:da:fe:54:e7:6f:1f:
96:7a:1c:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqczrjF2lWh+2hbM7Ofv+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YzhkZjNkYTMzOTM4YmYxYjI0NWYxYzQ0NzlmZDI0ZGQ5
Zjk0ZjAwHhcNMjUwNjEzMTgwMDI2WhcNMjUwNjE0MTgwMDI2WjAzMTEwLwYDVQQD
Eyg1MGFhZjRiODMzMzY4MGMxNDU5NTM5ZjgyYTY2ZDhjYjI4NGJhMDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoEslKfImldoOpdXRkuXLG3wsrL+
s7pDiN4TnwpFNMsO8F2F7iogCs01T4Od1AFvv7wnI+8+4DfkBPQcfPvHn42qn5wE
VevlRCmcb4ORQDjaDv2hI93JvevW7s0lNbuJSxtqCuTJzEr1dO8L3aozlFN7XVYp
wZiKOHenyyGj4Z4Gd9X63WpymiYcNYZOQb5rnpq0WnedyK25rz+k2rGD7DTN+jSX
ojZ8YAGGtgCP0VHNJhnUltzbvIudRv3vAELnWFjORTbK71cnqOoDyuOXFxhD8rUj
B1UeNvN0AqnBsMcNJvGKGtJqb6hAT98j+2x7BVi9hJp/3AgNxXRGALU5HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCq9LgzNoDBRZU5+Cpm2MsoS6BoMB8GA1UdIwQY
MBaAFLfI3z2jOTi/GyRfHER5/STdn5TwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDhqZlBhTTVPTDhiSkY4Y1JIbjlKTjJmbFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny80ZGQxOTgtOTNjYi00NTljLWJlZTIt
MmQxZGFhMjk5ZTgzLzEvdDhqZlBhTTVPTDhiSkY4Y1JIbjlKTjJmbFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny80ZGQxOTgtOTNjYi00NTljLWJlZTItMmQxZGFhMjk5ZTgz
LzEvdDhqZlBhTTVPTDhiSkY4Y1JIbjlKTjJmbFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYEUptgv
sV9fdhlB2BgVyq/yGAu6R0GiGORTFQXtBOSUbgyUwH9qgihSXE7YhHNEylcfEuhJ
oFK4NDsMQiMr9knFT+ZO4Az468/ffq6XeSNzqpthCetTPPk9RfmaOqoePwElyklk
mG2phzYTDmsj/o22rEgX0uB8G2Do10GLZ4nrxY5eyIM7Rh/a3CPSbb0Zs+PsxUFJ
HFjhaIUlC3GN9iKMqgTuhl5GBfeuwlrJbgX0mgkBUU4aLMfb8Es43tiZ7a+8F3jM
/XvOl8a/tIxiJOs8Aw7+nNtHUXGMdVimyIrc0b/AhtR59d/oXoFk6wfRlRR9uoL2
2v5U528flnocuA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 22:05:40 2025 by rpki-client