Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier: ISuZqaN9a6icZGzuBDfRXSbg2apzXXfQcz16Q306LR4=
Subject key identifier: A0:37:E8:FB:D0:2D:D1:26:AC:D9:AE:BE:FE:10:91:8C:49:55:C3:F7
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 01976D3DE78C151D28B79F36BA3455E38BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 07:01:02 +0000
Manifest this update: Sat 14 Jun 2025 07:01:02 +0000
Manifest next update: Sun 15 Jun 2025 07:01:02 +0000
Files and hashes: 1: JjwEZWBFYdro1bclN7oB-fRyAwA.roa (hash: k4IvqBYPxW6gaMsyO55esYb4IVeV/xHT6lju64eLGfA=)
2: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: Xm8sGQS45huGOZhOg8iVpejE7B1jnHmw7HvmMkVZ8Lc=)
3: a9wio39nY7HA5Emvyn8dQazuTJQ.roa (hash: NmO/lOJq3pD1F19fAJROTywj9iP7yhDSrwvmQCnkS38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:e7:8c:15:1d:28:b7:9f:36:ba:34:55:e3:8b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Jun 14 07:01:02 2025 GMT
Not After : Jun 15 07:01:02 2025 GMT
Subject: CN=a037e8fbd02dd126acd9aebefe10918c4955c3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:13:96:f1:71:51:5e:d5:16:e4:63:10:78:34:
a9:49:ce:4a:f0:c4:5b:f1:3d:2d:bd:c0:d9:d9:07:
94:22:a5:51:cf:c5:80:88:cb:d8:b3:13:02:28:66:
64:77:77:9d:e0:a1:a0:2e:eb:cf:e3:21:2d:55:2e:
1a:d7:d5:1c:7f:8a:06:ec:cf:9a:82:96:c9:0d:bc:
10:73:ca:b7:5e:d4:b4:42:05:c0:5e:b1:0e:00:75:
3f:b9:43:81:cc:98:3a:b9:2b:03:47:7e:f0:cf:0d:
db:a4:63:f2:dc:23:74:8d:22:5f:db:c0:3b:3d:75:
7b:74:b4:6d:b9:fb:e4:ba:50:01:ea:b8:ab:a0:cb:
85:4d:75:12:8c:70:8b:4f:7d:9c:8a:b8:66:06:b8:
fc:9c:d7:3d:80:de:f4:b1:01:5f:6f:94:59:46:aa:
da:f9:11:07:3e:17:fb:84:4d:bf:74:75:f6:37:3a:
66:aa:57:3a:df:eb:8a:e4:80:f3:81:7a:36:f5:17:
8f:6e:0a:e3:29:0c:d4:cc:90:40:28:9c:68:8e:28:
97:6b:87:7c:6c:c8:90:24:03:5a:ed:22:3f:e3:c8:
11:7f:1d:d2:bd:8d:c2:73:c5:00:84:d5:09:20:08:
62:b9:37:3e:ba:d3:ab:50:3e:fd:d2:5a:74:79:c9:
8e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:37:E8:FB:D0:2D:D1:26:AC:D9:AE:BE:FE:10:91:8C:49:55:C3:F7
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:78:82:58:ed:b2:b9:3a:27:37:18:8c:43:6a:a8:ad:1f:36:
34:9b:4e:30:d4:df:ff:41:f3:39:5a:cf:01:5f:1a:4d:4c:e8:
21:36:ae:ec:2b:14:88:80:d0:fd:99:73:5e:ad:0e:b7:6c:ef:
66:19:74:9b:a2:d0:bc:99:40:36:77:76:d9:b7:aa:aa:fb:24:
2f:ed:c6:5a:29:76:e7:2f:4d:09:70:9a:9e:04:01:67:5e:76:
90:fa:3b:58:bf:98:8c:be:18:d6:d3:bf:6b:6f:bc:e0:7b:c3:
2f:cb:49:c3:fc:08:76:68:d3:72:6f:b5:3f:80:f9:49:03:da:
eb:7d:97:1b:67:63:23:4f:6c:79:72:a6:68:2e:ff:c7:a1:35:
cd:2c:31:19:5b:97:9b:e1:8c:5e:ee:d4:41:ae:3a:97:00:d6:
fc:c5:e3:fd:45:5c:a9:14:ef:d7:75:32:49:a6:55:8c:f4:75:
87:20:9c:a6:97:e2:17:74:48:56:06:a5:ed:18:da:97:f1:67:
d5:d7:da:53:ca:2f:4b:34:3c:ac:1e:e5:a5:a9:dc:70:9a:00:
51:60:bd:cf:0e:8a:cb:8a:81:ee:a0:f0:49:fe:d4:ba:4a:39:
c5:6e:cb:08:4c:cd:f2:82:09:0e:fe:e7:cb:a5:6c:86:da:9a:
f7:3e:62:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPeeMFR0ot582ujRV44uxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOGE3ODg2NjYyMjU0YmUzOWVhMWFkZDcyNzI4ZTAwMGVi
MmMyNWEwHhcNMjUwNjE0MDcwMTAyWhcNMjUwNjE1MDcwMTAyWjAzMTEwLwYDVQQD
EyhhMDM3ZThmYmQwMmRkMTI2YWNkOWFlYmVmZTEwOTE4YzQ5NTVjM2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BOW8XFRXtUW5GMQeDSpSc5K8MRb
8T0tvcDZ2QeUIqVRz8WAiMvYsxMCKGZkd3ed4KGgLuvP4yEtVS4a19Ucf4oG7M+a
gpbJDbwQc8q3XtS0QgXAXrEOAHU/uUOBzJg6uSsDR37wzw3bpGPy3CN0jSJf28A7
PXV7dLRtufvkulAB6riroMuFTXUSjHCLT32cirhmBrj8nNc9gN70sQFfb5RZRqra
+REHPhf7hE2/dHX2Nzpmqlc63+uK5IDzgXo29RePbgrjKQzUzJBAKJxojiiXa4d8
bMiQJANa7SI/48gRfx3SvY3Cc8UAhNUJIAhiuTc+utOrUD790lp0ecmOswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKA36PvQLdEmrNmuvv4QkYxJVcP3MB8GA1UdIwQY
MBaAFEyKeIZmIlS+Oeoa3XJyjgAOssJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81Njg3YzEtZGY5Zi00YWU1LWE0Y2Mt
ZWMwM2ViZDE5MDAwLzEvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81Njg3YzEtZGY5Zi00YWU1LWE0Y2MtZWMwM2ViZDE5MDAw
LzEvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHiCWO2y
uTonNxiMQ2qorR82NJtOMNTf/0HzOVrPAV8aTUzoITau7CsUiIDQ/ZlzXq0Ot2zv
Zhl0m6LQvJlANnd22beqqvskL+3GWil25y9NCXCangQBZ152kPo7WL+YjL4Y1tO/
a2+84HvDL8tJw/wIdmjTcm+1P4D5SQPa632XG2djI09seXKmaC7/x6E1zSwxGVuX
m+GMXu7UQa46lwDW/MXj/UVcqRTv13UySaZVjPR1hyCcppfiF3RIVgal7Rjal/Fn
1dfaU8ovSzQ8rB7lpanccJoAUWC9zw6Ky4qB7qDwSf7Uuko5xW7LCEzN8oIJDv7n
y6Vshtqa9z5iBA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:43:14 2025 by rpki-client