Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
File: tfrsS42ZLda5zYmoSJ08OmUq7NI.mft (raw, json)
Hash identifier: R+wLm82w31OPHn3TUfkw4CMi5l0KhFHJclnKtbVrE5o=
Subject key identifier: 99:32:B9:49:EA:0B:B4:8B:B5:17:7B:86:75:1A:30:C5:A0:C4:A4:8A
Authority key identifier: B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
Certificate issuer: /CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Certificate serial: 01987C777F6B353FCE9E8AE8406C2DCE767B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 23:01:02 +0000
Manifest this update: Tue 05 Aug 2025 23:01:02 +0000
Manifest next update: Wed 06 Aug 2025 23:01:02 +0000
Files and hashes: 1: 4yLFcyM54Hv8nF5ON-TIrD-1oYQ.roa (hash: hE+OT4FiIcXi0TRuDiRDYqpuBeR4hhUYci4sdFCd/CY=)
2: jKEy0LJLh7AqTPNLnCDWho1dIJ0.roa (hash: BKRsVG5h+FxIv9YJSObhtgL9EqcN1BIPxpc/4d7NHx4=)
3: tfrsS42ZLda5zYmoSJ08OmUq7NI.crl (hash: crz/4PGRM+oOux/LWip796vomEJIig/kZrdO62kehTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:7f:6b:35:3f:ce:9e:8a:e8:40:6c:2d:ce:76:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Validity
Not Before: Aug 5 23:01:02 2025 GMT
Not After : Aug 6 23:01:02 2025 GMT
Subject: CN=9932b949ea0bb48bb5177b86751a30c5a0c4a48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:41:8f:f7:52:8b:f6:fa:31:dd:16:5f:8d:
a0:31:da:7c:65:e4:a5:85:89:4b:4b:2b:8a:17:8b:
e7:7e:e9:92:e4:24:2e:01:61:4e:cd:ad:36:b7:57:
3d:68:6c:db:c3:4a:02:5d:57:1e:69:0c:60:7e:05:
27:2e:e3:dc:be:8f:3d:56:ee:0d:a0:fe:53:2b:0b:
2b:fc:4d:c6:0f:11:8c:5f:d1:98:93:67:d2:ee:e1:
78:57:96:bf:7b:cd:67:f2:4a:4f:49:b6:66:f7:78:
a0:46:57:4e:60:01:7c:70:a6:91:a2:2c:06:28:16:
1c:6d:d0:3d:e6:c7:e0:5f:24:d4:9f:3b:52:37:48:
7f:bd:01:97:5a:94:22:9d:88:ab:68:4f:8d:ee:48:
89:c4:fe:db:e7:a0:d4:9e:68:fe:f8:61:db:5d:71:
c6:06:23:81:f7:60:b4:7b:d9:21:59:d9:2b:19:f4:
56:dc:ad:fb:d0:d6:ad:79:ac:81:a8:ae:0e:b3:1e:
56:86:dd:3e:2d:27:7e:26:87:3f:e2:bd:0b:5b:17:
0d:87:0d:2b:fd:74:6d:74:14:e4:74:fb:01:7c:51:
54:e0:db:e1:af:92:93:9f:d0:7c:64:b1:6d:65:9c:
24:55:52:b5:65:50:e9:66:ba:39:2a:f0:f9:85:fe:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:32:B9:49:EA:0B:B4:8B:B5:17:7B:86:75:1A:30:C5:A0:C4:A4:8A
X509v3 Authority Key Identifier:
keyid:B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:35:8d:9f:d4:c3:2e:05:88:ae:50:6b:91:fa:ed:ea:91:8b:
a2:f1:96:ca:69:1f:08:87:d0:fb:23:62:11:b7:c5:bf:5d:c3:
88:c6:d3:fc:6d:9c:e5:07:02:90:10:0a:c1:6d:55:3e:7e:64:
f6:31:b1:53:68:11:53:d9:c1:9c:83:71:46:69:2c:21:24:ff:
c8:13:c4:1f:eb:8c:2d:2c:f8:b3:c0:2a:d5:d3:55:d8:6d:e6:
bc:e6:94:a4:5b:ba:c5:c1:03:cd:cd:59:a8:d3:b8:c2:11:a8:
90:55:a9:49:59:f3:6f:8f:92:87:78:17:54:82:d6:6c:fc:4b:
b1:61:91:9b:88:60:6d:2d:71:19:a1:71:7f:10:9e:da:1b:8d:
9d:79:77:de:0b:60:2b:58:2e:af:ce:f5:42:89:9f:a7:c8:52:
54:c9:ae:04:3b:03:a2:d1:51:aa:8a:89:59:72:e9:47:3b:92:
ab:d1:a0:d9:57:fc:6e:e9:ad:f9:b3:f2:6a:ab:9a:c1:f9:9f:
40:fe:c0:83:7e:62:4c:79:1e:c5:4b:d2:81:6f:d4:1d:30:1d:
51:dc:91:98:a0:57:97:f2:cd:8c:d7:e2:3a:26:a5:44:64:63:
e8:5f:9d:82:64:ac:a3:b1:69:92:92:d0:9b:94:9d:53:7a:86:
36:ae:39:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8d39rNT/OnoroQGwtznZ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ZmFlYzRiOGQ5OTJkZDZiOWNkODlhODQ4OWQzYzNhNjUy
YWVjZDIwHhcNMjUwODA1MjMwMTAyWhcNMjUwODA2MjMwMTAyWjAzMTEwLwYDVQQD
Eyg5OTMyYjk0OWVhMGJiNDhiYjUxNzdiODY3NTFhMzBjNWEwYzRhNDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOVBj/dSi/b6Md0WX42gMdp8ZeSl
hYlLSyuKF4vnfumS5CQuAWFOza02t1c9aGzbw0oCXVceaQxgfgUnLuPcvo89Vu4N
oP5TKwsr/E3GDxGMX9GYk2fS7uF4V5a/e81n8kpPSbZm93igRldOYAF8cKaRoiwG
KBYcbdA95sfgXyTUnztSN0h/vQGXWpQinYiraE+N7kiJxP7b56DUnmj++GHbXXHG
BiOB92C0e9khWdkrGfRW3K370NateayBqK4Osx5Wht0+LSd+Joc/4r0LWxcNhw0r
/XRtdBTkdPsBfFFU4Nvhr5KTn9B8ZLFtZZwkVVK1ZVDpZro5KvD5hf4wzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkyuUnqC7SLtRd7hnUaMMWgxKSKMB8GA1UdIwQY
MBaAFLX67EuNmS3Wuc2JqEidPDplKuzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGZyc1M0MlpMZGE1elltb1NKMDhPbVVxN05JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82OGMyOTYtNjliMi00MDcwLTlmZjkt
NDI0M2RlY2FkMzYwLzEvdGZyc1M0MlpMZGE1elltb1NKMDhPbVVxN05JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS82OGMyOTYtNjliMi00MDcwLTlmZjktNDI0M2RlY2FkMzYw
LzEvdGZyc1M0MlpMZGE1elltb1NKMDhPbVVxN05JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjWNn9TD
LgWIrlBrkfrt6pGLovGWymkfCIfQ+yNiEbfFv13DiMbT/G2c5QcCkBAKwW1VPn5k
9jGxU2gRU9nBnINxRmksIST/yBPEH+uMLSz4s8Aq1dNV2G3mvOaUpFu6xcEDzc1Z
qNO4whGokFWpSVnzb4+Sh3gXVILWbPxLsWGRm4hgbS1xGaFxfxCe2huNnXl33gtg
K1gur871Qomfp8hSVMmuBDsDotFRqoqJWXLpRzuSq9Gg2Vf8bumt+bPyaquawfmf
QP7Ag35iTHkexUvSgW/UHTAdUdyRmKBXl/LNjNfiOialRGRj6F+dgmSso7FpkpLQ
m5SdU3qGNq45VA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 06:01:54 2025 by rpki-client