Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
File: tDqirb6dQEE3M58g_VhiPIo58TA.mft (raw, json)
Hash identifier: W9+Q4XPfw0eHTPlqvMBL/HNV92RVOevy0WPYgFUsjPA=
Subject key identifier: CB:D6:0F:9E:63:72:56:D4:9A:B4:A6:D2:B9:EE:8E:B8:7D:03:5F:A2
Authority key identifier: B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
Certificate issuer: /CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Certificate serial: 0197B821440DEB262FFF1CA6959E2D99C7E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
Manifest number: 0562
Signing time: Sat 28 Jun 2025 20:01:17 +0000
Manifest this update: Sat 28 Jun 2025 20:01:17 +0000
Manifest next update: Sun 29 Jun 2025 20:01:17 +0000
Files and hashes: 1: DR42yKGsjL2cx3Lp0nYZ2-J6QjI.roa (hash: SNpq+XJB/gPAUUzDmYBdIDihlauDEu/Coqako/V/GUw=)
2: tDqirb6dQEE3M58g_VhiPIo58TA.crl (hash: hrU+4kkH5E17SkUzaSVNEvOD3us1SCIw3EPLYLjUjjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:44:0d:eb:26:2f:ff:1c:a6:95:9e:2d:99:c7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Validity
Not Before: Jun 28 20:01:17 2025 GMT
Not After : Jun 29 20:01:17 2025 GMT
Subject: CN=cbd60f9e637256d49ab4a6d2b9ee8eb87d035fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:57:45:08:55:f6:f2:f4:d1:3f:57:d9:4f:
40:59:c9:16:86:14:df:6c:f8:9f:52:5c:5d:f6:48:
33:4e:b6:d3:ad:85:35:08:eb:91:ef:2d:b2:70:ce:
83:6b:6d:b4:be:e5:59:07:10:98:e3:69:45:95:e3:
05:20:8c:bc:a7:5b:3b:d0:69:8f:6d:93:aa:45:d7:
d7:52:82:e1:92:1d:d0:42:bc:96:4b:1e:3e:38:74:
92:4e:94:5a:c4:11:d2:b5:03:22:8e:2d:d6:8a:80:
db:b5:7a:8d:4c:20:b9:6a:4c:40:cc:ce:21:8a:bf:
f4:88:16:99:d9:cc:f8:6f:2e:4e:f4:e9:09:c7:7c:
ca:32:dc:c9:52:c4:75:64:7b:db:99:ba:e2:26:df:
1b:96:a6:92:41:df:2d:e0:0d:46:48:68:58:4b:db:
d0:ac:53:ce:96:8d:0a:50:59:cf:8d:31:c6:23:04:
ab:7b:11:81:76:6c:f8:50:4d:6c:14:31:da:1e:86:
4c:c0:1a:75:50:93:ec:f3:60:7b:79:81:d3:e2:d2:
3f:03:12:d8:59:85:45:17:03:2f:c3:68:40:91:2e:
4e:e5:5b:d0:26:84:be:3d:63:ae:63:c3:a4:7d:aa:
e7:70:97:4a:6a:f8:b3:ef:cb:8b:d7:44:7c:2e:ba:
84:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D6:0F:9E:63:72:56:D4:9A:B4:A6:D2:B9:EE:8E:B8:7D:03:5F:A2
X509v3 Authority Key Identifier:
keyid:B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5b:21:ca:36:21:30:88:44:e7:08:54:8f:e2:c6:4b:ed:de:
d5:ed:0e:ce:e7:45:c4:08:db:f1:9a:b0:4f:01:51:0f:df:61:
7a:b2:7a:47:d6:a4:ca:cf:7c:e1:c3:55:a9:78:81:2b:8c:2a:
3d:14:4f:ff:df:c4:5b:34:57:90:b9:2b:bc:8b:43:67:54:ce:
37:d7:a9:4a:4f:2e:3d:e6:09:1f:5a:87:25:f2:f0:36:23:cb:
b0:4f:82:08:f4:ac:44:27:18:1a:40:a5:d3:65:d8:60:9b:2e:
e9:2f:35:12:bc:ec:13:3b:72:b7:93:63:55:8f:c7:92:e8:61:
0e:32:14:3d:81:9f:da:8d:d9:d3:ca:fe:3c:7c:c5:1c:d5:fe:
96:78:3e:51:13:46:39:c9:96:16:ec:99:11:0a:29:1d:e7:97:
27:82:e9:a5:6f:21:f1:4e:7a:c9:00:67:a7:85:67:4c:62:30:
51:9e:5f:07:91:6a:2e:c3:bb:b8:15:60:6c:fa:a2:b3:44:b6:
c4:f2:51:21:14:61:46:9f:e2:8f:70:3c:ba:21:ed:2b:aa:2e:
c0:cc:cb:fb:77:64:8d:93:a7:30:6c:e6:a0:e9:0b:9e:cd:b6:
cd:e8:a2:5e:ee:c6:93:c2:c3:a4:5d:e8:4a:24:4c:fc:59:ce:
d5:44:ea:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IUQN6yYv/xymlZ4tmcfkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0M2FhMmFkYmU5ZDQwNDEzNzMzOWYyMGZkNTg2MjNjOGEz
OWYxMzAwHhcNMjUwNjI4MjAwMTE3WhcNMjUwNjI5MjAwMTE3WjAzMTEwLwYDVQQD
EyhjYmQ2MGY5ZTYzNzI1NmQ0OWFiNGE2ZDJiOWVlOGViODdkMDM1ZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBhXRQhV9vL00T9X2U9AWckWhhTf
bPifUlxd9kgzTrbTrYU1COuR7y2ycM6Da220vuVZBxCY42lFleMFIIy8p1s70GmP
bZOqRdfXUoLhkh3QQryWSx4+OHSSTpRaxBHStQMiji3WioDbtXqNTCC5akxAzM4h
ir/0iBaZ2cz4by5O9OkJx3zKMtzJUsR1ZHvbmbriJt8blqaSQd8t4A1GSGhYS9vQ
rFPOlo0KUFnPjTHGIwSrexGBdmz4UE1sFDHaHoZMwBp1UJPs82B7eYHT4tI/AxLY
WYVFFwMvw2hAkS5O5VvQJoS+PWOuY8OkfarncJdKaviz78uL10R8LrqEcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvWD55jclbUmrSm0rnujrh9A1+iMB8GA1UdIwQY
MBaAFLQ6oq2+nUBBNzOfIP1YYjyKOfEwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNjJmNDAtNDhjNy00M2M2LTlkODMt
MTU0OGFjMTM1NmJlLzEvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yNjJmNDAtNDhjNy00M2M2LTlkODMtMTU0OGFjMTM1NmJl
LzEvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFshyjYh
MIhE5whUj+LGS+3e1e0OzudFxAjb8ZqwTwFRD99herJ6R9akys984cNVqXiBK4wq
PRRP/9/EWzRXkLkrvItDZ1TON9epSk8uPeYJH1qHJfLwNiPLsE+CCPSsRCcYGkCl
02XYYJsu6S81ErzsEztyt5NjVY/HkuhhDjIUPYGf2o3Z08r+PHzFHNX+lng+URNG
OcmWFuyZEQopHeeXJ4LppW8h8U56yQBnp4VnTGIwUZ5fB5FqLsO7uBVgbPqis0S2
xPJRIRRhRp/ij3A8uiHtK6ouwMzL+3dkjZOnMGzmoOkLns22zeiiXu7Gk8LDpF3o
SiRM/FnO1UTqXw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:29 2025 by rpki-client