Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
File: tXZXfSAIXEwi_IARyNGpP2MhHA8.mft (raw, json)
Hash identifier: +UtRyvlu62fIBG8rbPDB0MW5iWuxbSzIDITKMOCCn/E=
Subject key identifier: B1:3B:FF:1C:BD:93:48:7A:39:07:C1:5C:A1:56:A6:AC:3B:22:BA:EE
Authority key identifier: B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
Certificate issuer: /CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Certificate serial: 01984A4173B37D97AA49AE43DFA3F9CC3D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
Manifest number: 0127
Signing time: Sun 27 Jul 2025 05:01:00 +0000
Manifest this update: Sun 27 Jul 2025 05:01:00 +0000
Manifest next update: Mon 28 Jul 2025 05:01:00 +0000
Files and hashes: 1: 0NGpBZClfqdkwT-g1SQX2TG7Voo.roa (hash: SbCdNlkd4RVvBhJ9C9nlFY+4pjkHAYs+BVh1BZ1ld+c=)
2: FrJWtoZemJx4JKpSKfeY_d7A8KU.roa (hash: mn6H512YQAxp8Xgyg/tGQdGcCEfihV9UXWWT70uzA50=)
3: tXZXfSAIXEwi_IARyNGpP2MhHA8.crl (hash: d2KvaHHD/+GhQToaSwj6tH3P97PWLr4mj4I4Y4ewODc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:73:b3:7d:97:aa:49:ae:43:df:a3:f9:cc:3d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Validity
Not Before: Jul 27 05:01:00 2025 GMT
Not After : Jul 28 05:01:00 2025 GMT
Subject: CN=b13bff1cbd93487a3907c15ca156a6ac3b22baee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:34:e3:2b:57:30:6f:da:9a:a8:4a:22:0b:
b0:f4:99:d0:db:a1:69:cf:f3:df:a5:2a:4f:75:b7:
8f:26:97:fe:08:10:d9:89:52:4a:64:e1:a4:3f:ea:
aa:97:94:97:71:ac:e3:e5:9a:5c:6e:44:5f:4a:87:
38:3e:db:8e:60:d3:1d:e4:80:7b:81:68:fa:77:0b:
1a:1c:d3:36:ea:24:99:68:4a:85:c1:8f:61:80:f7:
b0:50:f9:b8:3e:b9:d2:bc:79:58:82:e8:1c:04:fe:
d7:79:17:54:b4:aa:79:a9:04:ef:66:ce:90:5d:00:
dd:f3:41:a3:44:14:d3:0b:db:f3:5c:3b:1f:23:05:
81:e4:28:f0:09:ba:e3:81:da:38:15:3d:e6:3d:a9:
56:85:a8:7a:5a:ad:83:35:8c:c5:51:74:1f:c1:a1:
a4:d2:22:01:49:29:52:30:cd:71:46:eb:f0:ff:9c:
88:b6:0b:cf:1c:29:cd:8b:7f:90:af:e0:e8:42:12:
8c:d7:da:1c:18:09:32:0a:42:1a:8b:77:f5:38:03:
bc:42:fa:16:89:81:1d:45:6d:9a:b0:82:a9:60:17:
b3:ee:f0:3b:83:fe:39:53:b0:32:d1:aa:d6:4c:d1:
d1:3a:28:39:95:0f:3f:fd:35:9f:bf:bc:dd:f6:bc:
ab:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3B:FF:1C:BD:93:48:7A:39:07:C1:5C:A1:56:A6:AC:3B:22:BA:EE
X509v3 Authority Key Identifier:
keyid:B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d3:0c:53:61:45:3b:79:11:4f:dc:45:85:9e:a7:d0:b3:ac:
c3:9f:4c:f7:d6:c0:dd:af:51:4b:74:96:d5:23:d3:a7:f7:f8:
81:3d:c2:19:f1:a0:9a:9a:9d:e6:9a:5c:d9:ef:3e:1e:ee:3e:
fc:c8:47:12:cf:64:52:4c:69:06:41:23:d3:2b:6f:e6:7f:1c:
a8:d8:e0:11:17:a0:f9:a8:0a:e4:2a:cf:34:e3:6f:ad:07:15:
51:ef:10:6c:9d:30:6b:ed:31:cb:b8:4a:e4:7b:be:99:0b:9f:
72:36:5b:93:7d:a5:5d:0b:6d:46:ff:8c:35:8d:2e:54:11:be:
0c:87:64:06:aa:ac:2c:14:e2:48:85:d4:a2:d0:45:41:88:f9:
84:c2:a5:66:35:cd:01:6d:5b:48:d5:f7:3e:ec:01:c5:1f:6a:
82:2d:33:4a:d3:64:7e:3b:a4:bf:f4:03:cd:5f:22:9d:13:a0:
d1:1e:0a:3b:f3:1d:38:c9:e9:91:2f:ef:15:c8:7b:ec:2a:b2:
e8:a9:5a:32:b6:a7:35:5b:ec:d0:ca:8d:73:63:5d:9e:2b:5c:
3c:44:b5:3b:ca:7c:a0:88:63:66:0b:eb:43:af:ea:7a:ff:1c:
6e:cb:53:57:ec:8e:45:57:ee:33:de:fe:af:8d:99:b8:24:40:
b8:7c:34:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQXOzfZeqSa5D36P5zD0CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NzY1NzdkMjAwODVjNGMyMmZjODAxMWM4ZDFhOTNmNjMy
MTFjMGYwHhcNMjUwNzI3MDUwMTAwWhcNMjUwNzI4MDUwMTAwWjAzMTEwLwYDVQQD
EyhiMTNiZmYxY2JkOTM0ODdhMzkwN2MxNWNhMTU2YTZhYzNiMjJiYWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqis04ytXMG/amqhKIguw9JnQ26Fp
z/PfpSpPdbePJpf+CBDZiVJKZOGkP+qql5SXcazj5ZpcbkRfSoc4PtuOYNMd5IB7
gWj6dwsaHNM26iSZaEqFwY9hgPewUPm4PrnSvHlYgugcBP7XeRdUtKp5qQTvZs6Q
XQDd80GjRBTTC9vzXDsfIwWB5CjwCbrjgdo4FT3mPalWhah6Wq2DNYzFUXQfwaGk
0iIBSSlSMM1xRuvw/5yItgvPHCnNi3+Qr+DoQhKM19ocGAkyCkIai3f1OAO8QvoW
iYEdRW2asIKpYBez7vA7g/45U7Ay0arWTNHROig5lQ8//TWfv7zd9ryrvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLE7/xy9k0h6OQfBXKFWpqw7IrruMB8GA1UdIwQY
MBaAFLV2V30gCFxMIvyAEcjRqT9jIRwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xNTE3MDUtMGIwYy00OGJmLWE0MGUt
YjdjYTFmZTZjMTg0LzEvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xNTE3MDUtMGIwYy00OGJmLWE0MGUtYjdjYTFmZTZjMTg0
LzEvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9MMU2FF
O3kRT9xFhZ6n0LOsw59M99bA3a9RS3SW1SPTp/f4gT3CGfGgmpqd5ppc2e8+Hu4+
/MhHEs9kUkxpBkEj0ytv5n8cqNjgEReg+agK5CrPNONvrQcVUe8QbJ0wa+0xy7hK
5Hu+mQufcjZbk32lXQttRv+MNY0uVBG+DIdkBqqsLBTiSIXUotBFQYj5hMKlZjXN
AW1bSNX3PuwBxR9qgi0zStNkfjukv/QDzV8inROg0R4KO/MdOMnpkS/vFch77Cqy
6KlaMranNVvs0MqNc2NdnitcPES1O8p8oIhjZgvrQ6/qev8cbstTV+yORVfuM97+
r42ZuCRAuHw0cw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:55:45 2025 by rpki-client