Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
File: N4G6usaSUnGxeYF1FeBuahCs9rQ.mft (raw, json)
Hash identifier: l+1exRtnyd4j/u9Ptu3sm49lv/sEW3/OwGxHqWEv/0g=
Subject key identifier: C0:D3:13:7F:41:30:2F:21:93:7A:2D:34:B5:0F:4B:A5:BF:ED:22:FE
Authority key identifier: 37:81:BA:BA:C6:92:52:71:B1:79:81:75:15:E0:6E:6A:10:AC:F6:B4
Certificate issuer: /CN=3781babac6925271b179817515e06e6a10acf6b4
Certificate serial: 019751589AE9E7054D65A80A664737B766B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
Manifest number: 0526
Signing time: Sun 08 Jun 2025 21:00:50 +0000
Manifest this update: Sun 08 Jun 2025 21:00:50 +0000
Manifest next update: Mon 09 Jun 2025 21:00:50 +0000
Files and hashes: 1: KTx9b_8zTKBNujioLgO_O9aKotQ.roa (hash: yLCV5gatupNfEMWSmFwUlcpYWX63PsBnn2Uc2EwJMTM=)
2: N4G6usaSUnGxeYF1FeBuahCs9rQ.crl (hash: 3M7UNANXyEXx4QXaiW4DGSyzm4UQe78mlz8fzFHOOn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:9a:e9:e7:05:4d:65:a8:0a:66:47:37:b7:66:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3781babac6925271b179817515e06e6a10acf6b4
Validity
Not Before: Jun 8 21:00:50 2025 GMT
Not After : Jun 9 21:00:50 2025 GMT
Subject: CN=c0d3137f41302f21937a2d34b50f4ba5bfed22fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bf:9e:d1:42:d9:cf:6b:e5:e0:d5:81:7e:e5:
20:bc:3c:d0:f2:16:50:cf:f4:ea:19:82:c4:65:59:
e5:56:8b:52:4f:d2:58:d1:e7:96:db:49:29:a0:a1:
5c:c2:35:01:3e:4b:66:84:08:73:0e:73:b9:aa:29:
01:db:30:97:9f:a0:2a:9d:54:03:87:31:6c:ec:d8:
d4:61:a3:14:55:52:c8:54:1e:91:9f:04:58:15:d0:
6c:68:2f:29:6f:da:58:68:36:b1:35:6b:b9:82:04:
2c:42:06:66:3c:fc:1a:01:75:2c:61:14:46:64:6d:
06:45:75:e8:79:df:46:52:20:10:1c:cb:48:9e:b9:
02:f9:8b:87:b2:86:f7:22:95:dd:3c:97:1a:c9:cd:
c1:76:fc:b9:56:9c:da:94:52:5c:2e:67:f6:05:6e:
10:5b:a3:2c:b7:e8:a9:de:5a:02:15:a6:e7:86:1a:
c6:c1:69:a9:72:ac:5e:f7:fe:76:ee:50:ea:cc:40:
60:6c:af:9e:91:21:b9:a3:ad:be:04:0a:b2:2a:8e:
54:d0:cc:4e:82:7e:81:e2:ef:dd:84:f7:39:b3:2f:
c3:8d:52:65:3b:2a:ce:ee:e8:88:ef:c8:a5:17:e6:
aa:a0:75:65:51:a3:4b:2c:92:c2:41:2b:31:35:af:
66:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D3:13:7F:41:30:2F:21:93:7A:2D:34:B5:0F:4B:A5:BF:ED:22:FE
X509v3 Authority Key Identifier:
keyid:37:81:BA:BA:C6:92:52:71:B1:79:81:75:15:E0:6E:6A:10:AC:F6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d1:7c:75:ed:34:60:36:a3:7c:57:d1:b3:96:f8:8e:8b:b5:
d5:5b:2f:65:e7:0e:61:31:48:7e:b1:3a:e7:d2:d5:92:8d:22:
58:c4:de:13:7e:db:10:ae:29:52:d0:d7:c5:cb:c2:cd:4a:46:
74:7c:68:c9:67:17:00:be:b8:cc:08:f2:1a:60:1d:87:e8:a6:
64:c3:0b:87:20:61:f4:48:20:7c:8e:59:03:94:97:b0:7d:66:
ab:a7:7d:61:ba:44:e6:49:0c:a1:2f:ec:15:19:74:3b:38:f0:
8e:74:9d:fe:b6:c1:60:34:3c:83:4a:0c:5f:1d:86:a9:a6:b3:
28:4d:d9:ea:43:88:83:f4:35:de:b5:43:92:0b:4c:98:ba:6a:
a7:7e:06:eb:44:10:c2:88:3f:37:aa:a0:03:de:53:72:9c:3d:
c1:e5:b5:ed:4c:88:90:76:d1:0c:f5:ed:ea:d8:15:6c:22:0d:
f5:9b:22:f6:46:fe:8e:6e:6f:49:f7:df:3c:61:50:3e:06:c5:
03:35:44:ec:4c:5a:51:a9:04:f5:98:59:9e:c1:ea:3c:8b:d7:
25:af:61:95:56:01:e2:08:e3:a7:2b:01:e7:05:37:37:b3:76:
e2:5c:6e:bb:44:de:44:1b:ae:a6:fb:47:48:56:a8:bc:11:cf:
f6:3c:15:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRWJrp5wVNZagKZkc3t2a1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ODFiYWJhYzY5MjUyNzFiMTc5ODE3NTE1ZTA2ZTZhMTBh
Y2Y2YjQwHhcNMjUwNjA4MjEwMDUwWhcNMjUwNjA5MjEwMDUwWjAzMTEwLwYDVQQD
EyhjMGQzMTM3ZjQxMzAyZjIxOTM3YTJkMzRiNTBmNGJhNWJmZWQyMmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7+e0ULZz2vl4NWBfuUgvDzQ8hZQ
z/TqGYLEZVnlVotST9JY0eeW20kpoKFcwjUBPktmhAhzDnO5qikB2zCXn6AqnVQD
hzFs7NjUYaMUVVLIVB6RnwRYFdBsaC8pb9pYaDaxNWu5ggQsQgZmPPwaAXUsYRRG
ZG0GRXXoed9GUiAQHMtInrkC+YuHsob3IpXdPJcayc3Bdvy5VpzalFJcLmf2BW4Q
W6Mst+ip3loCFabnhhrGwWmpcqxe9/527lDqzEBgbK+ekSG5o62+BAqyKo5U0MxO
gn6B4u/dhPc5sy/DjVJlOyrO7uiI78ilF+aqoHVlUaNLLJLCQSsxNa9mMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDTE39BMC8hk3otNLUPS6W/7SL+MB8GA1UdIwQY
MBaAFDeBurrGklJxsXmBdRXgbmoQrPa0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjRHNnVzYVNVbkd4ZVlGMUZlQnVhaENzOXJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84ZjgzYzItM2JiMy00ZDQ3LTgwMzEt
ZGU1NzFiODk2MThkLzEvTjRHNnVzYVNVbkd4ZVlGMUZlQnVhaENzOXJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS84ZjgzYzItM2JiMy00ZDQ3LTgwMzEtZGU1NzFiODk2MThk
LzEvTjRHNnVzYVNVbkd4ZVlGMUZlQnVhaENzOXJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9F8de00
YDajfFfRs5b4jou11VsvZecOYTFIfrE659LVko0iWMTeE37bEK4pUtDXxcvCzUpG
dHxoyWcXAL64zAjyGmAdh+imZMMLhyBh9EggfI5ZA5SXsH1mq6d9YbpE5kkMoS/s
FRl0OzjwjnSd/rbBYDQ8g0oMXx2GqaazKE3Z6kOIg/Q13rVDkgtMmLpqp34G60QQ
wog/N6qgA95Tcpw9weW17UyIkHbRDPXt6tgVbCIN9Zsi9kb+jm5vSfffPGFQPgbF
AzVE7ExaUakE9ZhZnsHqPIvXJa9hlVYB4gjjpysB5wU3N7N24lxuu0TeRBuupvtH
SFaovBHP9jwVFQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 07:40:43 2025 by rpki-client