Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
File: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft (raw, json)
Hash identifier: 6n3ltlTk/0fsE06ir5hsoecO4av9Ql42QiQSpjYQSZY=
Subject key identifier: C0:F7:9F:6D:A7:A5:1D:80:56:A9:AC:65:1F:44:36:FD:4F:78:F5:E5
Authority key identifier: B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
Certificate issuer: /CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Certificate serial: 01987AF73DD2D80E3828D65560E14632A946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 16:01:20 +0000
Manifest this update: Tue 05 Aug 2025 16:01:20 +0000
Manifest next update: Wed 06 Aug 2025 16:01:20 +0000
Files and hashes: 1: E5ldtRDNq7PF5yZrAMEvxowWuR0.roa (hash: 4L7DIoeLgHz0Qv5KkaEDn/KJszMLQY8xsxtNREAtJGQ=)
2: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl (hash: McydWj4R1LVCN6W6YqzpZzaWsOaXuXAZOzu5VNb6Ypo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f7:3d:d2:d8:0e:38:28:d6:55:60:e1:46:32:a9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Validity
Not Before: Aug 5 16:01:20 2025 GMT
Not After : Aug 6 16:01:20 2025 GMT
Subject: CN=c0f79f6da7a51d8056a9ac651f4436fd4f78f5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:19:5a:c2:16:8a:74:1f:b9:31:27:8a:32:0f:
eb:6c:66:2d:ce:50:db:04:9f:d5:82:bb:88:2c:b9:
71:0e:ed:08:0a:a2:b2:90:42:98:66:69:f4:06:77:
06:5d:a1:f5:2f:ec:de:70:e1:7b:33:d2:79:10:b7:
16:96:b2:9f:31:27:bb:70:f9:12:ee:55:03:72:0d:
6f:0f:ef:2d:03:f5:23:7e:9f:46:af:9f:22:14:94:
82:ce:3b:65:37:17:39:2a:06:2b:eb:0e:74:7f:b6:
3a:3a:d3:b4:08:51:af:28:f3:c4:5f:41:c1:99:43:
0a:75:ad:89:28:4e:4d:23:06:f6:e1:68:37:48:78:
48:16:50:13:38:4f:7e:9e:3f:00:ca:6a:de:18:66:
42:94:48:32:bf:c0:26:c7:e0:69:84:81:96:11:57:
91:22:d1:28:98:8b:d5:0c:8b:e9:f6:17:bd:51:94:
3a:19:ad:7c:9c:69:a7:57:d5:3e:13:7a:5b:74:bf:
9a:23:f3:d3:32:71:54:ff:89:03:ca:e3:0a:b7:dd:
6a:36:67:d5:5c:66:08:9b:83:4d:5e:cc:a0:5f:bb:
4c:74:a3:49:fd:f7:b5:c2:77:92:17:95:c0:06:6b:
e6:92:3c:c6:de:c0:7b:46:69:a2:b7:51:c6:8e:ac:
83:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F7:9F:6D:A7:A5:1D:80:56:A9:AC:65:1F:44:36:FD:4F:78:F5:E5
X509v3 Authority Key Identifier:
keyid:B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e5:dc:68:2a:7b:52:09:15:b0:8d:f7:1e:14:2b:c3:72:08:
30:1b:5c:de:8b:79:de:5e:c8:f5:b5:ad:50:74:df:53:f2:87:
25:00:f3:a7:d9:da:db:78:e1:e3:89:8c:6f:e2:fb:8d:4e:e3:
11:fd:07:b5:d8:18:9b:f2:d0:ed:05:50:df:88:51:c8:f9:01:
7c:f6:0d:0d:d7:f0:1f:b2:fd:f9:3f:6b:eb:b7:2b:4e:08:85:
c2:66:db:b5:72:b8:9f:f5:7d:04:c0:a0:34:c3:90:38:98:c5:
d9:cf:a7:83:a6:b8:fa:d7:75:20:ac:2a:ad:a9:1f:f3:83:7d:
5f:6b:77:d3:38:e5:f3:7d:3a:17:8f:6a:2a:6c:d7:c9:39:c7:
7e:5a:f0:51:b1:9f:dc:99:0d:66:4b:32:ee:c1:35:45:b2:a5:
8d:2d:9a:30:a8:f9:47:6c:b7:b8:a3:62:81:3f:4e:fb:f8:8f:
91:08:87:c7:51:fd:43:76:ce:18:cb:bb:84:10:ad:02:64:1c:
c8:f2:7f:d4:46:34:31:ca:11:5f:65:30:41:e0:6e:62:e4:06:
87:9f:86:c2:7a:7c:75:c4:2a:35:27:ed:0c:f0:8f:79:d9:72:
50:df:bc:81:1a:c9:8e:ba:74:a7:82:8d:5d:0d:81:02:55:11:
9e:92:18:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh69z3S2A44KNZVYOFGMqlGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzM0MmYxN2Q1NGE4YTNkYTBjZTRkMzE4YjNiNGMzZmEw
NTkzZTQwHhcNMjUwODA1MTYwMTIwWhcNMjUwODA2MTYwMTIwWjAzMTEwLwYDVQQD
EyhjMGY3OWY2ZGE3YTUxZDgwNTZhOWFjNjUxZjQ0MzZmZDRmNzhmNWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hlawhaKdB+5MSeKMg/rbGYtzlDb
BJ/VgruILLlxDu0ICqKykEKYZmn0BncGXaH1L+zecOF7M9J5ELcWlrKfMSe7cPkS
7lUDcg1vD+8tA/Ujfp9Gr58iFJSCzjtlNxc5KgYr6w50f7Y6OtO0CFGvKPPEX0HB
mUMKda2JKE5NIwb24Wg3SHhIFlATOE9+nj8AymreGGZClEgyv8Amx+BphIGWEVeR
ItEomIvVDIvp9he9UZQ6Ga18nGmnV9U+E3pbdL+aI/PTMnFU/4kDyuMKt91qNmfV
XGYIm4NNXsygX7tMdKNJ/fe1wneSF5XABmvmkjzG3sB7Rmmit1HGjqyDgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMD3n22npR2AVqmsZR9ENv1PePXlMB8GA1UdIwQY
MBaAFLQzQvF9VKij2gzk0xiztMP6BZPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEROQzhYMVVxS1BhRE9UVEdMTzB3X29Gay1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNWEyYzAtNWMwOC00OGJkLWE4YzMt
MzY3NGE5MDEwZWZkLzEvdEROQzhYMVVxS1BhRE9UVEdMTzB3X29Gay1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xNWEyYzAtNWMwOC00OGJkLWE4YzMtMzY3NGE5MDEwZWZk
LzEvdEROQzhYMVVxS1BhRE9UVEdMTzB3X29Gay1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOXcaCp7
UgkVsI33HhQrw3IIMBtc3ot53l7I9bWtUHTfU/KHJQDzp9na23jh44mMb+L7jU7j
Ef0HtdgYm/LQ7QVQ34hRyPkBfPYNDdfwH7L9+T9r67crTgiFwmbbtXK4n/V9BMCg
NMOQOJjF2c+ng6a4+td1IKwqrakf84N9X2t30zjl8306F49qKmzXyTnHflrwUbGf
3JkNZksy7sE1RbKljS2aMKj5R2y3uKNigT9O+/iPkQiHx1H9Q3bOGMu7hBCtAmQc
yPJ/1EY0McoRX2UwQeBuYuQGh5+Gwnp8dcQqNSftDPCPedlyUN+8gRrJjrp0p4KN
XQ2BAlURnpIYVQ==
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:04:42 2025 by rpki-client