Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
File: t0QwmQgmnlOLK0-pYzcMnsIHeng.mft (raw, json)
Hash identifier: k1qWXgMTTLKzg6tbxsvprEkESHM2VYzAxFX/IeaV52Q=
Subject key identifier: 92:60:30:CD:03:AD:A6:8F:40:01:07:D3:9A:B9:A7:19:1E:7B:2D:49
Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
Certificate issuer: /CN=b744309908269e538b2b4fa963370c9ec2077a78
Certificate serial: 01976D74B66F0DAC84B9570D9C17B2A1FFB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
Manifest number: 0FE0
Signing time: Sat 14 Jun 2025 08:00:54 +0000
Manifest this update: Sat 14 Jun 2025 08:00:54 +0000
Manifest next update: Sun 15 Jun 2025 08:00:54 +0000
Files and hashes: 1: YBLZGJHJKH4DoV9XrJh7KrLAY0g.roa (hash: L0o/zjJZLOmk6cpaT73kurdvyrzNoMlbhiuzTQLNAKg=)
2: t0QwmQgmnlOLK0-pYzcMnsIHeng.crl (hash: nqC4qLmOnO9+Rw8Ql88MpOkxW4UV8Moxx5Okc32jMCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:b6:6f:0d:ac:84:b9:57:0d:9c:17:b2:a1:ff:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78
Validity
Not Before: Jun 14 08:00:54 2025 GMT
Not After : Jun 15 08:00:54 2025 GMT
Subject: CN=926030cd03ada68f400107d39ab9a7191e7b2d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:12:b9:aa:5e:fe:94:a4:cb:30:d3:28:82:e0:
b0:b3:0a:6c:76:3a:a2:b9:db:b0:1f:48:61:9c:6b:
67:e3:6d:60:50:ea:ab:63:78:93:2f:d8:67:a8:53:
94:1f:87:65:98:6f:b3:da:b1:71:b3:8c:b5:2e:1b:
3d:74:c6:71:8e:ca:2f:58:fd:47:e5:2d:9e:fa:58:
e5:f0:55:c2:71:aa:e3:5c:c1:7b:7a:85:b0:d4:39:
a6:17:88:1f:74:98:88:4f:63:dd:29:45:73:fc:41:
aa:27:44:06:bf:f2:8c:e6:8e:1d:3d:86:ad:bb:2b:
32:01:c9:28:10:4c:09:07:cd:8e:3d:51:f9:53:48:
cc:31:d1:6d:f1:5d:16:0d:f2:e5:92:63:9b:ee:59:
62:3f:4f:4e:26:8a:e1:bd:6b:3d:5e:18:ff:f5:7e:
f2:8e:21:aa:00:dd:d2:28:6c:cb:74:ce:05:19:03:
85:6b:15:d4:c6:c5:a4:04:4e:52:5a:78:49:08:48:
bc:5e:be:4c:8a:35:8f:ed:5a:df:7d:da:cc:c4:95:
43:f7:8f:19:03:ac:b3:44:9e:51:39:c8:d8:3b:81:
f0:aa:50:8c:b6:cb:69:16:9a:d9:c0:d5:74:e3:4d:
bd:b0:27:7f:70:99:b6:ce:8c:b8:47:13:2e:38:7b:
f0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:60:30:CD:03:AD:A6:8F:40:01:07:D3:9A:B9:A7:19:1E:7B:2D:49
X509v3 Authority Key Identifier:
keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:64:a4:ae:70:12:9b:07:e1:04:95:d7:61:c7:a6:b5:d4:06:
48:05:96:b8:73:cb:bd:fe:67:3b:d6:b4:59:29:19:da:58:47:
8e:3f:6b:58:93:07:d7:81:de:17:78:75:e9:69:e8:16:06:92:
15:e4:29:ca:26:bc:c1:de:6f:af:41:7d:05:ca:51:32:47:c1:
03:67:53:f6:48:70:65:77:4f:fa:2f:46:9c:1e:48:39:52:f1:
2a:30:c3:a2:40:47:35:15:69:28:23:ed:10:d0:d6:3a:9f:62:
4b:ce:80:da:e9:ca:c7:d5:ec:cb:e7:ad:0d:ce:b1:b1:47:2a:
bd:2b:a6:22:dc:2f:6f:45:90:50:dd:f8:cf:cb:d6:2e:38:5b:
1c:ac:21:44:17:bc:b7:2c:7c:c9:cc:f7:ae:11:9c:c2:15:08:
27:63:b0:72:1c:b6:f6:8b:ba:be:ea:26:c3:95:cb:4f:4b:bb:
d9:29:b9:56:69:e2:f7:b8:d4:d8:d6:1b:e3:28:b2:1e:a9:65:
16:3b:45:fc:f7:da:3c:6b:77:43:99:a1:5b:dc:9e:9b:30:ca:
55:8f:99:20:75:bd:ba:b0:56:56:da:a1:b8:57:c5:a0:b5:90:
bb:77:35:ff:f3:ad:57:1e:5e:1b:53:0e:af:24:78:bd:00:6d:
88:66:ff:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtdLZvDayEuVcNnBeyof+4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NDQzMDk5MDgyNjllNTM4YjJiNGZhOTYzMzcwYzllYzIw
NzdhNzgwHhcNMjUwNjE0MDgwMDU0WhcNMjUwNjE1MDgwMDU0WjAzMTEwLwYDVQQD
Eyg5MjYwMzBjZDAzYWRhNjhmNDAwMTA3ZDM5YWI5YTcxOTFlN2IyZDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xK5ql7+lKTLMNMoguCwswpsdjqi
uduwH0hhnGtn421gUOqrY3iTL9hnqFOUH4dlmG+z2rFxs4y1Lhs9dMZxjsovWP1H
5S2e+ljl8FXCcarjXMF7eoWw1DmmF4gfdJiIT2PdKUVz/EGqJ0QGv/KM5o4dPYat
uysyAckoEEwJB82OPVH5U0jMMdFt8V0WDfLlkmOb7lliP09OJorhvWs9Xhj/9X7y
jiGqAN3SKGzLdM4FGQOFaxXUxsWkBE5SWnhJCEi8Xr5MijWP7VrffdrMxJVD948Z
A6yzRJ5ROcjYO4HwqlCMtstpFprZwNV04029sCd/cJm2zoy4RxMuOHvw8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJgMM0DraaPQAEH05q5pxkeey1JMB8GA1UdIwQY
MBaAFLdEMJkIJp5TiytPqWM3DJ7CB3p4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NjUyZTgtNWQyMC00MmY2LWE3Mzkt
ZDU0OTIxNjA0ZWNkLzEvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80NjUyZTgtNWQyMC00MmY2LWE3MzktZDU0OTIxNjA0ZWNk
LzEvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2SkrnAS
mwfhBJXXYcemtdQGSAWWuHPLvf5nO9a0WSkZ2lhHjj9rWJMH14HeF3h16WnoFgaS
FeQpyia8wd5vr0F9BcpRMkfBA2dT9khwZXdP+i9GnB5IOVLxKjDDokBHNRVpKCPt
ENDWOp9iS86A2unKx9Xsy+etDc6xsUcqvSumItwvb0WQUN34z8vWLjhbHKwhRBe8
tyx8ycz3rhGcwhUIJ2Owchy29ou6vuomw5XLT0u72Sm5Vmni97jU2NYb4yiyHqll
FjtF/PfaPGt3Q5mhW9yemzDKVY+ZIHW9urBWVtqhuFfFoLWQu3c1//OtVx5eG1MO
ryR4vQBtiGb/HA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:10:20 2025 by rpki-client