Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
File: T1JcTLrI19lzMkWHalyr5rNeL-k.mft (raw, json)
Hash identifier: p+Ia3HFacSHPmjQ1JS/OC+pV3elcoPGrF8dXcCdHp0M=
Subject key identifier: 89:C9:66:11:0B:B3:05:06:F2:A8:59:A1:A5:F3:99:B9:1F:1F:EA:38
Authority key identifier: 4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
Certificate issuer: /CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Certificate serial: 0197647180F26DE1259B6C30BA61280B2EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
Manifest number: 0E21
Signing time: Thu 12 Jun 2025 14:00:49 +0000
Manifest this update: Thu 12 Jun 2025 14:00:49 +0000
Manifest next update: Fri 13 Jun 2025 14:00:49 +0000
Files and hashes: 1: T1JcTLrI19lzMkWHalyr5rNeL-k.crl (hash: +tuSGBa3/64IAuIwH+6QR5Klqx8Ynv4EIPlss7qAYIY=)
2: c8I1j-_EdlLIZz3-7BnhuaavJno.roa (hash: CwCN8RoP1XffLa+Wr9AuQzfDKd1y2haHBaFngEMqfpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:71:80:f2:6d:e1:25:9b:6c:30:ba:61:28:0b:2e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Validity
Not Before: Jun 12 14:00:49 2025 GMT
Not After : Jun 13 14:00:49 2025 GMT
Subject: CN=89c966110bb30506f2a859a1a5f399b91f1fea38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:58:c8:e3:42:5e:d2:93:8e:3f:99:bf:14:16:
59:6b:be:86:6f:6b:de:e4:f7:5c:2a:57:74:da:36:
f8:07:cb:01:66:db:5b:37:38:9e:b8:23:83:11:38:
3f:3d:a8:a2:26:41:0f:04:d2:f8:77:33:3b:db:25:
50:aa:67:67:5d:68:0e:60:5f:c4:e1:4f:6c:7a:e3:
6c:39:1a:ab:03:e5:ac:7a:fe:76:34:48:82:e6:50:
16:8a:91:3c:98:e7:1a:5a:f0:6f:41:55:78:fc:c8:
01:a3:fb:70:62:34:79:35:64:7d:26:63:b0:b2:c5:
59:a5:a6:da:b9:f4:c8:01:72:9f:a2:93:e5:37:1a:
dc:09:43:de:47:82:97:8f:f1:cb:4b:70:ec:54:82:
ce:a0:81:2e:04:62:39:e1:ad:5a:06:61:8b:a3:c6:
74:5d:51:05:0a:f2:3e:ce:ee:2d:de:1a:2f:df:b6:
c8:85:17:b7:42:d7:99:45:e2:1c:e2:6a:9a:04:ec:
3e:63:70:ad:8e:b3:a3:67:63:cd:6b:98:0c:ba:9a:
7f:8b:24:e0:c6:18:f7:29:a3:f6:6c:86:9c:85:5d:
29:35:9c:08:c5:cc:b2:9a:e8:bf:84:91:72:fb:ba:
1f:b9:ab:8f:c8:2d:b5:4d:ab:f1:95:f5:e4:59:81:
e2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C9:66:11:0B:B3:05:06:F2:A8:59:A1:A5:F3:99:B9:1F:1F:EA:38
X509v3 Authority Key Identifier:
keyid:4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:54:96:6d:d9:c3:5e:58:ed:97:bd:6c:c6:cb:89:8c:a8:bc:
59:95:ad:a6:3a:14:5a:7b:35:08:ed:fa:1c:f8:d1:b4:10:55:
d9:0d:ab:56:26:ed:c6:55:d2:3f:10:25:f5:1b:86:e9:6a:9d:
d0:d9:41:8a:33:05:73:4d:cf:34:8e:c7:4b:e8:60:92:4d:f5:
c0:76:d7:5d:e2:bf:3b:50:35:29:2d:9c:76:91:51:2e:db:52:
cd:8d:47:3c:d6:86:fb:25:13:47:42:30:af:fd:87:79:07:1d:
76:63:1f:0e:1e:84:34:7a:13:c7:df:01:4a:c8:16:fa:26:fc:
8a:de:21:12:8e:0c:22:2e:d6:60:fc:8b:4a:61:40:a5:21:b9:
19:be:60:b3:64:35:76:f0:2d:1d:0b:cb:7b:e4:d1:48:ad:90:
2a:64:b3:01:e6:bb:fe:2c:17:ab:34:57:06:6f:3f:a3:ac:d4:
3c:d1:f3:eb:cc:ce:5e:89:7e:f5:34:b1:7d:41:7f:b4:c2:29:
f5:c9:3f:6e:65:c5:73:1a:2a:1e:7a:7f:3c:0b:24:93:0b:95:
60:73:a2:aa:68:bb:2a:a2:39:45:d2:d5:b4:ed:6e:18:70:52:
4f:46:db:f4:18:8d:18:85:51:fa:6b:b0:4b:21:7a:6e:24:0f:
b5:2c:3a:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdkcYDybeElm2wwumEoCy71MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNTI1YzRjYmFjOGQ3ZDk3MzMyNDU4NzZhNWNhYmU2YjM1
ZTJmZTkwHhcNMjUwNjEyMTQwMDQ5WhcNMjUwNjEzMTQwMDQ5WjAzMTEwLwYDVQQD
Eyg4OWM5NjYxMTBiYjMwNTA2ZjJhODU5YTFhNWYzOTliOTFmMWZlYTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmljI40Je0pOOP5m/FBZZa76Gb2ve
5PdcKld02jb4B8sBZttbNzieuCODETg/PaiiJkEPBNL4dzM72yVQqmdnXWgOYF/E
4U9seuNsORqrA+Wsev52NEiC5lAWipE8mOcaWvBvQVV4/MgBo/twYjR5NWR9JmOw
ssVZpabaufTIAXKfopPlNxrcCUPeR4KXj/HLS3DsVILOoIEuBGI54a1aBmGLo8Z0
XVEFCvI+zu4t3hov37bIhRe3QteZReIc4mqaBOw+Y3CtjrOjZ2PNa5gMupp/iyTg
xhj3KaP2bIachV0pNZwIxcyymui/hJFy+7ofuauPyC21TavxlfXkWYHi8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInJZhELswUG8qhZoaXzmbkfH+o4MB8GA1UdIwQY
MBaAFE9SXEy6yNfZczJFh2pcq+azXi/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDFKY1RMckkxOWx6TWtXSGFseXI1ck5lTC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yOGE1ZjktOTA3MS00NDU5LTk4Mjkt
NTU3OTVjMjZlYWNhLzEvVDFKY1RMckkxOWx6TWtXSGFseXI1ck5lTC1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8yOGE1ZjktOTA3MS00NDU5LTk4MjktNTU3OTVjMjZlYWNh
LzEvVDFKY1RMckkxOWx6TWtXSGFseXI1ck5lTC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVSWbdnD
Xljtl71sxsuJjKi8WZWtpjoUWns1CO36HPjRtBBV2Q2rVibtxlXSPxAl9RuG6Wqd
0NlBijMFc03PNI7HS+hgkk31wHbXXeK/O1A1KS2cdpFRLttSzY1HPNaG+yUTR0Iw
r/2HeQcddmMfDh6ENHoTx98BSsgW+ib8it4hEo4MIi7WYPyLSmFApSG5Gb5gs2Q1
dvAtHQvLe+TRSK2QKmSzAea7/iwXqzRXBm8/o6zUPNHz68zOXol+9TSxfUF/tMIp
9ck/bmXFcxoqHnp/PAskkwuVYHOiqmi7KqI5RdLVtO1uGHBST0bb9BiNGIVR+muw
SyF6biQPtSw6HQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 21:05:23 2025 by rpki-client