Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
File: T-uUV-xRnoI3hncQvMgvow6uZ8A.mft (raw, json)
Hash identifier: fUWMvOxzu8PTo7uuxjaawk5btnfW/c3BcOlBcqB2OB8=
Subject key identifier: 30:AF:C6:A0:F3:01:D3:B3:EF:BD:F7:B2:5C:6E:17:5A:8C:50:3F:3E
Authority key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Certificate issuer: /CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Certificate serial: 01987C77EAA21EDD8A52FC9F19B215D5E5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 23:01:30 +0000
Manifest this update: Tue 05 Aug 2025 23:01:30 +0000
Manifest next update: Wed 06 Aug 2025 23:01:30 +0000
Files and hashes: 1: DMobrS7vy2moYzGxgBwp5Xf3ALI.roa (hash: FXiETzyRXvUDm+4e6t+4D5feOq7eyRK3o1W4hSbV9WQ=)
2: M_KXgx_JXGIc6tpaSDgr0M5BMPw.roa (hash: X3pXFD/5xK/MixjNA4bRNTqRZIbmtfbltIvMKrIW70U=)
3: T-uUV-xRnoI3hncQvMgvow6uZ8A.crl (hash: oI6MsbjYiNxLlmwDoOLj/9wQmEiCB/X0JQe2j3w5bWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:ea:a2:1e:dd:8a:52:fc:9f:19:b2:15:d5:e5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Validity
Not Before: Aug 5 23:01:30 2025 GMT
Not After : Aug 6 23:01:30 2025 GMT
Subject: CN=30afc6a0f301d3b3efbdf7b25c6e175a8c503f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:2a:10:c3:7d:18:36:9e:2a:fa:b6:ec:4b:
5b:20:20:4e:d4:e8:03:54:66:27:25:4e:36:7f:54:
7a:0a:53:e4:ee:91:64:1d:84:77:6a:23:4c:ab:f3:
a9:31:17:35:66:3e:35:a5:ea:cc:cb:1b:ef:80:e9:
e6:e2:55:fa:cf:25:e2:4a:66:5c:f7:43:38:78:4d:
28:c4:0d:4a:9e:11:59:e0:1a:18:77:8b:de:ca:41:
a8:f3:7d:51:34:ca:f7:96:93:c8:ba:07:e7:4c:b7:
39:b9:75:aa:6f:27:81:9d:8e:66:85:82:46:ef:6a:
a0:6b:5c:b8:c8:80:ce:c0:2f:be:c7:f3:0c:7a:06:
39:a9:62:2d:0d:0f:2b:9c:4e:f1:95:65:05:19:ef:
b0:0c:c9:d2:e7:cc:8a:47:c2:60:d2:4d:23:9d:f5:
a3:f1:8e:ea:9e:84:7e:e1:61:62:80:89:2e:08:c1:
ea:05:22:92:6f:80:7f:9b:3d:4c:d9:ed:48:27:1d:
e2:e2:92:75:fc:24:43:90:ba:6e:89:64:02:bb:ce:
08:0c:fd:b3:b7:b8:da:69:5f:8e:e9:7d:66:b7:38:
e8:2e:4d:38:fa:1c:94:c9:51:f5:6c:35:0e:f0:83:
65:dc:49:80:bf:14:07:20:7a:38:03:cc:98:3a:b9:
37:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AF:C6:A0:F3:01:D3:B3:EF:BD:F7:B2:5C:6E:17:5A:8C:50:3F:3E
X509v3 Authority Key Identifier:
keyid:4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:17:bc:e2:9b:90:9d:9e:15:19:62:2d:83:74:63:3c:81:01:
ab:6e:bb:ea:6a:7f:f3:f6:2f:ca:52:cf:dc:32:25:83:6c:b2:
55:ac:fe:f1:0b:0d:05:09:34:40:2c:7c:d7:e0:89:31:47:67:
55:db:ad:a8:88:7e:9d:c7:8d:f0:85:71:e2:d9:4e:a5:e4:cd:
3f:eb:73:b4:e7:f2:87:01:61:95:38:60:c7:be:dc:37:cc:2b:
46:c8:73:f2:d7:a7:90:b6:19:2c:a0:10:70:7c:ce:e8:19:b2:
8f:7e:c3:b3:95:45:30:3c:39:56:4c:31:48:76:78:2b:fa:5e:
83:71:bb:1d:6f:fc:06:d3:1f:32:b1:d5:32:7e:29:20:19:09:
26:c7:87:7a:41:28:d1:26:4e:5e:bc:0d:71:0c:b9:24:26:00:
7f:ca:e7:2a:9d:db:0c:87:66:04:2b:47:07:e7:c0:92:67:26:
ff:e1:0f:5b:7b:15:56:eb:dd:77:26:84:64:b2:17:e0:f2:ac:
0c:42:69:78:3a:a1:ca:cd:84:a2:e1:43:bb:3e:63:80:d7:d2:
78:1c:31:25:a3:d2:ce:eb:92:fc:68:42:bb:b3:e8:13:74:06:
a5:cb:67:ea:c3:b5:df:b1:09:fd:a4:09:1e:13:5b:44:bc:85:
55:71:03:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8d+qiHt2KUvyfGbIV1eWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZWI5NDU3ZWM1MTllODIzNzg2NzcxMGJjYzgyZmEzMGVh
ZTY3YzAwHhcNMjUwODA1MjMwMTMwWhcNMjUwODA2MjMwMTMwWjAzMTEwLwYDVQQD
EygzMGFmYzZhMGYzMDFkM2IzZWZiZGY3YjI1YzZlMTc1YThjNTAzZjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFQqEMN9GDaeKvq27EtbICBO1OgD
VGYnJU42f1R6ClPk7pFkHYR3aiNMq/OpMRc1Zj41perMyxvvgOnm4lX6zyXiSmZc
90M4eE0oxA1KnhFZ4BoYd4veykGo831RNMr3lpPIugfnTLc5uXWqbyeBnY5mhYJG
72qga1y4yIDOwC++x/MMegY5qWItDQ8rnE7xlWUFGe+wDMnS58yKR8Jg0k0jnfWj
8Y7qnoR+4WFigIkuCMHqBSKSb4B/mz1M2e1IJx3i4pJ1/CRDkLpuiWQCu84IDP2z
t7jaaV+O6X1mtzjoLk04+hyUyVH1bDUO8INl3EmAvxQHIHo4A8yYOrk3CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCvxqDzAdOz7733slxuF1qMUD8+MB8GA1UdIwQY
MBaAFE/rlFfsUZ6CN4Z3ELzIL6MOrmfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVC11VVYteFJub0kzaG5jUXZNZ3ZvdzZ1WjhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9iOGY1MGUtNDc1Zi00YjQ3LTg1YzAt
NWYxMjM1NTVjZmIxLzEvVC11VVYteFJub0kzaG5jUXZNZ3ZvdzZ1WjhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9iOGY1MGUtNDc1Zi00YjQ3LTg1YzAtNWYxMjM1NTVjZmIx
LzEvVC11VVYteFJub0kzaG5jUXZNZ3ZvdzZ1WjhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBe84puQ
nZ4VGWItg3RjPIEBq2676mp/8/YvylLP3DIlg2yyVaz+8QsNBQk0QCx81+CJMUdn
VdutqIh+nceN8IVx4tlOpeTNP+tztOfyhwFhlThgx77cN8wrRshz8tenkLYZLKAQ
cHzO6Bmyj37Ds5VFMDw5VkwxSHZ4K/peg3G7HW/8BtMfMrHVMn4pIBkJJseHekEo
0SZOXrwNcQy5JCYAf8rnKp3bDIdmBCtHB+fAkmcm/+EPW3sVVuvddyaEZLIX4PKs
DEJpeDqhys2EouFDuz5jgNfSeBwxJaPSzuuS/GhCu7PoE3QGpctn6sO137EJ/aQJ
HhNbRLyFVXEDgQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:37:36 2025 by rpki-client