Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier: 7Enm5IeHq8X7fwDbnqEtHuBr/wONGAULHuYoFBSBtAk=
Subject key identifier: 63:8D:BE:48:0F:03:C5:86:D6:1D:CF:50:37:D2:97:F9:2C:EB:83:D7
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 019890DB22FC81273B08CA1502FD1085B3AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number: 1629
Signing time: Sat 09 Aug 2025 22:02:16 +0000
Manifest this update: Sat 09 Aug 2025 22:02:16 +0000
Manifest next update: Sun 10 Aug 2025 22:02:16 +0000
Files and hashes: 1: 0WgKhjREJrZPp5eivCc5Ledwy08.roa (hash: g1cMz695Vu5b1v4C7JspTc1yMqOrx6XRuND1g3o80ZU=)
2: c4XFDsuP3oiOPuoN5dW6Mp7swps.roa (hash: RShjOJ6yyL7rh4X46zYbqRc79tC1/dWZp0uZXHk88jM=)
3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: oiJ9pHSq7l2w+RAFbpks/S5KNqGTTbpKcA0hN4ndjV8=)
4: x8qy1V86ggKXIYJ47lPp7-bEQ08.roa (hash: Tid2ObTc99hFnnGIy0KhVlQV4ZEsaX9AQcsvz/R/sw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:db:22:fc:81:27:3b:08:ca:15:02:fd:10:85:b3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Aug 9 22:02:16 2025 GMT
Not After : Aug 10 22:02:16 2025 GMT
Subject: CN=638dbe480f03c586d61dcf5037d297f92ceb83d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:df:c0:31:db:9b:de:03:3f:83:d6:3a:45:06:
0c:a2:68:d4:57:9f:6e:28:8a:2c:30:7b:bf:86:4f:
b2:93:52:91:54:e7:a1:0b:a4:3e:a5:cc:64:f2:13:
e7:a4:ba:77:19:d8:b5:e9:7f:e3:28:44:8a:0e:90:
79:c6:ae:a0:d9:3c:1e:d5:1d:09:e3:f4:fa:0c:e3:
93:82:66:22:20:bc:dd:73:19:20:b2:d6:f0:7e:58:
6d:7f:98:8b:81:28:f6:80:63:67:ec:4b:18:04:e9:
b3:7d:cb:23:e4:53:15:a6:fa:08:9a:f5:95:a9:ac:
b2:c2:62:48:67:56:89:c5:97:98:22:fe:d5:e6:08:
20:a1:93:be:c9:01:72:6b:87:e6:44:0c:db:f3:fa:
1d:af:b3:c6:51:86:25:8c:33:90:1b:92:66:0f:23:
f7:c4:85:88:57:e5:88:40:0f:7f:b2:cb:84:db:04:
b1:7f:f5:a4:92:60:03:fe:cd:d4:4b:23:9f:33:ea:
a2:f1:8c:12:ac:88:e5:7e:3f:0e:ae:eb:e4:cc:47:
44:f6:77:d5:33:f2:3f:3c:64:9b:b3:76:fd:2b:c1:
d0:3d:d2:72:a3:36:af:64:1a:f8:a8:1d:48:cf:58:
98:cd:b6:b4:d8:d0:57:c1:59:2c:ae:cf:f1:88:92:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8D:BE:48:0F:03:C5:86:D6:1D:CF:50:37:D2:97:F9:2C:EB:83:D7
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:59:55:56:8e:b9:6d:cc:85:66:88:20:7f:ab:fd:9a:ce:8e:
07:a3:26:9d:5c:46:d4:b1:2f:8e:94:99:3a:4b:8d:7a:29:11:
9f:52:56:94:9f:50:f2:ac:68:5c:f0:14:a2:0b:0a:e1:83:da:
a7:ae:07:ef:28:0a:e3:59:6b:33:de:d4:23:12:41:8b:e6:94:
81:b9:ec:f2:56:75:12:94:df:91:c4:6a:91:bc:fb:d3:ab:df:
e8:52:da:e2:ef:01:45:cb:0a:8b:4c:ad:1d:9d:27:84:cd:21:
c1:ec:a9:88:78:24:77:b4:4f:37:af:31:40:7b:f9:00:ae:4e:
0d:ee:c8:00:f8:ed:f4:92:77:a9:96:58:d5:68:b7:c7:48:3a:
2a:e1:5f:41:de:9f:8b:ed:28:f3:e1:ce:ac:f1:29:c1:64:a7:
02:17:77:06:d2:56:e0:32:59:04:01:20:60:22:4c:c6:69:01:
7a:10:ba:56:c9:4e:50:7d:13:de:3b:5c:07:e8:80:80:e9:cc:
c7:ab:5f:47:47:68:3d:fa:0a:61:b7:c9:75:fb:9b:2f:e7:fe:
ba:09:f9:64:6b:9e:b7:46:a3:25:34:04:5c:ef:f0:50:55:20:
0c:e5:b7:80:28:ba:0f:86:69:b1:93:3d:88:c0:46:6e:9d:97:
37:89:e2:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQ2yL8gSc7CMoVAv0QhbOrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZWM2YzBhNWViZWM1ODE3ZDkxYjkxZTc5YTZiYzYxMzJl
YjlkMmMwHhcNMjUwODA5MjIwMjE2WhcNMjUwODEwMjIwMjE2WjAzMTEwLwYDVQQD
Eyg2MzhkYmU0ODBmMDNjNTg2ZDYxZGNmNTAzN2QyOTdmOTJjZWI4M2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN/AMdub3gM/g9Y6RQYMomjUV59u
KIosMHu/hk+yk1KRVOehC6Q+pcxk8hPnpLp3Gdi16X/jKESKDpB5xq6g2Twe1R0J
4/T6DOOTgmYiILzdcxkgstbwflhtf5iLgSj2gGNn7EsYBOmzfcsj5FMVpvoImvWV
qayywmJIZ1aJxZeYIv7V5gggoZO+yQFya4fmRAzb8/odr7PGUYYljDOQG5JmDyP3
xIWIV+WIQA9/ssuE2wSxf/WkkmAD/s3USyOfM+qi8YwSrIjlfj8OruvkzEdE9nfV
M/I/PGSbs3b9K8HQPdJyozavZBr4qB1Iz1iYzba02NBXwVksrs/xiJKVywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGONvkgPA8WG1h3PUDfSl/ks64PXMB8GA1UdIwQY
MBaAFLTsbApevsWBfZG5HnmmvGEy650sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWIt
MTNmYjdhNTEzMGNhLzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWItMTNmYjdhNTEzMGNh
LzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnllVVo65
bcyFZoggf6v9ms6OB6MmnVxG1LEvjpSZOkuNeikRn1JWlJ9Q8qxoXPAUogsK4YPa
p64H7ygK41lrM97UIxJBi+aUgbns8lZ1EpTfkcRqkbz706vf6FLa4u8BRcsKi0yt
HZ0nhM0hweypiHgkd7RPN68xQHv5AK5ODe7IAPjt9JJ3qZZY1Wi3x0g6KuFfQd6f
i+0o8+HOrPEpwWSnAhd3BtJW4DJZBAEgYCJMxmkBehC6VslOUH0T3jtcB+iAgOnM
x6tfR0doPfoKYbfJdfubL+f+ugn5ZGuet0ajJTQEXO/wUFUgDOW3gCi6D4ZpsZM9
iMBGbp2XN4ni2g==
-----END CERTIFICATE-----
Generated at Sun Aug 10 03:56:02 2025 by rpki-client