Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
File: 9TRtPtvsbacngHIsCkGr7qY2Ydg.mft (raw, json)
Hash identifier: vt7h8mdje+kU5J5H+NHqLC/gTHXkdHrrQbaqZm6z2sI=
Subject key identifier: AF:B7:AE:34:53:7A:85:0E:A8:B3:00:DE:80:CA:48:6E:DA:40:B5:31
Authority key identifier: F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8
Certificate issuer: /CN=f5346d3edbec6da72780722c0a41abeea63661d8
Certificate serial: 019748552C28E27F2D53B59E840AE54861BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 03:00:30 +0000
Manifest this update: Sat 07 Jun 2025 03:00:30 +0000
Manifest next update: Sun 08 Jun 2025 03:00:30 +0000
Files and hashes: 1: 9TRtPtvsbacngHIsCkGr7qY2Ydg.crl (hash: N2ovZpfTNMXHLD083kDvQFxR8bn3wZOdQ2uKF1d1HVg=)
2: Ru57e4KJGmCNDXrPayGNrM1Z2dE.roa (hash: PjkMG0o3XCBX2V0z1wG5kUtXFYLyKVu1bhkUTY6FzyU=)
3: nRY6f0HmJ7S8CYmolnmrtVb1JGw.roa (hash: jhgaQrPs/TQq82v7wbUyYwj7VfBFttXWHM8WTx1fF9k=)
4: wn3IojBdCy5Wl_2EBruQi7YNS44.roa (hash: 1KdRgMRZAJuO8z+H0eUMB9aA/0ER0ehetz8BXxZxUoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:2c:28:e2:7f:2d:53:b5:9e:84:0a:e5:48:61:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5346d3edbec6da72780722c0a41abeea63661d8
Validity
Not Before: Jun 7 03:00:30 2025 GMT
Not After : Jun 8 03:00:30 2025 GMT
Subject: CN=afb7ae34537a850ea8b300de80ca486eda40b531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:2d:1a:8d:ab:ed:e5:29:74:b4:80:50:ac:
72:49:72:8c:88:79:27:79:43:de:b5:bb:1c:7a:34:
5a:a5:37:17:c6:ec:40:85:ec:d1:48:f2:c1:03:03:
15:b6:ca:ff:48:1a:11:2b:87:70:00:60:8e:2f:4c:
76:ea:73:b2:4e:60:79:f7:2a:c8:bb:12:7a:4d:a1:
79:6c:78:20:11:07:f6:ce:6f:50:b5:cc:68:06:d2:
bd:0c:e0:fa:be:2d:57:5c:c2:41:b1:a1:1a:f4:15:
56:77:80:0f:32:f5:c3:2b:11:14:73:07:44:6d:49:
8c:a8:94:c4:3b:e7:9f:3e:09:ba:88:fd:50:dc:f4:
2b:f2:cd:84:5f:97:a1:1c:1f:81:c5:9b:d7:c0:aa:
74:57:ce:b1:e0:67:e2:3c:0a:d3:63:d6:99:8e:1a:
5f:d7:a7:26:45:ab:35:bd:24:8c:1b:cb:58:73:f8:
2e:41:13:a7:64:24:8d:9c:b7:c8:dc:fe:0d:94:47:
02:09:49:b8:46:0d:17:72:5d:62:ce:4b:06:43:3d:
fe:ce:ad:b9:fb:de:06:da:9f:1f:8e:08:c6:00:92:
8d:7b:15:cb:82:ab:46:1b:70:88:dd:3a:71:d5:f0:
c6:3a:97:36:2e:03:19:2d:f4:e1:81:f5:7b:59:2f:
17:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B7:AE:34:53:7A:85:0E:A8:B3:00:DE:80:CA:48:6E:DA:40:B5:31
X509v3 Authority Key Identifier:
keyid:F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:94:85:1f:ff:07:b7:e7:10:8a:3c:83:ac:2c:60:bd:1c:5e:
5d:28:d6:ab:dc:e7:ca:61:e2:38:a0:55:b6:02:60:9e:2f:11:
a6:17:de:cf:6e:9d:fb:74:f7:2d:8e:62:de:09:e9:ea:22:92:
0c:74:68:f2:5c:83:2f:07:2c:dd:29:ab:69:ae:29:3e:3c:39:
55:ad:58:2a:a1:75:72:ac:6f:2b:7e:af:52:6d:be:67:77:19:
f2:1a:ae:85:9e:5a:6b:2d:43:07:0c:d4:84:8e:cd:1f:6f:a6:
df:83:81:89:5c:4f:05:4b:8c:f1:6d:86:7e:c7:c4:bb:7f:98:
27:1a:c9:07:e9:94:fb:f0:ac:91:aa:70:46:d2:12:ab:0d:7a:
3e:73:00:4b:b5:3d:45:97:9e:c8:94:f2:59:fe:27:ec:70:d2:
6f:3a:3c:6a:94:74:63:35:5e:0f:b3:02:d9:92:a4:41:dd:ef:
d4:ae:7a:24:70:84:3f:db:71:f4:95:20:0d:c3:de:c2:6c:48:
c2:5c:49:58:05:88:ac:b7:7c:d7:d5:ab:62:a3:85:c5:22:40:
f9:0d:e0:7d:43:c0:37:b3:31:46:b7:a8:71:f2:eb:5d:50:5e:
dd:eb:6b:39:13:95:12:ef:b9:e2:31:88:a6:19:08:20:73:8b:
dd:15:fd:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIVSwo4n8tU7WehArlSGG7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MzQ2ZDNlZGJlYzZkYTcyNzgwNzIyYzBhNDFhYmVlYTYz
NjYxZDgwHhcNMjUwNjA3MDMwMDMwWhcNMjUwNjA4MDMwMDMwWjAzMTEwLwYDVQQD
EyhhZmI3YWUzNDUzN2E4NTBlYThiMzAwZGU4MGNhNDg2ZWRhNDBiNTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtngtGo2r7eUpdLSAUKxySXKMiHkn
eUPetbscejRapTcXxuxAhezRSPLBAwMVtsr/SBoRK4dwAGCOL0x26nOyTmB59yrI
uxJ6TaF5bHggEQf2zm9QtcxoBtK9DOD6vi1XXMJBsaEa9BVWd4APMvXDKxEUcwdE
bUmMqJTEO+efPgm6iP1Q3PQr8s2EX5ehHB+BxZvXwKp0V86x4GfiPArTY9aZjhpf
16cmRas1vSSMG8tYc/guQROnZCSNnLfI3P4NlEcCCUm4Rg0Xcl1izksGQz3+zq25
+94G2p8fjgjGAJKNexXLgqtGG3CI3Tpx1fDGOpc2LgMZLfThgfV7WS8XqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+3rjRTeoUOqLMA3oDKSG7aQLUxMB8GA1UdIwQY
MBaAFPU0bT7b7G2nJ4ByLApBq+6mNmHYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVRSdFB0dnNiYWNuZ0hJc0NrR3I3cVkyWWRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZTgwNjQtOWUxMS00NjFhLTkzNmQt
ZmE3MGJkOTBlODk0LzEvOVRSdFB0dnNiYWNuZ0hJc0NrR3I3cVkyWWRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9iZTgwNjQtOWUxMS00NjFhLTkzNmQtZmE3MGJkOTBlODk0
LzEvOVRSdFB0dnNiYWNuZ0hJc0NrR3I3cVkyWWRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyJSFH/8H
t+cQijyDrCxgvRxeXSjWq9znymHiOKBVtgJgni8Rphfez26d+3T3LY5i3gnp6iKS
DHRo8lyDLwcs3Smraa4pPjw5Va1YKqF1cqxvK36vUm2+Z3cZ8hquhZ5aay1DBwzU
hI7NH2+m34OBiVxPBUuM8W2GfsfEu3+YJxrJB+mU+/CskapwRtISqw16PnMAS7U9
RZeeyJTyWf4n7HDSbzo8apR0YzVeD7MC2ZKkQd3v1K56JHCEP9tx9JUgDcPewmxI
wlxJWAWIrLd819WrYqOFxSJA+Q3gfUPAN7MxRreocfLrXVBe3etrOROVEu+54jGI
phkIIHOL3RX9oA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:47:19 2025 by rpki-client