Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
File: T893EF-VB1zlhdQn6XdU6PAHqLk.mft (raw, json)
Hash identifier: PsrqqRdNSRI0Dw5MHMZiZVy1V7HYdye4bmItf5oSGt4=
Subject key identifier: CF:2F:71:26:83:38:98:89:DF:06:53:D4:E7:5A:77:6A:23:77:CA:5A
Authority key identifier: 4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9
Certificate issuer: /CN=4fcf77105f95075ce585d427e97754e8f007a8b9
Certificate serial: 0197B88FEE5D06B75778F1C46B886FCB975E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
Manifest number: 0916
Signing time: Sat 28 Jun 2025 22:02:09 +0000
Manifest this update: Sat 28 Jun 2025 22:02:09 +0000
Manifest next update: Sun 29 Jun 2025 22:02:09 +0000
Files and hashes: 1: T893EF-VB1zlhdQn6XdU6PAHqLk.crl (hash: 4zQ9o1gsjiyO45ZqD7d5zQ48Mdis6mlrrcwrBA47OZM=)
2: T9LZjeWP7v9MjImSQxwCyXQEIjQ.roa (hash: ryZ/pHb+xQxL2NrfTWfDmvDfQVr6T5F6jZbDhNZwl/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:ee:5d:06:b7:57:78:f1:c4:6b:88:6f:cb:97:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fcf77105f95075ce585d427e97754e8f007a8b9
Validity
Not Before: Jun 28 22:02:09 2025 GMT
Not After : Jun 29 22:02:09 2025 GMT
Subject: CN=cf2f712683389889df0653d4e75a776a2377ca5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:90:7c:03:d0:af:20:76:14:c1:eb:97:78:4a:
84:a6:f3:0c:85:d0:65:58:af:41:b3:b4:35:ff:e2:
c9:48:97:60:47:87:b9:f3:ae:7b:6d:61:1f:3b:e0:
74:bc:68:6f:c4:50:8c:42:18:40:af:57:69:ba:6b:
d5:28:9e:90:6b:d4:24:c8:b5:b4:75:0a:f8:e0:12:
c6:c7:15:2e:69:48:6f:4c:04:07:8f:33:b4:8b:08:
9c:20:fc:23:e3:fe:59:d1:2c:5e:60:6d:63:77:6b:
fe:e5:ca:9d:42:fe:ee:52:20:cf:1a:e5:dc:e1:c3:
f2:83:03:1a:51:78:b3:0b:b7:ed:d9:3c:a1:2b:80:
8d:61:48:4f:b4:d8:0b:9a:78:02:dd:1e:8c:6d:1e:
99:35:fb:f6:84:59:54:84:e9:b2:a7:5c:68:37:c4:
76:df:d6:2a:30:40:a8:84:be:3c:00:9b:85:75:0b:
fc:45:b7:78:45:1d:ff:2e:78:df:49:e0:b3:b3:bc:
ab:20:ea:92:a0:b8:67:c4:da:83:7d:6b:31:69:2f:
48:1c:e3:dd:11:bc:50:53:17:7c:8a:ab:ec:bc:b4:
2d:5a:7a:ac:a7:3e:c3:7f:57:de:02:6e:1e:cc:47:
5a:a0:ad:28:43:e7:1e:b8:59:f5:60:7f:c3:eb:1e:
aa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2F:71:26:83:38:98:89:DF:06:53:D4:E7:5A:77:6A:23:77:CA:5A
X509v3 Authority Key Identifier:
keyid:4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ef:b0:4c:d8:49:e6:dc:56:b2:64:8a:0d:04:b0:1d:d0:43:
77:58:e0:8f:9e:be:35:2e:52:3d:7b:19:7e:bd:6b:88:08:2b:
d1:d9:81:4d:96:68:7d:1b:c7:14:4c:17:14:df:14:00:a7:a5:
50:ee:4c:09:87:d2:06:e1:1f:33:14:b2:4c:9f:13:18:20:f3:
c2:65:c8:60:de:5e:e1:05:da:0f:b0:73:81:d2:8f:df:44:af:
22:34:90:2e:47:cc:5b:7e:f9:3a:c1:f6:54:b0:0a:e5:8a:b2:
c6:c9:24:c0:f4:d2:df:f7:c6:a2:59:d5:9c:c8:79:ce:87:5c:
9e:d9:8e:87:57:97:53:8a:6f:e0:ba:ea:e4:58:d3:84:4e:ae:
46:22:b4:3a:2b:fb:55:6d:bc:d7:f7:88:49:48:d5:63:d3:6a:
a1:17:63:a0:15:c8:2d:09:be:21:86:9a:0e:a5:45:82:0a:b7:
2b:1b:93:52:2b:3e:50:e5:64:0e:b6:99:96:17:29:37:51:5d:
50:39:08:a8:29:00:11:30:6a:20:d3:57:a3:e4:c0:c6:80:51:
54:fd:ef:38:bd:ba:b2:6b:a5:1c:ee:bc:20:79:60:e0:e4:75:
6e:8e:ce:81:28:48:ed:a2:c3:b7:14:cc:dd:2b:ea:7e:3d:4c:
45:9a:4b:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j+5dBrdXePHEa4hvy5deMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmY2Y3NzEwNWY5NTA3NWNlNTg1ZDQyN2U5Nzc1NGU4ZjAw
N2E4YjkwHhcNMjUwNjI4MjIwMjA5WhcNMjUwNjI5MjIwMjA5WjAzMTEwLwYDVQQD
EyhjZjJmNzEyNjgzMzg5ODg5ZGYwNjUzZDRlNzVhNzc2YTIzNzdjYTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25B8A9CvIHYUweuXeEqEpvMMhdBl
WK9Bs7Q1/+LJSJdgR4e58657bWEfO+B0vGhvxFCMQhhAr1dpumvVKJ6Qa9QkyLW0
dQr44BLGxxUuaUhvTAQHjzO0iwicIPwj4/5Z0SxeYG1jd2v+5cqdQv7uUiDPGuXc
4cPygwMaUXizC7ft2TyhK4CNYUhPtNgLmngC3R6MbR6ZNfv2hFlUhOmyp1xoN8R2
39YqMECohL48AJuFdQv8Rbd4RR3/LnjfSeCzs7yrIOqSoLhnxNqDfWsxaS9IHOPd
EbxQUxd8iqvsvLQtWnqspz7Df1feAm4ezEdaoK0oQ+ceuFn1YH/D6x6qlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8vcSaDOJiJ3wZT1Odad2ojd8paMB8GA1UdIwQY
MBaAFE/PdxBflQdc5YXUJ+l3VOjwB6i5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDg5M0VGLVZCMXpsaGRRbjZYZFU2UEFIcUxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xMzllYmQtNWFiZi00MjU0LTg5MzMt
NmY5N2RmYzEwZmU3LzEvVDg5M0VGLVZCMXpsaGRRbjZYZFU2UEFIcUxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8xMzllYmQtNWFiZi00MjU0LTg5MzMtNmY5N2RmYzEwZmU3
LzEvVDg5M0VGLVZCMXpsaGRRbjZYZFU2UEFIcUxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbu+wTNhJ
5txWsmSKDQSwHdBDd1jgj56+NS5SPXsZfr1riAgr0dmBTZZofRvHFEwXFN8UAKel
UO5MCYfSBuEfMxSyTJ8TGCDzwmXIYN5e4QXaD7BzgdKP30SvIjSQLkfMW375OsH2
VLAK5YqyxskkwPTS3/fGolnVnMh5zodcntmOh1eXU4pv4Lrq5FjThE6uRiK0Oiv7
VW281/eISUjVY9NqoRdjoBXILQm+IYaaDqVFggq3KxuTUis+UOVkDraZlhcpN1Fd
UDkIqCkAETBqINNXo+TAxoBRVP3vOL26smulHO68IHlg4OR1bo7OgShI7aLDtxTM
3Svqfj1MRZpLjA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:59 2025 by rpki-client