Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
File: tRYDJr5-XNw1tcA2RBFjzSWkl00.mft (raw, json)
Hash identifier: HAE8wZ0dAbALWSja7rmhhhVClUcQWXiMGVAArERQ6pc=
Subject key identifier: 4C:0B:6F:09:12:4C:B4:90:B8:6D:B3:84:FD:22:0B:3C:E1:66:C7:B2
Authority key identifier: B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D
Certificate issuer: /CN=b5160326be7e5cdc35b5c036441163cd25a4974d
Certificate serial: 01976CCFA7D8E45B4965B5BD3B05065D3CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 05:00:37 +0000
Manifest this update: Sat 14 Jun 2025 05:00:37 +0000
Manifest next update: Sun 15 Jun 2025 05:00:37 +0000
Files and hashes: 1: 8ia-FfbPiHzFeisz5Ltz_iH4NuE.roa (hash: 2vUluYbn/ZjPa8MjPMnro3n0N0IitO4q9I7893CE2pw=)
2: tRYDJr5-XNw1tcA2RBFjzSWkl00.crl (hash: LKaU5iKHSzPgJ3U9Qef6Cxokegx0PjzUPjENTQYAt8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:a7:d8:e4:5b:49:65:b5:bd:3b:05:06:5d:3c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5160326be7e5cdc35b5c036441163cd25a4974d
Validity
Not Before: Jun 14 05:00:37 2025 GMT
Not After : Jun 15 05:00:37 2025 GMT
Subject: CN=4c0b6f09124cb490b86db384fd220b3ce166c7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:70:35:d9:70:a2:1b:9b:5e:fb:b4:b3:52:
8f:bd:13:d8:d3:2c:5f:c0:60:3a:d0:07:6f:bb:77:
fe:b4:8e:1c:da:1a:38:c3:1d:56:99:0d:41:09:3a:
23:a2:e3:b5:3d:38:8b:99:fc:d6:99:00:15:28:7e:
51:de:b4:65:9b:82:cc:be:ef:48:ef:dd:97:a6:a9:
a6:30:b5:dc:d8:f7:0a:31:13:f2:27:b5:3a:7c:69:
02:74:b1:f1:9f:05:07:7b:46:32:2f:81:a2:5d:b1:
4b:54:1f:5f:85:c4:65:4c:36:c8:a8:86:74:a9:a7:
8c:8f:91:33:4d:b2:6a:de:b2:85:5b:fd:1b:a4:f7:
0f:73:3a:31:82:81:2e:cf:dd:1b:3a:ec:7b:5e:64:
e6:d4:dc:6a:08:89:39:8b:dd:f7:d0:5c:de:b9:5c:
00:a1:fa:0a:53:72:4f:75:44:e3:f3:bb:0e:88:32:
69:b5:65:ad:6f:bb:85:f4:86:1d:22:60:fc:f9:ef:
cd:80:f2:87:f0:c7:5a:ca:ed:a1:31:2f:34:43:08:
d5:7f:69:8e:c9:c2:9f:e1:72:65:e6:1f:e1:d3:22:
39:b1:e3:a6:f5:81:36:61:4c:a1:5c:39:91:5c:b4:
c8:7e:c6:5f:bb:4b:9e:07:04:0e:91:d6:3e:e6:64:
b3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0B:6F:09:12:4C:B4:90:B8:6D:B3:84:FD:22:0B:3C:E1:66:C7:B2
X509v3 Authority Key Identifier:
keyid:B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:ee:64:f6:b9:e9:4e:88:fb:4f:26:ab:a2:d9:c4:0f:92:a7:
f8:d2:aa:43:6a:fb:f5:b0:86:4a:3e:bd:6d:d9:aa:31:4e:4a:
75:58:65:d6:7e:ed:c8:e9:4b:2e:9d:f2:43:d8:a4:9f:b4:83:
0a:62:24:25:5d:7f:6e:70:ef:55:95:55:9d:50:cb:a9:0b:b4:
29:d9:2e:cf:9b:80:ac:ee:6f:ed:65:98:3e:59:5e:7f:23:05:
56:9f:43:6c:6e:aa:0c:14:f1:bb:a8:8f:22:91:ff:6e:d8:13:
ef:ac:c8:7b:44:19:9f:d1:cd:42:be:e1:f0:92:74:56:aa:84:
b8:24:91:c4:a4:03:bd:01:62:d7:47:cd:5f:2a:f2:d7:22:8d:
6c:33:d3:bc:14:a3:c1:9e:52:61:d9:c5:0c:6c:cf:42:f8:b0:
2c:ee:c3:bc:08:22:a6:7a:dc:cd:d7:a1:ca:a3:ba:e9:5f:86:
ae:27:cf:48:72:f0:60:19:88:25:e3:85:53:11:e6:b1:28:3f:
77:41:2d:6e:66:c6:26:80:5d:7d:fd:21:f8:d3:20:60:c2:ed:
49:27:3d:45:9d:2b:97:d8:6a:4a:8c:50:b7:21:bb:a7:3f:82:
a0:c3:84:c6:1a:92:65:a2:e1:9d:2c:44:ae:72:15:4b:6f:61:
b0:5e:95:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz6fY5FtJZbW9OwUGXTzNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MTYwMzI2YmU3ZTVjZGMzNWI1YzAzNjQ0MTE2M2NkMjVh
NDk3NGQwHhcNMjUwNjE0MDUwMDM3WhcNMjUwNjE1MDUwMDM3WjAzMTEwLwYDVQQD
Eyg0YzBiNmYwOTEyNGNiNDkwYjg2ZGIzODRmZDIyMGIzY2UxNjZjN2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo9wNdlwohubXvu0s1KPvRPY0yxf
wGA60Advu3f+tI4c2ho4wx1WmQ1BCTojouO1PTiLmfzWmQAVKH5R3rRlm4LMvu9I
792XpqmmMLXc2PcKMRPyJ7U6fGkCdLHxnwUHe0YyL4GiXbFLVB9fhcRlTDbIqIZ0
qaeMj5EzTbJq3rKFW/0bpPcPczoxgoEuz90bOux7XmTm1NxqCIk5i9330FzeuVwA
ofoKU3JPdUTj87sOiDJptWWtb7uF9IYdImD8+e/NgPKH8Mdayu2hMS80QwjVf2mO
ycKf4XJl5h/h0yI5seOm9YE2YUyhXDmRXLTIfsZfu0ueBwQOkdY+5mSzdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwLbwkSTLSQuG2zhP0iCzzhZseyMB8GA1UdIwQY
MBaAFLUWAya+flzcNbXANkQRY80lpJdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFJZREpyNS1YTncxdGNBMlJCRmp6U1drbDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wZTVhYTItODQwOS00N2EwLWI0Nzkt
ZjQ4YWEyZTc1NGU1LzEvdFJZREpyNS1YTncxdGNBMlJCRmp6U1drbDAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wZTVhYTItODQwOS00N2EwLWI0NzktZjQ4YWEyZTc1NGU1
LzEvdFJZREpyNS1YTncxdGNBMlJCRmp6U1drbDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw+5k9rnp
Toj7TyarotnED5Kn+NKqQ2r79bCGSj69bdmqMU5KdVhl1n7tyOlLLp3yQ9ikn7SD
CmIkJV1/bnDvVZVVnVDLqQu0Kdkuz5uArO5v7WWYPllefyMFVp9DbG6qDBTxu6iP
IpH/btgT76zIe0QZn9HNQr7h8JJ0VqqEuCSRxKQDvQFi10fNXyry1yKNbDPTvBSj
wZ5SYdnFDGzPQviwLO7DvAgipnrczdehyqO66V+GrifPSHLwYBmIJeOFUxHmsSg/
d0EtbmbGJoBdff0h+NMgYMLtSSc9RZ0rl9hqSoxQtyG7pz+CoMOExhqSZaLhnSxE
rnIVS29hsF6VGA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:25:14 2025 by rpki-client