Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
File: tKIIXH3jtZgha4n7Dysdkw3mbBk.mft (raw, json)
Hash identifier: OUU8dnnTZmbIfsCViUJI0T6PKkrdvFLdYQ30jSvnwSQ=
Subject key identifier: 13:68:AC:1F:90:2E:12:AE:DC:73:21:78:B3:5F:47:7C:09:EE:CF:D5
Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Certificate issuer: /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Certificate serial: 01976CCFA5448F5EC923533EC966153A53A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
Manifest number: 1564
Signing time: Sat 14 Jun 2025 05:00:36 +0000
Manifest this update: Sat 14 Jun 2025 05:00:36 +0000
Manifest next update: Sun 15 Jun 2025 05:00:36 +0000
Files and hashes: 1: Bm5UACtbnF-zdFYjA8vPOBqvgzc.roa (hash: TLMH3v0yPGvBQf4sp02A0ciC7nkIzxuyV+cC5oHQvcg=)
2: KygTuxQFGUD5ATwC-VI56P0_KW8.roa (hash: +kPqhnKnrFZGjWfktqCyP4orZXjdv9+6M6sRVLgaUrA=)
3: kH7H7auuv6q7VTDiT7be_vcY-1Q.roa (hash: M4+McdjIhgE1/SI8bKbvFu1HsdzjwaQszRqVGjqa+wM=)
4: tKIIXH3jtZgha4n7Dysdkw3mbBk.crl (hash: 4vl9z5BPZt26YW/eAmjNdSeWDyF9CBLIEHhbzsS7cro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:a5:44:8f:5e:c9:23:53:3e:c9:66:15:3a:53:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Validity
Not Before: Jun 14 05:00:36 2025 GMT
Not After : Jun 15 05:00:36 2025 GMT
Subject: CN=1368ac1f902e12aedc732178b35f477c09eecfd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8b:e9:2a:76:ef:53:d2:74:e3:ff:41:72:ae:
31:23:e7:5a:87:47:20:c4:30:23:f9:f1:46:de:9f:
bb:99:cb:19:05:0f:77:96:d8:7d:79:ce:d4:27:43:
64:09:34:27:43:d5:19:be:23:63:cb:06:e4:15:a6:
c2:4d:fa:54:96:22:61:8f:09:96:0a:e7:6f:83:2e:
a4:0d:13:d2:db:24:ee:2f:e5:d6:7f:52:a2:bd:8b:
cf:dc:b3:49:9a:31:1d:74:22:ee:ac:a0:d8:d5:2f:
77:ff:fb:a8:b1:3c:64:18:be:c2:5e:f5:a7:82:f6:
7d:df:8b:b2:74:db:01:2a:23:12:9e:47:a9:af:49:
ef:f2:1b:96:d5:88:c5:4a:50:1b:0f:4f:6a:9d:9a:
35:33:b3:d0:b5:f1:a4:18:52:95:d6:d2:ec:f8:cc:
6a:f6:7f:73:41:0e:a5:48:5c:68:59:e6:9c:71:c8:
5e:0d:f1:ee:61:e3:d1:a6:ce:0f:d1:4c:fd:db:5d:
46:b5:7d:35:70:0a:bd:42:20:d4:aa:e7:35:07:79:
8b:ce:6e:35:36:3d:78:93:4e:29:3a:c3:40:16:cd:
08:d4:e2:f3:0f:1a:69:19:38:d6:dd:2b:98:60:45:
8b:8d:98:ca:7d:6e:bf:46:df:1b:6f:21:f4:c1:43:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:68:AC:1F:90:2E:12:AE:DC:73:21:78:B3:5F:47:7C:09:EE:CF:D5
X509v3 Authority Key Identifier:
keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:2e:8e:6f:7f:54:d9:2e:24:4c:1b:74:29:ee:60:33:44:31:
85:51:18:6a:e6:37:b4:e5:fd:44:fb:f4:b4:ed:ff:5e:12:f5:
26:7a:bc:72:20:1b:fa:59:0c:6c:3b:eb:c0:d7:a9:43:a8:b5:
12:3c:f3:35:8f:1b:7e:88:79:4f:0f:ec:22:0e:62:19:d2:3f:
0e:b3:93:16:b9:25:c0:e2:77:2c:87:04:f2:38:4c:5a:10:87:
ad:ad:f3:27:a9:37:08:f0:97:09:ac:c7:fb:80:50:de:99:ce:
c7:bf:44:98:c3:92:4d:a9:28:e8:8c:6f:38:48:92:49:db:a0:
2a:b4:83:2a:e5:22:21:7a:7e:76:44:02:a0:6c:ab:12:94:37:
28:22:00:8e:4f:ff:31:6e:f6:9e:96:ac:e8:c2:b4:6b:2f:3e:
5a:a6:33:6b:21:19:05:6b:be:01:cc:b3:ca:c0:dc:e5:47:2a:
cf:cb:71:0c:99:4d:92:9c:a4:cf:54:84:d7:d8:43:78:ff:ee:
33:b8:64:cb:74:06:c3:01:04:08:fc:17:f9:43:de:13:ad:ad:
f0:15:8c:28:52:6f:9b:c1:f8:c0:88:9a:0d:87:79:ad:49:3a:
59:e2:8c:ef:cd:5b:e3:bd:ec:d9:0e:42:a2:83:1c:02:cf:ab:
ae:8a:b7:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz6VEj17JI1M+yWYVOlOpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YTIwODVjN2RlM2I1OTgyMTZiODlmYjBmMmIxZDkzMGRl
NjZjMTkwHhcNMjUwNjE0MDUwMDM2WhcNMjUwNjE1MDUwMDM2WjAzMTEwLwYDVQQD
EygxMzY4YWMxZjkwMmUxMmFlZGM3MzIxNzhiMzVmNDc3YzA5ZWVjZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ovpKnbvU9J04/9Bcq4xI+dah0cg
xDAj+fFG3p+7mcsZBQ93lth9ec7UJ0NkCTQnQ9UZviNjywbkFabCTfpUliJhjwmW
Cudvgy6kDRPS2yTuL+XWf1KivYvP3LNJmjEddCLurKDY1S93//uosTxkGL7CXvWn
gvZ934uydNsBKiMSnkepr0nv8huW1YjFSlAbD09qnZo1M7PQtfGkGFKV1tLs+Mxq
9n9zQQ6lSFxoWeacccheDfHuYePRps4P0Uz9211GtX01cAq9QiDUquc1B3mLzm41
Nj14k04pOsNAFs0I1OLzDxppGTjW3SuYYEWLjZjKfW6/Rt8bbyH0wUNSPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNorB+QLhKu3HMheLNfR3wJ7s/VMB8GA1UdIwQY
MBaAFLSiCFx947WYIWuJ+w8rHZMN5mwZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEtJSVhIM2p0WmdoYTRuN0R5c2RrdzNtYkJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kNjUxM2QtMmQ1My00MDIyLTgzNjAt
MzExNzk4OTYwMWFkLzEvdEtJSVhIM2p0WmdoYTRuN0R5c2RrdzNtYkJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kNjUxM2QtMmQ1My00MDIyLTgzNjAtMzExNzk4OTYwMWFk
LzEvdEtJSVhIM2p0WmdoYTRuN0R5c2RrdzNtYkJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAti6Ob39U
2S4kTBt0Ke5gM0QxhVEYauY3tOX9RPv0tO3/XhL1Jnq8ciAb+lkMbDvrwNepQ6i1
EjzzNY8bfoh5Tw/sIg5iGdI/DrOTFrklwOJ3LIcE8jhMWhCHra3zJ6k3CPCXCazH
+4BQ3pnOx79EmMOSTako6IxvOEiSSdugKrSDKuUiIXp+dkQCoGyrEpQ3KCIAjk//
MW72npas6MK0ay8+WqYzayEZBWu+AcyzysDc5Ucqz8txDJlNkpykz1SE19hDeP/u
M7hky3QGwwEECPwX+UPeE62t8BWMKFJvm8H4wIiaDYd5rUk6WeKM781b473s2Q5C
ooMcAs+rroq3Hw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:12:40 2025 by rpki-client