Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier: aP/omPT956rWU4K+Hu1EKil1xUtbfhq3LQQaE+mr9nM=
Subject key identifier: 96:FB:84:B7:4D:D3:87:91:2D:9D:36:8C:DC:54:9E:2E:81:39:5E:E2
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 01976F631AD8F315D7624F205B49FFACC4D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number: 1594
Signing time: Sat 14 Jun 2025 17:00:55 +0000
Manifest this update: Sat 14 Jun 2025 17:00:55 +0000
Manifest next update: Sun 15 Jun 2025 17:00:55 +0000
Files and hashes: 1: XhX8A-oz684Iwe53pFqloQYS-kU.roa (hash: Mq5uGJtvZYMl6nllrQZDhX8D38boD4gAAjpBeZPZFnU=)
2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: +C2GSSktSMG5/v9NKeotIJuoK6bcIjUV+0jpugd8mEE=)
3: xq7eF4vg8c3V2xQvveah7LJZv-A.roa (hash: atQkAxpvj5iGJRjdwa/1uBWThI8y8UsCB5Ad2gGNyxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:63:1a:d8:f3:15:d7:62:4f:20:5b:49:ff:ac:c4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: Jun 14 17:00:55 2025 GMT
Not After : Jun 15 17:00:55 2025 GMT
Subject: CN=96fb84b74dd387912d9d368cdc549e2e81395ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:17:61:64:08:65:57:4e:e1:81:e8:8b:ee:25:
2d:71:cc:40:f3:e5:49:a5:4a:74:e8:99:b7:48:6c:
7c:64:c4:67:88:6c:27:91:c6:bf:dd:b7:41:ca:99:
5c:81:84:1c:c4:a2:a8:19:7e:da:85:58:8e:64:6c:
f1:2f:42:6c:66:6d:be:7e:03:ea:d4:ef:58:16:48:
e0:66:4c:3a:df:5b:9e:10:87:2a:36:e4:5f:1c:08:
bf:a1:95:2a:65:c1:ed:08:fe:aa:bd:1e:60:2f:05:
14:e7:05:02:d6:89:fb:e4:6e:c3:11:aa:ed:c8:f9:
c0:99:9c:91:90:b7:46:cb:a0:1f:2c:49:8a:fb:77:
3e:7c:e8:f5:6e:45:2b:64:4b:1c:71:ba:01:9f:98:
c3:99:01:9e:00:5a:16:f5:0f:d9:ba:a4:d2:db:9e:
72:ba:00:61:af:84:07:92:c5:a8:d1:56:24:d4:85:
07:bb:a1:21:0d:f2:36:68:7b:f4:8f:f5:28:98:2e:
d4:b2:5a:3a:90:e5:70:3c:fd:1c:fb:12:a7:f9:1f:
5f:30:d0:6e:3b:ce:5b:54:f5:70:8d:08:86:fb:a5:
21:f7:12:c6:f5:ec:4b:ac:fa:6d:53:81:41:07:cb:
59:f8:22:34:10:cd:13:c1:ef:af:ed:7f:cd:f7:4b:
41:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FB:84:B7:4D:D3:87:91:2D:9D:36:8C:DC:54:9E:2E:81:39:5E:E2
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6c:66:37:25:b5:d4:84:bb:a0:21:f2:b2:04:0b:15:12:3c:
b4:f3:28:e7:c3:21:47:3e:86:b2:1d:84:c4:79:f6:a4:24:54:
db:e3:c4:08:24:4e:a1:5a:c6:49:54:3f:bf:dc:d3:90:60:1f:
de:84:5b:05:61:74:34:47:54:f6:17:02:fd:d4:09:f5:10:c9:
1a:27:ab:78:9e:31:20:2c:67:1e:5f:fe:d3:ad:8a:20:0b:5e:
0a:03:a3:08:9a:d4:6c:65:ac:07:57:db:24:b8:32:7d:82:e7:
74:3e:4b:96:01:70:c7:3b:e6:da:6b:dc:f8:1e:72:2c:ab:fa:
83:c4:2c:ec:e2:a5:85:56:0c:b1:14:05:3a:7c:8c:2a:69:b8:
4b:cf:e4:80:73:7a:f0:f6:23:f3:83:b4:1a:49:e7:d3:db:20:
2a:65:71:ee:46:de:c7:1a:bd:51:1c:a5:ff:3c:5e:47:48:86:
52:73:2b:b4:81:ce:4d:42:f8:a9:71:48:8a:b1:85:48:52:74:
7a:4c:63:13:3f:38:57:37:a6:80:c8:d4:6f:d3:99:96:96:41:
13:ba:d5:e2:a8:ff:b5:60:22:ab:5b:df:e5:97:37:4b:c3:ea:
e2:4b:68:9a:96:55:d6:af:4a:f6:4f:33:60:c3:24:ef:dd:5c:
2d:9d:a5:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvYxrY8xXXYk8gW0n/rMTYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MWUzZjZiZWJjZDA1MjkxZGM1MjY1ZTA4YjFjZDZjNDAx
YjljZmQwHhcNMjUwNjE0MTcwMDU1WhcNMjUwNjE1MTcwMDU1WjAzMTEwLwYDVQQD
Eyg5NmZiODRiNzRkZDM4NzkxMmQ5ZDM2OGNkYzU0OWUyZTgxMzk1ZWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixdhZAhlV07hgeiL7iUtccxA8+VJ
pUp06Jm3SGx8ZMRniGwnkca/3bdByplcgYQcxKKoGX7ahViOZGzxL0JsZm2+fgPq
1O9YFkjgZkw631ueEIcqNuRfHAi/oZUqZcHtCP6qvR5gLwUU5wUC1on75G7DEart
yPnAmZyRkLdGy6AfLEmK+3c+fOj1bkUrZEsccboBn5jDmQGeAFoW9Q/ZuqTS255y
ugBhr4QHksWo0VYk1IUHu6EhDfI2aHv0j/UomC7Uslo6kOVwPP0c+xKn+R9fMNBu
O85bVPVwjQiG+6Uh9xLG9exLrPptU4FBB8tZ+CI0EM0Twe+v7X/N90tB0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJb7hLdN04eRLZ02jNxUni6BOV7iMB8GA1UdIwQY
MBaAFLUeP2vrzQUpHcUmXgixzWxAG5z9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wMmZkZmQtN2FjOC00MzIxLWI5MzAt
OGZhNTUxZTZhZTc1LzEvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wMmZkZmQtN2FjOC00MzIxLWI5MzAtOGZhNTUxZTZhZTc1
LzEvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamxmNyW1
1IS7oCHysgQLFRI8tPMo58MhRz6Gsh2ExHn2pCRU2+PECCROoVrGSVQ/v9zTkGAf
3oRbBWF0NEdU9hcC/dQJ9RDJGiereJ4xICxnHl/+062KIAteCgOjCJrUbGWsB1fb
JLgyfYLndD5LlgFwxzvm2mvc+B5yLKv6g8Qs7OKlhVYMsRQFOnyMKmm4S8/kgHN6
8PYj84O0Gknn09sgKmVx7kbexxq9URyl/zxeR0iGUnMrtIHOTUL4qXFIirGFSFJ0
ekxjEz84VzemgMjUb9OZlpZBE7rV4qj/tWAiq1vf5Zc3S8Pq4ktompZV1q9K9k8z
YMMk791cLZ2lSw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:12:47 2025 by rpki-client