Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File: tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier: 7C9EpHC64Ix8D7Z7WMta+vVXseYRt4xuTnZFbvOOxNg=
Subject key identifier: 35:19:AA:07:A3:9E:B2:D9:AD:E1:BC:06:AE:16:1F:C1:40:44:DA:14
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer: /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial: 019839F35AC21961DF7F3430F4AD81F5B1A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number: 15F9
Signing time: Thu 24 Jul 2025 01:01:46 +0000
Manifest this update: Thu 24 Jul 2025 01:01:46 +0000
Manifest next update: Fri 25 Jul 2025 01:01:46 +0000
Files and hashes: 1: n9wbgcYA2gFozQl-awLgvubO0Jw.roa (hash: I7/eXt/2fdY6ma/4TQO3Dibom5bD15oMz/+pqihDXpI=)
2: p6rvh-AV0bmaoiN047zHywpJoqY.roa (hash: tR6pKJ08cGe9+fwUehgymwBvOx1rePcqoTH0w7NDkm8=)
3: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: M7qlPXcQYTKSbkhECObCh2ZKWtKzEQTX25JnhTAXTLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:f3:5a:c2:19:61:df:7f:34:30:f4:ad:81:f5:b1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Validity
Not Before: Jul 24 01:01:46 2025 GMT
Not After : Jul 25 01:01:46 2025 GMT
Subject: CN=3519aa07a39eb2d9ade1bc06ae161fc14044da14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2b:0a:63:4c:b0:80:10:41:85:a1:b6:e6:03:
5f:78:24:42:8d:c1:0e:2b:94:2a:26:99:f4:4e:9c:
f7:f9:73:a3:60:8e:45:23:ed:cd:10:a0:bf:21:b9:
78:d1:1f:10:fe:8a:8d:9f:41:5e:15:b7:05:7d:65:
cf:22:0b:5b:d8:07:1f:01:45:fd:f9:ce:6e:49:24:
ea:85:c8:c8:92:3a:0c:90:55:e4:9f:0c:f1:2a:16:
6d:de:ae:14:cb:0b:b9:f5:cc:67:52:04:9c:08:a1:
f3:ab:2d:aa:0e:be:5a:19:09:57:d2:09:5c:43:5c:
c3:d6:29:30:2d:64:db:4f:71:aa:e5:fe:68:52:57:
7a:02:b0:22:2e:4b:41:e2:c4:62:c2:34:4a:c7:66:
58:e6:01:9f:34:df:71:3b:6e:31:2e:7c:a2:76:44:
e9:fa:84:79:f3:83:1c:37:6f:81:b5:b6:bb:b9:dd:
7f:8b:48:c6:28:90:86:34:05:29:a0:15:c3:a5:36:
66:b7:b5:1b:3f:6d:15:87:7e:9f:11:88:d2:2e:ac:
ca:a5:22:b7:21:4e:bb:cf:75:40:ea:bc:91:7b:ff:
e2:ca:0f:dd:1d:1a:49:92:ba:29:e1:9c:f8:f8:c3:
7e:12:bf:95:d1:7e:23:16:71:ae:ac:69:85:e0:d8:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:19:AA:07:A3:9E:B2:D9:AD:E1:BC:06:AE:16:1F:C1:40:44:DA:14
X509v3 Authority Key Identifier:
keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1d:00:c9:6a:2a:89:3d:7c:c2:ce:e9:2a:e0:6d:9e:24:d6:
c4:7b:d5:b1:22:36:6d:1b:95:42:10:2b:66:49:0e:3a:d4:ae:
5c:0d:34:d7:4d:18:e3:8c:da:8f:c8:04:35:16:a4:46:4b:61:
9f:61:c8:8f:53:4f:f1:3b:0b:88:1c:f7:9f:41:28:e7:2a:f9:
2b:dc:f4:e7:d3:6b:13:90:06:f3:d8:65:05:20:05:a1:4b:60:
4f:91:b9:26:fc:e0:4d:3f:de:8e:4a:6d:cb:91:b1:50:66:87:
d0:07:ec:70:52:0e:b4:4b:40:a1:bf:1f:bb:f6:f2:97:b1:63:
d2:12:e0:00:ee:fc:ac:ae:0d:56:f0:14:37:84:e1:b5:ca:d0:
f3:85:53:3b:ab:b5:a7:fa:8d:37:62:93:44:25:d9:a5:97:72:
dd:63:b2:57:8d:36:2c:94:27:24:7d:cc:2d:db:1f:5f:bb:1d:
39:c3:00:5b:d5:9a:51:dc:e4:eb:cf:b1:cf:f4:ed:8b:90:23:
e6:0b:68:ad:dd:35:3a:87:fd:56:de:82:96:fa:1f:43:7c:50:
1a:e8:97:e8:10:a6:87:21:4a:13:b9:9b:da:e4:d3:3a:a4:95:
e9:02:a8:dc:c5:66:49:79:f8:83:33:d2:ae:31:6f:50:6f:d0:
7a:a1:90:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg581rCGWHffzQw9K2B9bGmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YTE2NTRkYWU5NmM1MzI1NzhjZTFkZjFlYmI4MjIxZGJi
NjgxNDUwHhcNMjUwNzI0MDEwMTQ2WhcNMjUwNzI1MDEwMTQ2WjAzMTEwLwYDVQQD
EygzNTE5YWEwN2EzOWViMmQ5YWRlMWJjMDZhZTE2MWZjMTQwNDRkYTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvysKY0ywgBBBhaG25gNfeCRCjcEO
K5QqJpn0Tpz3+XOjYI5FI+3NEKC/Ibl40R8Q/oqNn0FeFbcFfWXPIgtb2AcfAUX9
+c5uSSTqhcjIkjoMkFXknwzxKhZt3q4Uywu59cxnUgScCKHzqy2qDr5aGQlX0glc
Q1zD1ikwLWTbT3Gq5f5oUld6ArAiLktB4sRiwjRKx2ZY5gGfNN9xO24xLnyidkTp
+oR584McN2+Btba7ud1/i0jGKJCGNAUpoBXDpTZmt7UbP20Vh36fEYjSLqzKpSK3
IU67z3VA6ryRe//iyg/dHRpJkrop4Zz4+MN+Er+V0X4jFnGurGmF4NhXNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUZqgejnrLZreG8Bq4WH8FARNoUMB8GA1UdIwQY
MBaAFLahZU2ulsUyV4zh3x67giHbtoFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHFGbFRhNld4VEpYak9IZkhydUNJZHUyZ1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iMDExZDMtYmRiYS00NWNkLWE4YWMt
ZTBiZTg5YzRmMTY5LzEvdHFGbFRhNld4VEpYak9IZkhydUNJZHUyZ1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iMDExZDMtYmRiYS00NWNkLWE4YWMtZTBiZTg5YzRmMTY5
LzEvdHFGbFRhNld4VEpYak9IZkhydUNJZHUyZ1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJh0AyWoq
iT18ws7pKuBtniTWxHvVsSI2bRuVQhArZkkOOtSuXA00100Y44zaj8gENRakRkth
n2HIj1NP8TsLiBz3n0Eo5yr5K9z059NrE5AG89hlBSAFoUtgT5G5JvzgTT/ejkpt
y5GxUGaH0AfscFIOtEtAob8fu/byl7Fj0hLgAO78rK4NVvAUN4ThtcrQ84VTO6u1
p/qNN2KTRCXZpZdy3WOyV402LJQnJH3MLdsfX7sdOcMAW9WaUdzk68+xz/Tti5Aj
5gtord01Oof9Vt6ClvofQ3xQGuiX6BCmhyFKE7mb2uTTOqSV6QKo3MVmSXn4gzPS
rjFvUG/QeqGQFA==
-----END CERTIFICATE-----
Generated at Thu Jul 24 04:52:50 2025 by rpki-client