
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
File: tFBkwayGkOLHepWaUCVG6YvNNyc.mft (raw, json)
Hash identifier: kMNd3XgwaVvmxFNvM9Kn/VXcNYrkFBlHvRZ0rZgaAfg=
Subject key identifier: 01:2C:03:CA:A9:94:DC:8D:7B:04:49:19:A3:88:0B:5F:D4:D2:B1:9E
Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
Certificate issuer: /CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Certificate serial: 019845898C8F38578F5532F2B22D6C82C8BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
Manifest number: 0C7F
Signing time: Sat 26 Jul 2025 07:01:39 +0000
Manifest this update: Sat 26 Jul 2025 07:01:39 +0000
Manifest next update: Sun 27 Jul 2025 07:01:39 +0000
Files and hashes: 1: _INaZ6DycFqZuVm42lkSOfz9oRs.roa (hash: N1fFaEC6dFW7nNDOY6nEbXrF6dJ7s2tSPU9xB9zA38k=)
2: tFBkwayGkOLHepWaUCVG6YvNNyc.crl (hash: AAnYZa/qyYElJxPNHW4HDs6IQEabcfgdnq3JqQVptrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:8c:8f:38:57:8f:55:32:f2:b2:2d:6c:82:c8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Validity
Not Before: Jul 26 07:01:39 2025 GMT
Not After : Jul 27 07:01:39 2025 GMT
Subject: CN=012c03caa994dc8d7b044919a3880b5fd4d2b19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4d:80:8f:61:f2:10:6f:1e:7c:33:a9:d0:e1:
cc:c3:b8:f1:8c:7c:64:ae:5a:7e:9f:99:94:61:23:
2e:81:02:40:79:b3:7e:c4:3c:06:a9:8b:3b:4b:f5:
58:49:2d:c7:56:58:be:cd:bf:e3:74:32:47:35:63:
20:91:09:a3:e2:92:7d:5a:d9:ae:ef:57:14:87:f2:
c9:7d:1c:5e:80:af:de:8a:5a:23:64:9e:80:4b:9d:
03:97:4e:29:22:d3:01:43:36:eb:06:54:36:3c:88:
50:32:46:93:e4:1d:21:8d:3d:42:f4:4a:7e:be:af:
c1:3e:93:03:35:be:d3:14:25:7f:40:43:aa:5f:56:
8b:7b:19:e8:c4:5d:8b:25:c3:f6:a7:3c:00:81:ae:
2e:6d:26:a1:ff:2d:3e:1a:86:79:be:f7:d2:0a:cf:
9c:49:d3:7f:12:87:6b:d5:9a:73:96:8f:1f:bc:20:
fa:c7:d7:6c:ee:cb:23:b8:62:9d:28:a0:34:ed:4e:
5d:a8:30:8f:b8:2f:a2:9e:6c:0b:70:1d:e4:77:bf:
32:a3:08:61:02:d6:ff:f2:c3:57:13:96:51:9e:6a:
0f:be:18:a8:fd:ba:b6:d6:3a:53:33:f0:c5:fe:0e:
76:a7:f1:90:8e:4a:35:f9:e6:22:4e:35:62:cc:70:
d8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2C:03:CA:A9:94:DC:8D:7B:04:49:19:A3:88:0B:5F:D4:D2:B1:9E
X509v3 Authority Key Identifier:
keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b7:1b:b3:bd:7c:10:c9:b6:90:19:ea:4d:62:c4:be:0e:3b:
64:7a:d6:b5:59:9e:0e:a0:6e:50:6e:e8:a7:c3:b5:67:18:3e:
63:de:18:fe:97:a9:72:fb:8c:06:a3:df:a9:9a:a3:a1:67:6c:
cb:94:0e:39:21:65:b5:b2:37:19:38:90:6a:20:7a:14:a8:98:
43:66:88:50:eb:fc:8b:fb:a3:24:c7:c5:0d:d8:06:32:06:c7:
ac:72:1b:ad:4f:21:66:59:34:a3:2e:02:50:8c:98:8e:6c:7d:
30:1f:23:7f:16:2e:08:6e:50:63:e7:c9:74:59:99:3f:d5:f2:
5c:fb:5e:d0:52:81:03:7d:dc:d8:8c:62:cf:e3:28:a7:a7:f4:
53:f2:84:73:f2:2f:d1:32:76:9c:e4:bd:98:c0:3d:b8:12:59:
6d:80:ed:f8:63:ce:b1:86:ed:78:a8:8c:e6:98:07:8c:e3:37:
85:8c:aa:dd:36:6b:e9:24:68:31:dd:46:b2:9f:92:21:94:a9:
d4:87:7a:b7:76:30:85:cf:7f:0e:a8:f0:b1:71:98:03:0a:2b:
cd:cd:10:a9:3b:b7:31:81:37:1f:d9:dc:4f:93:8d:53:83:f1:
41:38:78:f5:67:e3:0f:99:41:68:b3:2e:16:36:e6:64:01:69:
d2:ae:b7:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiYyPOFePVTLysi1sgsi7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTA2NGMxYWM4NjkwZTJjNzdhOTU5YTUwMjU0NmU5OGJj
ZDM3MjcwHhcNMjUwNzI2MDcwMTM5WhcNMjUwNzI3MDcwMTM5WjAzMTEwLwYDVQQD
EygwMTJjMDNjYWE5OTRkYzhkN2IwNDQ5MTlhMzg4MGI1ZmQ0ZDJiMTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4k2Aj2HyEG8efDOp0OHMw7jxjHxk
rlp+n5mUYSMugQJAebN+xDwGqYs7S/VYSS3HVli+zb/jdDJHNWMgkQmj4pJ9Wtmu
71cUh/LJfRxegK/eilojZJ6AS50Dl04pItMBQzbrBlQ2PIhQMkaT5B0hjT1C9Ep+
vq/BPpMDNb7TFCV/QEOqX1aLexnoxF2LJcP2pzwAga4ubSah/y0+GoZ5vvfSCs+c
SdN/Eodr1Zpzlo8fvCD6x9ds7ssjuGKdKKA07U5dqDCPuC+inmwLcB3kd78yowhh
Atb/8sNXE5ZRnmoPvhio/bq21jpTM/DF/g52p/GQjko1+eYiTjVizHDYEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEsA8qplNyNewRJGaOIC1/U0rGeMB8GA1UdIwQY
MBaAFLRQZMGshpDix3qVmlAlRumLzTcnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZCa3dheUdrT0xIZXBXYVVDVkc2WXZOTnljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8zNTkxNzktNGFjMi00MzFjLTk1MzEt
MGI3YTMzZGQ1YjU2LzEvdEZCa3dheUdrT0xIZXBXYVVDVkc2WXZOTnljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8zNTkxNzktNGFjMi00MzFjLTk1MzEtMGI3YTMzZGQ1YjU2
LzEvdEZCa3dheUdrT0xIZXBXYVVDVkc2WXZOTnljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLcbs718
EMm2kBnqTWLEvg47ZHrWtVmeDqBuUG7op8O1Zxg+Y94Y/pepcvuMBqPfqZqjoWds
y5QOOSFltbI3GTiQaiB6FKiYQ2aIUOv8i/ujJMfFDdgGMgbHrHIbrU8hZlk0oy4C
UIyYjmx9MB8jfxYuCG5QY+fJdFmZP9XyXPte0FKBA33c2Ixiz+Mop6f0U/KEc/Iv
0TJ2nOS9mMA9uBJZbYDt+GPOsYbteKiM5pgHjOM3hYyq3TZr6SRoMd1Gsp+SIZSp
1Id6t3Ywhc9/DqjwsXGYAworzc0QqTu3MYE3H9ncT5ONU4PxQTh49WfjD5lBaLMu
FjbmZAFp0q63Lw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:53:22 2025 by rpki-client