Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
File: Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft (raw, json)
Hash identifier: q/+3c8Zc+saW30Ep+9l8GRYK9IqRIFLGCENYGl+kn1U=
Subject key identifier: 0A:25:40:90:62:3B:5A:16:38:0D:46:1E:0C:8B:4B:38:5D:C3:9C:17
Authority key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
Certificate issuer: /CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Certificate serial: 01976A3C95D33E5B16568FC7406CA00D73F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
Manifest number: 1586
Signing time: Fri 13 Jun 2025 17:00:44 +0000
Manifest this update: Fri 13 Jun 2025 17:00:44 +0000
Manifest next update: Sat 14 Jun 2025 17:00:44 +0000
Files and hashes: 1: EsNde2nZ0dUcA8Xoq5-tHg_EXc8.roa (hash: EuB6IqBcAAWKbULQ1dsjzb0/Ucv72mc0J9mJsdHmCGA=)
2: Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl (hash: pIadBUG8K5D7Sx4nltuES8KvI7AKWRrlrl0FyTtLuz4=)
3: eUaNjbQ13AL_bdj9OsodbJhievk.roa (hash: vqTtUX/Z4j6GrRJo/zNXECftqpV9YIa2rqV3Ge4NXvs=)
4: occ86qiOIs73r7C894le5tLORUc.roa (hash: vjqBb3FygjXd34w4UXc66ToikB55Yx9gYxFBgH7Uvw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:95:d3:3e:5b:16:56:8f:c7:40:6c:a0:0d:73:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Validity
Not Before: Jun 13 17:00:44 2025 GMT
Not After : Jun 14 17:00:44 2025 GMT
Subject: CN=0a254090623b5a16380d461e0c8b4b385dc39c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:f8:7b:79:19:cc:73:6c:aa:78:df:bf:96:
47:ea:a4:58:63:54:3b:cc:8c:1d:51:98:76:7e:1a:
cf:fb:3e:f3:d2:37:34:15:ae:1a:7c:11:ed:af:4b:
cc:cb:9a:09:42:c4:db:32:f7:d4:42:82:1b:c7:e3:
97:ca:d2:94:e7:5b:75:d9:dd:8f:70:19:aa:7e:fc:
2e:b6:b2:4f:9a:fa:de:93:35:00:71:a7:c2:41:80:
32:f7:66:77:56:b1:f4:5b:40:9c:41:c2:4e:1a:9f:
26:78:7f:d0:60:e5:85:18:94:bc:a0:40:8e:f1:81:
80:f3:18:85:f4:f2:b1:f2:1c:43:d8:d3:13:13:7c:
90:51:0a:54:08:5f:fa:81:90:cc:53:d9:9d:f0:00:
62:f5:b7:3f:a0:fa:1e:bd:65:51:57:64:ff:f2:cb:
a6:51:2e:d3:94:1c:0d:e8:bb:5d:b5:bc:85:70:be:
e9:85:9f:d1:98:d2:98:3a:13:2e:83:23:21:ee:ed:
d0:a5:b8:e9:df:82:f5:bd:d6:0f:ac:eb:9b:73:bd:
1b:aa:4b:c9:56:10:25:2d:0c:24:69:91:84:92:83:
7b:e5:a3:72:f3:e2:c7:f1:45:71:8d:16:e4:28:af:
21:52:c0:32:1a:8c:44:46:f6:38:1a:65:76:e6:66:
0b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:25:40:90:62:3B:5A:16:38:0D:46:1E:0C:8B:4B:38:5D:C3:9C:17
X509v3 Authority Key Identifier:
keyid:4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1c:78:ad:00:19:32:3e:c5:72:78:5e:b4:22:99:12:37:c4:
d8:39:71:6f:62:b1:18:3f:08:fa:a4:f2:a7:30:4b:d3:3e:0e:
d8:42:27:97:d4:f6:ef:a0:62:54:e3:07:fd:1f:89:d3:db:f6:
93:d9:9a:4a:6b:52:59:4e:82:c1:d9:38:80:80:38:21:67:bc:
b2:fa:02:06:3e:8a:16:30:55:4e:be:be:3b:1b:3a:68:cb:f1:
8c:3b:a4:22:6d:e1:11:5b:76:44:ef:4f:3b:e3:51:42:f1:19:
e7:bf:b5:fd:2f:cb:65:11:76:97:c1:3c:f0:ff:60:08:4c:75:
6e:b8:dd:19:02:4e:2b:89:5e:04:fb:f2:0c:d8:d9:96:e3:e5:
3e:12:bb:87:32:7e:f0:93:ab:38:65:17:15:d0:2b:60:ca:34:
e9:ba:48:e1:6d:34:e4:dd:e0:fb:dd:13:aa:f0:24:ac:52:21:
5d:a0:ba:db:bc:32:2c:22:86:71:a9:33:9e:8e:2a:2a:38:79:
62:ff:f7:d9:d7:b2:64:00:0a:00:94:b9:30:1b:bb:a5:78:e5:
46:fe:08:3b:ac:7e:70:a6:c2:02:1c:52:72:f6:a3:f1:09:78:
b1:dc:a3:c9:c3:68:33:c2:f7:94:a1:06:1b:d8:2c:7f:db:ac:
ea:f8:bb:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqPJXTPlsWVo/HQGygDXP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZWY2YWFlNmZiYTVjNjFhNjE3MzlhZmNhYjU1YTYyMjY2
ZTg5ZWUwHhcNMjUwNjEzMTcwMDQ0WhcNMjUwNjE0MTcwMDQ0WjAzMTEwLwYDVQQD
EygwYTI1NDA5MDYyM2I1YTE2MzgwZDQ2MWUwYzhiNGIzODVkYzM5YzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIb4e3kZzHNsqnjfv5ZH6qRYY1Q7
zIwdUZh2fhrP+z7z0jc0Fa4afBHtr0vMy5oJQsTbMvfUQoIbx+OXytKU51t12d2P
cBmqfvwutrJPmvrekzUAcafCQYAy92Z3VrH0W0CcQcJOGp8meH/QYOWFGJS8oECO
8YGA8xiF9PKx8hxD2NMTE3yQUQpUCF/6gZDMU9md8ABi9bc/oPoevWVRV2T/8sum
US7TlBwN6LtdtbyFcL7phZ/RmNKYOhMugyMh7u3Qpbjp34L1vdYPrOubc70bqkvJ
VhAlLQwkaZGEkoN75aNy8+LH8UVxjRbkKK8hUsAyGoxERvY4GmV25mYLpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAolQJBiO1oWOA1GHgyLSzhdw5wXMB8GA1UdIwQY
MBaAFE7vaq5vulxhphc5r8q1WmImbonuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHU5cXJtLTZYR0dtRnptdnlyVmFZaVp1aWU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iOGU1YzQtMzhlYi00NDVmLWIwMzYt
YzM3NzkwZTZkNDgyLzEvVHU5cXJtLTZYR0dtRnptdnlyVmFZaVp1aWU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iOGU1YzQtMzhlYi00NDVmLWIwMzYtYzM3NzkwZTZkNDgy
LzEvVHU5cXJtLTZYR0dtRnptdnlyVmFZaVp1aWU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhx4rQAZ
Mj7FcnhetCKZEjfE2Dlxb2KxGD8I+qTypzBL0z4O2EInl9T276BiVOMH/R+J09v2
k9maSmtSWU6Cwdk4gIA4IWe8svoCBj6KFjBVTr6+Oxs6aMvxjDukIm3hEVt2RO9P
O+NRQvEZ57+1/S/LZRF2l8E88P9gCEx1brjdGQJOK4leBPvyDNjZluPlPhK7hzJ+
8JOrOGUXFdArYMo06bpI4W005N3g+90TqvAkrFIhXaC627wyLCKGcakzno4qKjh5
Yv/32deyZAAKAJS5MBu7pXjlRv4IO6x+cKbCAhxScvaj8Ql4sdyjycNoM8L3lKEG
G9gsf9us6vi7Dw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 20:07:11 2025 by rpki-client