Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
File: t4zdv8dr2iagKeqAyJh3mHRfHwI.mft (raw, json)
Hash identifier: BN4548Yrn4aZZ9iUVihxpk1/eYarblFGbpIkB0jS7e0=
Subject key identifier: 98:16:4C:4B:86:11:02:84:EE:90:29:AC:50:97:B3:0E:1F:88:11:30
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Certificate issuer: /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial: 019770E38B7D4FCC04F0AA3C8EB61F832FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
Manifest number: 1245
Signing time: Sun 15 Jun 2025 00:00:49 +0000
Manifest this update: Sun 15 Jun 2025 00:00:49 +0000
Manifest next update: Mon 16 Jun 2025 00:00:49 +0000
Files and hashes: 1: 4ZMkun0YVKsQhMtugX5PoEy0_rI.roa (hash: fKBmMFAsGdJAHOCtTHbLGukOIg/BNTMMvT6hLSCBWOk=)
2: 9SX4KosI9EGxvqBg-r1JnjKT0ZM.roa (hash: WqcTzSMCYbly9wYW2w55k/ugMgucEMXzGeFeea+G7IU=)
3: t4zdv8dr2iagKeqAyJh3mHRfHwI.crl (hash: Wd25BSgqVlxvMozfwUsxmAdETPom2pEUgeXdmdEeV2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:8b:7d:4f:cc:04:f0:aa:3c:8e:b6:1f:83:2f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Validity
Not Before: Jun 15 00:00:49 2025 GMT
Not After : Jun 16 00:00:49 2025 GMT
Subject: CN=98164c4b86110284ee9029ac5097b30e1f881130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dc:cd:fd:dc:c8:c9:a8:c7:12:82:ff:08:aa:
16:51:c3:08:c4:93:a9:61:83:a8:5d:2a:8e:88:88:
97:0c:15:cd:8c:6a:74:a8:d5:44:38:75:f8:d3:41:
e8:12:56:ed:6a:f3:94:64:81:bd:98:42:64:51:e5:
81:11:07:0b:9f:eb:ca:d5:5f:66:0e:e8:04:bb:2f:
0e:cc:91:d5:4d:e1:f7:74:51:a0:40:fe:ba:ff:38:
1e:9e:d0:8a:f4:c2:08:51:a6:81:ed:92:88:81:22:
cc:1b:5b:d7:7c:ad:7f:46:6e:5e:a6:94:6d:6f:64:
51:fe:0c:bc:70:aa:7d:2a:24:7c:ff:fc:7f:fb:f8:
7f:b7:cc:56:d4:ff:34:1a:2d:47:c9:0b:a7:07:bc:
a2:8b:65:bb:ba:c3:27:4b:2f:dc:35:71:ae:d0:66:
79:7c:84:1e:ca:f8:db:cc:8d:36:57:4a:92:b7:b4:
df:2e:86:b7:87:b7:d3:90:55:19:d2:2d:89:48:a9:
3f:8b:64:67:84:eb:5d:ae:cd:13:bf:67:4d:0d:d6:
4c:7f:91:0d:91:61:7d:ca:12:79:45:3a:e0:8e:4e:
b7:e0:60:7d:93:e5:8b:d4:94:3d:d3:1f:ff:0e:d1:
28:b1:96:e8:39:cb:d0:aa:7a:ee:75:2a:08:32:46:
dd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:16:4C:4B:86:11:02:84:EE:90:29:AC:50:97:B3:0E:1F:88:11:30
X509v3 Authority Key Identifier:
keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ff:00:e9:e2:e4:e9:4a:60:ac:27:69:ed:ff:b6:d8:ed:41:
df:80:48:6a:39:61:e1:c2:a5:73:78:be:32:d5:b9:65:1e:7f:
5d:31:18:8b:9e:8d:8f:06:ba:ee:82:23:63:68:9b:5d:d7:a0:
68:5c:9e:f4:ba:dc:38:b3:88:e3:64:80:2f:ec:57:26:5c:a3:
25:63:5c:a3:ba:cf:a2:f9:bf:8e:c3:88:99:9e:f9:0b:ad:49:
72:37:43:05:f6:1b:e9:20:dc:da:8b:8d:1f:92:28:fd:b0:23:
c6:04:6b:ca:d0:03:44:1d:aa:1e:a2:46:94:12:99:d3:1a:51:
43:79:65:10:4b:dc:bd:90:f1:a9:39:47:54:07:4d:8b:f0:c0:
c8:e9:2c:b8:da:08:2a:1f:18:78:34:41:a7:74:4a:73:cf:36:
b6:f4:04:f3:17:50:45:ad:6b:2a:8f:6a:13:4d:c6:c1:d5:37:
a7:93:66:de:15:d0:f3:b1:e6:24:23:8d:b9:e4:0c:6a:9f:da:
57:5f:ad:40:61:bd:3c:7a:22:e0:37:e3:20:56:2a:c0:b5:46:
4e:d3:71:c8:17:ba:15:80:7e:01:c9:97:1e:d7:3e:ec:f3:32:
c6:46:2b:45:91:b8:38:7d:c5:e8:dc:0b:20:ea:83:a4:7e:97:
c6:11:86:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdw44t9T8wE8Ko8jrYfgy+9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OGNkZGJmYzc2YmRhMjZhMDI5ZWE4MGM4OTg3Nzk4NzQ1
ZjFmMDIwHhcNMjUwNjE1MDAwMDQ5WhcNMjUwNjE2MDAwMDQ5WjAzMTEwLwYDVQQD
Eyg5ODE2NGM0Yjg2MTEwMjg0ZWU5MDI5YWM1MDk3YjMwZTFmODgxMTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNzN/dzIyajHEoL/CKoWUcMIxJOp
YYOoXSqOiIiXDBXNjGp0qNVEOHX400HoElbtavOUZIG9mEJkUeWBEQcLn+vK1V9m
DugEuy8OzJHVTeH3dFGgQP66/zgentCK9MIIUaaB7ZKIgSLMG1vXfK1/Rm5eppRt
b2RR/gy8cKp9KiR8//x/+/h/t8xW1P80Gi1HyQunB7yii2W7usMnSy/cNXGu0GZ5
fIQeyvjbzI02V0qSt7TfLoa3h7fTkFUZ0i2JSKk/i2RnhOtdrs0Tv2dNDdZMf5EN
kWF9yhJ5RTrgjk634GB9k+WL1JQ90x//DtEosZboOcvQqnrudSoIMkbdqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgWTEuGEQKE7pAprFCXsw4fiBEwMB8GA1UdIwQY
MBaAFLeM3b/Ha9omoCnqgMiYd5h0Xx8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDR6ZHY4ZHIyaWFnS2VxQXlKaDNtSFJmSHdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMGI4ZTktZTdkNC00MGNjLWFkNWYt
M2M3NDEyMjBlYTAwLzEvdDR6ZHY4ZHIyaWFnS2VxQXlKaDNtSFJmSHdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8zMGI4ZTktZTdkNC00MGNjLWFkNWYtM2M3NDEyMjBlYTAw
LzEvdDR6ZHY4ZHIyaWFnS2VxQXlKaDNtSFJmSHdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQf8A6eLk
6UpgrCdp7f+22O1B34BIajlh4cKlc3i+MtW5ZR5/XTEYi56Njwa67oIjY2ibXdeg
aFye9LrcOLOI42SAL+xXJlyjJWNco7rPovm/jsOImZ75C61JcjdDBfYb6SDc2ouN
H5Io/bAjxgRrytADRB2qHqJGlBKZ0xpRQ3llEEvcvZDxqTlHVAdNi/DAyOksuNoI
Kh8YeDRBp3RKc882tvQE8xdQRa1rKo9qE03GwdU3p5Nm3hXQ87HmJCONueQMap/a
V1+tQGG9PHoi4DfjIFYqwLVGTtNxyBe6FYB+AcmXHtc+7PMyxkYrRZG4OH3F6NwL
IOqDpH6XxhGGTg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:38:29 2025 by rpki-client