Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
File: tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft (raw, json)
Hash identifier: tVbdifWbXFneNvZ08Wo0bdZFQbSu8LSwf9seWP1+t1w=
Subject key identifier: BD:9D:97:62:36:68:F2:39:A3:FF:24:04:A3:FA:21:5A:AD:B5:F2:04
Authority key identifier: B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
Certificate issuer: /CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Certificate serial: 01988E46C3F0E2BBE299EF84F980543296EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 10:00:58 +0000
Manifest this update: Sat 09 Aug 2025 10:00:58 +0000
Manifest next update: Sun 10 Aug 2025 10:00:58 +0000
Files and hashes: 1: 5ZQra7L-IsZsuKLO0lJjxDnzRq4.roa (hash: JgYoL2/LGVSX4nbbkirOpXIvSueW2/0GrLGHhioQgeE=)
2: NNbGYKZN2MczsbLVZDvW2hdl718.roa (hash: 4E2t0fTnEc7nZVPHCni1To4F2fDuKI/+fcnfWn1WYJA=)
3: tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl (hash: UoZdYfvpdMV/eXoAarSYC4xLufhblt9lZxGq9VoTppQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:46:c3:f0:e2:bb:e2:99:ef:84:f9:80:54:32:96:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Validity
Not Before: Aug 9 10:00:58 2025 GMT
Not After : Aug 10 10:00:58 2025 GMT
Subject: CN=bd9d97623668f239a3ff2404a3fa215aadb5f204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:79:d8:ac:be:c8:c0:30:0d:f3:c4:e6:f4:60:
5a:a2:8a:bc:70:51:66:7f:d1:2a:25:3c:f2:a0:59:
eb:2c:90:cd:5c:de:80:c0:1c:12:23:68:6e:2d:50:
97:54:5f:fb:ad:50:f6:65:44:fa:d6:5a:77:7a:45:
bb:e1:be:5e:a6:a9:4f:4f:c7:1c:e1:56:82:5e:f0:
f1:f4:09:c3:3b:7e:cf:7a:5f:a8:4c:fa:24:6b:56:
3d:9e:f3:ca:cd:c5:45:25:db:1e:e9:2b:52:9b:24:
cd:b7:9c:83:72:cc:a1:c7:b9:c2:25:30:4b:22:0e:
8d:0b:9e:33:b6:00:97:0a:f3:3f:25:db:77:a0:2f:
bc:80:d6:57:30:a4:15:1a:ac:57:32:c8:ee:95:ed:
9a:0d:90:79:99:16:64:db:39:66:11:85:fd:1c:be:
73:ad:96:ba:ba:82:ff:c9:1c:b5:78:90:d5:0a:e9:
00:4f:83:66:9c:b0:80:f1:93:52:22:a0:9d:01:8a:
04:ad:2e:5d:75:f7:38:57:6e:2c:db:b3:0d:50:80:
f8:91:c1:59:d2:fc:a2:bd:e6:57:fb:9d:25:0b:c6:
55:0b:57:58:7b:26:1f:19:f9:47:7f:45:99:2b:e3:
e5:00:e6:fa:3c:10:4c:6c:c2:43:5c:99:60:61:bc:
b7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9D:97:62:36:68:F2:39:A3:FF:24:04:A3:FA:21:5A:AD:B5:F2:04
X509v3 Authority Key Identifier:
keyid:B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:02:b2:31:93:61:32:81:f7:41:a0:40:6d:ec:6d:1a:d7:68:
98:77:e6:d7:12:3d:3e:20:08:d5:09:50:90:11:73:a6:9a:ab:
33:55:c8:e1:62:4a:8a:cc:5d:34:b0:7e:f6:83:41:41:50:ae:
ff:0a:bc:6e:6b:bb:a2:81:e1:f5:e0:78:87:c5:60:b1:b1:16:
a5:60:2e:17:b0:db:b5:49:7f:2e:c0:1f:a9:3a:10:6c:68:a8:
66:b5:8e:9f:59:1a:95:2b:0c:8d:6f:32:68:b1:3f:e6:70:75:
96:bb:e3:57:1c:ef:2f:74:f5:ac:17:ac:11:af:a8:5a:18:f0:
90:f1:48:d6:83:d9:ac:3c:5a:4e:b0:49:13:fb:7c:75:dd:bf:
54:bf:65:52:ea:55:bb:bc:23:06:a9:01:e3:b4:de:05:f9:5d:
9f:77:00:9d:9f:1d:e1:ae:d5:e0:47:4a:bd:be:84:8a:44:d3:
85:3d:65:c5:a4:c3:9b:ec:0d:6f:b7:3b:a8:e6:57:e8:61:41:
0c:f2:8a:f3:53:0c:31:ad:0b:2f:ce:7a:01:db:ea:72:f1:5f:
e9:50:9a:7c:56:6b:00:57:1d:78:a3:03:6c:b8:45:cd:d8:14:
22:cd:da:44:f7:2f:7f:8f:53:a9:9c:27:98:0b:51:fb:a1:90:
34:e1:9a:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiORsPw4rvime+E+YBUMpbqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NWQ0ZTYzMTdjNjJhMWE2OWRhYzMxZjRmMTQzZTNiYzI4
MGJhNjIwHhcNMjUwODA5MTAwMDU4WhcNMjUwODEwMTAwMDU4WjAzMTEwLwYDVQQD
EyhiZDlkOTc2MjM2NjhmMjM5YTNmZjI0MDRhM2ZhMjE1YWFkYjVmMjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nnYrL7IwDAN88Tm9GBaooq8cFFm
f9EqJTzyoFnrLJDNXN6AwBwSI2huLVCXVF/7rVD2ZUT61lp3ekW74b5epqlPT8cc
4VaCXvDx9AnDO37Pel+oTPoka1Y9nvPKzcVFJdse6StSmyTNt5yDcsyhx7nCJTBL
Ig6NC54ztgCXCvM/Jdt3oC+8gNZXMKQVGqxXMsjule2aDZB5mRZk2zlmEYX9HL5z
rZa6uoL/yRy1eJDVCukAT4NmnLCA8ZNSIqCdAYoErS5ddfc4V24s27MNUID4kcFZ
0vyiveZX+50lC8ZVC1dYeyYfGflHf0WZK+PlAOb6PBBMbMJDXJlgYby3nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2dl2I2aPI5o/8kBKP6IVqttfIEMB8GA1UdIwQY
MBaAFLVdTmMXxioaadrDH08UPjvCgLpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFYxT1l4ZkdLaHBwMnNNZlR4US1POEtBdW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82NTRmMzYtYWM1YS00MjkyLTgxNDAt
NTM0ZDc4ODk4ZDZiLzEvdFYxT1l4ZkdLaHBwMnNNZlR4US1POEtBdW1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82NTRmMzYtYWM1YS00MjkyLTgxNDAtNTM0ZDc4ODk4ZDZi
LzEvdFYxT1l4ZkdLaHBwMnNNZlR4US1POEtBdW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArwKyMZNh
MoH3QaBAbextGtdomHfm1xI9PiAI1QlQkBFzppqrM1XI4WJKisxdNLB+9oNBQVCu
/wq8bmu7ooHh9eB4h8VgsbEWpWAuF7DbtUl/LsAfqToQbGioZrWOn1kalSsMjW8y
aLE/5nB1lrvjVxzvL3T1rBesEa+oWhjwkPFI1oPZrDxaTrBJE/t8dd2/VL9lUupV
u7wjBqkB47TeBfldn3cAnZ8d4a7V4EdKvb6EikTThT1lxaTDm+wNb7c7qOZX6GFB
DPKK81MMMa0LL856AdvqcvFf6VCafFZrAFcdeKMDbLhFzdgUIs3aRPcvf49TqZwn
mAtR+6GQNOGamg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:22:40 2025 by rpki-client