Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
File: T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft (raw, json)
Hash identifier: iWnLqz7XcKkr/rf/ZUKy95S3Tal8yFYnvzPJ3EQeHNU=
Subject key identifier: 32:26:1E:F2:D4:E2:90:E1:16:4B:35:DD:87:84:D6:8B:19:94:D2:0B
Authority key identifier: 4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
Certificate issuer: /CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Certificate serial: 0197B70ED3076E70C6840F7CDBEFE53B14EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
Manifest number: 0260
Signing time: Sat 28 Jun 2025 15:01:31 +0000
Manifest this update: Sat 28 Jun 2025 15:01:31 +0000
Manifest next update: Sun 29 Jun 2025 15:01:31 +0000
Files and hashes: 1: S0SO0HyBkdo3a_iLFGbpFh-3688.roa (hash: 4aaFEmUhkZXusyFZ1zN2v+eLcgATutmFWhO+KpO/kig=)
2: T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl (hash: CyZYedFZU1pskcUKx95ckkAlFzvMVUV4AlKsM1qDT18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d3:07:6e:70:c6:84:0f:7c:db:ef:e5:3b:14:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Validity
Not Before: Jun 28 15:01:31 2025 GMT
Not After : Jun 29 15:01:31 2025 GMT
Subject: CN=32261ef2d4e290e1164b35dd8784d68b1994d20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bd:d0:bb:6d:ba:16:03:ac:7c:54:d4:a9:dc:
e6:31:52:b3:82:5f:2d:3d:b2:cf:49:36:72:7f:7a:
2d:d4:f6:31:b7:fc:b5:ca:46:4d:de:11:78:6b:08:
1b:1f:46:7c:49:64:c6:03:14:83:f1:65:1a:7b:40:
8d:47:5e:84:1a:68:71:6d:56:29:cf:99:42:e1:f8:
68:19:19:26:0f:36:0e:3c:fa:4f:66:fc:e0:a5:29:
d5:b6:39:0d:87:26:5a:be:14:f1:bc:f0:e0:ef:1b:
a7:0e:0a:02:8d:34:c5:8e:70:3d:10:00:f4:35:85:
25:cb:1e:a8:b5:ce:e8:42:a8:e2:3d:93:94:f4:91:
67:b5:a3:da:e9:0e:d5:55:ae:27:c8:42:3a:7d:d0:
bf:52:18:2c:93:a8:7f:89:cd:a3:0f:4d:72:90:45:
ed:ef:57:80:81:5f:3b:5d:b5:0d:d5:7c:70:f9:7a:
8d:eb:65:d2:82:94:13:8d:7d:c4:e9:20:94:71:1f:
1b:4c:c0:4b:6c:81:4c:81:b9:6d:cf:64:84:d8:8c:
c6:df:d9:22:c5:e7:27:0a:f1:a6:ca:05:bd:be:85:
73:5f:c9:43:65:db:b0:a2:6a:78:c6:5e:bb:b1:64:
02:d0:d4:37:ed:5a:65:d3:86:a2:ec:bf:d7:9e:9c:
fc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:26:1E:F2:D4:E2:90:E1:16:4B:35:DD:87:84:D6:8B:19:94:D2:0B
X509v3 Authority Key Identifier:
keyid:4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2d:49:31:c0:53:11:d6:e1:c3:3c:80:b4:cc:e6:df:15:98:
8d:6f:71:24:b3:e1:a5:82:ca:ee:0b:31:a5:a8:a2:09:76:18:
a3:f7:6b:2f:d8:71:34:06:a8:10:5f:3f:27:a1:2d:45:9f:9b:
8d:bf:12:85:8d:43:db:53:20:66:f8:74:a4:ed:e2:df:a3:4a:
25:44:e5:60:d0:7b:dd:3e:54:0a:f0:dc:e2:32:68:04:4e:bf:
d5:06:7e:30:9e:83:4c:4b:9b:ab:68:48:e5:6b:be:64:cd:bb:
42:28:e4:8d:01:db:70:92:0f:63:92:cd:ba:93:60:ca:c1:fd:
fa:89:08:71:d1:40:fb:93:b1:de:a6:48:a6:6f:65:11:c5:ea:
80:ec:26:63:0b:c5:ab:26:7d:d1:29:48:99:d5:43:e9:37:bc:
13:02:49:ac:c9:a8:b7:9f:92:f2:07:b2:72:80:b2:9d:87:f0:
db:5b:1c:9f:f2:eb:89:5c:a4:2f:40:1b:20:65:18:c5:eb:af:
bc:19:30:e2:86:99:59:3f:07:14:ab:52:60:66:47:2e:70:95:
f6:6c:cd:2b:23:c9:7b:ed:48:27:40:f3:ce:f4:e8:54:3f:f5:
4d:e7:cc:29:28:d0:cc:23:0b:4f:22:6b:9c:c8:58:e5:36:57:
ed:cf:33:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DtMHbnDGhA982+/lOxTrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZDIwN2ZjNWFkMDc3M2MzZDhlOTNlNGIzMDYxOWMxM2Jh
ODFjYjQwHhcNMjUwNjI4MTUwMTMxWhcNMjUwNjI5MTUwMTMxWjAzMTEwLwYDVQQD
EygzMjI2MWVmMmQ0ZTI5MGUxMTY0YjM1ZGQ4Nzg0ZDY4YjE5OTRkMjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz73Qu226FgOsfFTUqdzmMVKzgl8t
PbLPSTZyf3ot1PYxt/y1ykZN3hF4awgbH0Z8SWTGAxSD8WUae0CNR16EGmhxbVYp
z5lC4fhoGRkmDzYOPPpPZvzgpSnVtjkNhyZavhTxvPDg7xunDgoCjTTFjnA9EAD0
NYUlyx6otc7oQqjiPZOU9JFntaPa6Q7VVa4nyEI6fdC/Uhgsk6h/ic2jD01ykEXt
71eAgV87XbUN1Xxw+XqN62XSgpQTjX3E6SCUcR8bTMBLbIFMgbltz2SE2IzG39ki
xecnCvGmygW9voVzX8lDZduwomp4xl67sWQC0NQ37Vpl04ai7L/Xnpz8HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDImHvLU4pDhFks13YeE1osZlNILMB8GA1UdIwQY
MBaAFE/SB/xa0Hc8PY6T5LMGGcE7qBy0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDlJSF9GclFkenc5anBQa3N3WVp3VHVvSExRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iZmY0NjUtYjU0Ny00MTUyLWE3NjUt
NDdkZmRmMmIwZmQ2LzEvVDlJSF9GclFkenc5anBQa3N3WVp3VHVvSExRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9iZmY0NjUtYjU0Ny00MTUyLWE3NjUtNDdkZmRmMmIwZmQ2
LzEvVDlJSF9GclFkenc5anBQa3N3WVp3VHVvSExRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMS1JMcBT
EdbhwzyAtMzm3xWYjW9xJLPhpYLK7gsxpaiiCXYYo/drL9hxNAaoEF8/J6EtRZ+b
jb8ShY1D21MgZvh0pO3i36NKJUTlYNB73T5UCvDc4jJoBE6/1QZ+MJ6DTEubq2hI
5Wu+ZM27QijkjQHbcJIPY5LNupNgysH9+okIcdFA+5Ox3qZIpm9lEcXqgOwmYwvF
qyZ90SlImdVD6Te8EwJJrMmot5+S8geycoCynYfw21scn/LriVykL0AbIGUYxeuv
vBkw4oaZWT8HFKtSYGZHLnCV9mzNKyPJe+1IJ0DzzvToVD/1TefMKSjQzCMLTyJr
nMhY5TZX7c8zqA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:49 2025 by rpki-client