Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
File: tLC71kRVeO28e6a1v3ypNo0kF78.mft (raw, json)
Hash identifier: mOcLgZn0Z8vpUxYdpeA9rucdPJc1kvCZpHGOMWVVEXk=
Subject key identifier: 3A:3A:A4:C8:C8:CE:FD:9D:C0:DB:65:1E:7A:BB:1C:AA:DC:74:47:70
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial: 01984AE5AA86ED1E79F126DAB02352F55481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
Manifest number: 0C65
Signing time: Sun 27 Jul 2025 08:00:21 +0000
Manifest this update: Sun 27 Jul 2025 08:00:21 +0000
Manifest next update: Mon 28 Jul 2025 08:00:21 +0000
Files and hashes: 1: E_gpRXs1wyJj1CMrt4P6GzVFs4U.roa (hash: gqqgWP9QREPzkIwRRirj81r/4D9tgTwnunohsTpcA6w=)
2: HYQhj9GfS2VL1LGH2hoGRnAq_1g.roa (hash: vupLnnm29iaNTZjA+glh+6XHc5HkCkw1Lh/FCGeyQn4=)
3: tLC71kRVeO28e6a1v3ypNo0kF78.crl (hash: tfXfEIhe+Dg5uRzc468utuJokZAsaH5i0snU9Haf+ag=)
4: zqLBYDBfWNqychEyI3nXYt2CCRQ.roa (hash: xPd7pskgYW4omSSyK6JduhnPOzmyiWl553qH0EzZiqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:aa:86:ed:1e:79:f1:26:da:b0:23:52:f5:54:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Validity
Not Before: Jul 27 08:00:21 2025 GMT
Not After : Jul 28 08:00:21 2025 GMT
Subject: CN=3a3aa4c8c8cefd9dc0db651e7abb1caadc744770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:25:21:05:c4:6d:9e:c3:3c:18:46:4b:a0:
e9:e7:69:a6:0e:8d:cc:a3:5e:5c:ed:c9:9f:ab:cd:
41:e3:32:ca:60:48:1b:1f:03:53:a3:3d:f0:4d:16:
09:9d:49:49:16:87:f0:ff:a1:f8:37:c5:c7:e2:2e:
2b:f0:dd:fc:82:5b:72:07:7d:94:d4:a7:64:4a:da:
6f:7f:6c:6d:ca:a1:d6:0d:fa:70:15:eb:7c:8d:a3:
d2:48:37:af:3f:f3:69:9d:48:4c:bc:66:c2:25:89:
4f:49:dd:ad:e2:dd:fe:36:a8:13:4e:3f:54:75:58:
41:66:c4:99:f6:ef:d4:b0:3e:dd:a6:e7:e4:97:f7:
ea:4c:56:80:fb:93:01:77:38:55:dc:cb:bc:44:ff:
ae:55:eb:fb:b5:4a:23:5d:b0:76:d6:dd:28:73:1f:
53:ce:b1:de:c9:13:0d:b3:ac:ee:6b:f1:7e:cb:fa:
3d:1a:24:4e:78:28:85:f0:f1:a1:25:f4:78:dc:67:
74:d8:0e:28:17:79:12:5c:68:4b:a1:66:61:60:d9:
6b:51:9a:47:df:30:4f:30:ae:aa:e0:6d:5f:ed:80:
23:4c:0a:be:1c:97:c8:fc:6f:97:b0:6c:7e:39:16:
a0:97:40:47:70:17:13:54:d0:c4:9b:a5:bc:27:1d:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3A:A4:C8:C8:CE:FD:9D:C0:DB:65:1E:7A:BB:1C:AA:DC:74:47:70
X509v3 Authority Key Identifier:
keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c6:1a:55:b3:c1:d7:f1:4c:23:77:4c:94:6e:f8:a6:2f:32:
f1:fa:98:ec:21:4c:b8:46:fa:3b:66:b6:00:53:02:37:fb:76:
49:b6:af:58:a2:25:07:46:99:b1:11:ff:f5:a8:b7:c6:98:4e:
78:a4:84:45:b1:46:46:71:c5:d1:ec:a1:aa:7b:28:e3:6b:5a:
8d:7a:01:58:7f:74:bf:ae:5b:51:3c:4d:ec:48:a3:61:43:16:
03:c9:b9:c5:aa:76:72:2f:31:c7:76:d7:96:5c:8c:cd:99:72:
61:98:17:15:66:cb:6e:b7:24:6f:b3:37:8d:ef:74:b0:b7:5b:
22:d0:65:85:d3:03:69:eb:e6:48:bc:8c:17:a0:fc:ab:14:c5:
f9:ae:99:33:53:c9:02:d5:19:8e:d3:ff:6e:af:17:66:a3:33:
91:fe:59:cd:02:f9:64:18:cd:ac:3c:ea:6b:e6:33:b4:19:93:
4c:97:51:15:72:f0:2d:d4:b4:f4:05:38:2a:71:60:cf:f9:e5:
68:fc:9b:90:aa:0a:da:e5:08:6c:dd:b5:ff:75:c3:02:39:75:
cb:c8:2f:2f:a5:c6:b3:80:c5:73:0f:dc:c5:ff:eb:08:4e:46:
92:b9:41:fc:c5:72:02:61:f0:89:ad:ae:96:c5:b4:59:7d:2a:
7c:69:12:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5aqG7R558SbasCNS9VSBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YjBiYmQ2NDQ1NTc4ZWRiYzdiYTZiNWJmN2NhOTM2OGQy
NDE3YmYwHhcNMjUwNzI3MDgwMDIxWhcNMjUwNzI4MDgwMDIxWjAzMTEwLwYDVQQD
EygzYTNhYTRjOGM4Y2VmZDlkYzBkYjY1MWU3YWJiMWNhYWRjNzQ0NzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjwlIQXEbZ7DPBhGS6Dp52mmDo3M
o15c7cmfq81B4zLKYEgbHwNToz3wTRYJnUlJFofw/6H4N8XH4i4r8N38gltyB32U
1KdkStpvf2xtyqHWDfpwFet8jaPSSDevP/NpnUhMvGbCJYlPSd2t4t3+NqgTTj9U
dVhBZsSZ9u/UsD7dpufkl/fqTFaA+5MBdzhV3Mu8RP+uVev7tUojXbB21t0ocx9T
zrHeyRMNs6zua/F+y/o9GiROeCiF8PGhJfR43Gd02A4oF3kSXGhLoWZhYNlrUZpH
3zBPMK6q4G1f7YAjTAq+HJfI/G+XsGx+ORagl0BHcBcTVNDEm6W8Jx0OEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDo6pMjIzv2dwNtlHnq7HKrcdEdwMB8GA1UdIwQY
MBaAFLSwu9ZEVXjtvHumtb98qTaNJBe/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNTAyZmMtZDlmNy00ZmE4LWJhZjYt
NzdkNTI5YmU1M2Q3LzEvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zNTAyZmMtZDlmNy00ZmE4LWJhZjYtNzdkNTI5YmU1M2Q3
LzEvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8YaVbPB
1/FMI3dMlG74pi8y8fqY7CFMuEb6O2a2AFMCN/t2SbavWKIlB0aZsRH/9ai3xphO
eKSERbFGRnHF0eyhqnso42tajXoBWH90v65bUTxN7EijYUMWA8m5xap2ci8xx3bX
llyMzZlyYZgXFWbLbrckb7M3je90sLdbItBlhdMDaevmSLyMF6D8qxTF+a6ZM1PJ
AtUZjtP/bq8XZqMzkf5ZzQL5ZBjNrDzqa+YztBmTTJdRFXLwLdS09AU4KnFgz/nl
aPybkKoK2uUIbN21/3XDAjl1y8gvL6XGs4DFcw/cxf/rCE5GkrlB/MVyAmHwia2u
lsW0WX0qfGkSfA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:53:12 2025 by rpki-client