Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
File: pT2P6iKY_zVCptwIkLEIySIYNjU.mft (raw, json)
Hash identifier: WyKJgs9PfM1KVFdZh+dJuz5NP5rOmS1YDNsNwkNQ8sY=
Subject key identifier: B7:11:69:07:D3:FB:91:BF:CE:86:D6:2D:45:F9:F3:7D:0F:41:4A:09
Authority key identifier: A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
Certificate issuer: /CN=a53d8fea2298ff3542a6dc0890b108c922183635
Certificate serial: 0197488C77A6D8F1403F93A64A6D08C8786A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
Manifest number: 0DC5
Signing time: Sat 07 Jun 2025 04:00:54 +0000
Manifest this update: Sat 07 Jun 2025 04:00:54 +0000
Manifest next update: Sun 08 Jun 2025 04:00:54 +0000
Files and hashes: 1: LIngfuzVyfR9OxY7cIj5Eo9UJhU.roa (hash: I7nX5ROvffTNGyuWZrNpPLtJJE4OFOAqh82VhWKzBDY=)
2: pT2P6iKY_zVCptwIkLEIySIYNjU.crl (hash: YQPkok9pkFzNQ7xAmECf9ZYq3yj1SST0Lr3EdEnvB8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:77:a6:d8:f1:40:3f:93:a6:4a:6d:08:c8:78:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53d8fea2298ff3542a6dc0890b108c922183635
Validity
Not Before: Jun 7 04:00:54 2025 GMT
Not After : Jun 8 04:00:54 2025 GMT
Subject: CN=b7116907d3fb91bfce86d62d45f9f37d0f414a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:44:f9:8e:18:11:07:41:25:d7:21:d3:5b:
6f:13:e7:03:14:f1:08:ac:6a:9f:51:4c:52:82:1b:
27:65:06:2b:45:ed:1f:74:a8:72:d1:be:5f:6d:53:
f0:c9:e7:5a:db:04:0a:e4:60:37:5a:fb:cf:ff:d7:
18:f8:b6:74:c5:7d:9d:bf:d8:f3:40:2f:3a:3c:f7:
6d:e3:b4:d1:9e:ad:41:6a:6f:16:5a:d4:f4:81:7d:
0e:81:59:49:72:98:74:73:e5:2e:64:a3:69:13:8d:
b9:12:db:fc:1d:fb:85:5e:0b:8d:02:ff:cf:9a:09:
40:eb:74:85:57:d6:3b:b3:72:61:97:0f:45:4c:2d:
50:f2:35:e0:ea:fa:83:b6:33:6a:ef:4b:99:3c:40:
f6:5e:b1:fd:ab:44:a0:e0:fe:a6:c5:f9:ef:05:32:
a3:db:b9:b6:f6:1a:70:f6:6b:20:08:85:07:e5:82:
d8:3a:f4:8a:03:db:10:a3:e3:73:d3:7b:37:62:34:
ec:a8:85:57:7a:2a:14:40:88:cb:30:bd:ec:da:bb:
59:6e:81:29:34:c3:ef:a0:b6:9e:52:1e:ab:57:89:
f4:e2:bb:7c:a7:48:54:d7:d4:3a:94:b1:75:d8:a3:
a7:a9:46:9d:c4:ba:c1:ef:b0:d6:ed:2f:46:9c:28:
29:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:11:69:07:D3:FB:91:BF:CE:86:D6:2D:45:F9:F3:7D:0F:41:4A:09
X509v3 Authority Key Identifier:
keyid:A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:20:bc:34:47:6a:53:70:94:d3:3d:c1:d0:ac:f8:bc:d2:64:
e7:13:fa:de:d3:f0:f5:6d:b3:bb:41:8a:51:6f:67:6f:09:4d:
70:29:94:fc:33:c3:43:00:8f:11:19:eb:9b:e1:48:3b:34:02:
29:78:44:cd:8a:1e:51:6a:b1:92:69:d8:95:46:04:93:3c:ef:
a1:7f:9c:14:bd:66:9d:2b:fa:a6:02:b5:cc:f3:ed:41:b1:b8:
56:cf:87:1e:e4:79:e5:48:81:b2:86:50:f3:ef:4e:f0:7c:46:
52:81:f3:d3:f5:8d:9a:69:9b:a7:22:55:ae:13:c6:d8:0b:58:
0a:20:7a:b3:03:9b:3f:c0:c0:11:d8:f0:ec:c4:02:10:3a:75:
54:a0:a1:77:2f:d7:f3:0d:88:a9:90:da:90:eb:86:fc:95:5b:
60:a9:b7:27:84:ab:c6:3d:0e:22:04:cb:76:15:6d:be:aa:02:
45:76:3e:91:27:da:a6:c4:aa:74:da:9a:83:b4:1e:2d:9b:bc:
f9:a5:29:49:ec:d2:e0:67:30:7c:1f:9f:6a:9d:79:bc:8f:05:
99:b2:87:61:8c:0d:35:8f:2f:49:e0:19:cb:e8:aa:8e:03:83:
ae:96:2e:76:b3:00:27:2b:f4:2c:80:8d:eb:b2:83:08:18:7c:
fc:c6:6d:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjHem2PFAP5OmSm0IyHhqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1M2Q4ZmVhMjI5OGZmMzU0MmE2ZGMwODkwYjEwOGM5MjIx
ODM2MzUwHhcNMjUwNjA3MDQwMDU0WhcNMjUwNjA4MDQwMDU0WjAzMTEwLwYDVQQD
EyhiNzExNjkwN2QzZmI5MWJmY2U4NmQ2MmQ0NWY5ZjM3ZDBmNDE0YTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojVE+Y4YEQdBJdch01tvE+cDFPEI
rGqfUUxSghsnZQYrRe0fdKhy0b5fbVPwyeda2wQK5GA3WvvP/9cY+LZ0xX2dv9jz
QC86PPdt47TRnq1Bam8WWtT0gX0OgVlJcph0c+UuZKNpE425Etv8HfuFXguNAv/P
mglA63SFV9Y7s3Jhlw9FTC1Q8jXg6vqDtjNq70uZPED2XrH9q0Sg4P6mxfnvBTKj
27m29hpw9msgCIUH5YLYOvSKA9sQo+Nz03s3YjTsqIVXeioUQIjLML3s2rtZboEp
NMPvoLaeUh6rV4n04rt8p0hU19Q6lLF12KOnqUadxLrB77DW7S9GnCgpeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcRaQfT+5G/zobWLUX5830PQUoJMB8GA1UdIwQY
MBaAFKU9j+oimP81QqbcCJCxCMkiGDY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFQyUDZpS1lfelZDcHR3SWtMRUl5U0lZTmpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iYTNiYTMtOTUxZS00MjgwLWFmOTgt
Y2Q4MjQyNzhjY2U4LzEvcFQyUDZpS1lfelZDcHR3SWtMRUl5U0lZTmpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9iYTNiYTMtOTUxZS00MjgwLWFmOTgtY2Q4MjQyNzhjY2U4
LzEvcFQyUDZpS1lfelZDcHR3SWtMRUl5U0lZTmpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCC8NEdq
U3CU0z3B0Kz4vNJk5xP63tPw9W2zu0GKUW9nbwlNcCmU/DPDQwCPERnrm+FIOzQC
KXhEzYoeUWqxkmnYlUYEkzzvoX+cFL1mnSv6pgK1zPPtQbG4Vs+HHuR55UiBsoZQ
8+9O8HxGUoHz0/WNmmmbpyJVrhPG2AtYCiB6swObP8DAEdjw7MQCEDp1VKChdy/X
8w2IqZDakOuG/JVbYKm3J4Srxj0OIgTLdhVtvqoCRXY+kSfapsSqdNqag7QeLZu8
+aUpSezS4GcwfB+fap15vI8FmbKHYYwNNY8vSeAZy+iqjgODrpYudrMAJyv0LICN
67KDCBh8/MZtVA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:14:17 2025 by rpki-client