Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
File: tLuK74sObZxv9jIIB_WpAHWY7rA.mft (raw, json)
Hash identifier: 1S437G6zZl9JJdFLzXNPfUZjJjug13daE+gc9fahiIs=
Subject key identifier: D2:39:50:F5:58:7B:E1:ED:98:23:94:68:5D:AF:F6:E3:8C:EF:90:DF
Authority key identifier: B4:BB:8A:EF:8B:0E:6D:9C:6F:F6:32:08:07:F5:A9:00:75:98:EE:B0
Certificate issuer: /CN=b4bb8aef8b0e6d9c6ff6320807f5a9007598eeb0
Certificate serial: 019747B0C2666030DEFEF979D498157C18A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
Manifest number: 080E
Signing time: Sat 07 Jun 2025 00:00:55 +0000
Manifest this update: Sat 07 Jun 2025 00:00:55 +0000
Manifest next update: Sun 08 Jun 2025 00:00:55 +0000
Files and hashes: 1: 8ntjSMus2ECR1PU4tfABg9_MTk0.roa (hash: NThyxZZCDawOVk5/yNg7I3X8M08Hqe7vBd2lZGQPe1c=)
2: tLuK74sObZxv9jIIB_WpAHWY7rA.crl (hash: hABs1ujuW5t2Xo+Gp3TnTOzZreTubUZGWWMxKbVLs5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:c2:66:60:30:de:fe:f9:79:d4:98:15:7c:18:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bb8aef8b0e6d9c6ff6320807f5a9007598eeb0
Validity
Not Before: Jun 7 00:00:55 2025 GMT
Not After : Jun 8 00:00:55 2025 GMT
Subject: CN=d23950f5587be1ed982394685daff6e38cef90df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a0:2c:4c:77:89:07:e9:47:cc:93:01:65:ca:
24:f5:74:d4:e2:0c:ae:f9:cc:f9:61:57:18:66:79:
85:ce:ee:b6:1a:88:14:9c:64:2c:a6:35:18:26:f2:
fb:44:ec:c9:68:34:8c:91:4f:5e:5f:9a:fa:58:ee:
aa:ec:59:f7:2f:58:17:a9:6d:a8:d1:bd:9a:1a:ba:
94:ef:d1:ac:a0:f6:79:db:59:ea:c0:5d:b0:4d:62:
6d:5f:25:0f:c5:a5:e1:ce:9c:01:1c:a5:71:4f:b1:
1f:05:19:b0:9a:7d:82:72:35:2d:c9:74:96:cb:10:
d0:15:52:b7:f9:3b:7b:93:a8:55:53:8a:e5:98:a4:
bb:52:f8:0c:62:26:c6:b4:a3:f3:cb:ea:d9:c6:25:
7f:be:62:f6:0e:be:a9:ad:ce:80:31:d1:66:24:2c:
c0:7c:39:25:96:c1:d1:73:a8:f2:64:13:22:40:e8:
26:02:da:10:d4:cd:25:e4:d7:d8:5f:c8:e4:77:30:
14:cd:66:f1:1c:0f:6d:57:d8:17:78:e4:e7:5d:76:
47:e4:a5:ea:e3:27:fc:80:6f:07:cc:7b:fd:ce:74:
24:f5:89:d7:e4:ff:45:f3:25:c4:b4:30:e6:bd:da:
b3:fe:42:49:33:8a:c4:83:c8:b5:12:e7:f7:91:95:
86:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:39:50:F5:58:7B:E1:ED:98:23:94:68:5D:AF:F6:E3:8C:EF:90:DF
X509v3 Authority Key Identifier:
keyid:B4:BB:8A:EF:8B:0E:6D:9C:6F:F6:32:08:07:F5:A9:00:75:98:EE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:0a:5d:24:52:18:a7:0e:27:43:c6:f0:76:27:a9:72:33:e4:
79:a4:25:f2:01:3f:1e:16:5a:68:54:3b:7e:76:54:de:87:29:
00:6f:78:d5:27:2c:78:0e:f5:94:ef:da:48:5e:0a:ae:34:3f:
71:84:06:f3:34:46:72:16:73:25:bb:2e:a9:68:85:7c:84:2c:
51:ad:d6:ae:03:62:7a:20:34:1a:86:41:cc:da:81:74:cc:d1:
7a:80:ae:d1:4c:b7:a7:65:ad:67:d8:e3:cd:99:99:17:37:69:
d0:7c:c2:d3:5f:5c:fb:40:51:d9:e3:f1:cb:55:f3:41:92:04:
5f:bf:03:2c:af:c9:6e:ac:a2:2f:fc:86:00:ec:33:61:19:c1:
04:7a:29:40:41:c0:1d:2d:1f:05:7f:de:76:64:b0:10:ec:d6:
2f:73:76:7f:50:2d:be:bc:a5:7f:c5:2b:f5:bf:ef:40:aa:f5:
ec:89:92:09:2e:42:d5:33:39:e6:c4:8f:ba:73:4b:70:77:76:
0c:0a:d1:dc:17:74:f5:1c:03:79:15:1a:0d:92:94:e2:91:77:
5e:c3:c1:e6:7b:fd:7f:79:31:f7:0d:15:66:97:18:45:d5:9e:
02:5d:60:87:13:b6:3c:da:75:9f:fb:6c:b1:e2:6f:4e:c3:f3:
45:42:d2:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHsMJmYDDe/vl51JgVfBilMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YmI4YWVmOGIwZTZkOWM2ZmY2MzIwODA3ZjVhOTAwNzU5
OGVlYjAwHhcNMjUwNjA3MDAwMDU1WhcNMjUwNjA4MDAwMDU1WjAzMTEwLwYDVQQD
EyhkMjM5NTBmNTU4N2JlMWVkOTgyMzk0Njg1ZGFmZjZlMzhjZWY5MGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqAsTHeJB+lHzJMBZcok9XTU4gyu
+cz5YVcYZnmFzu62GogUnGQspjUYJvL7ROzJaDSMkU9eX5r6WO6q7Fn3L1gXqW2o
0b2aGrqU79GsoPZ521nqwF2wTWJtXyUPxaXhzpwBHKVxT7EfBRmwmn2CcjUtyXSW
yxDQFVK3+Tt7k6hVU4rlmKS7UvgMYibGtKPzy+rZxiV/vmL2Dr6prc6AMdFmJCzA
fDkllsHRc6jyZBMiQOgmAtoQ1M0l5NfYX8jkdzAUzWbxHA9tV9gXeOTnXXZH5KXq
4yf8gG8HzHv9znQk9YnX5P9F8yXEtDDmvdqz/kJJM4rEg8i1Euf3kZWGFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNI5UPVYe+HtmCOUaF2v9uOM75DfMB8GA1UdIwQY
MBaAFLS7iu+LDm2cb/YyCAf1qQB1mO6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEx1Szc0c09iWnh2OWpJSUJfV3BBSFdZN3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mOWE4OTEtYjgxOC00OTlhLTk3MWMt
YmM1NDU2OTYyZjJkLzEvdEx1Szc0c09iWnh2OWpJSUJfV3BBSFdZN3JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9mOWE4OTEtYjgxOC00OTlhLTk3MWMtYmM1NDU2OTYyZjJk
LzEvdEx1Szc0c09iWnh2OWpJSUJfV3BBSFdZN3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2ApdJFIY
pw4nQ8bwdiepcjPkeaQl8gE/HhZaaFQ7fnZU3ocpAG941ScseA71lO/aSF4KrjQ/
cYQG8zRGchZzJbsuqWiFfIQsUa3WrgNieiA0GoZBzNqBdMzReoCu0Uy3p2WtZ9jj
zZmZFzdp0HzC019c+0BR2ePxy1XzQZIEX78DLK/JbqyiL/yGAOwzYRnBBHopQEHA
HS0fBX/edmSwEOzWL3N2f1Atvrylf8Ur9b/vQKr17ImSCS5C1TM55sSPunNLcHd2
DArR3Bd09RwDeRUaDZKU4pF3XsPB5nv9f3kx9w0VZpcYRdWeAl1ghxO2PNp1n/ts
seJvTsPzRULSWA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:17:39 2025 by rpki-client