Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft
File: tqNouOZvnhWmEOwY1rFHtrokzuc.mft (raw, json)
Hash identifier: y5jn3BH9SFtNzbBDVLSe2GxGWYrNkRjsi8Qvji219cs=
Subject key identifier: 41:AE:B1:48:AF:5F:05:59:13:4A:78:90:A8:9A:1A:C4:9C:F1:94:EB
Authority key identifier: B6:A3:68:B8:E6:6F:9E:15:A6:10:EC:18:D6:B1:47:B6:BA:24:CE:E7
Certificate issuer: /CN=b6a368b8e66f9e15a610ec18d6b147b6ba24cee7
Certificate serial: 01989780D487F7F624A367B4A7E5C127D1D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqNouOZvnhWmEOwY1rFHtrokzuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft
Manifest number: B6
Signing time: Mon 11 Aug 2025 05:00:59 +0000
Manifest this update: Mon 11 Aug 2025 05:00:59 +0000
Manifest next update: Tue 12 Aug 2025 05:00:59 +0000
Files and hashes: 1: 76JdDApMBw2HG_-2b61i99W245Q.roa (hash: NIJoLQsfvrL/qonBB3ZwrtyRIgvdYG24/geuGhv0roI=)
2: tqNouOZvnhWmEOwY1rFHtrokzuc.crl (hash: utCDgVebfOVrgat9oR4yURai+NeMDWsdGKVJgZHsyPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqNouOZvnhWmEOwY1rFHtrokzuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:d4:87:f7:f6:24:a3:67:b4:a7:e5:c1:27:d1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a368b8e66f9e15a610ec18d6b147b6ba24cee7
Validity
Not Before: Aug 11 05:00:59 2025 GMT
Not After : Aug 12 05:00:59 2025 GMT
Subject: CN=41aeb148af5f0559134a7890a89a1ac49cf194eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b3:a4:b6:dc:ea:b1:ca:6e:fa:60:35:f3:76:
4e:ed:8b:37:f8:4d:d8:42:97:1c:bd:34:44:50:72:
63:80:92:fd:69:0e:0c:50:f1:52:fa:6b:64:68:dd:
bc:1a:bb:87:46:55:aa:91:54:32:8c:0b:1e:ae:ff:
1e:05:82:02:91:77:88:b9:ae:51:c2:ce:38:21:2f:
a1:81:93:bc:65:03:64:7e:a3:a9:4c:26:89:79:f1:
52:0b:9e:b1:ea:8d:45:31:e3:7b:5e:f2:62:2d:1e:
77:3f:32:93:c3:ba:e3:f1:f6:b6:8a:23:1b:3b:2b:
5d:f0:7d:a6:58:f3:55:e5:0f:2b:f7:41:67:27:f9:
27:dd:54:7e:54:34:0b:0b:5d:7d:4e:5f:3d:ff:a3:
bc:f9:cd:77:ef:2c:83:5e:a1:95:8b:5b:6c:d5:4d:
97:65:94:74:d7:e8:77:b9:bf:4e:f6:6c:66:f3:16:
a5:4d:a7:b8:c1:3b:2c:ac:02:84:71:c2:f2:2b:3d:
2e:9b:15:6f:4d:24:ec:61:8d:5f:3c:c0:1c:74:e8:
38:b1:e8:a7:b4:8f:48:31:ff:25:8e:35:0e:68:71:
4a:1b:a4:85:46:26:fd:9d:42:aa:73:31:4a:40:8a:
74:54:6b:3d:f4:d6:6c:6b:50:bc:93:b3:83:ff:38:
8e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AE:B1:48:AF:5F:05:59:13:4A:78:90:A8:9A:1A:C4:9C:F1:94:EB
X509v3 Authority Key Identifier:
keyid:B6:A3:68:B8:E6:6F:9E:15:A6:10:EC:18:D6:B1:47:B6:BA:24:CE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqNouOZvnhWmEOwY1rFHtrokzuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:73:ae:d5:72:92:23:77:93:66:06:de:88:44:57:7e:cd:fe:
65:45:e7:e1:9f:75:78:eb:60:00:14:28:bf:ef:55:a5:07:10:
ab:66:53:13:5f:aa:80:39:d6:06:e2:25:ff:c1:07:84:b3:25:
0d:0e:76:bb:11:ca:db:d8:2b:68:26:ed:e1:f1:62:d2:0c:ed:
01:94:20:23:24:64:69:3d:d4:ff:df:84:53:38:6d:9f:dc:96:
83:63:86:7c:a9:3b:9f:b5:fc:fd:af:d5:6b:f1:94:5a:b6:82:
82:0a:33:83:f8:d9:8a:fd:5c:1e:99:31:aa:e1:0f:c0:41:f1:
dc:f6:c6:ea:24:28:00:23:f1:3d:22:ab:df:aa:5c:b0:09:a3:
bf:48:f2:c4:99:1d:c4:80:95:96:61:58:68:b0:6a:17:9a:80:
ae:05:2a:e7:0f:41:00:60:cf:35:21:18:d8:de:bd:04:3c:52:
4f:8c:bd:4e:f4:1b:34:27:c4:5f:ab:a2:e7:fb:7d:74:05:4e:
24:f8:35:eb:be:1a:73:5b:56:28:9e:34:91:19:00:c4:3e:7a:
98:a0:76:4e:26:ed:ec:f1:8f:71:37:16:2e:ae:d0:29:92:c6:
37:f3:cf:40:b4:46:36:96:03:cd:ae:ea:33:7a:42:3b:75:d0:
15:8e:97:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXgNSH9/Yko2e0p+XBJ9HTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YTM2OGI4ZTY2ZjllMTVhNjEwZWMxOGQ2YjE0N2I2YmEy
NGNlZTcwHhcNMjUwODExMDUwMDU5WhcNMjUwODEyMDUwMDU5WjAzMTEwLwYDVQQD
Eyg0MWFlYjE0OGFmNWYwNTU5MTM0YTc4OTBhODlhMWFjNDljZjE5NGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LOkttzqscpu+mA183ZO7Ys3+E3Y
QpccvTREUHJjgJL9aQ4MUPFS+mtkaN28GruHRlWqkVQyjAserv8eBYICkXeIua5R
ws44IS+hgZO8ZQNkfqOpTCaJefFSC56x6o1FMeN7XvJiLR53PzKTw7rj8fa2iiMb
Oytd8H2mWPNV5Q8r90FnJ/kn3VR+VDQLC119Tl89/6O8+c137yyDXqGVi1ts1U2X
ZZR01+h3ub9O9mxm8xalTae4wTssrAKEccLyKz0umxVvTSTsYY1fPMAcdOg4sein
tI9IMf8ljjUOaHFKG6SFRib9nUKqczFKQIp0VGs99NZsa1C8k7OD/ziOjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGusUivXwVZE0p4kKiaGsSc8ZTrMB8GA1UdIwQY
MBaAFLajaLjmb54VphDsGNaxR7a6JM7nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHFOb3VPWnZuaFdtRU93WTFyRkh0cm9renVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9iYTE4NjgtYWI3Ni00YmUxLWJjNTMt
NzQ4MGQ4YTJmMWJlLzEvdHFOb3VPWnZuaFdtRU93WTFyRkh0cm9renVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9iYTE4NjgtYWI3Ni00YmUxLWJjNTMtNzQ4MGQ4YTJmMWJl
LzEvdHFOb3VPWnZuaFdtRU93WTFyRkh0cm9renVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXOu1XKS
I3eTZgbeiERXfs3+ZUXn4Z91eOtgABQov+9VpQcQq2ZTE1+qgDnWBuIl/8EHhLMl
DQ52uxHK29graCbt4fFi0gztAZQgIyRkaT3U/9+EUzhtn9yWg2OGfKk7n7X8/a/V
a/GUWraCggozg/jZiv1cHpkxquEPwEHx3PbG6iQoACPxPSKr36pcsAmjv0jyxJkd
xICVlmFYaLBqF5qArgUq5w9BAGDPNSEY2N69BDxST4y9TvQbNCfEX6ui5/t9dAVO
JPg1674ac1tWKJ40kRkAxD56mKB2Tibt7PGPcTcWLq7QKZLGN/PPQLRGNpYDza7q
M3pCO3XQFY6XsQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:30 2025 by rpki-client