Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
File: tF9VYNefBKktehUPPtjaQwir6jM.mft (raw, json)
Hash identifier: t/N5JG+OFW6sBcaZ5bh7KnhIFUEw1yCmVuaikKW82cY=
Subject key identifier: 0B:85:0A:98:03:1B:81:00:A3:3A:08:4B:8E:5A:C0:20:15:19:CB:0C
Authority key identifier: B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33
Certificate issuer: /CN=b45f5560d79f04a92d7a150f3ed8da4308abea33
Certificate serial: 019843D11EB3287C6B745F154ECA9C164676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
Manifest number: 1186
Signing time: Fri 25 Jul 2025 23:00:35 +0000
Manifest this update: Fri 25 Jul 2025 23:00:35 +0000
Manifest next update: Sat 26 Jul 2025 23:00:35 +0000
Files and hashes: 1: rFHksT2fJAQ7epdh-sMDgGR2SM4.roa (hash: Z/iFpAzmqAm2KrlQVqRFy4X3KTo7SXYWoBA5a7g2HG4=)
2: tF9VYNefBKktehUPPtjaQwir6jM.crl (hash: 515R4lQ8tKhBJz9Ysunmb9PVpuETf2EALWQr44BEcIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:d1:1e:b3:28:7c:6b:74:5f:15:4e:ca:9c:16:46:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45f5560d79f04a92d7a150f3ed8da4308abea33
Validity
Not Before: Jul 25 23:00:35 2025 GMT
Not After : Jul 26 23:00:35 2025 GMT
Subject: CN=0b850a98031b8100a33a084b8e5ac0201519cb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cf:56:61:4c:97:70:3c:8d:f2:ed:f4:69:bf:
d6:fd:1d:95:67:21:71:3b:ca:7d:19:fe:1a:74:b6:
cb:83:d7:9d:41:26:47:a7:ae:7e:19:31:e3:20:fd:
ba:23:09:1c:3b:3d:a4:9c:fb:e8:68:cd:86:7a:e1:
8f:80:85:ca:03:61:09:cc:c4:9f:c8:2d:bc:e3:32:
ca:23:69:99:49:29:9f:57:7c:ef:ad:13:0d:dd:8d:
5b:b4:8c:fc:4d:1e:91:e2:f8:89:0d:0a:d6:66:4a:
cf:db:f7:03:50:8d:29:d2:58:f3:3c:c9:92:5c:7f:
b1:f4:6f:bf:ba:bb:de:0b:c8:95:24:5f:54:a7:75:
10:4a:7a:29:3b:c4:4c:d9:55:06:19:db:fe:46:0d:
65:81:a9:50:3c:c0:0e:6b:2f:9f:ea:02:76:d8:e4:
66:3a:9e:2a:ea:fb:db:0c:25:67:fb:2d:7c:b4:62:
38:fc:71:4d:ca:4d:b6:f8:bf:52:e3:7a:a5:87:ed:
fb:7c:e5:75:21:6d:6d:c0:d5:f8:78:0c:7b:e5:71:
b3:ec:f3:08:1d:69:d9:c6:be:2f:7b:ba:ff:67:a3:
04:fc:5c:1d:d7:08:8d:34:91:e6:fa:25:fa:a8:c8:
49:fe:f3:77:3e:6d:3d:a9:de:3e:04:e4:d7:83:e9:
4a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:85:0A:98:03:1B:81:00:A3:3A:08:4B:8E:5A:C0:20:15:19:CB:0C
X509v3 Authority Key Identifier:
keyid:B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:da:46:da:f2:a2:7c:63:26:49:be:21:83:5e:69:1f:70:9f:
68:f5:d6:73:38:12:cb:35:39:44:84:8e:e5:49:11:1b:d2:f9:
73:00:5f:f5:b5:c1:57:36:0a:57:37:fd:b3:28:49:9f:3b:b8:
7d:c5:eb:8f:65:a4:19:b8:a5:cd:80:8a:a1:5f:9f:7d:cb:a8:
b2:ce:3b:f0:0a:7e:f5:24:c2:92:ce:43:68:4b:93:94:aa:79:
8d:dd:a7:2e:22:ab:1c:a8:f9:f7:fd:d1:88:34:99:9a:02:19:
62:a7:87:b7:b6:fb:4b:b3:3a:59:e4:38:2f:e2:57:8f:33:8e:
7a:23:c7:f7:32:8d:78:e4:a5:4f:6d:47:c9:70:a1:44:a8:34:
a1:a4:b8:ee:4e:24:13:e1:f8:4b:e5:ba:44:8d:59:17:cf:13:
2e:cc:71:bf:ec:9f:86:9c:06:2d:c9:ea:4d:a7:d6:17:0d:1b:
43:03:e2:93:da:82:7f:7b:7b:4d:f0:1a:59:06:65:87:71:40:
42:13:b3:e5:08:b5:7e:90:46:0f:5b:ba:b7:43:f3:84:88:66:
10:11:35:60:f1:fb:65:a4:a3:5c:6e:95:32:20:73:dc:53:d6:
fd:9a:f3:b0:5d:4b:c5:6c:d8:b0:aa:a3:70:78:9b:e0:e4:f5:
69:95:c3:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhD0R6zKHxrdF8VTsqcFkZ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NWY1NTYwZDc5ZjA0YTkyZDdhMTUwZjNlZDhkYTQzMDhh
YmVhMzMwHhcNMjUwNzI1MjMwMDM1WhcNMjUwNzI2MjMwMDM1WjAzMTEwLwYDVQQD
EygwYjg1MGE5ODAzMWI4MTAwYTMzYTA4NGI4ZTVhYzAyMDE1MTljYjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls9WYUyXcDyN8u30ab/W/R2VZyFx
O8p9Gf4adLbLg9edQSZHp65+GTHjIP26IwkcOz2knPvoaM2GeuGPgIXKA2EJzMSf
yC284zLKI2mZSSmfV3zvrRMN3Y1btIz8TR6R4viJDQrWZkrP2/cDUI0p0ljzPMmS
XH+x9G+/urveC8iVJF9Up3UQSnopO8RM2VUGGdv+Rg1lgalQPMAOay+f6gJ22ORm
Op4q6vvbDCVn+y18tGI4/HFNyk22+L9S43qlh+37fOV1IW1twNX4eAx75XGz7PMI
HWnZxr4ve7r/Z6ME/Fwd1wiNNJHm+iX6qMhJ/vN3Pm09qd4+BOTXg+lKzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuFCpgDG4EAozoIS45awCAVGcsMMB8GA1UdIwQY
MBaAFLRfVWDXnwSpLXoVDz7Y2kMIq+ozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEY5VllOZWZCS2t0ZWhVUFB0amFRd2lyNmpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83YjE2OWQtZmMwOS00OWJiLTk2Njkt
YzMyMjI0NzRlZWYxLzEvdEY5VllOZWZCS2t0ZWhVUFB0amFRd2lyNmpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy83YjE2OWQtZmMwOS00OWJiLTk2NjktYzMyMjI0NzRlZWYx
LzEvdEY5VllOZWZCS2t0ZWhVUFB0amFRd2lyNmpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9pG2vKi
fGMmSb4hg15pH3CfaPXWczgSyzU5RISO5UkRG9L5cwBf9bXBVzYKVzf9syhJnzu4
fcXrj2WkGbilzYCKoV+ffcuoss478Ap+9STCks5DaEuTlKp5jd2nLiKrHKj59/3R
iDSZmgIZYqeHt7b7S7M6WeQ4L+JXjzOOeiPH9zKNeOSlT21HyXChRKg0oaS47k4k
E+H4S+W6RI1ZF88TLsxxv+yfhpwGLcnqTafWFw0bQwPik9qCf3t7TfAaWQZlh3FA
QhOz5Qi1fpBGD1u6t0PzhIhmEBE1YPH7ZaSjXG6VMiBz3FPW/ZrzsF1LxWzYsKqj
cHib4OT1aZXDeA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 07:34:10 2025 by rpki-client