Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft
File: 6TGKUZjc0_ysJJgFU4XZryEQprQ.mft (raw, json)
Hash identifier: XHXTacFj0WQ9GHaRFaq6VGxfdOQlXfM+oq4h7oQRSVw=
Subject key identifier: 39:8B:BD:B8:91:E5:3D:AA:24:2C:5F:A8:1B:F0:31:73:CA:0E:16:57
Authority key identifier: E9:31:8A:51:98:DC:D3:FC:AC:24:98:05:53:85:D9:AF:21:10:A6:B4
Certificate issuer: /CN=e9318a5198dcd3fcac2498055385d9af2110a6b4
Certificate serial: 01984B8A64B16FA7345DA8BA4488C2AFFB07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft
Manifest number: 054B
Signing time: Sun 27 Jul 2025 11:00:17 +0000
Manifest this update: Sun 27 Jul 2025 11:00:17 +0000
Manifest next update: Mon 28 Jul 2025 11:00:17 +0000
Files and hashes: 1: 1-BVKVQFCRlMAcE96pNTNBcbIG7s.roa (hash: JOxbdIeMTOyk9ZAjY/swAEcMqcgzzQjrBDhzF90m3Vs=)
2: 3ZU7hgqFBvs-JOWJ6E4MEbiA2bk.roa (hash: /NMweqecvh0z4jYnenJq1VRlGwr+MOCXPTrSyQD9fMA=)
3: 6TGKUZjc0_ysJJgFU4XZryEQprQ.crl (hash: In1q9RrivFaFzS6WUOTceLvkbV3P1K3cXpDMCVOZMlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:64:b1:6f:a7:34:5d:a8:ba:44:88:c2:af:fb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9318a5198dcd3fcac2498055385d9af2110a6b4
Validity
Not Before: Jul 27 11:00:17 2025 GMT
Not After : Jul 28 11:00:17 2025 GMT
Subject: CN=398bbdb891e53daa242c5fa81bf03173ca0e1657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:ae:ad:78:63:2b:15:86:2c:f7:88:4f:fc:
1e:e2:fe:8b:62:7e:ad:99:df:53:4d:60:16:9b:68:
36:c1:15:52:6b:ce:e9:e0:dd:33:41:0e:4b:93:48:
16:b4:16:9f:be:dd:b9:11:be:fd:6b:9a:db:cf:2a:
da:77:f7:24:7c:ec:ca:14:43:d5:d8:c1:b8:a9:0b:
cc:4b:b8:3b:1d:33:80:2b:d8:67:13:8d:d2:5e:2e:
70:c6:bf:df:dc:39:5e:e0:1e:f1:cf:34:7c:e6:d3:
99:42:39:e4:ff:1a:63:b3:62:16:f8:32:5d:18:a5:
04:08:07:8d:18:57:38:01:1e:3e:e3:5d:9e:8c:cb:
19:c2:bb:cd:a0:16:cf:df:cb:62:5a:7c:8c:01:ee:
b1:c2:6d:e7:2f:a1:58:67:77:28:8d:48:0f:ea:58:
e9:7c:df:aa:20:52:80:55:1b:8d:28:c9:c5:c1:2b:
19:3e:be:c9:db:e0:31:b9:fc:18:65:9f:7c:f2:cf:
35:ec:46:34:4d:a8:ec:12:58:82:ed:88:28:92:ab:
0b:cc:51:50:0e:02:48:43:89:07:4a:fe:31:32:fc:
35:01:bd:87:cd:d8:6c:b5:5f:5d:3b:5b:1d:25:0a:
9d:1c:68:04:22:af:ad:6a:60:0b:f2:97:75:d3:c2:
f4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8B:BD:B8:91:E5:3D:AA:24:2C:5F:A8:1B:F0:31:73:CA:0E:16:57
X509v3 Authority Key Identifier:
keyid:E9:31:8A:51:98:DC:D3:FC:AC:24:98:05:53:85:D9:AF:21:10:A6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:31:a3:90:cc:d2:3f:d6:e2:2d:18:ed:30:da:27:b2:24:4a:
fe:8a:5a:d9:59:ba:5a:7d:f1:1a:7d:97:aa:fe:c7:36:d7:4a:
5a:e1:60:5a:71:72:f4:aa:40:b0:1d:87:69:f2:31:55:96:a0:
0b:a6:1f:13:db:c7:85:4d:07:26:9b:75:90:f5:04:2f:7a:e2:
b8:f0:f5:b7:fa:3d:34:56:34:1b:7a:4e:57:d8:21:b1:b9:17:
05:92:9c:f9:b1:8c:25:12:04:01:dd:a3:3a:50:a8:52:c0:7d:
df:ea:5d:e1:fc:3d:a5:49:e6:99:5d:29:84:64:73:9b:6f:5a:
d9:4a:be:43:03:64:f8:c4:5d:44:8a:df:d2:00:e5:1e:e9:42:
90:b7:e1:94:97:18:8a:a0:33:a2:f9:be:5f:d5:64:e1:23:34:
71:96:0f:7a:49:aa:00:ad:9e:46:6b:70:8f:d6:ea:65:83:b0:
2c:7f:51:3e:de:46:b3:4a:3e:b5:0d:ca:16:66:84:68:ec:af:
3f:c0:c3:56:72:78:40:17:a4:8c:f8:12:e1:61:95:5a:ab:63:
65:22:14:70:b2:2a:75:74:74:d9:b5:37:94:08:18:ce:b4:60:
b6:c1:15:8b:b2:c0:9f:be:65:b8:6a:91:db:00:0d:e6:ce:d1:
1a:94:1b:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLimSxb6c0Xai6RIjCr/sHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MzE4YTUxOThkY2QzZmNhYzI0OTgwNTUzODVkOWFmMjEx
MGE2YjQwHhcNMjUwNzI3MTEwMDE3WhcNMjUwNzI4MTEwMDE3WjAzMTEwLwYDVQQD
EygzOThiYmRiODkxZTUzZGFhMjQyYzVmYTgxYmYwMzE3M2NhMGUxNjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUGurXhjKxWGLPeIT/we4v6LYn6t
md9TTWAWm2g2wRVSa87p4N0zQQ5Lk0gWtBafvt25Eb79a5rbzyrad/ckfOzKFEPV
2MG4qQvMS7g7HTOAK9hnE43SXi5wxr/f3Dle4B7xzzR85tOZQjnk/xpjs2IW+DJd
GKUECAeNGFc4AR4+412ejMsZwrvNoBbP38tiWnyMAe6xwm3nL6FYZ3cojUgP6ljp
fN+qIFKAVRuNKMnFwSsZPr7J2+AxufwYZZ988s817EY0TajsEliC7YgokqsLzFFQ
DgJIQ4kHSv4xMvw1Ab2HzdhstV9dO1sdJQqdHGgEIq+tamAL8pd108L03wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmLvbiR5T2qJCxfqBvwMXPKDhZXMB8GA1UdIwQY
MBaAFOkxilGY3NP8rCSYBVOF2a8hEKa0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRHS1VaamMwX3lzSkpnRlU0WFpyeUVRcHJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iNjY3YWEtYzQxNS00YmJjLWFkNGMt
YzMzNzdjMWUzYTJkLzEvNlRHS1VaamMwX3lzSkpnRlU0WFpyeUVRcHJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iNjY3YWEtYzQxNS00YmJjLWFkNGMtYzMzNzdjMWUzYTJk
LzEvNlRHS1VaamMwX3lzSkpnRlU0WFpyeUVRcHJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzGjkMzS
P9biLRjtMNonsiRK/opa2Vm6Wn3xGn2Xqv7HNtdKWuFgWnFy9KpAsB2HafIxVZag
C6YfE9vHhU0HJpt1kPUEL3riuPD1t/o9NFY0G3pOV9ghsbkXBZKc+bGMJRIEAd2j
OlCoUsB93+pd4fw9pUnmmV0phGRzm29a2Uq+QwNk+MRdRIrf0gDlHulCkLfhlJcY
iqAzovm+X9Vk4SM0cZYPekmqAK2eRmtwj9bqZYOwLH9RPt5Gs0o+tQ3KFmaEaOyv
P8DDVnJ4QBekjPgS4WGVWqtjZSIUcLIqdXR02bU3lAgYzrRgtsEVi7LAn75luGqR
2wAN5s7RGpQb7A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:41:51 2025 by rpki-client