Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
File: Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft (raw, json)
Hash identifier: pyfVm+6lrOlJWk/NvGUe2ZftI+bjJUB2ZQqYXNzzmGs=
Subject key identifier: 70:6C:F4:0C:CA:55:BD:52:CC:A2:D0:33:5A:CF:34:06:65:F1:A3:7B
Authority key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
Certificate issuer: /CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Certificate serial: 019758DB5CEEDA910F1B38673DFB3C6C7182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
Manifest number: 157D
Signing time: Tue 10 Jun 2025 08:01:00 +0000
Manifest this update: Tue 10 Jun 2025 08:01:00 +0000
Manifest next update: Wed 11 Jun 2025 08:01:00 +0000
Files and hashes: 1: EsNde2nZ0dUcA8Xoq5-tHg_EXc8.roa (hash: EuB6IqBcAAWKbULQ1dsjzb0/Ucv72mc0J9mJsdHmCGA=)
2: Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl (hash: toOOZZfcbYqaKUzgN/BzSLzni93ikQuUT9QEcd4NWAE=)
3: eUaNjbQ13AL_bdj9OsodbJhievk.roa (hash: vqTtUX/Z4j6GrRJo/zNXECftqpV9YIa2rqV3Ge4NXvs=)
4: occ86qiOIs73r7C894le5tLORUc.roa (hash: vjqBb3FygjXd34w4UXc66ToikB55Yx9gYxFBgH7Uvw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:db:5c:ee:da:91:0f:1b:38:67:3d:fb:3c:6c:71:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Validity
Not Before: Jun 10 08:01:00 2025 GMT
Not After : Jun 11 08:01:00 2025 GMT
Subject: CN=706cf40cca55bd52cca2d0335acf340665f1a37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:22:21:91:48:5a:4f:a2:83:db:79:ed:41:
60:2e:4c:e5:b9:78:50:7f:de:f5:be:c7:8c:3b:ff:
85:74:f5:fa:60:c1:6e:88:b6:8f:99:1f:2c:81:57:
07:cc:49:94:70:4e:24:f4:d2:69:f1:4f:90:23:fa:
6f:d7:ed:fe:a9:1a:e7:02:d3:62:57:a2:48:bf:ca:
b7:ff:6f:6f:91:19:a8:e8:a3:7e:76:b2:a7:db:87:
12:b9:08:ad:bb:dd:2d:16:7e:86:61:7b:11:64:d5:
a8:6d:cd:90:d7:2a:a0:62:5d:3f:6b:4b:79:f7:19:
6c:f0:55:8b:b3:d7:58:da:50:24:47:82:64:ee:af:
a5:87:3f:c7:15:2f:23:bc:dc:6a:c1:c7:37:28:5e:
08:0a:13:85:5f:30:6e:2d:43:95:f6:2c:6d:7b:52:
0c:d5:e7:1b:fb:b7:06:c0:8a:46:16:cf:73:b4:2b:
55:2d:2a:fd:5e:dc:00:ff:c6:f4:79:86:fd:79:3f:
2e:c3:46:af:7e:df:8b:6e:c7:04:ef:7f:0d:bc:50:
b5:5c:3f:55:6b:77:0f:e3:45:64:4c:ac:bb:08:37:
98:38:67:fd:4e:d4:45:9e:4b:eb:ca:31:8a:9e:e5:
27:43:9b:b6:f3:39:19:e2:37:a4:cb:1c:52:af:ec:
e1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6C:F4:0C:CA:55:BD:52:CC:A2:D0:33:5A:CF:34:06:65:F1:A3:7B
X509v3 Authority Key Identifier:
keyid:4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:36:86:af:49:4e:0a:24:34:86:40:24:56:16:8a:d2:0e:16:
83:b8:1c:b6:09:1b:35:2d:09:d6:f4:cd:7b:32:0d:74:0a:d2:
41:87:10:ea:03:5c:c1:34:e8:41:24:7d:0d:5f:d6:68:2c:0b:
a5:d3:46:71:17:e3:a3:ae:e0:17:a2:36:d5:17:e5:57:ad:b7:
70:64:ed:58:c5:14:b5:36:12:37:86:43:01:9a:a8:50:8a:b1:
4c:4e:4b:12:c7:2c:82:a5:a2:80:13:c2:57:9f:21:e7:fd:ec:
c3:52:8a:3b:ca:43:ca:99:73:8b:e6:ec:87:9f:00:60:27:3d:
61:81:d8:fe:7a:0e:08:c8:50:72:01:01:a8:31:87:cf:41:fc:
39:d0:e8:ea:7d:ab:b1:19:5c:d7:05:0b:4b:2a:54:46:c9:c2:
37:8b:c5:73:4b:f0:61:5c:f2:1e:57:f0:50:1a:42:58:62:d7:
bd:3d:6f:de:4d:a8:70:0c:f7:7a:14:4a:e2:8a:bc:b9:7e:43:
2f:f6:e8:6f:0b:13:35:66:67:70:63:9f:c1:28:e7:cd:e1:4f:
8e:89:b2:2a:e3:89:35:e6:e6:06:07:88:73:22:8c:85:57:35:
04:5c:f7:7d:ac:5d:04:de:cf:d1:ef:01:4f:a3:b6:79:e3:c3:
b5:a4:02:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdY21zu2pEPGzhnPfs8bHGCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZWY2YWFlNmZiYTVjNjFhNjE3MzlhZmNhYjU1YTYyMjY2
ZTg5ZWUwHhcNMjUwNjEwMDgwMTAwWhcNMjUwNjExMDgwMTAwWjAzMTEwLwYDVQQD
Eyg3MDZjZjQwY2NhNTViZDUyY2NhMmQwMzM1YWNmMzQwNjY1ZjFhMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYEiIZFIWk+ig9t57UFgLkzluXhQ
f971vseMO/+FdPX6YMFuiLaPmR8sgVcHzEmUcE4k9NJp8U+QI/pv1+3+qRrnAtNi
V6JIv8q3/29vkRmo6KN+drKn24cSuQitu90tFn6GYXsRZNWobc2Q1yqgYl0/a0t5
9xls8FWLs9dY2lAkR4Jk7q+lhz/HFS8jvNxqwcc3KF4IChOFXzBuLUOV9ixte1IM
1ecb+7cGwIpGFs9ztCtVLSr9XtwA/8b0eYb9eT8uw0avft+LbscE738NvFC1XD9V
a3cP40VkTKy7CDeYOGf9TtRFnkvryjGKnuUnQ5u28zkZ4jekyxxSr+zh9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBs9AzKVb1SzKLQM1rPNAZl8aN7MB8GA1UdIwQY
MBaAFE7vaq5vulxhphc5r8q1WmImbonuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHU5cXJtLTZYR0dtRnptdnlyVmFZaVp1aWU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iOGU1YzQtMzhlYi00NDVmLWIwMzYt
YzM3NzkwZTZkNDgyLzEvVHU5cXJtLTZYR0dtRnptdnlyVmFZaVp1aWU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iOGU1YzQtMzhlYi00NDVmLWIwMzYtYzM3NzkwZTZkNDgy
LzEvVHU5cXJtLTZYR0dtRnptdnlyVmFZaVp1aWU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFDaGr0lO
CiQ0hkAkVhaK0g4Wg7gctgkbNS0J1vTNezINdArSQYcQ6gNcwTToQSR9DV/WaCwL
pdNGcRfjo67gF6I21RflV623cGTtWMUUtTYSN4ZDAZqoUIqxTE5LEscsgqWigBPC
V58h5/3sw1KKO8pDyplzi+bsh58AYCc9YYHY/noOCMhQcgEBqDGHz0H8OdDo6n2r
sRlc1wULSypURsnCN4vFc0vwYVzyHlfwUBpCWGLXvT1v3k2ocAz3ehRK4oq8uX5D
L/bobwsTNWZncGOfwSjnzeFPjomyKuOJNebmBgeIcyKMhVc1BFz3faxdBN7P0e8B
T6O2eePDtaQCdQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 18:17:40 2025 by rpki-client