Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
File: tTRCGKSIC1AMAzMh52vXi088Flg.mft (raw, json)
Hash identifier: owuFwF/rS8xgISoxSBNID4nzZlJfyUvyWEOcjO37PO0=
Subject key identifier: 45:41:93:C6:E1:94:99:2B:68:C6:F3:8E:C5:23:2C:AC:FD:7B:FA:6B
Authority key identifier: B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
Certificate issuer: /CN=b5344218a4880b500c033321e76bd78b4f3c1658
Certificate serial: 01984965874251DE9A87B600AC43FADB7E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 01:00:47 +0000
Manifest this update: Sun 27 Jul 2025 01:00:47 +0000
Manifest next update: Mon 28 Jul 2025 01:00:47 +0000
Files and hashes: 1: 8Pm542mxmtNx79Ipw8aJ3MUUUlw.roa (hash: wUyn8TfNac0yPrEyoAGwGRLxadfovmjunsKwqoO4Tic=)
2: MK5kvHBNAAlnKRq0I1CvZhVF9Ng.roa (hash: ku7EY/yVBZoDpf18kdWwR04OCaLbQDYij0LYSvbt0Ho=)
3: tTRCGKSIC1AMAzMh52vXi088Flg.crl (hash: UTv2ZhqZnrgMi0l7pQO05c5uYagm3I32kYova6v59Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:87:42:51:de:9a:87:b6:00:ac:43:fa:db:7e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5344218a4880b500c033321e76bd78b4f3c1658
Validity
Not Before: Jul 27 01:00:47 2025 GMT
Not After : Jul 28 01:00:47 2025 GMT
Subject: CN=454193c6e194992b68c6f38ec5232cacfd7bfa6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:ba:ae:a5:ca:c0:89:bc:08:ce:56:4a:09:
b8:6d:57:44:ce:4e:3b:57:b6:ee:da:40:46:b7:f3:
d8:82:b0:0c:87:1e:ca:37:be:e5:ba:65:94:1b:fa:
fb:c3:25:4c:9a:e6:e6:91:41:f5:e6:70:3c:7f:ce:
78:b5:98:ef:c0:9f:31:ca:4d:34:d9:09:99:fc:0a:
4f:f0:aa:61:ec:5e:c5:18:34:0f:55:1f:e2:f1:a6:
81:6b:9a:84:bd:16:ca:2b:77:e5:ef:2a:34:26:ce:
e0:79:80:c4:8c:1e:f4:9a:e9:71:36:fa:ca:b6:d8:
47:f0:a2:2b:d1:32:23:22:78:05:17:98:f0:b1:3f:
ab:be:29:f3:19:09:eb:11:70:96:91:61:20:45:6c:
0f:cc:48:ac:cc:36:a0:13:d5:e0:85:97:3b:19:bb:
ff:0a:f9:ae:73:f9:4b:dd:84:ed:c5:94:82:da:d7:
d0:61:73:b1:10:cf:0d:b6:8f:bd:5b:7b:0b:61:46:
c6:1a:f6:c9:11:37:9c:0e:aa:3a:ec:3a:26:ae:e8:
71:0e:7c:9a:7f:83:60:21:ac:e8:f5:c4:f9:e0:de:
bd:41:f3:31:ce:a7:07:34:be:99:3c:7a:c1:82:7b:
d4:90:27:bb:d2:64:27:f8:1e:43:b2:13:19:d1:94:
95:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:41:93:C6:E1:94:99:2B:68:C6:F3:8E:C5:23:2C:AC:FD:7B:FA:6B
X509v3 Authority Key Identifier:
keyid:B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f6:bd:f0:b4:3e:97:db:ae:ea:e6:0c:b5:61:29:97:33:46:
ed:85:c7:da:3e:a4:8b:f4:5d:25:fb:8f:f3:e4:84:d7:8e:ec:
24:a8:41:55:1d:cd:70:39:c5:19:4b:f5:82:ad:da:08:9e:38:
17:c6:20:35:65:69:1e:48:0a:98:7b:ba:72:06:c4:e0:5c:ca:
cb:64:23:d4:2e:fb:80:d0:ed:76:94:4d:b9:56:e0:b0:ad:61:
a8:4f:75:1c:6d:98:58:af:57:e6:a8:da:ce:2a:b4:4b:18:24:
46:94:ec:6f:fc:9a:bc:17:29:fd:5f:c3:cd:48:14:09:37:5f:
47:fe:57:60:f2:3e:b4:25:5b:10:8e:ff:89:30:2f:f9:2e:a0:
86:08:05:fb:62:95:05:97:be:e1:e5:21:e3:3c:bc:62:1c:f5:
92:4d:1d:60:03:84:47:97:79:36:1f:19:e6:29:73:11:71:28:
eb:e1:d2:f3:48:5c:79:b0:a7:b9:32:40:25:32:63:37:34:60:
4a:66:47:47:e9:0f:85:ca:e0:96:1e:df:c0:fe:b1:8b:b9:bc:
fd:78:cc:78:38:b2:85:21:df:72:8c:15:06:6d:7c:79:8c:79:
b0:42:6f:66:be:f2:ac:a1:e1:03:36:7f:de:4f:ea:12:93:d3:
28:ff:30:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZYdCUd6ah7YArEP6234OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MzQ0MjE4YTQ4ODBiNTAwYzAzMzMyMWU3NmJkNzhiNGYz
YzE2NTgwHhcNMjUwNzI3MDEwMDQ3WhcNMjUwNzI4MDEwMDQ3WjAzMTEwLwYDVQQD
Eyg0NTQxOTNjNmUxOTQ5OTJiNjhjNmYzOGVjNTIzMmNhY2ZkN2JmYTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3+6rqXKwIm8CM5WSgm4bVdEzk47
V7bu2kBGt/PYgrAMhx7KN77lumWUG/r7wyVMmubmkUH15nA8f854tZjvwJ8xyk00
2QmZ/ApP8Kph7F7FGDQPVR/i8aaBa5qEvRbKK3fl7yo0Js7geYDEjB70mulxNvrK
tthH8KIr0TIjIngFF5jwsT+rvinzGQnrEXCWkWEgRWwPzEiszDagE9XghZc7Gbv/
Cvmuc/lL3YTtxZSC2tfQYXOxEM8Nto+9W3sLYUbGGvbJETecDqo67DomruhxDnya
f4NgIazo9cT54N69QfMxzqcHNL6ZPHrBgnvUkCe70mQn+B5DshMZ0ZSVrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVBk8bhlJkraMbzjsUjLKz9e/prMB8GA1UdIwQY
MBaAFLU0QhikiAtQDAMzIedr14tPPBZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFRSQ0dLU0lDMUFNQXpNaDUydlhpMDg4RmxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9kMjgyYmUtN2NhNS00MDBmLWJlODQt
Y2ZhYjEwZDMwNjkzLzEvdFRSQ0dLU0lDMUFNQXpNaDUydlhpMDg4RmxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9kMjgyYmUtN2NhNS00MDBmLWJlODQtY2ZhYjEwZDMwNjkz
LzEvdFRSQ0dLU0lDMUFNQXpNaDUydlhpMDg4RmxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPa98LQ+
l9uu6uYMtWEplzNG7YXH2j6ki/RdJfuP8+SE147sJKhBVR3NcDnFGUv1gq3aCJ44
F8YgNWVpHkgKmHu6cgbE4FzKy2Qj1C77gNDtdpRNuVbgsK1hqE91HG2YWK9X5qja
ziq0SxgkRpTsb/yavBcp/V/DzUgUCTdfR/5XYPI+tCVbEI7/iTAv+S6ghggF+2KV
BZe+4eUh4zy8Yhz1kk0dYAOER5d5Nh8Z5ilzEXEo6+HS80hcebCnuTJAJTJjNzRg
SmZHR+kPhcrglh7fwP6xi7m8/XjMeDiyhSHfcowVBm18eYx5sEJvZr7yrKHhAzZ/
3k/qEpPTKP8w3g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:35:57 2025 by rpki-client