Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
File: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft (raw, json)
Hash identifier: shvugtzj4bS1i/CHKJLf3L3m9CKVLuxPx8AZA4TZcMo=
Subject key identifier: 63:5D:A8:E6:EF:C2:E8:57:AB:E9:9D:26:F8:E4:C0:33:D8:BD:75:E6
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Certificate issuer: /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial: 019930115F5C17A33EDE420265C99D1054B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
Manifest number: 0D42
Signing time: Tue 09 Sep 2025 20:01:08 +0000
Manifest this update: Tue 09 Sep 2025 20:01:08 +0000
Manifest next update: Wed 10 Sep 2025 20:01:08 +0000
Files and hashes: 1: 3R1qEXucRzxQh626HSW1D35Fl4s.roa (hash: LtQHe1lS81VaVTgB7dK3iqoJ6l+gsJCEbPPIKSQ56qA=)
2: shBZifpLlKUixrRLPCki_9Cdo5k.roa (hash: vUCEHBiQ5vk3QwGcMpMB9RyrWPTOpvKerhzJgaIKpHk=)
3: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl (hash: 0+cixYR5zePPRb/q7B8kkybUM+Um6Ch+GUaZau58foU=)
4: xPMhM3gDhaqkEeW-0RAQthU0wZQ.roa (hash: +K0EshtD5Pam9WJWgjYOHCV5ZtA/67vGEzp1bYJI+K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:11:5f:5c:17:a3:3e:de:42:02:65:c9:9d:10:54:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Validity
Not Before: Sep 9 20:01:08 2025 GMT
Not After : Sep 10 20:01:08 2025 GMT
Subject: CN=635da8e6efc2e857abe99d26f8e4c033d8bd75e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:d5:7a:80:7a:fb:5a:ae:e2:cb:28:fa:d6:
e1:ef:b1:2b:32:b5:58:33:f3:79:90:ca:ff:52:a3:
3f:7a:6e:1e:1b:64:a1:42:03:db:45:93:57:9c:57:
b9:a9:eb:f8:16:90:01:44:7a:b8:99:0e:57:10:4f:
04:5f:41:29:d6:7b:39:56:bd:a7:ef:f3:05:77:f3:
0c:ed:8e:37:83:91:83:ff:6c:b0:e7:39:e9:b0:ed:
2a:a2:df:7e:e9:e6:3a:22:65:d4:90:53:a6:5f:2b:
0d:14:45:51:38:a2:36:c8:54:8b:23:52:8c:af:f5:
d5:40:56:af:fc:7c:6c:35:c9:df:6a:bd:8d:a0:2d:
ec:aa:57:87:d9:eb:ce:81:c1:8d:95:ad:c9:cd:4b:
4c:6f:9c:49:3c:46:53:ee:44:28:71:f9:c3:89:29:
a2:92:0d:3e:f7:41:19:38:a0:92:b3:a2:c7:ec:1b:
22:fe:7f:f5:19:e3:f6:5e:aa:53:b0:6f:1e:e4:2b:
70:8e:b4:0b:d3:f3:f7:a2:49:e1:48:52:cc:10:2b:
a0:63:a3:0e:0c:42:e1:d8:48:f0:25:a8:d8:3a:74:
0f:fb:0f:87:53:f5:db:bf:75:72:28:eb:26:48:9d:
52:c0:1f:cf:41:66:e2:82:eb:35:82:d6:3d:ae:58:
54:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5D:A8:E6:EF:C2:E8:57:AB:E9:9D:26:F8:E4:C0:33:D8:BD:75:E6
X509v3 Authority Key Identifier:
keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e0:aa:9e:2f:52:29:09:64:52:2f:75:ae:9d:ef:69:37:c9:
8e:ab:f8:14:29:e4:af:d7:6d:1d:2e:0f:72:fd:b3:a5:b9:64:
2d:00:87:59:61:d4:dd:46:2a:bd:49:b1:7d:f3:3f:db:3a:23:
62:13:a8:cc:ee:99:79:9e:ad:9e:86:2c:44:b2:f7:d4:a7:d9:
db:df:3a:7e:a9:71:5a:83:d1:e1:7a:1e:3c:4c:4f:3d:fc:ac:
9a:cf:f7:cd:ea:fe:6b:8c:a0:7c:31:7c:02:5d:8b:ff:95:c2:
a1:ec:36:48:76:51:a3:d1:83:26:23:82:46:81:b8:ee:71:77:
78:5b:7b:ea:73:4f:37:e9:4b:81:81:bc:87:39:b6:e2:e8:a9:
c8:a3:eb:4d:25:86:13:c9:98:f1:a1:ef:67:11:41:60:99:7e:
80:ed:6d:df:cd:69:d9:21:0c:e1:13:3f:75:dd:28:e6:57:4f:
01:91:2b:10:e1:ae:cd:84:0c:6f:84:e7:bf:e9:54:64:bc:4f:
55:8b:c0:aa:8e:c6:17:16:c2:f1:f8:b0:93:9c:42:0d:2d:79:
a3:a3:54:c7:02:33:48:10:d0:79:95:28:56:ae:0e:ee:ad:b9:
77:aa:22:f0:fc:2e:59:50:77:0e:23:93:cb:99:39:ef:fe:cd:
44:99:d9:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkwEV9cF6M+3kICZcmdEFSzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MDkxNjhmZGI1MmU5YjdkMWE3YTVlOGY1MThlZGZiYzJj
M2Y5YWYwHhcNMjUwOTA5MjAwMTA4WhcNMjUwOTEwMjAwMTA4WjAzMTEwLwYDVQQD
Eyg2MzVkYThlNmVmYzJlODU3YWJlOTlkMjZmOGU0YzAzM2Q4YmQ3NWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFjVeoB6+1qu4sso+tbh77ErMrVY
M/N5kMr/UqM/em4eG2ShQgPbRZNXnFe5qev4FpABRHq4mQ5XEE8EX0Ep1ns5Vr2n
7/MFd/MM7Y43g5GD/2yw5znpsO0qot9+6eY6ImXUkFOmXysNFEVROKI2yFSLI1KM
r/XVQFav/HxsNcnfar2NoC3sqleH2evOgcGNla3JzUtMb5xJPEZT7kQocfnDiSmi
kg0+90EZOKCSs6LH7Bsi/n/1GeP2XqpTsG8e5CtwjrQL0/P3oknhSFLMECugY6MO
DELh2EjwJajYOnQP+w+HU/Xbv3VyKOsmSJ1SwB/PQWbigus1gtY9rlhUTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNdqObvwuhXq+mdJvjkwDPYvXXmMB8GA1UdIwQY
MBaAFLQJFo/bUum30ael6PUY7fvCw/mvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEFrV2o5dFM2YmZScDZYbzlSanQtOExELWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNmJhOWQtMzNhZi00Y2YzLWEyN2Qt
ZmE3MThhYzlkNzU4LzEvdEFrV2o5dFM2YmZScDZYbzlSanQtOExELWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8zNmJhOWQtMzNhZi00Y2YzLWEyN2QtZmE3MThhYzlkNzU4
LzEvdEFrV2o5dFM2YmZScDZYbzlSanQtOExELWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+Cqni9S
KQlkUi91rp3vaTfJjqv4FCnkr9dtHS4Pcv2zpblkLQCHWWHU3UYqvUmxffM/2zoj
YhOozO6ZeZ6tnoYsRLL31KfZ2986fqlxWoPR4XoePExPPfysms/3zer+a4ygfDF8
Al2L/5XCoew2SHZRo9GDJiOCRoG47nF3eFt76nNPN+lLgYG8hzm24uipyKPrTSWG
E8mY8aHvZxFBYJl+gO1t381p2SEM4RM/dd0o5ldPAZErEOGuzYQMb4Tnv+lUZLxP
VYvAqo7GFxbC8fiwk5xCDS15o6NUxwIzSBDQeZUoVq4O7q25d6oi8PwuWVB3DiOT
y5k57/7NRJnZQw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 04:51:51 2025 by rpki-client