Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
File: tMflb0aH6hstd2PQiI0QUCNbV0s.mft (raw, json)
Hash identifier: XTwO8x/3zdE/BL8dGpe/PbmOO8/X5ezQ0ZCVJuizh8Q=
Subject key identifier: 92:42:1E:33:35:7B:4D:DF:11:82:14:B3:5F:6B:DB:4D:D5:8F:07:42
Authority key identifier: B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
Certificate issuer: /CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Certificate serial: 019873745A17F3F1208D91B929E95F515881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
Manifest number: 15A8
Signing time: Mon 04 Aug 2025 05:01:01 +0000
Manifest this update: Mon 04 Aug 2025 05:01:01 +0000
Manifest next update: Tue 05 Aug 2025 05:01:01 +0000
Files and hashes: 1: fVF1mzV7lYVHRMo8LnZ24vMBIsw.roa (hash: xj9vjyKVHbKjwLJzRwcUb2ujBs2KI8YOtyKmg5bMiko=)
2: tMflb0aH6hstd2PQiI0QUCNbV0s.crl (hash: FadlkQNsDjymMGzqs1ddykUcBIf8kr/SmNpx+ZBO6Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:5a:17:f3:f1:20:8d:91:b9:29:e9:5f:51:58:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Validity
Not Before: Aug 4 05:01:01 2025 GMT
Not After : Aug 5 05:01:01 2025 GMT
Subject: CN=92421e33357b4ddf118214b35f6bdb4dd58f0742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:63:dd:fa:94:e1:6b:40:94:a0:3d:56:fd:0c:
0e:d8:5c:f6:3f:22:2a:95:d0:c0:02:a2:63:a6:92:
d2:b6:7e:67:b6:fd:64:e6:6b:e9:c1:b3:2b:ec:ad:
10:8e:fa:94:1b:19:74:65:9f:10:e0:cb:60:23:09:
3e:40:ba:a3:dd:38:29:da:cd:7a:54:9c:13:44:d1:
e2:51:88:97:02:32:2a:fa:97:bc:27:7a:30:ab:d9:
a8:e3:f5:cd:bb:30:c3:d2:52:9f:f5:03:ef:07:37:
09:75:4c:3c:9d:51:2c:d2:22:54:95:00:42:82:15:
e4:4e:e4:d4:91:3b:10:97:a0:41:85:61:e5:4c:e6:
ff:7e:b1:6c:be:44:54:8e:01:1e:ed:9e:2b:ec:48:
cc:26:e1:56:9d:0e:c8:7a:7b:62:f2:cd:55:88:3e:
e2:9e:3f:b6:93:91:64:4c:fe:28:25:4d:4d:87:d1:
98:ac:1c:89:25:0e:0b:2f:13:aa:48:17:66:ba:9b:
b6:69:8d:77:4e:65:eb:67:11:a0:53:47:6c:d7:77:
d7:0b:0b:79:dd:bc:29:d4:98:ae:f8:e9:b2:ab:e1:
35:a7:89:0d:16:86:d1:13:87:aa:4d:b4:19:83:eb:
1e:34:ed:b2:97:3b:a6:b4:0b:e0:06:4e:8b:b4:93:
fa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:42:1E:33:35:7B:4D:DF:11:82:14:B3:5F:6B:DB:4D:D5:8F:07:42
X509v3 Authority Key Identifier:
keyid:B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a6:41:0b:a0:c4:a8:1e:8e:9b:8e:cd:39:32:a8:83:f8:04:
8a:61:32:56:27:ee:dd:b4:c4:63:a8:b9:d2:89:a0:ed:40:77:
4e:ef:cf:c8:4b:fc:c5:e3:e4:40:d5:2e:38:44:03:91:62:69:
1b:08:78:f7:03:4a:e9:61:9a:6a:51:1c:c6:f7:0a:8a:17:49:
6a:11:46:f7:2c:9d:1a:c8:ab:16:6d:f3:18:5e:7f:f5:e3:25:
6b:56:2b:44:66:c1:7c:ba:9d:e2:3a:fa:b1:45:34:8c:1a:bb:
09:26:31:e7:11:0f:21:89:04:30:83:b4:be:3a:0b:f5:97:03:
8d:24:4d:dd:09:e3:91:af:b4:51:0b:f3:c2:f7:95:36:dc:92:
8b:29:d5:82:c8:81:e0:59:1e:00:ae:85:51:72:44:2e:50:5a:
c2:02:0a:1b:b9:71:3c:b1:1c:94:80:2f:ee:9c:21:60:73:92:
57:de:06:88:6a:cf:da:b6:25:01:d8:f4:92:86:7b:2c:d9:88:
51:99:6e:15:ec:bd:a8:c6:2d:39:57:55:23:f7:45:40:35:71:
99:d5:a3:bc:58:c4:73:67:95:d9:3d:a2:96:0c:e3:10:40:82:
0c:20:7c:25:ae:08:17:b9:63:59:aa:ee:b7:8c:21:42:85:84:
2c:d0:70:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdFoX8/EgjZG5KelfUViBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YzdlNTZmNDY4N2VhMWIyZDc3NjNkMDg4OGQxMDUwMjM1
YjU3NGIwHhcNMjUwODA0MDUwMTAxWhcNMjUwODA1MDUwMTAxWjAzMTEwLwYDVQQD
Eyg5MjQyMWUzMzM1N2I0ZGRmMTE4MjE0YjM1ZjZiZGI0ZGQ1OGYwNzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGPd+pTha0CUoD1W/QwO2Fz2PyIq
ldDAAqJjppLStn5ntv1k5mvpwbMr7K0QjvqUGxl0ZZ8Q4MtgIwk+QLqj3Tgp2s16
VJwTRNHiUYiXAjIq+pe8J3owq9mo4/XNuzDD0lKf9QPvBzcJdUw8nVEs0iJUlQBC
ghXkTuTUkTsQl6BBhWHlTOb/frFsvkRUjgEe7Z4r7EjMJuFWnQ7Ienti8s1ViD7i
nj+2k5FkTP4oJU1Nh9GYrByJJQ4LLxOqSBdmupu2aY13TmXrZxGgU0ds13fXCwt5
3bwp1Jiu+Omyq+E1p4kNFobRE4eqTbQZg+seNO2ylzumtAvgBk6LtJP6sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJCHjM1e03fEYIUs19r203VjwdCMB8GA1UdIwQY
MBaAFLTH5W9Gh+obLXdj0IiNEFAjW1dLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE1mbGIwYUg2aHN0ZDJQUWlJMFFVQ05iVjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84NTE5MDItNTA1MC00NmIyLWI0NTIt
MDU5OWYwYjJiMDlhLzEvdE1mbGIwYUg2aHN0ZDJQUWlJMFFVQ05iVjBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84NTE5MDItNTA1MC00NmIyLWI0NTItMDU5OWYwYjJiMDlh
LzEvdE1mbGIwYUg2aHN0ZDJQUWlJMFFVQ05iVjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKZBC6DE
qB6Om47NOTKog/gEimEyVifu3bTEY6i50omg7UB3Tu/PyEv8xePkQNUuOEQDkWJp
Gwh49wNK6WGaalEcxvcKihdJahFG9yydGsirFm3zGF5/9eMla1YrRGbBfLqd4jr6
sUU0jBq7CSYx5xEPIYkEMIO0vjoL9ZcDjSRN3Qnjka+0UQvzwveVNtySiynVgsiB
4FkeAK6FUXJELlBawgIKG7lxPLEclIAv7pwhYHOSV94GiGrP2rYlAdj0koZ7LNmI
UZluFey9qMYtOVdVI/dFQDVxmdWjvFjEc2eV2T2ilgzjEECCDCB8Ja4IF7ljWaru
t4whQoWELNBwYA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:49 2025 by rpki-client