Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
File: T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft (raw, json)
Hash identifier: HYDKlt9gnR1Y3/koz4OA4QFbvCJ+I4qJ5JlQqSfl1fM=
Subject key identifier: 96:E7:36:2C:59:59:E1:07:50:5B:C6:54:C0:A6:65:6E:83:3D:64:7A
Authority key identifier: 4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
Certificate issuer: /CN=4fbb63df06de00c843da63977349595471e51a26
Certificate serial: 019751C60C817CDF756DF7F1F742B39CB2FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 23:00:23 +0000
Manifest this update: Sun 08 Jun 2025 23:00:23 +0000
Manifest next update: Mon 09 Jun 2025 23:00:23 +0000
Files and hashes: 1: T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl (hash: n9fWnOCqaDnec+F5cR9w5xXDVhMSD0ilK7mXCvD9BOg=)
2: qMVYOgqIzk9KMROylZiVtF-t3Zc.roa (hash: xqIRDpc2sFOdr1/l4Pzbo0nNaeEXShJ8C0GuGpTGneI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:0c:81:7c:df:75:6d:f7:f1:f7:42:b3:9c:b2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbb63df06de00c843da63977349595471e51a26
Validity
Not Before: Jun 8 23:00:23 2025 GMT
Not After : Jun 9 23:00:23 2025 GMT
Subject: CN=96e7362c5959e107505bc654c0a6656e833d647a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b7:2e:c8:d1:fa:12:a1:1c:6f:08:42:4c:14:
30:fd:84:a0:6b:e6:34:1e:8a:4b:b5:88:ea:36:88:
b0:34:e7:0b:d1:59:b1:81:b9:13:b7:1b:fe:77:bd:
63:e2:17:cc:f9:13:b1:4c:52:1c:1a:6b:71:15:c5:
92:f6:5b:5b:2c:75:fc:63:a2:32:b7:f4:58:f7:1c:
8c:cd:48:44:ca:e6:14:fe:d2:74:c8:16:17:25:62:
f6:fe:24:b7:0c:2c:84:3c:a2:a9:9d:be:c2:7c:c4:
49:62:bb:9a:f6:6f:e1:14:84:ac:62:0f:d9:2c:d2:
1a:7d:80:27:cc:63:5d:b3:eb:ee:9b:88:49:c3:2e:
ce:02:a6:ce:18:b2:68:17:98:d1:f4:b9:21:c1:af:
cb:1e:b0:10:f6:9f:d4:ff:f2:2f:5c:38:e0:73:86:
12:61:f5:5a:e9:ca:03:c8:52:3b:b2:61:23:18:4d:
8d:ac:2b:37:9f:3b:75:86:77:df:40:75:b1:fe:dc:
9d:f0:02:b8:df:cf:c2:20:8d:48:78:aa:3e:a9:5d:
2b:cf:28:cf:3c:d1:25:1c:39:ed:98:d5:6f:90:75:
68:3d:35:f9:53:fd:91:12:ef:21:37:86:99:b4:74:
42:96:ec:25:6e:25:3e:cf:9b:09:98:78:e5:d8:4d:
90:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E7:36:2C:59:59:E1:07:50:5B:C6:54:C0:A6:65:6E:83:3D:64:7A
X509v3 Authority Key Identifier:
keyid:4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4b:f5:4f:e8:37:f7:45:39:a9:65:62:85:eb:19:4a:a1:1c:
ac:e6:f0:83:69:03:08:3d:a2:c9:f5:7b:2c:6f:39:22:08:75:
97:f9:79:40:60:60:5a:62:c4:bc:e1:8f:8e:0d:6c:22:fd:44:
c3:11:4c:1d:47:a9:84:9d:8c:fa:f9:ec:94:7c:62:d0:4c:6d:
88:f5:8b:16:9b:ab:07:d1:dc:41:af:8f:ce:d6:3a:fc:d0:fa:
a1:fa:39:b5:32:02:13:5d:56:2b:d8:2e:ca:af:8f:b7:92:b6:
13:05:62:f8:64:a3:23:15:d4:87:b0:3b:5e:90:9e:55:82:30:
bd:22:f0:f1:e5:32:75:d4:58:0d:4d:49:72:5f:b0:11:f1:77:
76:aa:3f:a3:6a:06:86:78:17:04:cc:18:50:88:a8:0e:87:ce:
7a:1c:13:ee:ff:4a:0b:68:05:eb:4b:ed:75:3c:5d:17:19:13:
d2:89:87:24:db:3f:da:f2:14:af:02:20:2c:ab:f9:b8:b5:cb:
e6:f7:e6:11:d2:71:c0:76:06:6f:da:31:0c:7a:2e:15:68:d7:
3a:c2:17:be:dd:f1:22:79:e3:d5:ea:0d:38:4c:5b:1f:e1:dc:
ab:74:06:dd:a5:22:1f:4c:ac:c6:e4:0e:6a:34:2d:8c:22:75:
b6:cb:ed:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRxgyBfN91bffx90KznLL8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmI2M2RmMDZkZTAwYzg0M2RhNjM5NzczNDk1OTU0NzFl
NTFhMjYwHhcNMjUwNjA4MjMwMDIzWhcNMjUwNjA5MjMwMDIzWjAzMTEwLwYDVQQD
Eyg5NmU3MzYyYzU5NTllMTA3NTA1YmM2NTRjMGE2NjU2ZTgzM2Q2NDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bcuyNH6EqEcbwhCTBQw/YSga+Y0
HopLtYjqNoiwNOcL0VmxgbkTtxv+d71j4hfM+ROxTFIcGmtxFcWS9ltbLHX8Y6Iy
t/RY9xyMzUhEyuYU/tJ0yBYXJWL2/iS3DCyEPKKpnb7CfMRJYrua9m/hFISsYg/Z
LNIafYAnzGNds+vum4hJwy7OAqbOGLJoF5jR9Lkhwa/LHrAQ9p/U//IvXDjgc4YS
YfVa6coDyFI7smEjGE2NrCs3nzt1hnffQHWx/tyd8AK438/CII1IeKo+qV0rzyjP
PNElHDntmNVvkHVoPTX5U/2REu8hN4aZtHRCluwlbiU+z5sJmHjl2E2QrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbnNixZWeEHUFvGVMCmZW6DPWR6MB8GA1UdIwQY
MBaAFE+7Y98G3gDIQ9pjl3NJWVRx5RomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDd0ajN3YmVBTWhEMm1PWGMwbFpWSEhsR2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hNTllZTktMzNjZC00N2RmLTg0MDMt
Yjk0NzJhMmM1YjNlLzEvVDd0ajN3YmVBTWhEMm1PWGMwbFpWSEhsR2lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hNTllZTktMzNjZC00N2RmLTg0MDMtYjk0NzJhMmM1YjNl
LzEvVDd0ajN3YmVBTWhEMm1PWGMwbFpWSEhsR2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHEv1T+g3
90U5qWVihesZSqEcrObwg2kDCD2iyfV7LG85Igh1l/l5QGBgWmLEvOGPjg1sIv1E
wxFMHUephJ2M+vnslHxi0ExtiPWLFpurB9HcQa+PztY6/ND6ofo5tTICE11WK9gu
yq+Pt5K2EwVi+GSjIxXUh7A7XpCeVYIwvSLw8eUyddRYDU1Jcl+wEfF3dqo/o2oG
hngXBMwYUIioDofOehwT7v9KC2gF60vtdTxdFxkT0omHJNs/2vIUrwIgLKv5uLXL
5vfmEdJxwHYGb9oxDHouFWjXOsIXvt3xInnj1eoNOExbH+Hcq3QG3aUiH0ysxuQO
ajQtjCJ1tsvtAw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 08:13:01 2025 by rpki-client