Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
File: tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json)
Hash identifier: cO2pGq8rU2FBHn8i7g9N99Tf89eFN3Zlj87sRzZ8PTA=
Subject key identifier: 69:DA:BB:06:2A:D5:71:68:CB:DF:DB:E0:B1:59:6F:59:93:4A:C4:0D
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 01987C403AA5EAB13AC026DCA4C770574A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
Manifest number: 0644
Signing time: Tue 05 Aug 2025 22:00:40 +0000
Manifest this update: Tue 05 Aug 2025 22:00:40 +0000
Manifest next update: Wed 06 Aug 2025 22:00:40 +0000
Files and hashes: 1: CvcmVd2qiQMCtgnMEuQp7Q5S4Vg.roa (hash: 6oEqjna8oaHJiSK9+x9VxezwWYrKn62GKKSEaLSxdDU=)
2: UKY-oSMIFmmicltNFFzSJHvvmLM.roa (hash: cA262Na30QfQdhfhBPxJOrAeDIB1dyAnD2XIGiuSUOI=)
3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: Y9FPzqCXAYeuxmDnMl+ohOQJ0kVbwERIDZ92PLGCgQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:3a:a5:ea:b1:3a:c0:26:dc:a4:c7:70:57:4a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: Aug 5 22:00:40 2025 GMT
Not After : Aug 6 22:00:40 2025 GMT
Subject: CN=69dabb062ad57168cbdfdbe0b1596f59934ac40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:0a:ca:43:7b:08:e9:28:31:64:69:35:b3:
8b:03:e2:52:d7:49:85:ea:ea:d2:ba:54:6c:72:f1:
d2:c8:c6:0a:28:0f:7c:95:8b:fc:b0:b1:a4:09:24:
5b:de:5b:6f:ec:a5:d2:7e:e2:1b:48:1c:74:13:39:
b6:6b:91:d4:83:1b:35:36:d9:ee:36:cf:8d:29:2d:
1e:0c:4a:a9:40:25:78:b9:5a:dc:8e:57:ec:2f:df:
ce:cd:95:22:85:a2:c5:84:26:f2:ba:7c:07:71:dc:
43:24:b9:72:25:9b:e9:36:9c:8b:04:04:bc:b1:f9:
31:4e:12:a4:f1:97:ff:d2:aa:7f:10:86:ac:47:16:
a8:a5:61:2a:ba:a5:a4:21:7a:c5:68:0f:ff:b2:ca:
76:12:45:29:08:f6:6c:30:09:0a:01:f5:93:08:82:
3f:2c:db:88:fc:06:ad:06:05:96:56:9e:c4:97:5a:
74:ae:df:50:7e:34:55:e4:19:b3:dd:68:83:7a:21:
a5:44:5b:10:28:cc:25:97:25:9a:d1:02:a6:5d:c1:
92:55:8e:35:59:d0:8b:72:54:43:e1:ef:be:88:4f:
71:57:c1:27:d9:75:de:de:6b:5c:a6:c2:04:dc:cb:
9a:f0:1c:c7:42:84:99:16:3f:9f:f2:71:71:ff:2b:
0e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DA:BB:06:2A:D5:71:68:CB:DF:DB:E0:B1:59:6F:59:93:4A:C4:0D
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d5:f0:a1:05:1f:9e:ef:ea:33:38:da:03:a4:85:e6:e9:51:
86:68:de:e0:c4:76:57:3c:31:a9:60:51:73:82:fb:89:a6:12:
90:0c:ec:71:de:d2:88:e4:6a:c6:33:4a:2d:1c:5c:69:7e:a1:
d8:2a:2a:53:8f:f7:e9:63:fa:98:fa:e0:ef:ac:1a:cd:21:ac:
55:27:3e:eb:92:0b:46:c7:24:d0:58:b6:87:4f:c5:2e:f1:94:
80:13:6a:3f:1b:ff:5a:eb:70:dc:44:7f:dc:0a:91:bb:86:23:
66:c7:24:b1:bd:de:0f:7e:5c:2a:64:33:24:04:5c:e8:f1:ac:
80:ee:49:ec:f4:42:fa:80:de:a4:17:b1:5f:0c:16:43:94:d9:
01:64:26:0e:3a:33:f5:40:72:40:2c:a8:7c:55:14:f8:e4:2b:
ef:08:ba:92:fd:1b:8e:05:72:11:52:ff:ce:07:91:14:ee:c7:
ad:ba:6f:f5:81:05:29:17:5f:1e:0c:60:60:6d:09:3d:7d:c3:
52:c2:f9:1c:a8:95:fd:32:39:38:55:c7:44:9c:63:af:24:33:
0b:6d:f1:8e:6d:32:e7:a1:10:b1:a3:0a:98:4c:8c:44:d6:8d:
6b:8d:5c:55:e6:87:29:9d:ad:7f:fa:48:b0:27:a1:38:53:8d:
e8:58:4e:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8QDql6rE6wCbcpMdwV0orMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OThjOTdiMTRjMzc0YTUyODMzZGI2YTQwMDdiNTRiNDY2
MmM1YTkwHhcNMjUwODA1MjIwMDQwWhcNMjUwODA2MjIwMDQwWjAzMTEwLwYDVQQD
Eyg2OWRhYmIwNjJhZDU3MTY4Y2JkZmRiZTBiMTU5NmY1OTkzNGFjNDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5MKykN7COkoMWRpNbOLA+JS10mF
6urSulRscvHSyMYKKA98lYv8sLGkCSRb3ltv7KXSfuIbSBx0Ezm2a5HUgxs1Ntnu
Ns+NKS0eDEqpQCV4uVrcjlfsL9/OzZUihaLFhCbyunwHcdxDJLlyJZvpNpyLBAS8
sfkxThKk8Zf/0qp/EIasRxaopWEquqWkIXrFaA//ssp2EkUpCPZsMAkKAfWTCII/
LNuI/AatBgWWVp7El1p0rt9QfjRV5Bmz3WiDeiGlRFsQKMwllyWa0QKmXcGSVY41
WdCLclRD4e++iE9xV8En2XXe3mtcpsIE3Mua8BzHQoSZFj+f8nFx/ysOnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnauwYq1XFoy9/b4LFZb1mTSsQNMB8GA1UdIwQY
MBaAFLSYyXsUw3SlKDPbakAHtUtGYsWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzct
ODY1NDI2NjQ1N2M2LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzctODY1NDI2NjQ1N2M2
LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNXwoQUf
nu/qMzjaA6SF5ulRhmje4MR2VzwxqWBRc4L7iaYSkAzscd7SiORqxjNKLRxcaX6h
2CoqU4/36WP6mPrg76wazSGsVSc+65ILRsck0Fi2h0/FLvGUgBNqPxv/Wutw3ER/
3AqRu4YjZscksb3eD35cKmQzJARc6PGsgO5J7PRC+oDepBexXwwWQ5TZAWQmDjoz
9UByQCyofFUU+OQr7wi6kv0bjgVyEVL/zgeRFO7Hrbpv9YEFKRdfHgxgYG0JPX3D
UsL5HKiV/TI5OFXHRJxjryQzC23xjm0y56EQsaMKmEyMRNaNa41cVeaHKZ2tf/pI
sCehOFON6FhOcw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:53:09 2025 by rpki-client