Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
File: tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft (raw, json)
Hash identifier: M98NYJ+mDAttqqQepuSzUpoaNfldy2tn8ebYqudPZQs=
Subject key identifier: C9:19:2B:F3:B8:BC:F6:E3:72:D3:68:84:13:CD:02:F9:CF:05:8E:98
Authority key identifier: B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
Certificate issuer: /CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Certificate serial: 019854FC95F0714715ADE7337A05A757E4E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
Manifest number: 06DD
Signing time: Tue 29 Jul 2025 07:01:36 +0000
Manifest this update: Tue 29 Jul 2025 07:01:36 +0000
Manifest next update: Wed 30 Jul 2025 07:01:36 +0000
Files and hashes: 1: rgegcxxJ3TsTdq27HR0NAjR9oC8.roa (hash: c0wEsNYvh664VokeqgrZS5bI3twxSLXX7CSRIaVE4Zs=)
2: tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl (hash: U0bEaBxho65N1QpJBJc7KQoRe16yyBGW936bAbXKYxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:95:f0:71:47:15:ad:e7:33:7a:05:a7:57:e4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Validity
Not Before: Jul 29 07:01:36 2025 GMT
Not After : Jul 30 07:01:36 2025 GMT
Subject: CN=c9192bf3b8bcf6e372d3688413cd02f9cf058e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:43:8c:48:81:f7:ce:bf:e8:59:ee:1a:3a:01:
04:a9:18:f9:d9:fd:65:10:1f:65:74:ff:e9:de:c1:
40:62:bb:6b:88:fb:e8:93:54:5a:91:b4:9a:78:d8:
00:2d:38:d8:77:14:9a:97:df:8b:90:76:d3:47:90:
d2:70:38:09:2c:58:3b:93:c8:ab:23:37:39:52:48:
be:35:41:5a:76:62:34:b2:09:d0:48:e3:26:33:f7:
96:f2:1d:e4:45:1e:58:e8:0f:2e:dc:37:d4:11:f5:
ba:aa:4e:dd:3a:d6:e5:d1:41:62:88:93:3f:76:57:
eb:89:72:6e:09:eb:e6:91:66:10:2f:2c:06:1d:74:
6c:22:61:3a:46:34:4e:53:e8:ce:92:3a:b4:2d:81:
08:b5:bc:37:2d:24:8f:6b:a0:58:91:0b:5b:1a:b2:
ef:27:0d:5f:5a:22:dd:92:b4:25:c0:58:25:2d:b9:
73:9a:40:5c:9d:61:da:41:d7:ef:22:3c:39:f2:bf:
a4:22:0b:14:e5:26:4e:39:67:a6:52:c5:d4:63:7f:
cb:83:61:c0:dc:de:dc:99:b5:73:da:11:44:5b:60:
46:a7:09:38:ea:ef:33:68:0f:e9:90:9f:95:84:b7:
ae:c1:cf:f8:7c:5e:88:9c:1f:8f:14:12:28:a8:7f:
37:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:19:2B:F3:B8:BC:F6:E3:72:D3:68:84:13:CD:02:F9:CF:05:8E:98
X509v3 Authority Key Identifier:
keyid:B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fc:6f:07:77:8a:c4:c0:cd:77:5d:fe:14:bd:d1:8b:fd:a1:
bf:8c:28:bb:9d:1a:9f:00:39:b9:c1:a2:61:b1:f9:aa:c7:3b:
49:93:e4:c1:44:b6:a5:f9:6c:bf:05:6d:84:77:0e:bb:b3:e1:
67:8e:1f:49:d4:e6:68:35:d7:da:fe:09:68:57:76:dc:d5:1a:
b7:b5:1f:f8:aa:7d:5f:cb:92:7e:9f:64:4a:04:29:ec:eb:33:
5f:68:e7:59:40:04:10:09:45:fd:5d:93:03:cc:97:25:eb:a1:
e4:e3:90:f6:8b:41:26:94:1b:d8:bf:7e:2f:11:53:90:be:ff:
9c:05:10:8f:18:72:ba:45:bb:1b:2e:a9:63:73:2e:96:69:97:
8d:e3:2c:24:4d:c5:fc:06:ca:17:fd:37:bd:b2:44:09:7c:8b:
98:f9:ef:5f:02:45:57:e0:3e:a3:8f:94:c8:09:75:a8:36:c8:
8f:2c:9c:6c:d8:5e:54:49:d6:d3:6c:42:16:4b:b5:45:40:26:
20:d6:04:d9:00:21:45:7a:b3:aa:6a:db:92:25:11:22:4b:c5:
90:38:7c:34:f8:cd:5c:19:9d:68:4f:e4:92:20:0e:d5:d0:cc:
7e:48:b9:de:df:92:57:ae:b1:c9:7f:85:a5:3e:8d:55:03:74:
02:c2:80:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhU/JXwcUcVreczegWnV+TgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZTNhMmE0OTA4ZGQ5NjgyMWM4MGM2NGQxNWQxNzE0MTQz
YWFhOTQwHhcNMjUwNzI5MDcwMTM2WhcNMjUwNzMwMDcwMTM2WjAzMTEwLwYDVQQD
EyhjOTE5MmJmM2I4YmNmNmUzNzJkMzY4ODQxM2NkMDJmOWNmMDU4ZTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEOMSIH3zr/oWe4aOgEEqRj52f1l
EB9ldP/p3sFAYrtriPvok1RakbSaeNgALTjYdxSal9+LkHbTR5DScDgJLFg7k8ir
Izc5Uki+NUFadmI0sgnQSOMmM/eW8h3kRR5Y6A8u3DfUEfW6qk7dOtbl0UFiiJM/
dlfriXJuCevmkWYQLywGHXRsImE6RjROU+jOkjq0LYEItbw3LSSPa6BYkQtbGrLv
Jw1fWiLdkrQlwFglLblzmkBcnWHaQdfvIjw58r+kIgsU5SZOOWemUsXUY3/Lg2HA
3N7cmbVz2hFEW2BGpwk46u8zaA/pkJ+VhLeuwc/4fF6InB+PFBIoqH83xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkZK/O4vPbjctNohBPNAvnPBY6YMB8GA1UdIwQY
MBaAFLbjoqSQjdloIcgMZNFdFxQUOqqUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHVPaXBKQ04yV2doeUF4azBWMFhGQlE2cXBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iMzZmMzEtMWNjZC00ZGEzLTljZjkt
MGVkYmRmZjlmOGYyLzEvdHVPaXBKQ04yV2doeUF4azBWMFhGQlE2cXBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iMzZmMzEtMWNjZC00ZGEzLTljZjktMGVkYmRmZjlmOGYy
LzEvdHVPaXBKQ04yV2doeUF4azBWMFhGQlE2cXBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvxvB3eK
xMDNd13+FL3Ri/2hv4wou50anwA5ucGiYbH5qsc7SZPkwUS2pflsvwVthHcOu7Ph
Z44fSdTmaDXX2v4JaFd23NUat7Uf+Kp9X8uSfp9kSgQp7OszX2jnWUAEEAlF/V2T
A8yXJeuh5OOQ9otBJpQb2L9+LxFTkL7/nAUQjxhyukW7Gy6pY3MulmmXjeMsJE3F
/AbKF/03vbJECXyLmPnvXwJFV+A+o4+UyAl1qDbIjyycbNheVEnW02xCFku1RUAm
INYE2QAhRXqzqmrbkiURIkvFkDh8NPjNXBmdaE/kkiAO1dDMfki53t+SV66xyX+F
pT6NVQN0AsKAhw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 14:42:29 2025 by rpki-client