Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
File: tYUi2sa83oxIEzNZkTKhYgDmpb4.mft (raw, json)
Hash identifier: qLg7SRXEsy0cNTuiHypGFHl0Pq3Ajc3BZtKTiw1edtU=
Subject key identifier: 18:69:4D:83:32:3D:2F:37:65:C8:28:A0:C8:50:21:75:0A:7E:95:0A
Authority key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
Certificate issuer: /CN=b58522dac6bcde8c481333599132a16200e6a5be
Certificate serial: 01984B53FE90834639B35ACB3F3D90CC8209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
Manifest number: 095C
Signing time: Sun 27 Jul 2025 10:00:52 +0000
Manifest this update: Sun 27 Jul 2025 10:00:52 +0000
Manifest next update: Mon 28 Jul 2025 10:00:52 +0000
Files and hashes: 1: 5moGvKAoN95-3rdirRXOwCahhvs.roa (hash: SkhAzMm5Jb5vcIiM14h4SYz3DQTRyqaR2eF+qq4Rdl0=)
2: RuuQV8FVAOprAh_8jcQjyKszeBc.roa (hash: kX89cdA0JPKtfSqgIarOumMCZ1cTxgD0uR8aSG1ObUs=)
3: tYUi2sa83oxIEzNZkTKhYgDmpb4.crl (hash: 8JRIA/gQ8g3lrESWY5QcyXWktHYnEf1h1eIevNIViWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:fe:90:83:46:39:b3:5a:cb:3f:3d:90:cc:82:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b58522dac6bcde8c481333599132a16200e6a5be
Validity
Not Before: Jul 27 10:00:52 2025 GMT
Not After : Jul 28 10:00:52 2025 GMT
Subject: CN=18694d83323d2f3765c828a0c85021750a7e950a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:12:50:5d:e4:5a:ab:70:82:7f:5c:d2:ba:
4b:48:56:ce:f1:5b:82:5b:9b:01:4c:e6:24:43:0a:
c3:b2:4c:c8:f3:10:27:7a:33:fa:86:bb:49:63:0b:
92:bf:95:cc:cf:0b:89:a6:25:6d:56:97:15:01:0f:
4c:9d:61:9a:d5:da:5d:f0:1f:b3:0b:25:4a:dc:f2:
49:d5:dc:25:ba:b6:a0:5a:79:57:0c:8e:3f:5f:c0:
db:02:9b:56:e9:33:a4:5c:5e:40:6e:c7:5b:f6:7f:
bd:2b:83:70:43:e7:25:76:3f:15:d8:9a:88:26:62:
b6:26:bc:df:a6:fd:46:52:61:33:31:c3:2c:c1:4b:
e5:14:29:2f:54:d5:c1:64:ee:a2:8c:f6:24:9b:54:
61:91:67:d3:f2:e3:84:a8:8f:58:11:21:75:c7:84:
15:de:a5:6c:22:8d:16:a2:63:72:ca:d0:a5:e1:97:
90:60:3d:33:43:71:fc:f6:8b:a0:96:45:ea:f1:88:
a1:81:65:da:f5:d1:77:01:df:80:87:ae:c0:4b:83:
74:92:47:d1:4d:e6:b1:ec:40:50:71:51:9c:33:a9:
1d:19:bb:95:8c:21:e4:62:69:b7:f1:d7:6b:68:b9:
f7:8a:f8:c3:c2:23:41:7c:40:a1:eb:07:0d:b5:96:
36:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:69:4D:83:32:3D:2F:37:65:C8:28:A0:C8:50:21:75:0A:7E:95:0A
X509v3 Authority Key Identifier:
keyid:B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:02:ab:1f:ee:fc:7b:10:1b:f2:9b:f4:a3:02:9a:da:52:0a:
da:6e:54:80:d0:be:ff:90:2c:12:6d:a8:2e:30:5b:aa:df:8f:
6f:4e:bf:6c:2f:7a:a4:24:17:0f:98:82:91:f5:4e:e8:65:8e:
65:b1:e2:c0:8d:00:51:d2:69:b7:27:3a:a5:0e:92:c4:de:63:
55:a9:4b:e7:6a:67:7e:bf:ad:23:c3:18:b4:04:b9:2a:06:7c:
cc:ce:25:22:ee:80:ba:8f:26:91:db:95:97:fd:fe:84:05:15:
d6:86:14:ac:1e:4b:58:1d:66:6c:04:b8:42:6f:12:3e:75:79:
a9:0a:b7:0b:cf:37:b3:d6:b0:c4:d5:2f:75:5e:9f:98:89:6b:
52:b3:37:3f:25:8c:69:4c:ac:cf:8c:17:09:bc:e3:0d:b4:f9:
12:5e:f1:e4:f9:1b:df:eb:8d:0f:b0:ca:4a:dc:07:73:09:38:
8f:33:d5:d8:0c:b3:4c:80:ab:19:ed:ee:ba:e2:7d:d2:cd:dd:
ca:9c:84:b8:b8:4e:d5:e8:93:01:f5:c2:13:01:27:73:f3:57:
33:46:fd:2a:76:c1:7f:dc:d4:36:59:bc:fe:7b:ea:36:d8:97:
d7:00:f9:12:1a:33:2f:46:f8:5a:01:cf:a2:31:84:be:42:46:
9b:ad:f1:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLU/6Qg0Y5s1rLPz2QzIIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ODUyMmRhYzZiY2RlOGM0ODEzMzM1OTkxMzJhMTYyMDBl
NmE1YmUwHhcNMjUwNzI3MTAwMDUyWhcNMjUwNzI4MTAwMDUyWjAzMTEwLwYDVQQD
EygxODY5NGQ4MzMyM2QyZjM3NjVjODI4YTBjODUwMjE3NTBhN2U5NTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGMSUF3kWqtwgn9c0rpLSFbO8VuC
W5sBTOYkQwrDskzI8xAnejP6hrtJYwuSv5XMzwuJpiVtVpcVAQ9MnWGa1dpd8B+z
CyVK3PJJ1dwluragWnlXDI4/X8DbAptW6TOkXF5Absdb9n+9K4NwQ+cldj8V2JqI
JmK2Jrzfpv1GUmEzMcMswUvlFCkvVNXBZO6ijPYkm1RhkWfT8uOEqI9YESF1x4QV
3qVsIo0WomNyytCl4ZeQYD0zQ3H89ouglkXq8YihgWXa9dF3Ad+Ah67AS4N0kkfR
Teax7EBQcVGcM6kdGbuVjCHkYmm38ddraLn3ivjDwiNBfECh6wcNtZY2jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhpTYMyPS83ZcgooMhQIXUKfpUKMB8GA1UdIwQY
MBaAFLWFItrGvN6MSBMzWZEyoWIA5qW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFlVaTJzYTgzb3hJRXpOWmtUS2hZZ0RtcGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84YjVkMmEtNGJjNC00MDZmLTk3ZDUt
YmEzOTQ3YzliMjJiLzEvdFlVaTJzYTgzb3hJRXpOWmtUS2hZZ0RtcGI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84YjVkMmEtNGJjNC00MDZmLTk3ZDUtYmEzOTQ3YzliMjJi
LzEvdFlVaTJzYTgzb3hJRXpOWmtUS2hZZ0RtcGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAKrH+78
exAb8pv0owKa2lIK2m5UgNC+/5AsEm2oLjBbqt+Pb06/bC96pCQXD5iCkfVO6GWO
ZbHiwI0AUdJptyc6pQ6SxN5jValL52pnfr+tI8MYtAS5KgZ8zM4lIu6Auo8mkduV
l/3+hAUV1oYUrB5LWB1mbAS4Qm8SPnV5qQq3C883s9awxNUvdV6fmIlrUrM3PyWM
aUysz4wXCbzjDbT5El7x5Pkb3+uND7DKStwHcwk4jzPV2AyzTICrGe3uuuJ90s3d
ypyEuLhO1eiTAfXCEwEnc/NXM0b9KnbBf9zUNlm8/nvqNtiX1wD5EhozL0b4WgHP
ojGEvkJGm63xcg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:01:58 2025 by rpki-client