Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
File: tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json)
Hash identifier: +zEmAgsfNd9NlNeVUrN09PYpI01rCtnQnQ9u91Ahye0=
Subject key identifier: 34:26:B3:D1:9E:1D:B2:30:2B:69:B4:00:E7:DF:13:6F:D3:66:E7:38
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Certificate issuer: /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial: 01976CCFA8A3352BBBC566402147D63256CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 05:00:37 +0000
Manifest this update: Sat 14 Jun 2025 05:00:37 +0000
Manifest next update: Sun 15 Jun 2025 05:00:37 +0000
Files and hashes: 1: bCO5bqFLQTtaSqSwTRLhrpm3wCA.roa (hash: xHiR4ALGk4+cM6JODCM19LWc7pantvAdvK3viET0qj4=)
2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: 8ooDGTm+v9EdAJavxiRJtVHtUspCks13bJWXviYpW4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:a8:a3:35:2b:bb:c5:66:40:21:47:d6:32:56:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Validity
Not Before: Jun 14 05:00:37 2025 GMT
Not After : Jun 15 05:00:37 2025 GMT
Subject: CN=3426b3d19e1db2302b69b400e7df136fd366e738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:a7:fa:4c:74:57:f7:49:33:77:97:56:28:
94:36:6f:6e:14:46:b3:cd:3d:48:c8:a3:7c:d5:87:
70:59:94:7a:bb:8d:81:c9:ac:98:bb:17:ec:3d:ab:
d8:6e:2e:4a:03:03:7a:7d:61:2a:59:f9:3d:c8:f7:
27:13:ad:ea:22:15:6c:56:ae:99:d6:83:b1:3d:81:
7e:06:95:4d:ab:53:ad:be:d2:ce:17:51:a9:12:0d:
88:8d:03:52:c1:02:80:ea:e1:be:95:2b:2b:29:90:
0a:62:83:f6:6d:92:40:98:1a:57:a5:cb:99:cc:8c:
1c:91:40:66:38:ab:e4:41:ff:d9:08:8e:07:7c:42:
06:0d:a6:ef:b5:2c:fb:35:8d:47:26:15:75:ee:a8:
a3:b3:f8:47:05:43:75:59:34:ea:25:bc:35:36:88:
6c:45:92:1f:f8:e9:7a:9d:fb:b3:6d:23:f4:c1:26:
10:07:23:a9:71:b1:9c:29:f1:bd:3f:b8:19:34:95:
a5:aa:37:b9:90:e5:ef:95:23:b4:28:d6:8e:b8:0e:
93:9f:e3:96:bb:34:97:34:02:4f:ed:f8:73:c7:95:
1e:b0:cf:30:69:14:af:ec:d0:91:3f:d0:bd:1f:be:
f7:09:13:19:17:4d:cb:64:82:66:9c:c8:98:bd:c8:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:26:B3:D1:9E:1D:B2:30:2B:69:B4:00:E7:DF:13:6F:D3:66:E7:38
X509v3 Authority Key Identifier:
keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8e:82:e2:77:f4:c7:d1:69:d5:6a:69:24:43:65:ea:97:76:
15:c6:c2:54:33:97:2b:63:30:8a:9a:6c:67:59:da:01:ef:88:
fb:63:27:85:0c:9a:3b:fd:2a:f2:03:09:d6:81:a5:2d:d0:bb:
16:ac:65:e5:b3:6b:c5:23:cd:9a:cf:6a:2f:e1:64:3a:31:f1:
e5:70:ef:c5:08:43:15:52:d2:e3:d0:07:55:dd:1b:21:ec:2e:
3d:3b:f0:50:c4:9b:55:98:64:f5:06:47:66:08:5f:a4:f9:8a:
93:05:3d:a6:76:47:ea:1c:9e:e3:9a:4f:ca:ad:16:df:73:ed:
06:02:55:4f:86:4d:d7:8c:a8:80:d8:8c:58:cc:8e:4e:65:e9:
6a:78:d8:5e:9b:c5:21:f1:88:ad:6b:36:ef:e4:1c:b5:13:3b:
e0:55:7f:a5:a0:34:1b:e7:fc:2e:5f:d8:5b:fb:96:5a:67:28:
99:53:25:25:3d:9f:15:4f:86:d0:4b:4e:57:95:c9:52:2c:b6:
c2:4d:30:51:87:33:ea:4e:cb:d4:27:12:f9:08:ee:64:cb:39:
d9:8d:1a:ae:1a:1f:48:28:34:e1:fd:ce:17:7a:eb:0b:e8:c5:
b4:ee:f2:36:83:c2:90:aa:93:e5:b8:b3:91:58:d1:c9:d0:83:
e1:82:5a:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz6ijNSu7xWZAIUfWMlbKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Y2Q5NmIyN2U4ODQzNTA0YmI1YmQ1NWMzMjllYzAyZGI5
ZjBmZmQwHhcNMjUwNjE0MDUwMDM3WhcNMjUwNjE1MDUwMDM3WjAzMTEwLwYDVQQD
EygzNDI2YjNkMTllMWRiMjMwMmI2OWI0MDBlN2RmMTM2ZmQzNjZlNzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2+n+kx0V/dJM3eXViiUNm9uFEaz
zT1IyKN81YdwWZR6u42ByayYuxfsPavYbi5KAwN6fWEqWfk9yPcnE63qIhVsVq6Z
1oOxPYF+BpVNq1OtvtLOF1GpEg2IjQNSwQKA6uG+lSsrKZAKYoP2bZJAmBpXpcuZ
zIwckUBmOKvkQf/ZCI4HfEIGDabvtSz7NY1HJhV17qijs/hHBUN1WTTqJbw1Nohs
RZIf+Ol6nfuzbSP0wSYQByOpcbGcKfG9P7gZNJWlqje5kOXvlSO0KNaOuA6Tn+OW
uzSXNAJP7fhzx5UesM8waRSv7NCRP9C9H773CRMZF03LZIJmnMiYvci4DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQms9GeHbIwK2m0AOffE2/TZuc4MB8GA1UdIwQY
MBaAFLTNlrJ+iENQS7W9VcMp7ALbnw/9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE0yV3NuNklRMUJMdGIxVnd5bnNBdHVmRF8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8xOWRkYWQtYzQ1OC00NDFlLTk4NGUt
NTczZjE3ZDJhZWYzLzEvdE0yV3NuNklRMUJMdGIxVnd5bnNBdHVmRF8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8xOWRkYWQtYzQ1OC00NDFlLTk4NGUtNTczZjE3ZDJhZWYz
LzEvdE0yV3NuNklRMUJMdGIxVnd5bnNBdHVmRF8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk46C4nf0
x9Fp1WppJENl6pd2FcbCVDOXK2MwippsZ1naAe+I+2MnhQyaO/0q8gMJ1oGlLdC7
Fqxl5bNrxSPNms9qL+FkOjHx5XDvxQhDFVLS49AHVd0bIewuPTvwUMSbVZhk9QZH
ZghfpPmKkwU9pnZH6hye45pPyq0W33PtBgJVT4ZN14yogNiMWMyOTmXpanjYXpvF
IfGIrWs27+QctRM74FV/paA0G+f8Ll/YW/uWWmcomVMlJT2fFU+G0EtOV5XJUiy2
wk0wUYcz6k7L1CcS+QjuZMs52Y0arhofSCg04f3OF3rrC+jFtO7yNoPCkKqT5biz
kVjRydCD4YJa9A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:38:56 2025 by rpki-client