Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
File: T7OopKDYxa4BqWlbBB7SxtApap4.mft (raw, json)
Hash identifier: uKmYKEre5aqiz9yLyNp+wfrNxsD4lOE3LPS8j1PtQMo=
Subject key identifier: B2:20:C9:65:FE:DF:B4:27:12:BA:61:40:91:22:FE:A9:17:30:DB:C8
Authority key identifier: 4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
Certificate issuer: /CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Certificate serial: 0197B88FD55007EAB57789CB1C52711B42FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
Manifest number: 0CAC
Signing time: Sat 28 Jun 2025 22:02:03 +0000
Manifest this update: Sat 28 Jun 2025 22:02:03 +0000
Manifest next update: Sun 29 Jun 2025 22:02:03 +0000
Files and hashes: 1: T7OopKDYxa4BqWlbBB7SxtApap4.crl (hash: QtpGfL8wCmK2cA/R/pA+Qnan0cWHi/EUD6sGwn8p42M=)
2: f56823CiqLOMuTriNLS3PUZ78yU.roa (hash: jqCq9kSPvKsgvdkfpEOf8qz0/6Off+XucTySJaLEm7M=)
3: zKhksjQURk5K1Dod96pBNAB3OII.roa (hash: gundq1JGdYbfKX8ieC3GIfS0gF7vi8HY0pmpJJSYlFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:d5:50:07:ea:b5:77:89:cb:1c:52:71:1b:42:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Validity
Not Before: Jun 28 22:02:03 2025 GMT
Not After : Jun 29 22:02:03 2025 GMT
Subject: CN=b220c965fedfb42712ba61409122fea91730dbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e0:09:40:8e:08:bd:2c:4b:f6:9a:da:2a:29:
0b:6f:01:80:c1:49:c8:fc:ac:f3:57:84:14:84:93:
aa:6a:44:79:7d:31:27:30:a6:ea:9f:97:93:c2:6b:
41:e5:78:87:52:8b:c6:07:0b:7f:66:88:a3:c1:48:
1d:63:f0:f6:74:b4:48:86:31:85:9a:04:a3:ab:c3:
16:80:c8:f0:5a:62:3a:10:04:8e:e2:27:21:c6:a4:
b6:25:d8:b2:42:4f:06:36:81:83:54:48:39:09:dd:
a4:92:11:69:eb:f8:c9:ea:a2:7a:86:77:2f:af:15:
c4:10:aa:cd:fd:83:b4:78:ca:7e:ba:0e:b6:e2:52:
4d:49:34:a5:ae:5a:f2:f9:86:dd:79:f9:67:22:2e:
2f:75:f6:e9:87:50:ad:c8:f2:32:54:75:b1:e2:b7:
0a:3c:96:93:ed:8f:84:11:4a:75:d9:8c:f3:ae:37:
12:5c:f1:97:63:75:9e:57:39:e8:d4:9b:db:ca:53:
3a:31:39:bf:55:4f:c7:63:cd:95:03:bb:0b:6d:3e:
b2:47:8c:53:57:85:af:ce:08:f4:28:fc:ea:39:83:
58:bf:92:95:7f:c6:55:6b:7c:81:da:b9:25:81:c7:
52:ec:46:e2:e2:2e:f8:38:e2:d9:07:7e:fc:13:b8:
4e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:20:C9:65:FE:DF:B4:27:12:BA:61:40:91:22:FE:A9:17:30:DB:C8
X509v3 Authority Key Identifier:
keyid:4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f1:38:35:d5:04:8d:6d:ee:ab:2f:bf:19:48:cd:61:ad:65:
4d:be:01:c3:25:0f:70:9a:30:04:fc:4a:e6:12:07:20:8f:27:
b9:08:c6:fe:14:ca:06:11:95:bb:f8:38:2a:d6:36:49:f8:07:
61:76:59:bb:58:03:93:06:11:8c:c8:46:59:ae:d7:de:c6:22:
0a:8b:53:ec:e2:ad:54:87:da:8f:e8:07:fe:dc:dc:02:ef:10:
61:5a:20:56:4e:0a:14:9b:c3:46:9f:21:3a:e5:03:c6:e4:a8:
5f:cd:89:28:9c:a2:ce:83:96:5c:ff:6d:ca:b4:23:3f:c6:3b:
53:91:a9:f6:a5:39:2c:9e:55:e3:02:d9:76:1e:c6:51:10:bb:
9b:d3:6c:1b:fa:fa:c2:41:8d:af:19:91:58:fe:ba:51:ae:45:
20:1e:31:22:4f:bc:da:fa:2a:02:82:0b:85:bc:1e:e5:a8:d1:
66:64:fc:b9:15:7c:37:bf:a4:f6:75:66:7b:b9:0a:95:46:86:
d9:3c:20:e7:9e:62:26:35:80:c6:83:8b:c9:3b:cf:7f:6d:63:
33:b9:a5:bf:be:45:09:b1:c3:ec:98:bc:91:f1:09:b7:0d:a0:
ac:cc:fd:5a:c2:ea:a5:cb:ea:80:1f:c2:70:47:d2:26:a2:cc:
6e:ea:a8:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j9VQB+q1d4nLHFJxG0L8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYjNhOGE0YTBkOGM1YWUwMWE5Njk1YjA0MWVkMmM2ZDAy
OTZhOWUwHhcNMjUwNjI4MjIwMjAzWhcNMjUwNjI5MjIwMjAzWjAzMTEwLwYDVQQD
EyhiMjIwYzk2NWZlZGZiNDI3MTJiYTYxNDA5MTIyZmVhOTE3MzBkYmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eAJQI4IvSxL9praKikLbwGAwUnI
/KzzV4QUhJOqakR5fTEnMKbqn5eTwmtB5XiHUovGBwt/ZoijwUgdY/D2dLRIhjGF
mgSjq8MWgMjwWmI6EASO4ichxqS2JdiyQk8GNoGDVEg5Cd2kkhFp6/jJ6qJ6hncv
rxXEEKrN/YO0eMp+ug624lJNSTSlrlry+YbdeflnIi4vdfbph1CtyPIyVHWx4rcK
PJaT7Y+EEUp12YzzrjcSXPGXY3WeVzno1JvbylM6MTm/VU/HY82VA7sLbT6yR4xT
V4Wvzgj0KPzqOYNYv5KVf8ZVa3yB2rklgcdS7Ebi4i74OOLZB378E7hOwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIgyWX+37QnErphQJEi/qkXMNvIMB8GA1UdIwQY
MBaAFE+zqKSg2MWuAalpWwQe0sbQKWqeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDdPb3BLRFl4YTRCcVdsYkJCN1N4dEFwYXA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi82ZWYyM2UtOTliYS00YzY5LTkyZTMt
NmJiNzA4MDQwOWI0LzEvVDdPb3BLRFl4YTRCcVdsYkJCN1N4dEFwYXA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi82ZWYyM2UtOTliYS00YzY5LTkyZTMtNmJiNzA4MDQwOWI0
LzEvVDdPb3BLRFl4YTRCcVdsYkJCN1N4dEFwYXA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPvE4NdUE
jW3uqy+/GUjNYa1lTb4BwyUPcJowBPxK5hIHII8nuQjG/hTKBhGVu/g4KtY2SfgH
YXZZu1gDkwYRjMhGWa7X3sYiCotT7OKtVIfaj+gH/tzcAu8QYVogVk4KFJvDRp8h
OuUDxuSoX82JKJyizoOWXP9tyrQjP8Y7U5Gp9qU5LJ5V4wLZdh7GURC7m9NsG/r6
wkGNrxmRWP66Ua5FIB4xIk+82voqAoILhbwe5ajRZmT8uRV8N7+k9nVme7kKlUaG
2Twg555iJjWAxoOLyTvPf21jM7mlv75FCbHD7Ji8kfEJtw2grMz9WsLqpcvqgB/C
cEfSJqLMbuqo2g==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:39:31 2025 by rpki-client