Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
File: ts9OV8vBXOTs70T1DluFkvvu7qA.mft (raw, json)
Hash identifier: 7boWi1Gx5F6btUqiwLKBlXtIi340NEtK50xK9vbt6tY=
Subject key identifier: 61:AE:DE:AA:8D:E2:E9:D1:8D:F2:9F:C8:99:4E:CD:23:41:C1:E2:FD
Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
Certificate issuer: /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Certificate serial: 01987FAF53102117F40AE7320400C008ABBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
Manifest number: 0DD6
Signing time: Wed 06 Aug 2025 14:00:53 +0000
Manifest this update: Wed 06 Aug 2025 14:00:53 +0000
Manifest next update: Thu 07 Aug 2025 14:00:53 +0000
Files and hashes: 1: 2bbjZnItd_WfSUsxeSim-v-qB-g.roa (hash: U3T6Blvywe2N+XOmN4d0Sfw2WTnfp19mqzXdb2WW/M8=)
2: hs7awmW5u-N7i3rafiPiNllc2Bo.roa (hash: zx9QQVE6GtEBw9ZKQW610wAAxlFBO5GbObUYOTrSVsA=)
3: ts9OV8vBXOTs70T1DluFkvvu7qA.crl (hash: +cQfH4O89+yPlvs0OSPog2DtUuudqn3VBEE34duSD7I=)
4: ucQNwDwE2vdn8aT5NeBfcaMP4xI.roa (hash: uOUVs3Rq9AKXwjmauSrDsTRXthAY0OABda9jaa1tn6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:af:53:10:21:17:f4:0a:e7:32:04:00:c0:08:ab:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Validity
Not Before: Aug 6 14:00:53 2025 GMT
Not After : Aug 7 14:00:53 2025 GMT
Subject: CN=61aedeaa8de2e9d18df29fc8994ecd2341c1e2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:b1:0c:e9:d5:40:c6:f5:be:50:78:13:0e:
97:b7:fb:10:71:31:e7:77:49:8a:73:91:da:12:f2:
6b:16:ba:7b:58:06:da:d8:e6:bb:59:02:14:ee:52:
19:5d:71:7b:af:12:1a:82:da:25:f6:56:a2:6b:45:
97:8d:e9:c1:bc:c6:bb:50:af:d3:9c:da:36:d5:2b:
82:a0:6e:4b:75:8a:bd:d2:f7:08:11:a8:20:a3:9c:
6e:49:84:e7:53:6c:54:b0:8d:3f:f3:7a:0c:ea:ae:
16:e0:6f:a3:3e:1d:42:e4:08:16:b2:a7:52:8f:2d:
0c:4b:a8:43:6f:08:d4:ca:93:27:3e:d8:de:db:7a:
8c:d8:c1:58:da:f0:2c:a2:0f:b6:1f:a4:fc:70:23:
e3:5d:c9:7f:2c:d9:d6:fc:46:16:42:f8:6b:4b:55:
dc:9a:a5:6e:35:b5:f5:bc:82:9b:5d:59:aa:80:94:
cd:92:cc:5e:31:34:a4:d2:e6:4f:c5:3c:0f:ff:af:
4b:bf:a3:97:32:f6:e6:26:62:d4:28:9a:93:e4:b0:
ee:ff:a8:0c:31:a3:3e:1d:26:ea:3e:93:5f:8a:6d:
6a:e8:10:aa:35:86:63:fc:df:da:c1:05:37:d4:04:
94:88:c4:ee:d2:70:b7:aa:28:82:48:10:f2:9e:cf:
e7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AE:DE:AA:8D:E2:E9:D1:8D:F2:9F:C8:99:4E:CD:23:41:C1:E2:FD
X509v3 Authority Key Identifier:
keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d3:71:fb:46:f7:46:1d:c3:29:2b:e1:d0:92:1b:f4:46:ac:
24:43:4e:51:aa:0b:d6:86:e0:67:f6:eb:5d:8c:ad:f7:df:6a:
68:41:40:6b:d3:78:ac:c1:1c:b5:7c:db:fc:27:e4:c9:73:5d:
bd:f7:a4:69:13:9e:96:b5:69:f1:90:04:aa:f1:6b:e4:3b:84:
e9:3b:4f:81:92:65:f5:4f:01:8b:d7:89:8e:42:9b:79:ab:47:
31:e1:eb:86:0a:58:46:aa:ab:83:b7:97:ba:a6:0b:ad:cd:11:
87:fe:38:50:33:76:2c:ac:de:a4:ef:f8:67:62:45:8c:23:e3:
cf:3f:ac:3a:e2:e7:23:67:0d:76:31:1f:2c:96:8f:54:d6:80:
42:81:54:f1:8b:5f:3d:c3:43:cd:5a:99:56:eb:98:5c:5d:b2:
97:ce:59:fd:79:87:7c:c7:f2:d7:e9:ca:97:6f:78:17:c9:18:
3c:87:9a:37:f7:aa:36:36:9b:ef:6d:27:59:85:da:e2:26:dc:
21:b6:fc:44:77:06:c1:a9:94:ae:cc:4c:aa:a0:a5:e9:0f:ad:
1a:e2:30:19:8b:db:ba:8e:c3:ff:0e:54:22:cd:e0:3d:85:0f:
e3:43:49:e9:a5:66:bf:54:23:63:63:16:38:69:7a:17:cd:63:
74:b2:90:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/r1MQIRf0CucyBADACKu8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2Y2Y0ZTU3Y2JjMTVjZTRlY2VmNDRmNTBlNWI4NTkyZmJl
ZWVlYTAwHhcNMjUwODA2MTQwMDUzWhcNMjUwODA3MTQwMDUzWjAzMTEwLwYDVQQD
Eyg2MWFlZGVhYThkZTJlOWQxOGRmMjlmYzg5OTRlY2QyMzQxYzFlMmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn2xDOnVQMb1vlB4Ew6Xt/sQcTHn
d0mKc5HaEvJrFrp7WAba2Oa7WQIU7lIZXXF7rxIagtol9laia0WXjenBvMa7UK/T
nNo21SuCoG5LdYq90vcIEaggo5xuSYTnU2xUsI0/83oM6q4W4G+jPh1C5AgWsqdS
jy0MS6hDbwjUypMnPtje23qM2MFY2vAsog+2H6T8cCPjXcl/LNnW/EYWQvhrS1Xc
mqVuNbX1vIKbXVmqgJTNksxeMTSk0uZPxTwP/69Lv6OXMvbmJmLUKJqT5LDu/6gM
MaM+HSbqPpNfim1q6BCqNYZj/N/awQU31ASUiMTu0nC3qiiCSBDyns/nkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGu3qqN4unRjfKfyJlOzSNBweL9MB8GA1UdIwQY
MBaAFLbPTlfLwVzk7O9E9Q5bhZL77u6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80ZTg5N2YtZTQzNS00NzE1LWEzYzUt
ODViZTQyNWQzMTk5LzEvdHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy80ZTg5N2YtZTQzNS00NzE1LWEzYzUtODViZTQyNWQzMTk5
LzEvdHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtNx+0b3
Rh3DKSvh0JIb9EasJENOUaoL1obgZ/brXYyt999qaEFAa9N4rMEctXzb/CfkyXNd
vfekaROelrVp8ZAEqvFr5DuE6TtPgZJl9U8Bi9eJjkKbeatHMeHrhgpYRqqrg7eX
uqYLrc0Rh/44UDN2LKzepO/4Z2JFjCPjzz+sOuLnI2cNdjEfLJaPVNaAQoFU8Ytf
PcNDzVqZVuuYXF2yl85Z/XmHfMfy1+nKl294F8kYPIeaN/eqNjab720nWYXa4ibc
Ibb8RHcGwamUrsxMqqCl6Q+tGuIwGYvbuo7D/w5UIs3gPYUP40NJ6aVmv1QjY2MW
OGl6F81jdLKQrw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:24:23 2025 by rpki-client