Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
File: a-tglLyrS9Ox9vVsUYK6EiDiK28.mft (raw, json)
Hash identifier: smha/cONmlBUqsx2xZF3abB6GvpLFqFkTnrJbAtFbgw=
Subject key identifier: BB:23:CF:EE:BD:E8:2C:29:D3:1D:94:AE:31:65:FB:6D:1A:B5:63:60
Authority key identifier: 6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
Certificate issuer: /CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
Certificate serial: 01988E0F65C487FDB56796B010C54FBC9B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
Manifest number: 04A3
Signing time: Sat 09 Aug 2025 09:00:30 +0000
Manifest this update: Sat 09 Aug 2025 09:00:30 +0000
Manifest next update: Sun 10 Aug 2025 09:00:30 +0000
Files and hashes: 1: a-tglLyrS9Ox9vVsUYK6EiDiK28.crl (hash: orXGCqid4KkKZXv7ZYjblVjcpcA22ez49YXueZdFE4M=)
2: br9nNW8HTMSPThu0IYs9YJPit9M.roa (hash: +GZtKTMjwkIHJlC7o9X+rvG+Xi3NBXRyc3GslA3d0UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:0f:65:c4:87:fd:b5:67:96:b0:10:c5:4f:bc:9b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
Validity
Not Before: Aug 9 09:00:30 2025 GMT
Not After : Aug 10 09:00:30 2025 GMT
Subject: CN=bb23cfeebde82c29d31d94ae3165fb6d1ab56360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b6:54:3c:c1:c1:7c:b2:38:2f:9d:f8:51:6c:
0c:10:9e:5f:99:8c:4d:aa:42:4e:4d:20:38:f4:72:
fc:e0:aa:d3:da:29:b8:4b:93:1b:7e:2b:71:07:5e:
88:fc:0e:38:66:e1:a0:e4:26:d9:76:68:98:1b:c1:
17:89:0d:fa:ee:64:4c:fd:7b:8c:89:8a:a0:b6:40:
ea:f3:ba:89:56:85:01:21:5d:ed:a7:9d:89:30:b9:
c4:28:44:e8:fc:dc:3c:ea:f0:f0:53:00:80:10:7a:
8a:af:b2:dd:f1:91:3a:88:a1:68:b9:bd:8d:0d:1d:
62:4b:87:49:5f:0e:a3:32:4e:80:a7:d3:95:ed:56:
52:d6:9c:13:72:6a:5c:08:89:9c:bf:58:12:b8:4e:
a2:b8:03:8a:c3:9a:3e:e6:0a:72:25:89:aa:35:88:
94:f5:e6:dd:72:5b:eb:ff:d0:b6:d1:28:5e:52:93:
83:25:ac:33:18:1c:38:88:64:f0:7b:9c:ae:e7:9b:
67:23:09:a6:d1:ed:85:43:1c:86:2d:ef:c8:d2:a3:
ac:64:fb:d5:0e:89:6b:fa:20:8c:b5:2f:ea:1e:53:
a7:60:51:6f:3c:70:cb:31:ae:8a:25:e9:50:d6:46:
d0:55:0e:d2:7f:b5:63:d4:ff:9b:af:b9:3b:ac:0a:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:23:CF:EE:BD:E8:2C:29:D3:1D:94:AE:31:65:FB:6D:1A:B5:63:60
X509v3 Authority Key Identifier:
keyid:6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:54:b0:a8:df:25:8c:33:00:62:82:2d:6c:28:fc:66:a1:c0:
81:26:27:46:8d:5a:9c:5e:7d:a7:3c:f0:a2:08:7c:e7:e0:18:
25:e8:1e:7c:35:56:88:9c:4a:81:9c:f4:71:14:0c:0c:78:3a:
ba:de:01:1c:97:d5:e0:e7:fe:f8:1d:d6:33:34:53:ad:9c:d5:
d3:5d:98:26:6e:14:56:03:d0:ed:3c:54:4c:e8:82:41:ce:29:
09:97:14:ca:d6:56:1e:e0:91:21:f8:78:1d:ec:bd:76:e3:78:
0c:58:23:65:e9:4e:b2:11:b0:c3:ea:db:1e:db:7c:06:59:88:
ec:fc:2d:19:cc:c2:37:63:d8:2f:1d:2f:c6:79:59:df:2e:93:
4b:c7:49:5d:24:c8:77:6d:22:7a:c2:30:82:49:1a:7c:3a:0a:
6e:57:f0:c9:58:da:0e:85:65:2d:11:c7:f0:34:23:9b:cf:75:
cf:91:12:34:2e:a0:b1:6e:67:70:a2:26:68:de:ba:b7:d2:cd:
83:22:48:41:74:80:e2:57:cf:e8:17:64:bc:f0:74:c0:5d:c5:
c4:58:e1:eb:19:31:8d:1c:38:9a:89:b7:69:62:49:ae:9e:c6:
f5:cd:69:52:e8:90:7f:5a:aa:ce:55:c7:b1:f0:94:14:10:01:
01:71:3c:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiOD2XEh/21Z5awEMVPvJsQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZWI2MDk0YmNhYjRiZDNiMWY2ZjU2YzUxODJiYTEyMjBl
MjJiNmYwHhcNMjUwODA5MDkwMDMwWhcNMjUwODEwMDkwMDMwWjAzMTEwLwYDVQQD
EyhiYjIzY2ZlZWJkZTgyYzI5ZDMxZDk0YWUzMTY1ZmI2ZDFhYjU2MzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7ZUPMHBfLI4L534UWwMEJ5fmYxN
qkJOTSA49HL84KrT2im4S5MbfitxB16I/A44ZuGg5CbZdmiYG8EXiQ367mRM/XuM
iYqgtkDq87qJVoUBIV3tp52JMLnEKETo/Nw86vDwUwCAEHqKr7Ld8ZE6iKFoub2N
DR1iS4dJXw6jMk6Ap9OV7VZS1pwTcmpcCImcv1gSuE6iuAOKw5o+5gpyJYmqNYiU
9ebdclvr/9C20SheUpODJawzGBw4iGTwe5yu55tnIwmm0e2FQxyGLe/I0qOsZPvV
Dolr+iCMtS/qHlOnYFFvPHDLMa6KJelQ1kbQVQ7Sf7Vj1P+br7k7rAqPpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsjz+696Cwp0x2UrjFl+20atWNgMB8GA1UdIwQY
MBaAFGvrYJS8q0vTsfb1bFGCuhIg4itvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iYTQ2NDAtMTYzZS00NjVmLTkwZjkt
ZWE1ODdmZDY1OGIyLzEvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iYTQ2NDAtMTYzZS00NjVmLTkwZjktZWE1ODdmZDY1OGIy
LzEvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlSwqN8l
jDMAYoItbCj8ZqHAgSYnRo1anF59pzzwogh85+AYJegefDVWiJxKgZz0cRQMDHg6
ut4BHJfV4Of++B3WMzRTrZzV012YJm4UVgPQ7TxUTOiCQc4pCZcUytZWHuCRIfh4
Hey9duN4DFgjZelOshGww+rbHtt8BlmI7PwtGczCN2PYLx0vxnlZ3y6TS8dJXSTI
d20iesIwgkkafDoKblfwyVjaDoVlLRHH8DQjm891z5ESNC6gsW5ncKImaN66t9LN
gyJIQXSA4lfP6BdkvPB0wF3FxFjh6xkxjRw4mom3aWJJrp7G9c1pUuiQf1qqzlXH
sfCUFBABAXE8wQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:10 2025 by rpki-client