Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
File: tu1iBVpRkcAuxREulRgaiawGDOs.mft (raw, json)
Hash identifier: +S282fHkAOYFjEVRdE2jX2m6616j9UflrjmhuQ7F8/c=
Subject key identifier: 7C:BC:F3:2E:E6:FA:63:44:6A:23:0E:72:E5:8A:C9:90:84:83:84:81
Authority key identifier: B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB
Certificate issuer: /CN=b6ed62055a5191c02ec5112e95181a89ac060ceb
Certificate serial: 01987DC125546D1F71DE9CD9F2880518620F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
Manifest number: 0B76
Signing time: Wed 06 Aug 2025 05:01:06 +0000
Manifest this update: Wed 06 Aug 2025 05:01:06 +0000
Manifest next update: Thu 07 Aug 2025 05:01:06 +0000
Files and hashes: 1: iOo8WZeBs16BOwEjC7IsPMOtPO0.roa (hash: FC5R1Hrtvnbfsyec/XOyQavDbuFW5mY0wSOTHI+QutE=)
2: tu1iBVpRkcAuxREulRgaiawGDOs.crl (hash: P7XdK+Yo/ADztK/BVyYjE6X1PTKMUZQ1028REG8ytbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:25:54:6d:1f:71:de:9c:d9:f2:88:05:18:62:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed62055a5191c02ec5112e95181a89ac060ceb
Validity
Not Before: Aug 6 05:01:06 2025 GMT
Not After : Aug 7 05:01:06 2025 GMT
Subject: CN=7cbcf32ee6fa63446a230e72e58ac99084838481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:77:6c:e6:c0:f7:64:65:5d:23:77:4f:a2:a7:
19:19:25:7d:73:07:27:b0:3c:d7:ba:f8:4f:f4:a4:
ee:a2:ec:ab:dc:45:e5:85:3d:02:6c:bb:44:11:1b:
5d:da:60:41:23:da:72:2a:28:53:e6:70:8b:46:14:
90:e5:e8:29:02:ea:c4:f8:6f:a9:f5:c1:ff:05:ed:
47:3b:52:99:f7:06:0a:78:2a:88:c6:52:eb:2f:55:
6f:56:c4:5a:a2:17:62:d8:a2:8a:0f:87:8b:32:c9:
2c:48:75:8c:4a:a8:2d:cc:d2:13:5a:c7:e4:5a:ec:
d0:73:74:99:be:f5:76:c1:23:f6:3e:cc:11:0e:c7:
4e:80:40:05:76:7a:54:95:2d:e2:8c:28:72:fb:25:
84:ab:4e:2b:8c:d2:1f:0c:ce:91:70:68:7d:bb:96:
3b:48:42:35:c5:11:71:6b:4f:92:72:44:7f:bc:1c:
64:9b:c7:bf:f9:f2:83:d1:93:93:26:7c:d6:2e:98:
d2:1b:9a:cf:be:23:97:40:0e:66:d5:4a:51:12:68:
19:51:96:32:41:ea:ae:6c:e6:99:86:f2:75:26:d4:
86:e8:c4:a8:20:04:8d:34:4c:2a:dd:22:e6:93:99:
15:e0:df:14:d7:94:95:a0:ab:e8:1c:52:23:71:1c:
b0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BC:F3:2E:E6:FA:63:44:6A:23:0E:72:E5:8A:C9:90:84:83:84:81
X509v3 Authority Key Identifier:
keyid:B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c7:e0:17:91:70:55:f8:9b:cf:0d:9a:e9:16:70:b8:71:4e:
81:af:5b:ac:8a:1a:e6:2a:72:e4:83:0e:6c:26:68:93:97:1c:
2c:f0:40:ca:5b:89:84:65:99:f9:5d:c4:e2:b2:4b:f5:68:d6:
66:d9:b8:23:4f:fb:ca:47:c1:c4:82:89:ae:99:ed:ca:a5:01:
69:b0:71:58:b6:be:a7:f8:2d:a0:16:93:15:41:20:a0:c7:c0:
60:96:ca:43:31:1a:f3:5f:36:1d:c4:67:b3:58:67:14:19:c2:
77:a2:4a:84:38:d3:9a:f3:bc:10:10:75:e4:68:4c:17:69:bd:
c9:86:ce:bd:b6:11:f4:07:34:eb:14:bf:b4:96:ee:12:45:1a:
ed:6a:ff:4b:4f:9e:d2:42:ed:23:37:8e:fb:49:78:a0:85:b5:
e4:c4:2d:d9:de:58:f9:b0:f0:59:24:bc:99:36:7c:de:5c:f7:
92:d9:56:0c:13:e4:61:81:09:ad:f7:a8:80:2c:89:82:4c:69:
be:e4:e2:5b:94:a6:bd:01:50:d2:62:f1:4e:bd:c2:51:03:fe:
81:71:8f:dc:71:f0:ba:5a:95:47:42:43:7b:35:80:6e:d5:84:
4d:5d:48:22:cc:82:a6:53:35:60:48:40:9a:b5:50:6f:f5:37:
23:2d:03:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9wSVUbR9x3pzZ8ogFGGIPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZWQ2MjA1NWE1MTkxYzAyZWM1MTEyZTk1MTgxYTg5YWMw
NjBjZWIwHhcNMjUwODA2MDUwMTA2WhcNMjUwODA3MDUwMTA2WjAzMTEwLwYDVQQD
Eyg3Y2JjZjMyZWU2ZmE2MzQ0NmEyMzBlNzJlNThhYzk5MDg0ODM4NDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3ds5sD3ZGVdI3dPoqcZGSV9cwcn
sDzXuvhP9KTuouyr3EXlhT0CbLtEERtd2mBBI9pyKihT5nCLRhSQ5egpAurE+G+p
9cH/Be1HO1KZ9wYKeCqIxlLrL1VvVsRaohdi2KKKD4eLMsksSHWMSqgtzNITWsfk
WuzQc3SZvvV2wSP2PswRDsdOgEAFdnpUlS3ijChy+yWEq04rjNIfDM6RcGh9u5Y7
SEI1xRFxa0+SckR/vBxkm8e/+fKD0ZOTJnzWLpjSG5rPviOXQA5m1UpREmgZUZYy
QequbOaZhvJ1JtSG6MSoIASNNEwq3SLmk5kV4N8U15SVoKvoHFIjcRywQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHy88y7m+mNEaiMOcuWKyZCEg4SBMB8GA1UdIwQY
MBaAFLbtYgVaUZHALsURLpUYGomsBgzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHUxaUJWcFJrY0F1eFJFdWxSZ2FpYXdHRE9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kYzEzYzEtZGU1Ni00NDlmLTljMjkt
YzgxMjY2YjdjNDllLzEvdHUxaUJWcFJrY0F1eFJFdWxSZ2FpYXdHRE9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9kYzEzYzEtZGU1Ni00NDlmLTljMjktYzgxMjY2YjdjNDll
LzEvdHUxaUJWcFJrY0F1eFJFdWxSZ2FpYXdHRE9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMfgF5Fw
Vfibzw2a6RZwuHFOga9brIoa5ipy5IMObCZok5ccLPBAyluJhGWZ+V3E4rJL9WjW
Ztm4I0/7ykfBxIKJrpntyqUBabBxWLa+p/gtoBaTFUEgoMfAYJbKQzEa8182HcRn
s1hnFBnCd6JKhDjTmvO8EBB15GhMF2m9yYbOvbYR9Ac06xS/tJbuEkUa7Wr/S0+e
0kLtIzeO+0l4oIW15MQt2d5Y+bDwWSS8mTZ83lz3ktlWDBPkYYEJrfeogCyJgkxp
vuTiW5SmvQFQ0mLxTr3CUQP+gXGP3HHwulqVR0JDezWAbtWETV1IIsyCplM1YEhA
mrVQb/U3Iy0DIQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:12:43 2025 by rpki-client