Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
File: t0zj88XlovnYuKTHeoNh-KIW860.mft (raw, json)
Hash identifier: tf9rmKgGaN8LK4u/m3No/YAa3ihyThjjmsorlYNmBM8=
Subject key identifier: 7B:EB:D8:4D:A9:49:BC:9C:FD:B6:DD:73:51:E7:55:1E:5C:55:D2:3B
Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
Certificate issuer: /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Certificate serial: 01976884BE033889DA7C6750D75A38C0EF50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
Manifest number: 10A8
Signing time: Fri 13 Jun 2025 09:00:19 +0000
Manifest this update: Fri 13 Jun 2025 09:00:19 +0000
Manifest next update: Sat 14 Jun 2025 09:00:19 +0000
Files and hashes: 1: CWinuPyhpx9dz9dUy6hm9U-hSH0.roa (hash: kzRVIrmXy5CpUKL1SvqWwqKDXVmBwcHxugVImN5DgH0=)
2: _YcVUBg4pBpfDLeQd5mPM0GEYXY.roa (hash: TyordHwYJ+m11Vugk833ssnB80M13ALr7nNUHskLV34=)
3: t0zj88XlovnYuKTHeoNh-KIW860.crl (hash: 4Qm7ZX68Eo0qnjSJ++y5xD17Vf0ObgShsRT3yiO+/6M=)
4: yXmhizI4Z65kZAreixYHF_jmabo.roa (hash: fvFB8WtSEXeTN1SuEvO/tTJVrm8z5zv+uzQCLKVxzdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:be:03:38:89:da:7c:67:50:d7:5a:38:c0:ef:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Validity
Not Before: Jun 13 09:00:19 2025 GMT
Not After : Jun 14 09:00:19 2025 GMT
Subject: CN=7bebd84da949bc9cfdb6dd7351e7551e5c55d23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ab:be:8c:dd:15:ae:b0:79:99:d7:ad:1d:db:
4a:7b:ff:e7:fd:da:ea:9a:88:3f:20:0f:31:64:30:
81:f3:bf:c1:ba:b5:42:f0:e5:7b:d3:1b:7d:18:53:
3b:3a:72:3b:2b:c6:4d:81:1a:70:ae:25:ef:db:5f:
6e:0e:a4:0b:cf:ba:19:12:cc:4f:d4:fd:52:ed:1c:
96:3e:5c:b8:2a:b5:93:75:6a:e0:94:5a:60:18:9b:
af:87:17:aa:61:15:69:4b:bf:3a:7b:5b:59:65:3b:
35:eb:0b:60:75:d5:85:9e:54:04:5e:d3:a1:60:01:
62:b1:5e:c9:3c:26:98:05:79:3c:f0:01:96:67:80:
52:4f:e4:76:86:c7:9a:d8:68:fe:2f:91:54:d8:64:
1a:c1:21:17:7c:82:ca:b9:9b:2c:5a:e7:2b:ba:bf:
e1:6a:33:c9:a9:2d:69:2b:f7:ec:70:65:c9:5c:cd:
c3:7f:a7:5b:5e:e8:76:b9:09:dd:45:42:5a:c2:eb:
d8:bf:67:aa:f6:f5:79:86:a1:1d:c1:b0:60:4f:df:
ba:19:5d:8e:44:d2:a7:e5:31:14:53:1d:df:65:6f:
24:16:d3:0a:de:e1:6a:5b:b2:b7:b2:81:61:d2:88:
4a:67:a0:a3:78:0f:be:80:cd:2d:e0:ab:73:18:e7:
22:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EB:D8:4D:A9:49:BC:9C:FD:B6:DD:73:51:E7:55:1E:5C:55:D2:3B
X509v3 Authority Key Identifier:
keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:66:7c:65:36:c1:59:fa:55:47:fc:c5:a7:27:a8:02:e4:21:
bf:96:5a:9f:60:f4:99:1f:84:7b:96:fa:dd:55:c7:5d:08:3e:
69:e3:3a:48:4c:dd:54:d4:e0:8a:de:bf:8e:51:38:ec:81:54:
34:b1:87:e1:47:a8:f0:d7:5a:7e:5c:fe:04:07:00:5d:a5:26:
9d:b6:2b:77:b0:98:33:e4:07:fe:4f:5d:da:08:77:a2:c4:3d:
2c:29:86:8f:3f:99:7d:48:09:01:35:a2:25:dc:b2:d7:8d:bc:
da:49:0c:20:4b:33:d2:6e:63:0a:aa:20:02:84:70:33:42:60:
e1:eb:7e:e5:74:fa:2c:49:00:98:46:a8:4c:d2:76:c1:37:f8:
c3:fb:3c:83:71:7f:27:87:53:9d:03:26:f1:5a:95:27:f7:ee:
2f:1a:47:27:a3:55:0d:c8:cd:4c:50:1d:6b:97:dc:5c:ea:f6:
c5:74:c7:47:72:f3:f2:f1:ae:db:a1:40:fb:79:74:ae:09:0f:
e2:7e:6f:c3:bf:1c:ad:3b:17:63:ab:1e:79:71:0b:a4:99:33:
bd:03:d3:22:5b:4f:bf:62:a6:d8:7a:f6:fe:ae:ab:36:25:67:
d4:8f:7e:64:e2:01:f7:8e:09:2c:bd:a3:bc:53:20:ed:c3:00:
99:af:b2:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdohL4DOInafGdQ11o4wO9QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NGNlM2YzYzVlNWEyZjlkOGI4YTRjNzdhODM2MWY4YTIx
NmYzYWQwHhcNMjUwNjEzMDkwMDE5WhcNMjUwNjE0MDkwMDE5WjAzMTEwLwYDVQQD
Eyg3YmViZDg0ZGE5NDliYzljZmRiNmRkNzM1MWU3NTUxZTVjNTVkMjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKu+jN0VrrB5mdetHdtKe//n/drq
mog/IA8xZDCB87/BurVC8OV70xt9GFM7OnI7K8ZNgRpwriXv219uDqQLz7oZEsxP
1P1S7RyWPly4KrWTdWrglFpgGJuvhxeqYRVpS786e1tZZTs16wtgddWFnlQEXtOh
YAFisV7JPCaYBXk88AGWZ4BST+R2hsea2Gj+L5FU2GQawSEXfILKuZssWucrur/h
ajPJqS1pK/fscGXJXM3Df6dbXuh2uQndRUJawuvYv2eq9vV5hqEdwbBgT9+6GV2O
RNKn5TEUUx3fZW8kFtMK3uFqW7K3soFh0ohKZ6CjeA++gM0t4KtzGOcikQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvr2E2pSbyc/bbdc1HnVR5cVdI7MB8GA1UdIwQY
MBaAFLdM4/PF5aL52Likx3qDYfiiFvOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hYzY4MWYtMDVkMi00MDQ1LWFlMTAt
NWViZGQ5ZTI4ODdjLzEvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9hYzY4MWYtMDVkMi00MDQ1LWFlMTAtNWViZGQ5ZTI4ODdj
LzEvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGZ8ZTbB
WfpVR/zFpyeoAuQhv5Zan2D0mR+Ee5b63VXHXQg+aeM6SEzdVNTgit6/jlE47IFU
NLGH4Ueo8Ndaflz+BAcAXaUmnbYrd7CYM+QH/k9d2gh3osQ9LCmGjz+ZfUgJATWi
Jdyy14282kkMIEsz0m5jCqogAoRwM0Jg4et+5XT6LEkAmEaoTNJ2wTf4w/s8g3F/
J4dTnQMm8VqVJ/fuLxpHJ6NVDcjNTFAda5fcXOr2xXTHR3Lz8vGu26FA+3l0rgkP
4n5vw78crTsXY6seeXELpJkzvQPTIltPv2Km2Hr2/q6rNiVn1I9+ZOIB944JLL2j
vFMg7cMAma+yVw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:36:11 2025 by rpki-client