Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
File: t8QKdH46wazGEaTEA7YAc5jn158.mft (raw, json)
Hash identifier: xD6r3iVNBE90QZ5TtrfRqBGijU4LEb6AB0TByAlWK1w=
Subject key identifier: E6:62:66:2B:8E:44:21:63:70:48:24:50:17:3A:0C:EF:2C:D7:61:19
Authority key identifier: B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
Certificate issuer: /CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Certificate serial: 0197CB033B31165DC654E4B554216C2E13A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
Manifest number: 15CE
Signing time: Wed 02 Jul 2025 12:01:15 +0000
Manifest this update: Wed 02 Jul 2025 12:01:15 +0000
Manifest next update: Thu 03 Jul 2025 12:01:15 +0000
Files and hashes: 1: 4k2m6oWhbCxHwu7ZoOs8FYwRSeo.roa (hash: 0X2CSeSS5EmJeG6XWlWGwSVUMGQ8gwE0QRYVBIvMpS0=)
2: t8QKdH46wazGEaTEA7YAc5jn158.crl (hash: fKXzd2kfISIXy3nD/OxaE9en8SBi/TuL2SJXUJCGOzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:03:3b:31:16:5d:c6:54:e4:b5:54:21:6c:2e:13:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Validity
Not Before: Jul 2 12:01:15 2025 GMT
Not After : Jul 3 12:01:15 2025 GMT
Subject: CN=e662662b8e44216370482450173a0cef2cd76119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d0:b6:4c:a7:3b:0c:73:94:5a:42:6f:c0:2d:
55:ef:8e:eb:e0:c0:12:fb:67:1a:8e:bf:6a:45:1f:
fc:a7:50:38:d2:de:90:84:99:96:7d:d5:70:a3:5e:
d4:96:bc:f9:11:be:82:c0:dd:db:4a:b6:5d:74:d3:
82:c3:7b:43:69:3e:3f:c0:6f:d4:e0:11:9f:fd:8b:
48:fc:20:eb:80:8e:0c:70:75:96:67:46:0b:4c:8b:
7e:ca:71:e3:57:4a:a0:5b:b2:53:81:96:c1:8c:7e:
13:09:e5:3f:c0:81:8a:b5:54:25:7d:2f:2e:26:35:
15:4e:13:30:59:c0:81:f0:f1:4e:af:9d:16:56:6c:
7f:e1:b5:e0:9c:45:f3:d9:e0:1a:5b:63:df:c5:ca:
64:bb:9b:6b:76:7c:9c:9a:37:43:a2:4e:33:2a:ba:
bc:ee:39:49:de:ea:e6:e7:29:00:da:21:7c:ef:05:
26:49:e0:14:c1:c0:66:58:aa:f8:89:26:80:46:21:
b5:f6:95:ca:cc:b6:01:27:7e:c3:6c:18:a7:7f:8e:
73:e1:da:c4:b0:d8:4a:26:fc:a9:0d:5d:d9:d8:80:
2a:f8:21:e9:c4:8a:19:6f:04:65:ca:2f:2d:30:3d:
7e:1b:4d:6d:e6:d3:5b:26:e0:82:02:81:25:d3:49:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:62:66:2B:8E:44:21:63:70:48:24:50:17:3A:0C:EF:2C:D7:61:19
X509v3 Authority Key Identifier:
keyid:B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7b:21:47:fb:33:1e:69:b8:4f:42:10:f3:7b:6a:9e:82:18:
34:f2:63:2f:88:fa:0b:da:f4:d9:34:07:e5:ae:98:bc:e2:84:
0c:a4:c0:a8:90:15:75:4e:13:2b:a9:8e:01:81:2a:53:5c:c5:
fe:5b:21:19:00:60:9c:21:d4:ae:e4:9f:be:e6:32:2b:6a:9e:
b3:9b:40:1b:9f:fb:c8:87:dc:44:fc:b3:4f:bf:fc:3c:3e:74:
c0:50:9c:04:1d:82:3d:3b:ab:9d:f4:55:0a:9a:a7:24:fa:41:
ff:7b:70:a8:fa:1b:1a:87:61:c7:b6:ed:38:2f:b5:b4:5f:b9:
fd:49:2a:c9:61:a3:d5:93:33:b4:24:11:c9:16:fa:ab:50:8d:
7c:1a:bc:e3:ac:9a:e3:9c:fa:38:e0:7b:fe:37:1c:02:4f:a6:
6b:39:ad:ff:c7:50:8c:7e:bb:74:68:30:21:4f:e0:2b:a5:d9:
e0:6a:b8:2e:b1:fe:1b:13:8b:5e:8a:e0:a2:a9:55:65:a5:93:
09:f2:f3:23:42:8a:38:32:cb:a1:ad:13:b1:fd:44:fa:dc:6d:
73:47:5b:f1:c1:90:ba:e8:f4:51:cb:89:91:87:fb:90:8b:c3:
f8:8f:a2:74:25:dc:23:6a:82:2a:18:6c:4a:ef:d4:b3:9d:d8:
74:76:68:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfLAzsxFl3GVOS1VCFsLhOkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YzQwYTc0N2UzYWMxYWNjNjExYTRjNDAzYjYwMDczOThl
N2Q3OWYwHhcNMjUwNzAyMTIwMTE1WhcNMjUwNzAzMTIwMTE1WjAzMTEwLwYDVQQD
EyhlNjYyNjYyYjhlNDQyMTYzNzA0ODI0NTAxNzNhMGNlZjJjZDc2MTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNC2TKc7DHOUWkJvwC1V747r4MAS
+2cajr9qRR/8p1A40t6QhJmWfdVwo17Ulrz5Eb6CwN3bSrZddNOCw3tDaT4/wG/U
4BGf/YtI/CDrgI4McHWWZ0YLTIt+ynHjV0qgW7JTgZbBjH4TCeU/wIGKtVQlfS8u
JjUVThMwWcCB8PFOr50WVmx/4bXgnEXz2eAaW2Pfxcpku5trdnycmjdDok4zKrq8
7jlJ3urm5ykA2iF87wUmSeAUwcBmWKr4iSaARiG19pXKzLYBJ37DbBinf45z4drE
sNhKJvypDV3Z2IAq+CHpxIoZbwRlyi8tMD1+G01t5tNbJuCCAoEl00kCqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZiZiuORCFjcEgkUBc6DO8s12EZMB8GA1UdIwQY
MBaAFLfECnR+OsGsxhGkxAO2AHOY59efMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDhRS2RINDZ3YXpHRWFURUE3WUFjNWpuMTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zNzVlYmMtYmFmYi00ZTBiLWI1NDkt
Nzc2MzVhMjJlYjk2LzEvdDhRS2RINDZ3YXpHRWFURUE3WUFjNWpuMTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zNzVlYmMtYmFmYi00ZTBiLWI1NDktNzc2MzVhMjJlYjk2
LzEvdDhRS2RINDZ3YXpHRWFURUE3WUFjNWpuMTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXshR/sz
Hmm4T0IQ83tqnoIYNPJjL4j6C9r02TQH5a6YvOKEDKTAqJAVdU4TK6mOAYEqU1zF
/lshGQBgnCHUruSfvuYyK2qes5tAG5/7yIfcRPyzT7/8PD50wFCcBB2CPTurnfRV
CpqnJPpB/3twqPobGodhx7btOC+1tF+5/UkqyWGj1ZMztCQRyRb6q1CNfBq846ya
45z6OOB7/jccAk+mazmt/8dQjH67dGgwIU/gK6XZ4Gq4LrH+GxOLXorgoqlVZaWT
CfLzI0KKODLLoa0Tsf1E+txtc0db8cGQuuj0UcuJkYf7kIvD+I+idCXcI2qCKhhs
Su/Us53YdHZohQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 14:50:24 2025 by rpki-client