Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: eHTBxrlF6kiGBjXBhLDjXyXmMp+jvoCGE5yzvqQVmAo=
Subject key identifier: C2:E8:E2:DC:30:F6:35:91:33:68:A1:EE:66:77:D6:50:3F:C9:25:9B
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 019847E48CDECD8D0FC1A8DEC7A8A76C6E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 0F15
Signing time: Sat 26 Jul 2025 18:00:17 +0000
Manifest this update: Sat 26 Jul 2025 18:00:17 +0000
Manifest next update: Sun 27 Jul 2025 18:00:17 +0000
Files and hashes: 1: VYJ9qKilNSj9Z30pGpYaNAGU4Z0.roa (hash: j29BGrdUX9gZWLn/MqLu3C1IYATOJG6BtpBREfenzkc=)
2: dek1yBz9hU9Sw_jKA33of_zM9K4.roa (hash: yub3ufVUEc3WS+XkUJMCp9euptnf3DjONJgSPtRCvNQ=)
3: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: p5zmSfybpy2x7bnSl9F/WppfWJdjCXMPIQLJaKzPJv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:8c:de:cd:8d:0f:c1:a8:de:c7:a8:a7:6c:6e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Jul 26 18:00:17 2025 GMT
Not After : Jul 27 18:00:17 2025 GMT
Subject: CN=c2e8e2dc30f635913368a1ee6677d6503fc9259b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:24:d1:11:d3:03:25:f2:1c:20:fd:3b:cb:
df:cc:bc:91:1d:4e:c1:82:32:fa:75:dd:31:9a:9a:
d3:8c:d2:c2:e5:a9:14:19:34:9b:44:4b:43:91:5c:
43:ac:f9:8b:aa:1f:ed:1e:e9:db:ee:79:82:db:09:
41:1c:76:71:f8:bb:38:14:20:a6:0a:17:b5:b5:2f:
8d:53:64:7a:26:7d:d6:91:cb:2c:28:bb:78:ac:53:
77:33:d6:d0:32:bd:b9:31:8b:39:e4:7d:ae:f4:df:
2c:63:9e:e7:e4:dc:58:f1:c2:df:8d:c1:84:dd:ce:
cf:44:dc:21:ca:61:7f:33:6f:08:e0:aa:51:8b:87:
fb:89:46:56:90:f2:ee:ea:ac:c3:bd:4e:f5:6e:fa:
dc:e3:25:cc:7e:d2:1a:db:70:39:fb:ab:a5:8a:15:
5b:38:3c:47:c3:f2:ce:60:ef:fd:d3:b1:71:57:66:
c2:e4:54:6e:f0:a8:8c:36:59:cf:64:42:55:3c:f8:
69:84:11:3d:57:f1:55:38:9e:01:5d:1b:6c:07:b3:
d6:35:d5:9b:0d:fa:93:6a:ed:fd:58:65:74:48:3d:
c3:ec:98:67:49:bc:6f:67:16:1e:0d:04:a5:76:9e:
81:7a:39:3f:25:aa:ab:11:ab:14:94:4e:6b:ab:6b:
0d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E8:E2:DC:30:F6:35:91:33:68:A1:EE:66:77:D6:50:3F:C9:25:9B
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:88:a2:ad:df:09:78:3a:02:9f:5b:f2:15:77:ac:34:e3:56:
e6:da:45:ba:0b:f7:b2:0c:40:2a:61:06:9d:12:cd:6a:c1:46:
1b:4f:34:85:f1:cd:34:74:90:c9:37:42:c0:70:2f:f2:52:1e:
50:fd:88:78:7c:d8:76:ac:d1:a0:a1:b4:e0:08:29:76:1a:c0:
37:98:ab:81:2f:48:3c:e5:52:8f:e3:b8:1c:5c:c4:bd:3e:f4:
b3:68:aa:50:92:be:a7:1f:6e:c3:fa:73:6b:dd:5f:20:93:a2:
aa:f5:b8:ae:0e:30:50:58:34:c1:5f:6a:b6:45:5d:14:8d:e7:
54:04:2a:a5:b4:48:15:a2:9f:6d:a7:6d:ff:6a:81:33:d2:c3:
0e:01:34:3b:75:14:ac:84:51:e3:f0:9b:51:7d:74:bc:e0:cf:
01:4b:0d:91:89:f3:01:ea:77:b7:98:c0:11:3d:4c:2f:3a:49:
31:9a:4a:8b:ed:a2:e4:7a:8d:53:87:3d:e1:c1:08:5a:c8:17:
6b:05:47:1c:91:97:67:35:7a:0f:84:d2:d7:ee:e1:42:cc:d4:
36:02:bf:30:1a:99:c0:74:27:ca:e5:e4:88:02:39:d9:ba:97:
16:f4:56:7f:d3:c2:20:af:67:57:42:3a:48:20:eb:64:39:a5:
e2:5c:12:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5IzezY0Pwajex6inbG6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MGQ0OTQzMzNjYjRkOWU1ZmQxMGM4NDZjNDdjZjU2NDQ1
YzUwM2EwHhcNMjUwNzI2MTgwMDE3WhcNMjUwNzI3MTgwMDE3WjAzMTEwLwYDVQQD
EyhjMmU4ZTJkYzMwZjYzNTkxMzM2OGExZWU2Njc3ZDY1MDNmYzkyNTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9Ak0RHTAyXyHCD9O8vfzLyRHU7B
gjL6dd0xmprTjNLC5akUGTSbREtDkVxDrPmLqh/tHunb7nmC2wlBHHZx+Ls4FCCm
Che1tS+NU2R6Jn3WkcssKLt4rFN3M9bQMr25MYs55H2u9N8sY57n5NxY8cLfjcGE
3c7PRNwhymF/M28I4KpRi4f7iUZWkPLu6qzDvU71bvrc4yXMftIa23A5+6ulihVb
ODxHw/LOYO/907FxV2bC5FRu8KiMNlnPZEJVPPhphBE9V/FVOJ4BXRtsB7PWNdWb
DfqTau39WGV0SD3D7JhnSbxvZxYeDQSldp6Bejk/JaqrEasUlE5rq2sNfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLo4tww9jWRM2ih7mZ31lA/ySWbMB8GA1UdIwQY
MBaAFLQNSUMzy02eX9EMhGxHz1ZEXFA6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYTdiZjQtMzQ1NC00ZDE0LTllMGMt
MTgzZjk5NzVmYzk0LzEvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yYTdiZjQtMzQ1NC00ZDE0LTllMGMtMTgzZjk5NzVmYzk0
LzEvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYiird8J
eDoCn1vyFXesNONW5tpFugv3sgxAKmEGnRLNasFGG080hfHNNHSQyTdCwHAv8lIe
UP2IeHzYdqzRoKG04AgpdhrAN5irgS9IPOVSj+O4HFzEvT70s2iqUJK+px9uw/pz
a91fIJOiqvW4rg4wUFg0wV9qtkVdFI3nVAQqpbRIFaKfbadt/2qBM9LDDgE0O3UU
rIRR4/CbUX10vODPAUsNkYnzAep3t5jAET1MLzpJMZpKi+2i5HqNU4c94cEIWsgX
awVHHJGXZzV6D4TS1+7hQszUNgK/MBqZwHQnyuXkiAI52bqXFvRWf9PCIK9nV0I6
SCDrZDml4lwSDQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:32:16 2025 by rpki-client