Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
File: tBhner86ruA2zUrdd9ZhlvzeTG0.mft (raw, json)
Hash identifier: tfEATYrBlwEixWgsGmaQWMVSyUCFRI9zugdA+TGv6oo=
Subject key identifier: C1:A3:5A:50:03:20:98:E9:85:81:F8:AD:00:CD:95:0C:BA:F9:33:A3
Authority key identifier: B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
Certificate issuer: /CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Certificate serial: 01993380944E72D088C7E1CB89962BA9C156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
Manifest number: 0F49
Signing time: Wed 10 Sep 2025 12:01:28 +0000
Manifest this update: Wed 10 Sep 2025 12:01:28 +0000
Manifest next update: Thu 11 Sep 2025 12:01:28 +0000
Files and hashes: 1: GluX1bXAOCEKoiPGiqd94CJ3PnQ.roa (hash: Ni4Tstwu0GgIgTRS0r/kMJY1nK24hB/s3xhSSr7BatI=)
2: sUg9MVJbpnKjp6n_qVdxGGSeJB8.roa (hash: iazJ3Yw/lvASdOuiaEdBPRq3HWHdL5Kxvj+o3m8saWE=)
3: tBhner86ruA2zUrdd9ZhlvzeTG0.crl (hash: PDODlxE59GahivznLEKi0tBY1/0rAh2l6GE8MnVzXMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:94:4e:72:d0:88:c7:e1:cb:89:96:2b:a9:c1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Validity
Not Before: Sep 10 12:01:28 2025 GMT
Not After : Sep 11 12:01:28 2025 GMT
Subject: CN=c1a35a50032098e98581f8ad00cd950cbaf933a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:cd:e3:eb:c7:15:2c:d2:9b:1e:85:c6:26:
50:8e:b2:02:da:96:0a:65:71:e4:bf:86:8c:3e:a7:
e9:c8:c4:c9:57:06:55:27:da:f1:ad:48:63:14:22:
f7:a1:77:6b:90:03:88:1d:99:18:e8:c5:da:1c:ed:
c4:15:61:ad:16:12:ef:1c:0d:ad:84:ff:1d:ae:5f:
f6:a5:50:15:0c:07:cd:d2:93:7a:6a:87:c9:39:9c:
eb:41:50:17:99:e5:70:8a:b6:ba:8c:a0:36:1d:07:
30:0f:0d:e0:c5:78:f7:09:00:d6:39:40:1f:d8:84:
68:a2:f4:00:ae:5c:80:1c:5c:ef:f8:0e:50:a6:e5:
42:81:e8:08:57:f3:62:0c:a8:ea:ae:d5:a3:98:b5:
4a:7a:59:ee:79:6f:4e:65:18:9a:c1:a2:0a:33:27:
b8:71:ef:d5:90:c4:42:08:83:40:e4:bc:20:10:38:
f1:81:08:f3:53:be:55:04:e3:b2:5e:69:23:40:ac:
d6:6b:ec:f5:7b:4b:6f:1d:3f:9d:a3:13:2f:33:98:
79:ee:e4:0c:72:36:79:d1:94:71:c4:fa:a5:a1:57:
ad:fe:97:bd:8f:f9:9d:f4:b5:6a:31:f2:d6:42:58:
ce:d4:b1:05:4a:28:4f:ab:b1:b5:70:28:98:e7:33:
e8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A3:5A:50:03:20:98:E9:85:81:F8:AD:00:CD:95:0C:BA:F9:33:A3
X509v3 Authority Key Identifier:
keyid:B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6e:69:d6:b4:c0:cc:4e:1f:b4:58:0a:6f:e9:6f:22:18:57:
9c:4a:24:8c:77:e6:38:7f:7c:65:3f:89:51:87:1f:f3:bd:dc:
af:4c:77:78:b6:60:b5:6c:8f:4e:a1:40:6f:42:e1:77:80:93:
1c:e0:3c:88:ce:99:18:3d:81:48:8f:95:4b:8f:89:c0:7f:ea:
b1:ea:2d:34:ef:04:b6:3d:e4:88:9a:cb:b8:4f:93:57:3c:ff:
0d:5c:68:c4:4d:c9:d4:52:6e:6c:9f:9d:31:82:9b:54:9b:9d:
34:48:ba:d7:64:eb:12:2a:b4:65:71:de:ce:5e:35:07:70:c4:
3d:ef:75:d6:86:bf:1c:7b:a1:b4:b7:0c:90:80:eb:a9:a7:95:
3d:ae:ca:cc:ea:2c:f0:d0:58:f0:f4:6d:fc:4a:39:bc:33:3d:
d1:fa:b6:94:9b:00:31:6a:77:0b:6a:06:72:9d:65:7f:c2:39:
d9:f3:9b:f0:7d:e8:f0:03:2c:64:4c:ea:fe:14:a8:f0:20:9c:
c8:0b:97:70:15:6e:65:89:69:25:62:bb:83:e1:65:ed:6c:c5:
56:41:f1:50:73:48:0e:08:d4:fd:12:5c:f2:0c:88:08:00:ba:
fc:a9:80:8d:c7:dc:85:46:d5:7e:05:b2:49:e8:ff:38:fa:e1:
aa:7d:56:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzgJROctCIx+HLiZYrqcFWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MTg2NzdhYmYzYWFlZTAzNmNkNGFkZDc3ZDY2MTk2ZmNk
ZTRjNmQwHhcNMjUwOTEwMTIwMTI4WhcNMjUwOTExMTIwMTI4WjAzMTEwLwYDVQQD
EyhjMWEzNWE1MDAzMjA5OGU5ODU4MWY4YWQwMGNkOTUwY2JhZjkzM2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRXN4+vHFSzSmx6FxiZQjrIC2pYK
ZXHkv4aMPqfpyMTJVwZVJ9rxrUhjFCL3oXdrkAOIHZkY6MXaHO3EFWGtFhLvHA2t
hP8drl/2pVAVDAfN0pN6aofJOZzrQVAXmeVwira6jKA2HQcwDw3gxXj3CQDWOUAf
2IRoovQArlyAHFzv+A5QpuVCgegIV/NiDKjqrtWjmLVKelnueW9OZRiawaIKMye4
ce/VkMRCCINA5LwgEDjxgQjzU75VBOOyXmkjQKzWa+z1e0tvHT+doxMvM5h57uQM
cjZ50ZRxxPqloVet/pe9j/md9LVqMfLWQljO1LEFSihPq7G1cCiY5zPoGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGjWlADIJjphYH4rQDNlQy6+TOjMB8GA1UdIwQY
MBaAFLQYZ3q/Oq7gNs1K3XfWYZb83kxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEJobmVyODZydUEyelVyZGQ5WmhsdnplVEcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9kYTI1YzktNGZlMS00NWRhLThlNzQt
MmJlYTM0Yjg5MzhiLzEvdEJobmVyODZydUEyelVyZGQ5WmhsdnplVEcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9kYTI1YzktNGZlMS00NWRhLThlNzQtMmJlYTM0Yjg5Mzhi
LzEvdEJobmVyODZydUEyelVyZGQ5WmhsdnplVEcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK25p1rTA
zE4ftFgKb+lvIhhXnEokjHfmOH98ZT+JUYcf873cr0x3eLZgtWyPTqFAb0Lhd4CT
HOA8iM6ZGD2BSI+VS4+JwH/qseotNO8Etj3kiJrLuE+TVzz/DVxoxE3J1FJubJ+d
MYKbVJudNEi612TrEiq0ZXHezl41B3DEPe911oa/HHuhtLcMkIDrqaeVPa7KzOos
8NBY8PRt/Eo5vDM90fq2lJsAMWp3C2oGcp1lf8I52fOb8H3o8AMsZEzq/hSo8CCc
yAuXcBVuZYlpJWK7g+Fl7WzFVkHxUHNIDgjU/RJc8gyICAC6/KmAjcfchUbVfgWy
Sej/OPrhqn1Wgg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 17:27:56 2025 by rpki-client