Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
File: Tt5MZdc1r3knftFOtsTPVATHiNU.mft (raw, json)
Hash identifier: j2cMghPo4hjLOrg/kDcpLzGTSxw8eCflVRFhVfepZiQ=
Subject key identifier: 35:0E:5D:DA:53:07:FC:39:BF:FD:45:49:78:2C:2E:EE:72:4D:66:4F
Authority key identifier: 4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
Certificate issuer: /CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Certificate serial: 019768BC4F537841A03D22B4596321FCB827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
Manifest number: 07CD
Signing time: Fri 13 Jun 2025 10:01:00 +0000
Manifest this update: Fri 13 Jun 2025 10:01:00 +0000
Manifest next update: Sat 14 Jun 2025 10:01:00 +0000
Files and hashes: 1: CNpxwuWXiobnr753WTcJ-SvZEQU.roa (hash: +W4soYxTO8aYTDMgF940blaVc3sdpMhU9iF5WZMoCzU=)
2: Tt5MZdc1r3knftFOtsTPVATHiNU.crl (hash: /ImN2jAn69smp6PZtYHJcGjbBG3bhR8fl0nmyslIhwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:4f:53:78:41:a0:3d:22:b4:59:63:21:fc:b8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Validity
Not Before: Jun 13 10:01:00 2025 GMT
Not After : Jun 14 10:01:00 2025 GMT
Subject: CN=350e5dda5307fc39bffd4549782c2eee724d664f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:9f:c4:93:02:0d:df:24:ec:57:c1:0f:c8:
dc:db:31:50:1e:0a:15:a2:fa:1c:6d:16:4a:0e:8c:
55:74:c4:16:51:32:4f:fa:0f:bb:9f:8a:74:9e:f7:
94:61:7b:9c:45:70:e4:3e:58:08:41:45:8d:b4:33:
92:b3:2c:be:8a:99:5c:b7:57:65:b9:ac:52:85:08:
9d:52:1b:12:8b:8c:02:8f:24:a7:35:55:7d:71:36:
c9:e6:6c:eb:e5:f1:22:03:89:32:d6:b2:e7:ce:f8:
49:a4:09:03:fa:8d:23:2c:a7:8f:90:c2:07:d2:25:
35:0d:f4:6c:2d:6c:05:97:3b:28:26:d9:43:f7:8e:
4d:6c:e9:54:81:e5:a7:c8:16:d6:8f:af:61:61:66:
61:d4:b2:55:4d:77:14:85:94:7d:87:80:cf:2f:5a:
03:01:43:e8:e5:46:c7:74:48:4f:d9:a9:91:30:bb:
88:f8:20:9c:36:47:a9:9e:80:c1:2f:77:ce:2d:cf:
c6:81:8b:cd:ad:ba:81:1e:83:aa:f8:11:a8:28:ef:
2d:c1:cb:3a:ba:bd:31:56:40:10:68:41:ff:cc:15:
fa:6d:db:c8:bf:ff:2e:c6:fc:66:02:1b:89:5c:09:
2c:9c:74:3e:7f:d0:8c:2a:cf:c6:a5:e7:ba:21:01:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0E:5D:DA:53:07:FC:39:BF:FD:45:49:78:2C:2E:EE:72:4D:66:4F
X509v3 Authority Key Identifier:
keyid:4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:66:af:ca:f1:3d:83:7c:fe:5e:de:05:fe:ed:80:c5:0a:72:
0c:06:d8:d5:c3:b0:9b:da:25:35:41:fe:0d:26:26:be:e0:fa:
b0:09:b3:10:31:60:82:82:b5:8b:27:cf:d8:46:aa:17:95:68:
75:1d:a2:fa:b9:60:9e:e0:ca:16:f1:48:1a:e0:3c:0f:30:f0:
1a:90:dc:83:d9:94:7c:1a:ff:87:fa:21:28:ad:96:4b:4c:a0:
01:14:09:fd:58:4c:fa:ce:08:57:22:49:5f:92:33:01:f5:54:
58:d8:37:4b:9e:46:3e:f0:1b:e4:fc:83:b4:5b:40:a0:5f:25:
44:e4:90:28:70:3c:d1:1a:cf:30:79:f4:30:2f:cb:ac:af:9e:
04:a6:72:6a:55:ac:e6:8c:90:8d:80:d1:a7:30:35:c5:63:0a:
84:79:ac:0e:f1:ca:66:96:0c:18:5d:fd:84:8f:ec:e7:8f:2a:
6b:14:b0:27:0a:9d:8e:59:0c:aa:ff:36:f4:ae:e7:82:2e:5d:
cb:8d:96:1e:60:e5:53:27:08:73:11:5c:ef:47:e4:a6:03:e6:
58:0a:c5:10:6e:a0:ee:50:c2:2d:e6:c6:18:a9:3f:2a:18:db:
46:5f:9c:51:ed:2c:41:cb:32:1d:b6:48:2f:d2:bd:c2:86:8c:
c4:61:82:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdovE9TeEGgPSK0WWMh/LgnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZGU0YzY1ZDczNWFmNzkyNzdlZDE0ZWI2YzRjZjU0MDRj
Nzg4ZDUwHhcNMjUwNjEzMTAwMTAwWhcNMjUwNjE0MTAwMTAwWjAzMTEwLwYDVQQD
EygzNTBlNWRkYTUzMDdmYzM5YmZmZDQ1NDk3ODJjMmVlZTcyNGQ2NjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMOfxJMCDd8k7FfBD8jc2zFQHgoV
ovocbRZKDoxVdMQWUTJP+g+7n4p0nveUYXucRXDkPlgIQUWNtDOSsyy+iplct1dl
uaxShQidUhsSi4wCjySnNVV9cTbJ5mzr5fEiA4ky1rLnzvhJpAkD+o0jLKePkMIH
0iU1DfRsLWwFlzsoJtlD945NbOlUgeWnyBbWj69hYWZh1LJVTXcUhZR9h4DPL1oD
AUPo5UbHdEhP2amRMLuI+CCcNkepnoDBL3fOLc/GgYvNrbqBHoOq+BGoKO8twcs6
ur0xVkAQaEH/zBX6bdvIv/8uxvxmAhuJXAksnHQ+f9CMKs/Gpee6IQEMHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUOXdpTB/w5v/1FSXgsLu5yTWZPMB8GA1UdIwQY
MBaAFE7eTGXXNa95J37RTrbEz1QEx4jVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHQ1TVpkYzFyM2tuZnRGT3RzVFBWQVRIaU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8zNWJlZTktODQzZi00ZDM4LTkyODYt
N2FhNDliZWNmNDY3LzEvVHQ1TVpkYzFyM2tuZnRGT3RzVFBWQVRIaU5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8zNWJlZTktODQzZi00ZDM4LTkyODYtN2FhNDliZWNmNDY3
LzEvVHQ1TVpkYzFyM2tuZnRGT3RzVFBWQVRIaU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2avyvE9
g3z+Xt4F/u2AxQpyDAbY1cOwm9olNUH+DSYmvuD6sAmzEDFggoK1iyfP2EaqF5Vo
dR2i+rlgnuDKFvFIGuA8DzDwGpDcg9mUfBr/h/ohKK2WS0ygARQJ/VhM+s4IVyJJ
X5IzAfVUWNg3S55GPvAb5PyDtFtAoF8lROSQKHA80RrPMHn0MC/LrK+eBKZyalWs
5oyQjYDRpzA1xWMKhHmsDvHKZpYMGF39hI/s548qaxSwJwqdjlkMqv829K7ngi5d
y42WHmDlUycIcxFc70fkpgPmWArFEG6g7lDCLebGGKk/KhjbRl+cUe0sQcsyHbZI
L9K9woaMxGGCXA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:54 2025 by rpki-client