Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
File: tTVrOmd4voxhFK2H2q_NB8pV2AA.mft (raw, json)
Hash identifier: +9NHzh0UY76y3Xyb1aX8ecEyuV7qYAGh4xlQgCKHM1o=
Subject key identifier: A1:A9:98:22:E3:7F:E9:4F:82:DE:CC:8A:25:94:99:E4:03:C4:B9:C2
Authority key identifier: B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
Certificate issuer: /CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Certificate serial: 0199326D92C58A6778BD205DFA3C3B9873B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 07:01:05 +0000
Manifest this update: Wed 10 Sep 2025 07:01:05 +0000
Manifest next update: Thu 11 Sep 2025 07:01:05 +0000
Files and hashes: 1: NQNYc6fmHLA_NSQLy1429x1Q7Rs.roa (hash: 9fkXQ4KSWlEupj10JS2rCXdqinSmRcwnxokumXbhroc=)
2: QbjMGccKG5d5ZKbesdYHgP5_B94.roa (hash: 4D93Q+Whu8oYfv+HOP7uP002kldwgOYc75DA0DhrTb4=)
3: tTVrOmd4voxhFK2H2q_NB8pV2AA.crl (hash: /w5pKPEU2XpwvSons8cTJemTHRo5NSzW1M3QzJ4EvhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:92:c5:8a:67:78:bd:20:5d:fa:3c:3b:98:73:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Validity
Not Before: Sep 10 07:01:05 2025 GMT
Not After : Sep 11 07:01:05 2025 GMT
Subject: CN=a1a99822e37fe94f82decc8a259499e403c4b9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:21:27:b4:95:71:e4:30:08:f0:45:86:22:0c:
cf:92:19:0b:5d:74:bb:07:82:da:73:cd:93:87:14:
34:45:1c:93:33:c6:31:97:f0:b0:e1:0c:e4:e6:f4:
93:17:1d:34:df:62:a5:38:19:87:fa:d2:3c:f8:a7:
ad:98:4c:90:2a:66:a9:41:6f:e3:65:e1:61:42:3d:
f8:64:64:c0:37:dc:aa:5d:18:b2:6f:f9:db:cd:f5:
f9:b7:44:be:d0:30:40:c6:07:b0:05:b1:84:77:1d:
62:5d:48:08:88:38:5e:81:2f:83:2c:02:35:80:2e:
ed:92:2b:9d:dd:dd:9d:3e:e3:05:dc:3e:b9:08:53:
47:12:a2:c3:32:87:98:1f:cf:38:49:ae:c2:0b:5a:
25:00:85:c2:2a:be:73:f6:5b:6f:1c:a2:07:f8:43:
0a:d0:79:16:c5:37:b6:28:c0:2e:d3:cf:5a:9e:ba:
c5:93:a4:0c:00:46:aa:d9:e0:72:c9:34:b6:df:30:
a6:b2:0a:93:e6:4e:3e:49:91:42:3d:fc:bb:67:4b:
3b:21:82:44:c4:c5:7c:ac:7b:e0:a8:bf:70:c3:50:
77:4c:d8:62:57:66:68:7b:03:c6:bb:af:35:76:5d:
3c:ab:71:21:7e:35:55:85:1a:72:2e:a5:4b:71:6a:
80:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A9:98:22:E3:7F:E9:4F:82:DE:CC:8A:25:94:99:E4:03:C4:B9:C2
X509v3 Authority Key Identifier:
keyid:B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e8:93:ec:f4:f8:d0:58:c3:59:89:20:e2:3a:ff:73:48:f2:
e4:65:8f:a6:84:56:31:95:d5:4e:12:cc:2b:ef:2c:6a:26:5e:
76:f0:47:bf:d0:6b:61:60:0e:76:1f:cb:76:78:8a:71:69:83:
29:dc:54:7a:e6:1d:87:d0:a5:33:7d:5d:c5:45:46:21:ce:52:
c7:01:26:09:87:d4:11:19:62:0b:d1:a5:d6:83:b2:da:ef:bb:
68:44:29:15:95:e4:8d:15:68:3d:d1:b3:62:be:83:0b:e1:63:
03:7d:79:ec:da:37:65:82:cd:72:e0:1f:e3:d7:be:4f:86:08:
84:57:db:41:4d:12:07:32:bb:71:88:d7:3d:a1:c6:4c:dd:11:
63:20:60:72:47:95:97:67:5c:a2:80:95:73:78:e4:ec:1a:74:
f2:a7:a4:76:a2:ed:69:b9:bc:7b:2e:7e:d2:d1:93:4f:74:46:
a4:ef:5b:e7:23:43:6f:1f:41:2e:6b:ab:0c:cb:48:f8:4a:6b:
04:e6:0a:a8:68:6c:2f:e5:0f:ed:de:8d:50:c5:9c:94:2f:6b:
fe:d5:21:6c:49:14:31:26:b6:55:2a:bd:ee:aa:83:a2:20:61:
14:73:d3:f6:1d:2c:30:e3:f6:f7:31:ce:a8:8c:c1:38:19:d1:
94:b2:ec:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkybZLFimd4vSBd+jw7mHO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MzU2YjNhNjc3OGJlOGM2MTE0YWQ4N2RhYWZjZDA3Y2E1
NWQ4MDAwHhcNMjUwOTEwMDcwMTA1WhcNMjUwOTExMDcwMTA1WjAzMTEwLwYDVQQD
EyhhMWE5OTgyMmUzN2ZlOTRmODJkZWNjOGEyNTk0OTllNDAzYzRiOWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyEntJVx5DAI8EWGIgzPkhkLXXS7
B4Lac82ThxQ0RRyTM8Yxl/Cw4Qzk5vSTFx0032KlOBmH+tI8+KetmEyQKmapQW/j
ZeFhQj34ZGTAN9yqXRiyb/nbzfX5t0S+0DBAxgewBbGEdx1iXUgIiDhegS+DLAI1
gC7tkiud3d2dPuMF3D65CFNHEqLDMoeYH884Sa7CC1olAIXCKr5z9ltvHKIH+EMK
0HkWxTe2KMAu089anrrFk6QMAEaq2eByyTS23zCmsgqT5k4+SZFCPfy7Z0s7IYJE
xMV8rHvgqL9ww1B3TNhiV2ZoewPGu681dl08q3EhfjVVhRpyLqVLcWqAMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGpmCLjf+lPgt7MiiWUmeQDxLnCMB8GA1UdIwQY
MBaAFLU1azpneL6MYRSth9qvzQfKVdgAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFRWck9tZDR2b3hoRksySDJxX05COHBWMkFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85MWIzMWUtMDcxMS00M2ZhLWJjMjkt
OTMyYjRhYzBhYWZkLzEvdFRWck9tZDR2b3hoRksySDJxX05COHBWMkFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS85MWIzMWUtMDcxMS00M2ZhLWJjMjktOTMyYjRhYzBhYWZk
LzEvdFRWck9tZDR2b3hoRksySDJxX05COHBWMkFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACeiT7PT4
0FjDWYkg4jr/c0jy5GWPpoRWMZXVThLMK+8saiZedvBHv9BrYWAOdh/LdniKcWmD
KdxUeuYdh9ClM31dxUVGIc5SxwEmCYfUERliC9Gl1oOy2u+7aEQpFZXkjRVoPdGz
Yr6DC+FjA3157No3ZYLNcuAf49e+T4YIhFfbQU0SBzK7cYjXPaHGTN0RYyBgckeV
l2dcooCVc3jk7Bp08qekdqLtabm8ey5+0tGTT3RGpO9b5yNDbx9BLmurDMtI+Epr
BOYKqGhsL+UP7d6NUMWclC9r/tUhbEkUMSa2VSq97qqDoiBhFHPT9h0sMOP29zHO
qIzBOBnRlLLskw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 13:20:46 2025 by rpki-client