Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: gKVA1PP2DwG4ntjHnHg6A+TdAXBmnljWPulI5N+w2Po=
Subject key identifier: ED:FB:B0:E4:12:4C:96:B8:1D:3D:77:14:8D:14:3E:93:27:F9:CE:71
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 01976DE2496C12B832C78CDFEDC088AED27F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0AE3
Signing time: Sat 14 Jun 2025 10:00:35 +0000
Manifest this update: Sat 14 Jun 2025 10:00:35 +0000
Manifest next update: Sun 15 Jun 2025 10:00:35 +0000
Files and hashes: 1: 6b2ERBxknPAevOnYxSvxzu95eG8.roa (hash: 3kiDbks8aSmKxwaOLs+GDp7zBcCi628ZZOq/BNMJfnI=)
2: NOOroZsnjsQfsZH4dRjzbuju0Hk.roa (hash: Zg6ieQb4LhmgSd9bfRqKPOaZLXbcVzG7102ETjzQ1ro=)
3: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: 5QHuWginnFEAjm5VYbQC03Qt0sOdvfcPscowZ3jBGT4=)
4: auS9-c0NKZclAN6n9ZeMxPqllbY.roa (hash: jmic3pbI/PzbYEfrYr0mHzcn9EBC12zQGVngarCFUoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:49:6c:12:b8:32:c7:8c:df:ed:c0:88:ae:d2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Jun 14 10:00:35 2025 GMT
Not After : Jun 15 10:00:35 2025 GMT
Subject: CN=edfbb0e4124c96b81d3d77148d143e9327f9ce71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:79:a2:93:9e:22:47:68:b7:6e:ec:7f:96:
59:ef:f1:71:e4:e2:60:f7:4c:95:69:37:45:e8:1e:
d0:28:0a:9d:36:20:e5:72:2f:e4:34:21:fc:3f:9f:
ea:e4:1e:3f:d8:67:07:58:31:56:26:eb:7a:0d:97:
60:57:d8:15:61:60:94:2d:68:31:17:44:85:fd:89:
67:82:7f:08:28:44:5a:de:6f:85:7e:0c:83:99:eb:
5f:f2:64:08:11:cf:95:2c:e1:63:dd:76:35:7c:ff:
73:62:6b:a8:df:c1:96:45:73:34:9a:9a:42:d2:c5:
a1:f5:f3:1d:6a:c3:47:ff:e4:97:6e:d8:e0:a7:df:
eb:29:a3:2a:12:b7:c1:a8:61:d5:96:3e:bc:33:11:
bd:11:d7:cc:e2:02:66:a3:e7:6e:30:e7:43:54:f4:
da:aa:c6:7a:4c:f8:5b:6f:9d:d3:ad:d6:09:3e:18:
e0:dc:6c:db:70:91:7b:04:0b:2d:fd:cd:16:5e:9b:
6a:dc:69:58:b3:2d:4b:3e:b1:f5:22:eb:4e:54:b9:
77:5d:47:c6:0a:fe:5c:9e:a6:0e:12:4f:9f:28:23:
63:de:e1:5d:ee:bf:32:13:bc:fd:f5:04:3a:6d:04:
28:20:4a:95:8c:bc:da:1a:5d:c1:f5:e0:a5:b8:cd:
70:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FB:B0:E4:12:4C:96:B8:1D:3D:77:14:8D:14:3E:93:27:F9:CE:71
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1b:48:30:54:7f:1d:d2:3f:9c:70:4f:0f:25:7f:7a:13:0c:
79:93:2f:b2:7e:63:48:32:54:a1:0d:97:13:c8:c5:03:1d:b1:
1b:63:fe:30:d3:7f:c9:24:67:57:eb:45:53:f6:83:38:ca:f7:
73:67:aa:3e:75:3e:84:98:1b:a4:e6:a4:a2:4b:7d:b3:d0:8c:
35:e1:7c:3d:ff:0a:de:52:20:2f:20:d1:3a:9b:c3:a5:72:97:
1f:de:b4:e3:32:2f:4a:b2:81:df:31:ff:3f:57:bd:85:53:a9:
2f:3c:a6:e1:d5:34:3d:01:c2:79:fd:90:59:cb:70:06:ae:8b:
5b:9d:8f:fb:e9:32:d6:38:91:c8:6d:ff:df:2e:cf:32:5e:76:
32:83:e3:2e:77:eb:b4:0e:fb:87:b4:c8:30:16:c0:e5:51:13:
22:5e:ba:47:15:aa:09:a2:13:4e:73:93:1b:60:4d:eb:1b:11:
c4:62:0f:c1:ab:70:dc:6c:28:90:ba:ec:43:09:10:69:c0:3c:
8f:5e:94:52:a6:58:e7:35:09:49:50:23:ce:f7:0e:78:6e:01:
29:e1:a9:d7:18:be:a3:a9:0e:39:c4:f0:d4:e5:aa:51:18:24:
94:92:64:70:d6:36:c2:ed:af:f4:be:d1:f2:42:92:50:0a:74:
5a:9d:6e:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdt4klsErgyx4zf7cCIrtJ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODk1ZmYwZTk5YTc3YzAxN2U4YTM4MzI5MmNiNWM2Zjgy
NjExMjAwHhcNMjUwNjE0MTAwMDM1WhcNMjUwNjE1MTAwMDM1WjAzMTEwLwYDVQQD
EyhlZGZiYjBlNDEyNGM5NmI4MWQzZDc3MTQ4ZDE0M2U5MzI3ZjljZTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuop5opOeIkdot27sf5ZZ7/Fx5OJg
90yVaTdF6B7QKAqdNiDlci/kNCH8P5/q5B4/2GcHWDFWJut6DZdgV9gVYWCULWgx
F0SF/Ylngn8IKERa3m+FfgyDmetf8mQIEc+VLOFj3XY1fP9zYmuo38GWRXM0mppC
0sWh9fMdasNH/+SXbtjgp9/rKaMqErfBqGHVlj68MxG9EdfM4gJmo+duMOdDVPTa
qsZ6TPhbb53TrdYJPhjg3GzbcJF7BAst/c0WXptq3GlYsy1LPrH1IutOVLl3XUfG
Cv5cnqYOEk+fKCNj3uFd7r8yE7z99QQ6bQQoIEqVjLzaGl3B9eCluM1wPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO37sOQSTJa4HT13FI0UPpMn+c5xMB8GA1UdIwQY
MBaAFE+JX/DpmnfAF+ijgykstcb4JhEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zMzI4ZGEtYWE0ZS00NDViLTlkYTkt
ZDA1Mzc0NWMyYWNjLzEvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8zMzI4ZGEtYWE0ZS00NDViLTlkYTktZDA1Mzc0NWMyYWNj
LzEvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBtIMFR/
HdI/nHBPDyV/ehMMeZMvsn5jSDJUoQ2XE8jFAx2xG2P+MNN/ySRnV+tFU/aDOMr3
c2eqPnU+hJgbpOakokt9s9CMNeF8Pf8K3lIgLyDROpvDpXKXH9604zIvSrKB3zH/
P1e9hVOpLzym4dU0PQHCef2QWctwBq6LW52P++ky1jiRyG3/3y7PMl52MoPjLnfr
tA77h7TIMBbA5VETIl66RxWqCaITTnOTG2BN6xsRxGIPwatw3GwokLrsQwkQacA8
j16UUqZY5zUJSVAjzvcOeG4BKeGp1xi+o6kOOcTw1OWqURgklJJkcNY2wu2v9L7R
8kKSUAp0Wp1uzw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:58:30 2025 by rpki-client