Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
File: tNftFLjVGiC67HtmDwioDNz4F78.mft (raw, json)
Hash identifier: Trh80Ckba0yy+pTSINHN2HgvsG/GmsYsJKwTBNfeeC4=
Subject key identifier: 90:5F:23:8B:9A:BC:7D:62:FB:E7:9D:28:F6:E7:36:9B:92:61:23:7C
Authority key identifier: B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
Certificate issuer: /CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Certificate serial: 0198733D099B7EED344F3229528FD00FDA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
Manifest number: 1577
Signing time: Mon 04 Aug 2025 04:00:36 +0000
Manifest this update: Mon 04 Aug 2025 04:00:36 +0000
Manifest next update: Tue 05 Aug 2025 04:00:36 +0000
Files and hashes: 1: VhTYh9Iw5PVI--2GM6MQuLQlHfw.roa (hash: 4Hkp0WmvBYBS95p1FHn/M3/EZ2GIH50SPjU4ACziYZE=)
2: YVY9twtvMqgJ8wFpvv3lKZVmEkQ.roa (hash: 17qlPl9D+uyL5rzeTz5pj3TELME7ziHzDZ+/fRR9Vec=)
3: tNftFLjVGiC67HtmDwioDNz4F78.crl (hash: 0iNPEyorb6q16/emwP0c3VzDkaJq7htTWvARu5dVKag=)
4: y_HvmHHGVlKjcbTPtfwbbemE9ts.roa (hash: 8SIoZagJaVQOy82S0A9ugj7Iv6sEqZZHPMha1KNQ3uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:09:9b:7e:ed:34:4f:32:29:52:8f:d0:0f:da:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Validity
Not Before: Aug 4 04:00:36 2025 GMT
Not After : Aug 5 04:00:36 2025 GMT
Subject: CN=905f238b9abc7d62fbe79d28f6e7369b9261237c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:22:e8:a9:90:cc:b0:76:fb:14:54:c6:78:ea:
24:aa:7a:dd:22:06:db:f9:18:bd:84:87:9b:ca:cd:
d7:2f:2a:a2:0b:17:2c:d6:9f:53:79:db:b2:49:5f:
6a:8f:d9:c4:25:01:ae:f4:1d:00:95:7b:e3:a8:24:
09:8a:a6:f6:7c:d8:65:03:5c:21:27:27:12:61:49:
fd:77:c9:69:f1:21:44:bd:e9:55:bd:56:f1:84:1f:
17:29:d6:ff:43:f5:c5:00:21:a4:69:ca:0c:88:7e:
2d:d9:54:03:1e:32:01:03:fb:10:cf:2f:ec:1b:73:
bc:0a:fe:d3:18:6c:43:24:f7:d5:40:fb:c1:5e:cc:
be:0a:fd:59:4d:ed:d2:29:dd:23:b0:ee:4c:2e:58:
85:ac:19:f9:d3:ee:2e:46:bf:22:f9:36:e9:66:5d:
37:90:c7:a7:bf:14:2d:68:c5:9c:07:d7:54:34:1e:
9c:9a:62:9b:d7:e7:58:b4:e2:75:0e:48:10:ce:6f:
5b:98:b4:b8:ee:86:de:b2:7a:36:fa:fd:b6:e7:ee:
7f:b9:39:8b:b9:64:1f:f5:d3:b5:bb:f6:cd:02:5c:
a8:85:8b:7e:dd:0a:d8:d4:86:6f:0b:48:fc:7f:52:
43:69:af:b4:66:dd:4d:a1:52:f1:2c:78:21:cb:17:
e9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5F:23:8B:9A:BC:7D:62:FB:E7:9D:28:F6:E7:36:9B:92:61:23:7C
X509v3 Authority Key Identifier:
keyid:B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b8:f9:4b:5b:bc:c0:f9:41:0e:04:81:eb:7d:fd:3d:e1:9c:
4c:76:1b:c1:17:d0:c8:2b:27:fc:98:a2:14:24:93:95:b5:a2:
f2:4b:ae:5d:dc:e1:db:8c:3a:3e:8c:09:3c:00:c8:eb:7c:84:
eb:e6:71:94:86:56:68:d3:a1:0a:99:bc:92:40:f2:72:5b:71:
83:95:ba:34:1b:a5:1a:15:15:21:95:fc:4f:06:0d:32:e3:0f:
9c:8b:38:40:48:b9:ec:fd:e9:56:49:14:1b:a6:40:1b:ae:03:
7c:5d:03:77:9f:6a:9f:23:94:2a:d3:71:11:97:94:75:90:b2:
f2:54:7b:53:e9:bd:d8:e4:91:2a:cd:75:e5:04:76:43:5d:b4:
cb:f4:2a:ef:e5:1c:98:4c:ec:1d:20:0a:3f:2c:2f:fb:a6:af:
e5:44:6a:a9:de:e0:2b:be:14:e7:22:70:c6:72:92:4e:d7:9f:
23:1f:64:8c:d0:b2:8a:0c:0d:57:0f:e5:49:a6:d4:d2:7b:90:
ee:ca:f8:e5:fc:60:c3:b1:29:b5:1a:c4:0d:52:2a:d3:d7:a3:
80:99:51:ea:70:82:ac:6a:00:1f:20:8c:a5:31:60:f8:92:4c:
f2:88:96:6b:d2:3e:d7:2b:45:e2:48:2a:f1:f2:f9:64:38:9a:
24:79:b2:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPQmbfu00TzIpUo/QD9qdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZDdlZDE0YjhkNTFhMjBiYWVjN2I2NjBmMDhhODBjZGNm
ODE3YmYwHhcNMjUwODA0MDQwMDM2WhcNMjUwODA1MDQwMDM2WjAzMTEwLwYDVQQD
Eyg5MDVmMjM4YjlhYmM3ZDYyZmJlNzlkMjhmNmU3MzY5YjkyNjEyMzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyLoqZDMsHb7FFTGeOokqnrdIgbb
+Ri9hIebys3XLyqiCxcs1p9TeduySV9qj9nEJQGu9B0AlXvjqCQJiqb2fNhlA1wh
JycSYUn9d8lp8SFEvelVvVbxhB8XKdb/Q/XFACGkacoMiH4t2VQDHjIBA/sQzy/s
G3O8Cv7TGGxDJPfVQPvBXsy+Cv1ZTe3SKd0jsO5MLliFrBn50+4uRr8i+TbpZl03
kMenvxQtaMWcB9dUNB6cmmKb1+dYtOJ1DkgQzm9bmLS47obesno2+v225+5/uTmL
uWQf9dO1u/bNAlyohYt+3QrY1IZvC0j8f1JDaa+0Zt1NoVLxLHghyxfp3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBfI4uavH1i++edKPbnNpuSYSN8MB8GA1UdIwQY
MBaAFLTX7RS41Roguux7Zg8IqAzc+Be/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE5mdEZMalZHaUM2N0h0bUR3aW9ETno0Rjc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8xMzJiYTgtNzY3Ni00OWY2LWFmY2Mt
N2QwNDIzYmRhNzRjLzEvdE5mdEZMalZHaUM2N0h0bUR3aW9ETno0Rjc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8xMzJiYTgtNzY3Ni00OWY2LWFmY2MtN2QwNDIzYmRhNzRj
LzEvdE5mdEZMalZHaUM2N0h0bUR3aW9ETno0Rjc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7j5S1u8
wPlBDgSB6339PeGcTHYbwRfQyCsn/JiiFCSTlbWi8kuuXdzh24w6PowJPADI63yE
6+ZxlIZWaNOhCpm8kkDycltxg5W6NBulGhUVIZX8TwYNMuMPnIs4QEi57P3pVkkU
G6ZAG64DfF0Dd59qnyOUKtNxEZeUdZCy8lR7U+m92OSRKs115QR2Q120y/Qq7+Uc
mEzsHSAKPywv+6av5URqqd7gK74U5yJwxnKSTtefIx9kjNCyigwNVw/lSabU0nuQ
7sr45fxgw7EptRrEDVIq09ejgJlR6nCCrGoAHyCMpTFg+JJM8oiWa9I+1ytF4kgq
8fL5ZDiaJHmyYw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:20 2025 by rpki-client