Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: qSjajk+90CM5CMib0t4ElO4f7WY8pot+BqfbGD7/LOY=
Subject key identifier: 5D:18:AF:A6:37:E8:9E:56:11:A3:70:7B:13:30:F3:6E:9C:AF:7B:30
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 019888B216D88CB511498C512C699BAF9A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 08:00:29 +0000
Manifest this update: Fri 08 Aug 2025 08:00:29 +0000
Manifest next update: Sat 09 Aug 2025 08:00:29 +0000
Files and hashes: 1: 7kCB1J_rNDVtgNFDQBz-ZFXo6aA.roa (hash: j6xn4MHIGZVJXA81hfabdadaay1xFRv4GfnwCa5VtAQ=)
2: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: xtqn+vRnulV9XDCGaBbcnSBqNJo05sfeUlUTi3l0GGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:b2:16:d8:8c:b5:11:49:8c:51:2c:69:9b:af:9a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Aug 8 08:00:29 2025 GMT
Not After : Aug 9 08:00:29 2025 GMT
Subject: CN=5d18afa637e89e5611a3707b1330f36e9caf7b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:f0:2b:e6:89:1d:0d:59:c7:13:9e:44:da:
ad:ea:35:f5:c3:be:66:79:ac:3a:e3:32:7c:4d:4c:
97:c1:8b:1b:47:3d:e6:e4:8a:c0:27:bd:0f:f1:5c:
06:fa:c1:b1:ec:89:19:17:b5:ad:a1:6d:11:83:d9:
03:4e:f3:fd:68:cd:27:e3:44:27:57:db:4e:40:e4:
6f:10:06:84:52:b2:d2:84:22:79:5a:4f:e2:f6:e1:
cf:1e:25:b8:aa:f9:97:4d:aa:6b:c3:90:a1:d4:1f:
08:71:c0:24:f1:d7:51:0d:86:25:59:57:31:10:f6:
ac:92:fa:6d:b5:d6:f1:7d:a8:66:74:24:2c:2d:76:
fa:f3:84:1f:01:ca:89:d3:40:96:2d:c6:d8:71:a3:
da:c7:46:03:b4:54:79:da:8c:6c:9e:97:e4:97:2d:
5b:c9:04:ac:d8:a0:df:da:81:6e:e3:e1:64:3b:82:
13:34:66:4f:4f:d0:71:76:e3:91:76:50:f4:f4:d9:
f0:4f:aa:1d:80:9d:98:03:a3:29:b3:58:14:c7:f7:
76:d8:e8:d4:3d:5a:93:96:cb:3e:da:15:ec:f1:43:
00:79:93:94:4a:be:c2:eb:09:bc:12:f4:95:c4:4e:
48:62:0a:6c:33:4e:c3:44:5d:3a:1c:0b:82:a5:50:
45:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:18:AF:A6:37:E8:9E:56:11:A3:70:7B:13:30:F3:6E:9C:AF:7B:30
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:96:98:a0:54:60:0e:ee:b0:56:eb:f5:5d:4b:d3:94:f0:b8:
bf:be:26:d6:2f:b7:f5:48:68:c9:80:d5:e6:ae:02:4a:6a:4c:
15:3c:86:22:a0:e9:fc:bb:f0:b4:26:79:c0:1a:fe:4f:3e:26:
5b:5f:c5:35:cd:ee:e8:e3:b2:6a:c5:63:ff:b5:60:25:67:8e:
23:5b:58:47:5e:4d:37:6c:02:64:83:c3:10:3a:d5:15:55:59:
35:a2:5b:9c:ad:90:a2:9f:51:f2:eb:aa:89:fc:32:03:b0:3e:
ea:2b:92:a0:8b:ee:b8:80:b9:48:e9:b1:b1:1c:27:75:e7:bb:
51:ef:74:a4:fd:32:cf:29:42:66:8c:b8:ea:13:de:4c:6b:54:
b0:e4:e9:61:20:fb:6b:ff:cf:6b:d6:6b:7a:a7:a6:c6:cc:44:
e8:8a:0c:a7:46:97:55:8a:a0:11:e2:28:3d:fe:28:ad:85:64:
a8:15:fd:99:f6:38:d7:d8:f8:73:60:0b:f5:38:c2:d6:df:c7:
1a:1b:e2:dd:20:28:01:7c:77:ab:e1:24:e0:08:46:9e:14:e6:
17:c0:66:e5:7f:49:25:20:14:5f:c4:d8:7c:af:82:69:79:aa:
71:8f:3f:e6:8d:97:4f:8c:d6:a8:11:7c:37:06:eb:83:5d:1f:
de:31:6d:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiIshbYjLURSYxRLGmbr5ojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1N2FiNzE4YjRhY2IzYTY3OWM1ZGI4ZmNlZTcyOTRlZDZi
ZTJiZDAwHhcNMjUwODA4MDgwMDI5WhcNMjUwODA5MDgwMDI5WjAzMTEwLwYDVQQD
Eyg1ZDE4YWZhNjM3ZTg5ZTU2MTFhMzcwN2IxMzMwZjM2ZTljYWY3YjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3TwK+aJHQ1ZxxOeRNqt6jX1w75m
eaw64zJ8TUyXwYsbRz3m5IrAJ70P8VwG+sGx7IkZF7WtoW0Rg9kDTvP9aM0n40Qn
V9tOQORvEAaEUrLShCJ5Wk/i9uHPHiW4qvmXTaprw5Ch1B8IccAk8ddRDYYlWVcx
EPaskvpttdbxfahmdCQsLXb684QfAcqJ00CWLcbYcaPax0YDtFR52oxsnpfkly1b
yQSs2KDf2oFu4+FkO4ITNGZPT9BxduORdlD09NnwT6odgJ2YA6Mps1gUx/d22OjU
PVqTlss+2hXs8UMAeZOUSr7C6wm8EvSVxE5IYgpsM07DRF06HAuCpVBFEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0Yr6Y36J5WEaNwexMw826cr3swMB8GA1UdIwQY
MBaAFLV6txi0rLOmecXbj87nKU7WvivQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYt
YzcwMGVhMDNjMjI3LzEvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYtYzcwMGVhMDNjMjI3
LzEvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5aYoFRg
Du6wVuv1XUvTlPC4v74m1i+39UhoyYDV5q4CSmpMFTyGIqDp/LvwtCZ5wBr+Tz4m
W1/FNc3u6OOyasVj/7VgJWeOI1tYR15NN2wCZIPDEDrVFVVZNaJbnK2Qop9R8uuq
ifwyA7A+6iuSoIvuuIC5SOmxsRwndee7Ue90pP0yzylCZoy46hPeTGtUsOTpYSD7
a//Pa9ZreqemxsxE6IoMp0aXVYqgEeIoPf4orYVkqBX9mfY419j4c2AL9TjC1t/H
Ghvi3SAoAXx3q+Ek4AhGnhTmF8Bm5X9JJSAUX8TYfK+CaXmqcY8/5o2XT4zWqBF8
Nwbrg10f3jFt0Q==
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:06:04 2025 by rpki-client