Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
File: tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft (raw, json)
Hash identifier: qw1BlhFZCVB2JgkJ0P/ABowrit/SttNtEXda4S4mmsU=
Subject key identifier: 9D:BD:AC:46:60:19:D9:57:66:46:F6:05:3D:7D:39:0F:12:33:40:52
Authority key identifier: B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
Certificate issuer: /CN=b46320188098520c366277f749a4f77a1d444439
Certificate serial: 01976D067F07315D8278C17F352876B6C0B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 06:00:31 +0000
Manifest this update: Sat 14 Jun 2025 06:00:31 +0000
Manifest next update: Sun 15 Jun 2025 06:00:31 +0000
Files and hashes: 1: 1c-Abo0LxBVDDE4sBrG9JS_ePzI.roa (hash: rxDs0I1CVbIWmreeYb6ePZfwtg9Spev7LU71wCrsp/4=)
2: tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl (hash: 0mn1NXkjL60O76ZdyG1HcNKZHSL1MYU5CQzmk9SR3zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:7f:07:31:5d:82:78:c1:7f:35:28:76:b6:c0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b46320188098520c366277f749a4f77a1d444439
Validity
Not Before: Jun 14 06:00:31 2025 GMT
Not After : Jun 15 06:00:31 2025 GMT
Subject: CN=9dbdac466019d9576646f6053d7d390f12334052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:06:f0:ec:91:87:1d:8d:87:df:49:5d:dd:
ea:d2:d7:7b:00:c9:af:39:58:33:9d:bb:5b:c5:eb:
fe:df:43:66:63:ca:36:fc:cd:16:3e:86:25:d6:7e:
79:0e:8b:8f:89:8d:61:e5:4b:92:37:fd:5e:b7:c2:
dd:0f:cf:56:aa:2b:e0:24:7a:03:3a:2a:d8:87:30:
30:85:1b:25:26:87:ca:1c:57:f4:c2:9f:60:1c:2b:
f7:c7:a6:d3:0c:6c:bc:3f:53:33:dc:21:0f:64:7c:
1b:55:11:61:38:b9:68:16:b6:0d:26:87:d6:62:58:
90:b3:4a:82:33:25:7b:84:12:fd:91:37:a8:71:37:
2e:7a:f2:33:6e:8e:d4:46:85:88:88:d2:49:15:cd:
bd:87:6c:ee:9e:58:1b:e2:dd:67:fb:e4:2d:c9:8d:
a3:d0:32:a2:46:18:b4:0b:27:90:a8:a9:d2:02:f8:
ec:a4:d5:25:ca:ea:93:f8:03:d8:6e:65:0b:bc:d7:
b6:1d:88:99:ec:be:79:0f:9a:0e:06:ad:6f:b0:3e:
ce:5b:07:21:de:50:89:59:92:81:e3:99:95:98:92:
0f:37:c3:ff:f1:89:75:2e:69:ab:06:eb:7d:19:38:
92:dc:20:90:6c:e4:86:1b:f5:44:09:2e:d7:23:61:
76:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BD:AC:46:60:19:D9:57:66:46:F6:05:3D:7D:39:0F:12:33:40:52
X509v3 Authority Key Identifier:
keyid:B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:17:3a:5b:71:1f:26:f3:0e:45:26:dd:95:e8:b7:77:56:b6:
42:89:01:c4:69:c9:c7:de:b9:50:03:22:29:05:2c:c1:b9:ca:
2d:0f:0e:6c:2e:c6:01:ab:d8:47:1e:f6:d1:85:bb:67:0c:ed:
32:db:7d:e6:af:8b:3a:c2:e8:2d:f4:29:3c:3f:96:de:e2:6f:
6a:0a:c7:92:bd:4b:65:93:8b:9e:17:3e:17:66:48:1b:cc:80:
b7:06:2f:f8:d0:c1:0a:09:5b:47:b4:82:9c:8b:6c:a4:c6:79:
9a:2e:98:50:7b:f1:49:69:7a:74:6e:ab:97:47:0a:56:4c:c9:
e5:b2:21:11:65:11:1a:bf:36:06:d3:3f:90:59:45:7a:8c:01:
3a:ea:a2:01:8a:ac:68:85:51:55:32:72:15:0a:d2:0e:84:5c:
9c:ba:28:fa:e8:85:c8:bb:c8:9c:29:b3:87:6c:83:a8:8e:46:
5b:ee:51:b1:6b:0f:ae:9d:d6:fd:b8:ca:75:95:b1:76:9e:2b:
17:e5:00:b0:f1:62:8e:e9:eb:1a:9a:2e:19:3b:14:fd:e6:29:
4f:8e:2e:13:0c:2a:52:42:28:82:18:d3:b0:c9:83:56:e2:4a:
75:44:2e:c7:83:d8:b9:c6:8d:f9:19:c1:70:5f:35:86:13:6f:
10:68:56:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBn8HMV2CeMF/NSh2tsCyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjMyMDE4ODA5ODUyMGMzNjYyNzdmNzQ5YTRmNzdhMWQ0
NDQ0MzkwHhcNMjUwNjE0MDYwMDMxWhcNMjUwNjE1MDYwMDMxWjAzMTEwLwYDVQQD
Eyg5ZGJkYWM0NjYwMTlkOTU3NjY0NmY2MDUzZDdkMzkwZjEyMzM0MDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW0G8OyRhx2Nh99JXd3q0td7AMmv
OVgznbtbxev+30NmY8o2/M0WPoYl1n55DouPiY1h5UuSN/1et8LdD89WqivgJHoD
OirYhzAwhRslJofKHFf0wp9gHCv3x6bTDGy8P1Mz3CEPZHwbVRFhOLloFrYNJofW
YliQs0qCMyV7hBL9kTeocTcuevIzbo7URoWIiNJJFc29h2zunlgb4t1n++QtyY2j
0DKiRhi0CyeQqKnSAvjspNUlyuqT+APYbmULvNe2HYiZ7L55D5oOBq1vsD7OWwch
3lCJWZKB45mVmJIPN8P/8Yl1LmmrBut9GTiS3CCQbOSGG/VECS7XI2F2lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ29rEZgGdlXZkb2BT19OQ8SM0BSMB8GA1UdIwQY
MBaAFLRjIBiAmFIMNmJ390mk93odREQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdNZ0dJQ1lVZ3cyWW5mM1NhVDNlaDFFUkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC80YWNiODMtZjk0MC00NzY2LWJjYTkt
NjA4ZTdkNzc5YmM3LzEvdEdNZ0dJQ1lVZ3cyWW5mM1NhVDNlaDFFUkRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC80YWNiODMtZjk0MC00NzY2LWJjYTktNjA4ZTdkNzc5YmM3
LzEvdEdNZ0dJQ1lVZ3cyWW5mM1NhVDNlaDFFUkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBc6W3Ef
JvMORSbdlei3d1a2QokBxGnJx965UAMiKQUswbnKLQ8ObC7GAavYRx720YW7Zwzt
Mtt95q+LOsLoLfQpPD+W3uJvagrHkr1LZZOLnhc+F2ZIG8yAtwYv+NDBCglbR7SC
nItspMZ5mi6YUHvxSWl6dG6rl0cKVkzJ5bIhEWURGr82BtM/kFlFeowBOuqiAYqs
aIVRVTJyFQrSDoRcnLoo+uiFyLvInCmzh2yDqI5GW+5RsWsPrp3W/bjKdZWxdp4r
F+UAsPFijunrGpouGTsU/eYpT44uEwwqUkIoghjTsMmDVuJKdUQux4PYucaN+RnB
cF81hhNvEGhWQw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:01:35 2025 by rpki-client