Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
File: tBErtZsGJ9ojr5DA8FhLcbUPd48.mft (raw, json)
Hash identifier: /SqzRkPCIj33Yl3dbUoEL4wBKA5aVO76d8EOqmAt7mw=
Subject key identifier: B5:60:BD:2A:25:C8:48:1D:5C:16:8D:07:72:EF:C8:34:A2:09:4E:39
Authority key identifier: B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
Certificate issuer: /CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Certificate serial: 019923310A34A7FA574BB36BD22E7367B6D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
Manifest number: 1603
Signing time: Sun 07 Sep 2025 08:00:40 +0000
Manifest this update: Sun 07 Sep 2025 08:00:40 +0000
Manifest next update: Mon 08 Sep 2025 08:00:40 +0000
Files and hashes: 1: RRFPoj_D2514uvr1pJ51Asozslw.roa (hash: EUwe8zILfT5h0ET/pLOGX/O1GKfRNQcxkScAvJ+rEAs=)
2: tBErtZsGJ9ojr5DA8FhLcbUPd48.crl (hash: +QnN114rESxyIVAYkCl6WdTtdRhn6TZVA2sT430L4V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:0a:34:a7:fa:57:4b:b3:6b:d2:2e:73:67:b6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Validity
Not Before: Sep 7 08:00:40 2025 GMT
Not After : Sep 8 08:00:40 2025 GMT
Subject: CN=b560bd2a25c8481d5c168d0772efc834a2094e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c7:90:2e:6c:92:b1:a1:df:f0:93:dd:70:a3:
6a:02:52:a5:f5:16:12:a3:01:ed:48:fe:aa:f2:56:
ac:64:32:fa:ed:e6:63:3b:75:e5:b3:9b:5e:3f:97:
95:df:04:03:57:23:a4:97:d6:2c:8b:f8:ff:56:11:
2f:12:ee:1d:e9:81:d4:07:79:90:8c:ab:27:60:43:
fb:cf:59:92:dc:6a:0c:15:36:fa:72:50:b1:aa:f9:
f9:a2:b6:e3:39:41:21:de:6d:c5:5b:9e:99:2f:47:
f4:ab:62:68:a3:a5:3c:7f:f6:48:46:e5:4f:54:ed:
28:db:db:19:eb:1c:90:7b:77:08:ed:28:7a:d2:df:
6c:3a:bf:6f:32:42:9b:2b:c6:19:16:2f:5f:6c:62:
b6:a9:c9:41:0b:0e:0f:8e:9d:db:a4:b0:09:00:84:
b0:ac:3e:d5:e8:ea:23:6f:cd:d1:7d:a5:50:b7:59:
35:f1:e5:fd:be:6f:89:b6:46:83:c7:71:25:04:81:
1a:24:cc:d2:63:2a:3c:5c:fa:cb:16:9f:23:83:cf:
a9:25:c6:4e:f0:11:a6:0f:59:17:d1:95:fe:d3:7c:
ee:19:3d:fb:36:83:7c:1e:ab:c2:33:cd:59:16:70:
21:9b:1b:1a:ac:33:ff:7b:cb:53:00:55:04:37:ce:
6d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:60:BD:2A:25:C8:48:1D:5C:16:8D:07:72:EF:C8:34:A2:09:4E:39
X509v3 Authority Key Identifier:
keyid:B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:42:75:6f:b3:f3:f7:ca:99:ea:c7:1a:7c:07:88:14:50:f3:
0f:a9:05:f1:3a:8b:e7:38:24:23:7a:c1:78:b8:d6:d7:82:4f:
2a:8f:d0:4c:45:23:84:63:ea:37:b1:2e:c7:90:b3:f0:6b:c4:
61:a6:b3:19:42:59:3b:0f:be:fa:4c:5e:e6:86:16:7c:3c:64:
e4:f3:30:0c:71:ea:7d:7c:da:2a:50:78:b3:85:ed:5d:1e:49:
28:59:45:3a:fb:c0:59:be:6f:0e:c9:2e:f3:2a:c5:d8:07:b2:
af:76:92:13:cb:c0:fa:93:2b:41:b8:9a:b8:ae:e7:95:2f:ed:
ec:bb:49:53:c2:ea:ee:00:f7:6e:0b:4a:d5:f3:92:7e:59:1d:
3e:40:b5:7d:b3:6a:78:37:ae:70:88:a1:7d:49:b1:01:4f:e1:
de:8d:aa:e2:45:ea:ee:44:da:66:c0:16:a5:ce:c2:ad:73:8e:
7e:97:fb:88:6d:3e:40:e7:75:5b:48:20:64:4a:c7:d6:ee:24:
54:a7:99:49:e3:c4:ed:36:bb:20:14:39:ee:6d:ef:dc:c3:83:
c4:33:a6:0c:99:41:e4:9c:1f:85:10:52:a9:e7:98:e0:b8:4d:
b2:93:f8:33:4e:e8:f6:dc:b8:78:3b:18:d1:7b:71:aa:47:a5:
c1:d1:35:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMQo0p/pXS7Nr0i5zZ7bTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MTEyYmI1OWIwNjI3ZGEyM2FmOTBjMGYwNTg0YjcxYjUw
Zjc3OGYwHhcNMjUwOTA3MDgwMDQwWhcNMjUwOTA4MDgwMDQwWjAzMTEwLwYDVQQD
EyhiNTYwYmQyYTI1Yzg0ODFkNWMxNjhkMDc3MmVmYzgzNGEyMDk0ZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzceQLmySsaHf8JPdcKNqAlKl9RYS
owHtSP6q8lasZDL67eZjO3Xls5teP5eV3wQDVyOkl9Ysi/j/VhEvEu4d6YHUB3mQ
jKsnYEP7z1mS3GoMFTb6clCxqvn5orbjOUEh3m3FW56ZL0f0q2Joo6U8f/ZIRuVP
VO0o29sZ6xyQe3cI7Sh60t9sOr9vMkKbK8YZFi9fbGK2qclBCw4Pjp3bpLAJAISw
rD7V6Oojb83RfaVQt1k18eX9vm+JtkaDx3ElBIEaJMzSYyo8XPrLFp8jg8+pJcZO
8BGmD1kX0ZX+03zuGT37NoN8HqvCM81ZFnAhmxsarDP/e8tTAFUEN85tNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVgvSolyEgdXBaNB3LvyDSiCU45MB8GA1UdIwQY
MBaAFLQRK7WbBifaI6+QwPBYS3G1D3ePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEJFcnRac0dKOW9qcjVEQThGaExjYlVQZDQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy82N2Q1N2UtZjNkZS00ZDEwLWJkOWQt
ODdhMTBiYzY4YTM3LzEvdEJFcnRac0dKOW9qcjVEQThGaExjYlVQZDQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy82N2Q1N2UtZjNkZS00ZDEwLWJkOWQtODdhMTBiYzY4YTM3
LzEvdEJFcnRac0dKOW9qcjVEQThGaExjYlVQZDQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEJ1b7Pz
98qZ6scafAeIFFDzD6kF8TqL5zgkI3rBeLjW14JPKo/QTEUjhGPqN7Eux5Cz8GvE
YaazGUJZOw+++kxe5oYWfDxk5PMwDHHqfXzaKlB4s4XtXR5JKFlFOvvAWb5vDsku
8yrF2Aeyr3aSE8vA+pMrQbiauK7nlS/t7LtJU8Lq7gD3bgtK1fOSflkdPkC1fbNq
eDeucIihfUmxAU/h3o2q4kXq7kTaZsAWpc7CrXOOfpf7iG0+QOd1W0ggZErH1u4k
VKeZSePE7Ta7IBQ57m3v3MODxDOmDJlB5JwfhRBSqeeY4LhNspP4M07o9ty4eDsY
0XtxqkelwdE15Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:42:05 2025 by rpki-client