Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
File: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft (raw, json)
Hash identifier: VP/uZZMNWSDRIGAvXS+K8g242lwNZ8pP4YljcoC5C98=
Subject key identifier: E4:1A:3D:FC:3B:62:00:54:CC:45:21:68:C3:69:41:4A:7B:4C:EC:F0
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Certificate issuer: /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial: 01988CFD322DA0B1DACE895C0996FDA8A2FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
Manifest number: 06FB
Signing time: Sat 09 Aug 2025 04:01:00 +0000
Manifest this update: Sat 09 Aug 2025 04:01:00 +0000
Manifest next update: Sun 10 Aug 2025 04:01:00 +0000
Files and hashes: 1: G4FFwIyiIU29W95QZk9-MWiLljM.roa (hash: iDaSzS67wgh1om9NMNs4mTJZEfMH7AGf6ifeuTsPDRg=)
2: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl (hash: 3pW70ehtbSh4chtZDeSMPb8kiDGXxeXAlWK9aDHHXRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:32:2d:a0:b1:da:ce:89:5c:09:96:fd:a8:a2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Validity
Not Before: Aug 9 04:01:00 2025 GMT
Not After : Aug 10 04:01:00 2025 GMT
Subject: CN=e41a3dfc3b620054cc452168c369414a7b4cecf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:33:a1:03:85:ba:7f:77:cc:98:4a:01:63:
3c:a1:0b:c7:72:e8:82:76:51:53:d1:30:06:55:fb:
e8:5d:73:41:53:90:1e:c7:e9:cc:de:5e:d3:da:b9:
74:a3:1e:7c:2e:9b:39:db:b1:eb:99:23:46:fb:78:
b1:9a:28:e2:f1:e8:44:63:fc:2e:c2:b0:f9:ea:d5:
76:f4:b9:61:fe:c2:39:b9:aa:6d:10:d1:4e:cf:1d:
31:61:dc:d3:42:e9:45:10:96:39:a1:f3:53:52:d0:
f4:f7:45:f9:db:fb:01:36:5a:25:18:a2:e0:f9:1f:
76:22:24:71:81:66:f4:1e:19:c6:55:74:3b:34:8f:
4a:c9:88:03:23:7f:13:2e:cf:30:39:7d:27:7e:5a:
57:9a:b3:4b:c9:d9:d1:75:58:9e:4c:df:c4:27:e7:
1e:d8:89:7f:9a:41:46:dc:a4:55:5b:e9:3d:b6:34:
34:fb:fa:a4:61:59:cc:a7:66:4b:2f:44:e4:63:ab:
f5:ce:77:de:9b:87:70:0b:50:bb:51:71:28:8c:c0:
c5:d2:3c:60:5d:88:42:be:8b:2d:19:81:c6:a4:91:
7d:bc:93:eb:21:03:83:5c:c7:53:f1:f3:26:cf:7a:
b9:a7:be:ed:0b:64:17:f7:60:8b:43:d4:8a:81:60:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1A:3D:FC:3B:62:00:54:CC:45:21:68:C3:69:41:4A:7B:4C:EC:F0
X509v3 Authority Key Identifier:
keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:bf:8b:fb:2b:32:d0:71:ab:97:68:62:0d:c5:16:c7:75:76:
b0:d0:30:94:41:65:47:44:81:aa:48:04:10:17:65:af:f4:bf:
59:88:b5:d7:d6:59:bc:4c:a2:69:91:df:53:68:78:99:93:e3:
a6:a8:70:29:28:60:f7:71:be:97:89:64:d5:aa:9a:5e:d5:ca:
b4:a4:7b:f1:02:e9:68:41:3d:e5:b0:52:89:de:fe:6d:b4:d0:
15:b8:d3:da:b5:b5:68:65:12:5a:c3:2d:5e:1b:af:26:0d:55:
14:9a:50:9a:9f:91:57:6c:8f:53:f0:74:97:c9:11:f5:78:69:
d9:81:bc:f0:4f:e9:5a:6c:2c:c4:1d:6a:bb:d3:5d:45:e7:b8:
ad:ab:45:e7:4f:8f:aa:f4:30:91:2f:22:77:c8:d7:14:a1:4f:
a8:ea:5c:37:4e:97:11:d1:62:c3:9d:ff:9e:41:ae:c0:1f:8b:
83:90:ea:04:33:00:ff:ed:aa:58:34:d2:32:f0:9d:13:60:83:
05:dd:2f:d7:04:8f:c3:b0:d9:80:fd:6d:d6:06:fc:d2:ea:e0:
05:86:b8:6b:b4:97:3b:53:e9:7d:28:d5:f7:ab:74:0d:8c:88:
fb:cf:9a:89:0f:54:6b:2c:c1:de:79:a8:90:e5:e6:6e:fe:e5:
f3:20:9b:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiM/TItoLHazolcCZb9qKL+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTNhMmIzZmI4M2Q4NmM3ODA2Y2MwNjYwZDgyOTExOWQ5
Mzc1YjQwHhcNMjUwODA5MDQwMTAwWhcNMjUwODEwMDQwMTAwWjAzMTEwLwYDVQQD
EyhlNDFhM2RmYzNiNjIwMDU0Y2M0NTIxNjhjMzY5NDE0YTdiNGNlY2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD8zoQOFun93zJhKAWM8oQvHcuiC
dlFT0TAGVfvoXXNBU5Aex+nM3l7T2rl0ox58Lps527HrmSNG+3ixmiji8ehEY/wu
wrD56tV29Llh/sI5uaptENFOzx0xYdzTQulFEJY5ofNTUtD090X52/sBNlolGKLg
+R92IiRxgWb0HhnGVXQ7NI9KyYgDI38TLs8wOX0nflpXmrNLydnRdVieTN/EJ+ce
2Il/mkFG3KRVW+k9tjQ0+/qkYVnMp2ZLL0TkY6v1znfem4dwC1C7UXEojMDF0jxg
XYhCvostGYHGpJF9vJPrIQODXMdT8fMmz3q5p77tC2QX92CLQ9SKgWBcBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQaPfw7YgBUzEUhaMNpQUp7TOzwMB8GA1UdIwQY
MBaAFLRTorP7g9hseAbMBmDYKRGdk3W0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9iZjc0OGQtYzRjYS00ZmQxLWE1OWQt
NDA2MGYyMTFmM2MzLzEvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9iZjc0OGQtYzRjYS00ZmQxLWE1OWQtNDA2MGYyMTFmM2Mz
LzEvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA07+L+ysy
0HGrl2hiDcUWx3V2sNAwlEFlR0SBqkgEEBdlr/S/WYi119ZZvEyiaZHfU2h4mZPj
pqhwKShg93G+l4lk1aqaXtXKtKR78QLpaEE95bBSid7+bbTQFbjT2rW1aGUSWsMt
XhuvJg1VFJpQmp+RV2yPU/B0l8kR9Xhp2YG88E/pWmwsxB1qu9NdRee4ratF50+P
qvQwkS8id8jXFKFPqOpcN06XEdFiw53/nkGuwB+Lg5DqBDMA/+2qWDTSMvCdE2CD
Bd0v1wSPw7DZgP1t1gb80urgBYa4a7SXO1PpfSjV96t0DYyI+8+aiQ9UayzB3nmo
kOXmbv7l8yCbVw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:35 2025 by rpki-client