Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
File: tGTgryi3VcTsiAENlCmGl9GIOTM.mft (raw, json)
Hash identifier: QhMm7dCnXwqQoeWHsz2CuW6vDjuFEkAKPsRwKkDs14E=
Subject key identifier: 12:51:CD:61:A4:5D:AD:61:65:18:C8:CA:4D:A3:12:E6:85:27:0B:CA
Authority key identifier: B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
Certificate issuer: /CN=b464e0af28b755c4ec88010d94298697d1883933
Certificate serial: 01974B1FAE5689120348E9E10234A62E468C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
Manifest number: 0741
Signing time: Sat 07 Jun 2025 16:00:56 +0000
Manifest this update: Sat 07 Jun 2025 16:00:56 +0000
Manifest next update: Sun 08 Jun 2025 16:00:56 +0000
Files and hashes: 1: 4ZUimyMSrmZMeMTJpofdIprKN0Y.roa (hash: +sbrqZ7npPQY0M7RUiP5uMAuk7XGp56zDb3oxzfgBs8=)
2: D6cOOwuzIu0b1VD3IEBzEJwwwCo.roa (hash: v5PJLnM3bwyGnG1xvGzcUgGuOEM5ARi6RIpoEpY7P4s=)
3: fyoJ9a9SSU9QMOOAnopUi24XOCI.roa (hash: Oq4G4KqExdW+YSWtwOksmXAFXdtGTgedgjAZaCPW9DM=)
4: tGTgryi3VcTsiAENlCmGl9GIOTM.crl (hash: RyIinex7MjN9ocoGkGpO9A2oV99pSjD3zEtYMrv2W8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:ae:56:89:12:03:48:e9:e1:02:34:a6:2e:46:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464e0af28b755c4ec88010d94298697d1883933
Validity
Not Before: Jun 7 16:00:56 2025 GMT
Not After : Jun 8 16:00:56 2025 GMT
Subject: CN=1251cd61a45dad616518c8ca4da312e685270bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:96:91:cc:3e:ed:73:a0:85:79:bb:32:9c:
65:f7:ac:d4:3a:63:10:88:57:c8:02:d1:2e:e2:bb:
5f:5a:75:9d:fe:b7:38:42:e5:90:47:e2:1f:82:fc:
2e:58:a0:29:42:6c:2b:4e:67:f7:e8:55:06:4a:b8:
5e:68:9f:3d:41:60:71:8b:3f:6d:4b:9c:e1:7e:a4:
88:5a:7a:fe:3e:34:c7:ff:dc:5e:8f:98:65:e3:7d:
04:d4:a7:4c:77:53:44:a1:fa:ba:48:bc:8e:0c:99:
b9:0f:57:53:e3:75:5c:bb:cb:3f:46:8b:3e:17:f3:
67:ba:76:28:11:b8:06:74:c2:dd:5f:34:72:a6:52:
39:b6:a0:bd:e0:0f:0f:ab:9e:e0:03:df:5c:6c:51:
df:89:bb:5b:1d:12:fe:80:96:c9:64:bb:49:4f:ea:
7b:09:7e:6d:6f:e0:6e:d3:3f:f7:15:a2:e7:5b:3c:
97:d4:87:93:37:ad:4b:8d:c9:1f:20:6d:b8:41:d3:
e2:1d:de:2a:2d:fb:3b:e8:dc:c5:c1:49:01:f7:17:
bf:de:51:7b:a6:1c:75:dd:0a:27:77:1f:99:ad:fb:
c8:58:55:f1:78:5e:ad:04:ce:94:ee:21:a1:f7:e5:
cb:e6:cb:37:4d:c1:6e:3a:53:1b:89:b7:d8:ff:e7:
14:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:51:CD:61:A4:5D:AD:61:65:18:C8:CA:4D:A3:12:E6:85:27:0B:CA
X509v3 Authority Key Identifier:
keyid:B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:0e:32:eb:aa:ed:65:65:a3:d2:4f:97:25:ca:7b:3d:f2:25:
68:a3:e1:c6:ab:f6:52:1e:3e:89:4e:f6:e8:9f:80:36:94:a0:
6b:f7:a6:9b:65:16:9c:f1:e5:a5:ef:9a:5d:6d:da:70:2b:1e:
24:2e:20:ca:53:37:19:9f:ae:95:68:11:20:73:40:0b:df:72:
a5:2c:03:9b:aa:3b:07:0c:a5:97:73:d4:6c:c5:12:1c:a2:b7:
4b:bf:15:70:8a:d5:3b:a7:86:4a:30:1f:19:21:e2:9d:25:fa:
e3:2f:df:88:9e:72:bf:5a:83:3a:76:3b:de:61:12:79:4c:3a:
30:d3:ca:04:af:5c:ee:bd:69:7f:c3:89:9f:e9:dd:ec:20:1d:
f4:16:6c:e2:7c:28:0a:66:f0:89:1c:29:6e:7a:1e:8c:8c:5c:
b4:bd:32:1f:db:93:7e:6d:64:08:90:dc:de:53:b2:dc:fb:d7:
bf:a9:9a:e4:cd:f3:44:77:2b:6c:5d:82:0c:68:b1:03:c9:89:
c0:a5:5e:0c:81:7d:40:25:c5:30:4e:6d:18:5d:e3:f2:b2:b3:
b5:02:4e:ff:c4:40:ef:13:4d:cf:99:8d:8a:55:84:24:f0:ba:
77:9a:1c:80:81:24:25:45:be:3d:38:77:7a:ed:d7:8f:df:b5:
2e:d0:11:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLH65WiRIDSOnhAjSmLkaMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjRlMGFmMjhiNzU1YzRlYzg4MDEwZDk0Mjk4Njk3ZDE4
ODM5MzMwHhcNMjUwNjA3MTYwMDU2WhcNMjUwNjA4MTYwMDU2WjAzMTEwLwYDVQQD
EygxMjUxY2Q2MWE0NWRhZDYxNjUxOGM4Y2E0ZGEzMTJlNjg1MjcwYmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy+Wkcw+7XOghXm7Mpxl96zUOmMQ
iFfIAtEu4rtfWnWd/rc4QuWQR+IfgvwuWKApQmwrTmf36FUGSrheaJ89QWBxiz9t
S5zhfqSIWnr+PjTH/9xej5hl430E1KdMd1NEofq6SLyODJm5D1dT43Vcu8s/Ros+
F/NnunYoEbgGdMLdXzRyplI5tqC94A8Pq57gA99cbFHfibtbHRL+gJbJZLtJT+p7
CX5tb+Bu0z/3FaLnWzyX1IeTN61LjckfIG24QdPiHd4qLfs76NzFwUkB9xe/3lF7
phx13Qondx+ZrfvIWFXxeF6tBM6U7iGh9+XL5ss3TcFuOlMbibfY/+cUPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJRzWGkXa1hZRjIyk2jEuaFJwvKMB8GA1UdIwQY
MBaAFLRk4K8ot1XE7IgBDZQphpfRiDkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdUZ3J5aTNWY1RzaUFFTmxDbUdsOUdJT1RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wY2FhNmQtMTA5ZS00NWYzLWE5MzIt
NDc1YzVjOTFmNDc0LzEvdEdUZ3J5aTNWY1RzaUFFTmxDbUdsOUdJT1RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8wY2FhNmQtMTA5ZS00NWYzLWE5MzItNDc1YzVjOTFmNDc0
LzEvdEdUZ3J5aTNWY1RzaUFFTmxDbUdsOUdJT1RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsw4y66rt
ZWWj0k+XJcp7PfIlaKPhxqv2Uh4+iU726J+ANpSga/emm2UWnPHlpe+aXW3acCse
JC4gylM3GZ+ulWgRIHNAC99ypSwDm6o7Bwyll3PUbMUSHKK3S78VcIrVO6eGSjAf
GSHinSX64y/fiJ5yv1qDOnY73mESeUw6MNPKBK9c7r1pf8OJn+nd7CAd9BZs4nwo
CmbwiRwpbnoejIxctL0yH9uTfm1kCJDc3lOy3PvXv6ma5M3zRHcrbF2CDGixA8mJ
wKVeDIF9QCXFME5tGF3j8rKztQJO/8RA7xNNz5mNilWEJPC6d5ocgIEkJUW+PTh3
eu3Xj9+1LtARGQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:01:36 2025 by rpki-client