Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
File: T-uUV-xRnoI3hncQvMgvow6uZ8A.mft (raw, json)
Hash identifier: Ibu3MeY5gSoozxW09cxjgngsZra64MSAnWlI2sotGYA=
Subject key identifier: 41:E1:F0:C9:B4:22:A9:CC:94:83:B2:C9:87:C9:D0:91:C7:B0:DD:26
Authority key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Certificate issuer: /CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Certificate serial: 0197C124146BAAD6D529B21ABF9EE5EEF98F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
Manifest number: 15BA
Signing time: Mon 30 Jun 2025 14:00:56 +0000
Manifest this update: Mon 30 Jun 2025 14:00:56 +0000
Manifest next update: Tue 01 Jul 2025 14:00:56 +0000
Files and hashes: 1: DMobrS7vy2moYzGxgBwp5Xf3ALI.roa (hash: FXiETzyRXvUDm+4e6t+4D5feOq7eyRK3o1W4hSbV9WQ=)
2: M_KXgx_JXGIc6tpaSDgr0M5BMPw.roa (hash: X3pXFD/5xK/MixjNA4bRNTqRZIbmtfbltIvMKrIW70U=)
3: T-uUV-xRnoI3hncQvMgvow6uZ8A.crl (hash: hQgjm3jRfFI5y53Qc3SvqOURfRzvAjwaWskpkMvz/bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:24:14:6b:aa:d6:d5:29:b2:1a:bf:9e:e5:ee:f9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Validity
Not Before: Jun 30 14:00:56 2025 GMT
Not After : Jul 1 14:00:56 2025 GMT
Subject: CN=41e1f0c9b422a9cc9483b2c987c9d091c7b0dd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:67:51:7d:ab:53:d9:e7:6a:65:bf:31:f5:34:
9e:bd:6f:4e:da:79:b1:79:22:41:d7:6c:d8:a1:9a:
a9:6e:14:79:68:8e:08:b3:b2:f5:44:3c:f7:69:a5:
94:19:15:0c:2f:9b:c2:48:c6:7a:7c:3a:6a:b4:47:
22:b6:dc:9c:33:f1:da:ee:cb:9d:7f:cb:5f:31:b8:
39:0a:aa:9b:4b:d2:1a:1f:71:85:54:5b:8f:61:89:
02:24:ad:a5:1a:49:7a:a3:8c:5e:d3:e0:8d:ac:b0:
2f:95:77:2f:30:6d:49:fa:19:e6:77:98:cb:97:6f:
5d:93:f4:ad:83:63:80:c5:71:08:07:14:95:bb:ad:
f7:d9:f0:b3:57:19:52:05:42:49:54:40:1c:0e:65:
99:c0:9c:c8:77:1c:60:4e:c5:b2:c6:a6:b6:b4:d8:
89:e4:99:a9:2d:8a:7f:3e:63:28:53:a9:ff:05:fd:
f2:76:ef:62:94:3f:23:e2:19:6d:9a:59:a7:70:c5:
7b:43:41:77:b2:f9:2a:56:37:a8:da:b8:3c:d4:2d:
be:b7:89:a9:fd:8f:6a:46:ad:6e:9e:42:48:43:d7:
f2:31:13:3f:c6:0e:35:af:7a:63:a3:1e:4a:e2:ab:
78:ff:ee:e5:36:92:d3:aa:09:13:ca:79:0b:f9:00:
ee:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E1:F0:C9:B4:22:A9:CC:94:83:B2:C9:87:C9:D0:91:C7:B0:DD:26
X509v3 Authority Key Identifier:
keyid:4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:39:40:73:a7:66:d7:52:2f:cb:23:b4:20:80:6e:d9:b9:00:
f8:e1:3b:8a:02:9e:82:c8:de:fd:14:f5:b9:68:04:d1:c9:2e:
31:6b:df:13:d5:7e:1e:cb:99:35:9c:67:9c:21:bc:78:77:c5:
72:f4:03:73:91:40:d4:57:2d:b2:e9:ef:17:36:77:bb:40:e4:
00:9e:6f:1b:ce:32:2e:7a:a6:c0:22:b7:fb:b2:0b:d1:f2:67:
a0:c0:72:f1:3c:db:f3:fc:16:f2:84:f5:83:e3:4e:27:95:c1:
b6:b3:4e:5c:f2:38:89:e2:f7:c6:97:c5:72:2c:96:f1:ad:ea:
f7:dd:38:60:92:2a:77:6f:0b:72:94:ba:32:a4:f5:f5:b7:59:
ea:df:8c:86:16:f2:52:0b:b4:41:e7:55:ed:31:9b:14:b0:fb:
94:70:7b:4b:09:7e:96:71:c2:eb:c1:f2:a7:31:bf:a5:d6:de:
38:2d:4f:e4:63:a2:f4:06:cd:c0:10:f9:88:c3:46:cd:71:44:
87:00:01:40:cc:49:fc:5b:c9:fc:3d:a2:ff:c8:6c:4e:a5:d2:
3b:ea:03:b3:ff:6e:21:d3:db:f7:2a:c5:a9:6a:4f:76:0b:00:
04:f3:9d:c5:62:57:04:ce:aa:56:7b:5a:eb:ba:85:88:ad:2d:
d8:91:cd:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfBJBRrqtbVKbIav57l7vmPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZWI5NDU3ZWM1MTllODIzNzg2NzcxMGJjYzgyZmEzMGVh
ZTY3YzAwHhcNMjUwNjMwMTQwMDU2WhcNMjUwNzAxMTQwMDU2WjAzMTEwLwYDVQQD
Eyg0MWUxZjBjOWI0MjJhOWNjOTQ4M2IyYzk4N2M5ZDA5MWM3YjBkZDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72dRfatT2edqZb8x9TSevW9O2nmx
eSJB12zYoZqpbhR5aI4Is7L1RDz3aaWUGRUML5vCSMZ6fDpqtEcittycM/Ha7sud
f8tfMbg5CqqbS9IaH3GFVFuPYYkCJK2lGkl6o4xe0+CNrLAvlXcvMG1J+hnmd5jL
l29dk/Stg2OAxXEIBxSVu6332fCzVxlSBUJJVEAcDmWZwJzIdxxgTsWyxqa2tNiJ
5JmpLYp/PmMoU6n/Bf3ydu9ilD8j4hltmlmncMV7Q0F3svkqVjeo2rg81C2+t4mp
/Y9qRq1unkJIQ9fyMRM/xg41r3pjox5K4qt4/+7lNpLTqgkTynkL+QDuvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHh8Mm0IqnMlIOyyYfJ0JHHsN0mMB8GA1UdIwQY
MBaAFE/rlFfsUZ6CN4Z3ELzIL6MOrmfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVC11VVYteFJub0kzaG5jUXZNZ3ZvdzZ1WjhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9iOGY1MGUtNDc1Zi00YjQ3LTg1YzAt
NWYxMjM1NTVjZmIxLzEvVC11VVYteFJub0kzaG5jUXZNZ3ZvdzZ1WjhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9iOGY1MGUtNDc1Zi00YjQ3LTg1YzAtNWYxMjM1NTVjZmIx
LzEvVC11VVYteFJub0kzaG5jUXZNZ3ZvdzZ1WjhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArDlAc6dm
11IvyyO0IIBu2bkA+OE7igKegsje/RT1uWgE0ckuMWvfE9V+HsuZNZxnnCG8eHfF
cvQDc5FA1FctsunvFzZ3u0DkAJ5vG84yLnqmwCK3+7IL0fJnoMBy8Tzb8/wW8oT1
g+NOJ5XBtrNOXPI4ieL3xpfFciyW8a3q9904YJIqd28LcpS6MqT19bdZ6t+Mhhby
Ugu0QedV7TGbFLD7lHB7Swl+lnHC68HypzG/pdbeOC1P5GOi9AbNwBD5iMNGzXFE
hwABQMxJ/FvJ/D2i/8hsTqXSO+oDs/9uIdPb9yrFqWpPdgsABPOdxWJXBM6qVnta
67qFiK0t2JHN2g==
-----END CERTIFICATE-----
Generated at Mon Jun 30 19:27:12 2025 by rpki-client