Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
File: tNc6atd6j4WbQD2yznFegtHPMv4.mft (raw, json)
Hash identifier: 5KqdfaH/XmKCCy/l4Zz6a/BT379NXdPQe4hVHu3ZmLQ=
Subject key identifier: 33:B9:75:B9:8D:71:75:20:DE:3F:0A:52:8F:42:9D:00:60:05:AF:52
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Certificate issuer: /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial: 0197BAB474DC8863196E1F6FB6F79878F27B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 08:01:17 +0000
Manifest this update: Sun 29 Jun 2025 08:01:17 +0000
Manifest next update: Mon 30 Jun 2025 08:01:17 +0000
Files and hashes: 1: YO-tGwbdqI4YYY7I1KqnEaElBoQ.roa (hash: XZFdc4B2lVuIwGuWp8Gzl21H5s/bjgOkXy1zS/FUzmY=)
2: r8uOOwHL3Wt4pGrUJebg8yZ8WaY.roa (hash: Eioa5I9ONK/XZQXZG+CzeC8xkMTpLpCoDVH43Ycxzzc=)
3: tNc6atd6j4WbQD2yznFegtHPMv4.crl (hash: pgD5nSIItCrf2y57CmAwJz5LrXdmgWDse+GQtxRTLvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:74:dc:88:63:19:6e:1f:6f:b6:f7:98:78:f2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Validity
Not Before: Jun 29 08:01:17 2025 GMT
Not After : Jun 30 08:01:17 2025 GMT
Subject: CN=33b975b98d717520de3f0a528f429d006005af52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:67:2b:3f:e1:3f:8b:b8:8f:1d:41:21:9f:3d:
98:08:12:7c:5a:69:e6:ec:2d:74:77:7a:c7:75:6d:
24:1a:56:29:9a:f0:a3:49:0a:f2:d2:d0:75:0f:32:
97:58:aa:bb:17:db:8c:48:9d:a5:20:2b:94:9e:ce:
8d:f8:93:44:59:09:cd:2c:5a:a3:e4:d9:55:67:d0:
f9:98:73:ee:6f:aa:78:c4:bb:e0:76:4a:dd:32:1c:
67:6e:cb:50:c1:21:ef:de:08:3e:eb:93:68:e2:36:
84:56:20:4a:f3:ae:a4:02:c5:78:7a:bf:51:26:23:
fc:fd:d7:f3:c3:44:d1:47:60:ab:b3:6b:2c:10:bc:
f3:95:d7:85:2d:4f:86:aa:a4:62:db:72:34:14:f1:
41:ae:de:8c:9b:88:fe:f6:e6:f4:3d:6d:8e:26:3d:
c6:6f:66:9a:76:7b:f4:2a:62:2d:96:99:d1:30:1e:
26:ce:d6:45:2e:0c:19:c9:02:12:73:1b:35:5a:2d:
7e:97:47:22:85:20:2f:94:28:bd:5f:ba:51:35:e5:
48:cb:69:cc:ee:37:b0:f5:8a:7a:1a:8b:b3:51:12:
ca:62:5e:37:7d:42:7b:e0:54:6a:0e:93:f8:4a:cf:
f8:b0:a6:af:1a:3c:1c:4b:b7:3d:47:8c:2a:a9:79:
a7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B9:75:B9:8D:71:75:20:DE:3F:0A:52:8F:42:9D:00:60:05:AF:52
X509v3 Authority Key Identifier:
keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1b:6e:3d:d7:17:33:86:d6:67:ef:0f:70:22:61:ca:c9:40:
1c:be:dc:8b:6f:be:31:06:84:de:35:8c:03:57:3b:95:89:b8:
52:8d:54:e1:41:2f:de:f8:bd:99:74:ba:af:51:e4:4c:af:25:
26:36:4a:5a:e9:f4:f6:46:26:aa:3d:32:c4:00:89:55:a9:59:
78:cd:02:ed:c3:95:8e:e4:34:db:bc:5d:c9:bb:45:ad:e4:b3:
aa:8c:94:a3:80:78:59:55:53:66:f8:00:59:91:36:bb:0e:d3:
71:e6:89:02:35:b4:6c:5f:5e:90:2e:a3:ca:16:8f:95:cf:06:
3e:72:2b:a4:27:5e:f5:6f:94:71:26:fa:01:fb:f7:b5:9b:9d:
27:4c:13:99:bb:50:c8:cd:66:1f:44:15:97:fd:9e:dc:3d:49:
34:8c:e4:67:6c:af:0f:42:ff:7a:1c:a0:78:9a:c6:0c:29:d0:
8b:ca:2f:f7:cc:5c:30:04:de:db:8c:7e:fd:db:db:bc:ba:51:
aa:7a:17:09:32:26:14:dc:2f:b9:30:81:04:c7:35:49:5d:74:
20:54:e0:ba:2a:df:ea:b5:22:4e:d7:96:89:fe:46:65:eb:e2:
82:95:23:aa:fd:9a:1c:0e:f9:8a:18:77:d9:db:ab:b7:af:85:
4b:87:a0:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6tHTciGMZbh9vtveYePJ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZDczYTZhZDc3YThmODU5YjQwM2RiMmNlNzE1ZTgyZDFj
ZjMyZmUwHhcNMjUwNjI5MDgwMTE3WhcNMjUwNjMwMDgwMTE3WjAzMTEwLwYDVQQD
EygzM2I5NzViOThkNzE3NTIwZGUzZjBhNTI4ZjQyOWQwMDYwMDVhZjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymcrP+E/i7iPHUEhnz2YCBJ8Wmnm
7C10d3rHdW0kGlYpmvCjSQry0tB1DzKXWKq7F9uMSJ2lICuUns6N+JNEWQnNLFqj
5NlVZ9D5mHPub6p4xLvgdkrdMhxnbstQwSHv3gg+65No4jaEViBK866kAsV4er9R
JiP8/dfzw0TRR2Crs2ssELzzldeFLU+GqqRi23I0FPFBrt6Mm4j+9ub0PW2OJj3G
b2aadnv0KmItlpnRMB4mztZFLgwZyQIScxs1Wi1+l0cihSAvlCi9X7pRNeVIy2nM
7jew9Yp6GouzURLKYl43fUJ74FRqDpP4Ss/4sKavGjwcS7c9R4wqqXmnvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDO5dbmNcXUg3j8KUo9CnQBgBa9SMB8GA1UdIwQY
MBaAFLTXOmrXeo+Fm0A9ss5xXoLRzzL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83ZTdlZTctMWJkNC00NDM1LTg3MWYt
NmNmOGU1NjdmZjFjLzEvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83ZTdlZTctMWJkNC00NDM1LTg3MWYtNmNmOGU1NjdmZjFj
LzEvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBtuPdcX
M4bWZ+8PcCJhyslAHL7ci2++MQaE3jWMA1c7lYm4Uo1U4UEv3vi9mXS6r1HkTK8l
JjZKWun09kYmqj0yxACJValZeM0C7cOVjuQ027xdybtFreSzqoyUo4B4WVVTZvgA
WZE2uw7TceaJAjW0bF9ekC6jyhaPlc8GPnIrpCde9W+UcSb6Afv3tZudJ0wTmbtQ
yM1mH0QVl/2e3D1JNIzkZ2yvD0L/ehygeJrGDCnQi8ov98xcMATe24x+/dvbvLpR
qnoXCTImFNwvuTCBBMc1SV10IFTguirf6rUiTteWif5GZevigpUjqv2aHA75ihh3
2durt6+FS4eghQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:06:21 2025 by rpki-client