Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
File: tXZXfSAIXEwi_IARyNGpP2MhHA8.mft (raw, json)
Hash identifier: h4D4xc1IUu+mGBy42pwN7LvdblezfFNMDLj2IAnai1g=
Subject key identifier: 2C:05:A2:09:0F:C8:58:BF:3A:6A:09:EF:4E:45:41:99:B1:72:92:49
Authority key identifier: B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
Certificate issuer: /CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Certificate serial: 0197B77CD1AFB4378185D696293FC6587EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
Manifest number: DB
Signing time: Sat 28 Jun 2025 17:01:40 +0000
Manifest this update: Sat 28 Jun 2025 17:01:40 +0000
Manifest next update: Sun 29 Jun 2025 17:01:40 +0000
Files and hashes: 1: 0NGpBZClfqdkwT-g1SQX2TG7Voo.roa (hash: SbCdNlkd4RVvBhJ9C9nlFY+4pjkHAYs+BVh1BZ1ld+c=)
2: FrJWtoZemJx4JKpSKfeY_d7A8KU.roa (hash: mn6H512YQAxp8Xgyg/tGQdGcCEfihV9UXWWT70uzA50=)
3: tXZXfSAIXEwi_IARyNGpP2MhHA8.crl (hash: 9a27Ys/5cn+CtarTjDsDqp0QtQbRbRtBnNO/6MbDRvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d1:af:b4:37:81:85:d6:96:29:3f:c6:58:7e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Validity
Not Before: Jun 28 17:01:40 2025 GMT
Not After : Jun 29 17:01:40 2025 GMT
Subject: CN=2c05a2090fc858bf3a6a09ef4e454199b1729249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:08:7f:3e:bf:32:48:ae:f2:26:c4:33:29:
1e:a8:68:2f:c5:25:d2:b0:6d:e3:57:c5:56:68:f2:
a5:d2:b9:32:fb:c7:7a:c4:83:d4:dc:c0:18:16:02:
0c:ec:75:95:c3:98:08:92:38:1a:92:0f:55:0f:76:
3c:66:5e:c4:cc:a0:24:c4:32:65:ab:f2:98:16:a3:
7c:a4:53:5b:00:99:0c:1e:12:7b:12:4d:cc:72:b6:
90:0a:3e:90:dc:c3:3f:24:79:c3:fe:bc:7c:a5:6e:
b7:c9:d4:0b:f5:b9:f2:1e:cc:f0:03:a8:ca:a5:68:
77:d3:9d:e8:6c:f2:48:48:ea:5c:3f:c7:44:e6:3e:
a4:84:49:de:14:64:60:a2:42:9e:15:32:bb:43:ea:
47:91:0b:2a:a7:fa:92:d0:1f:ee:26:a2:da:03:be:
12:d3:79:70:52:1e:5b:5d:37:5c:b7:f6:fb:68:8c:
10:fb:b9:4f:73:8a:4d:ca:8a:c8:cc:d9:57:2b:22:
ba:fa:aa:d2:59:56:45:d6:7f:0d:e5:d5:30:b7:95:
5a:69:43:48:e2:24:fa:54:b7:5d:b1:b1:97:df:e3:
6a:f4:2e:a0:14:d5:bb:9f:6f:f8:2b:6c:21:f8:c6:
6e:70:33:20:35:06:a1:0f:63:c8:d6:04:a8:86:86:
94:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:05:A2:09:0F:C8:58:BF:3A:6A:09:EF:4E:45:41:99:B1:72:92:49
X509v3 Authority Key Identifier:
keyid:B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a7:45:4c:20:b0:50:8a:0a:da:a6:d6:6e:26:cf:a2:cb:3e:
3a:00:c8:f7:35:d5:86:40:2d:9b:ef:61:d0:7e:ff:bb:ce:27:
41:c6:5d:a0:0a:77:a6:b3:99:3b:ef:97:0d:69:2b:03:fb:c5:
26:96:7c:e9:6c:80:c8:1b:07:82:1e:eb:fd:8d:38:98:56:81:
ff:67:0f:bf:9a:e9:25:63:00:9b:8a:06:bf:22:07:82:4b:ed:
0c:ce:55:b8:3d:67:db:44:37:e0:48:f2:35:86:8a:72:2a:d5:
47:24:59:17:73:ef:f0:15:03:b1:9d:3a:e3:90:ee:19:e6:b0:
db:11:4f:96:a4:e4:6e:19:e6:16:be:ee:e2:f8:8f:de:71:1a:
6d:fc:69:67:ce:39:e4:fe:b3:82:6f:36:de:69:a9:9f:5e:4e:
ff:32:3a:11:13:7e:13:66:d0:7e:f5:ee:c5:7a:f7:de:83:5d:
ad:41:26:b1:73:8e:1e:b7:a5:65:f8:58:c8:2a:0a:3a:13:d5:
d7:be:5a:4e:4d:00:2b:9a:71:0a:b7:e8:cd:58:60:3e:c3:79:
e2:d9:b1:d6:73:19:6a:41:d4:be:96:53:d7:47:42:e6:d4:a5:
93:4d:c4:bc:20:be:a9:aa:a5:80:be:ff:e4:cb:c2:37:44:da:
14:a7:4f:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fNGvtDeBhdaWKT/GWH7fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NzY1NzdkMjAwODVjNGMyMmZjODAxMWM4ZDFhOTNmNjMy
MTFjMGYwHhcNMjUwNjI4MTcwMTQwWhcNMjUwNjI5MTcwMTQwWjAzMTEwLwYDVQQD
EygyYzA1YTIwOTBmYzg1OGJmM2E2YTA5ZWY0ZTQ1NDE5OWIxNzI5MjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv64Ifz6/Mkiu8ibEMykeqGgvxSXS
sG3jV8VWaPKl0rky+8d6xIPU3MAYFgIM7HWVw5gIkjgakg9VD3Y8Zl7EzKAkxDJl
q/KYFqN8pFNbAJkMHhJ7Ek3McraQCj6Q3MM/JHnD/rx8pW63ydQL9bnyHszwA6jK
pWh3053obPJISOpcP8dE5j6khEneFGRgokKeFTK7Q+pHkQsqp/qS0B/uJqLaA74S
03lwUh5bXTdct/b7aIwQ+7lPc4pNyorIzNlXKyK6+qrSWVZF1n8N5dUwt5VaaUNI
4iT6VLddsbGX3+Nq9C6gFNW7n2/4K2wh+MZucDMgNQahD2PI1gSohoaULQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwFogkPyFi/OmoJ705FQZmxcpJJMB8GA1UdIwQY
MBaAFLV2V30gCFxMIvyAEcjRqT9jIRwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xNTE3MDUtMGIwYy00OGJmLWE0MGUt
YjdjYTFmZTZjMTg0LzEvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xNTE3MDUtMGIwYy00OGJmLWE0MGUtYjdjYTFmZTZjMTg0
LzEvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqdFTCCw
UIoK2qbWbibPoss+OgDI9zXVhkAtm+9h0H7/u84nQcZdoAp3prOZO++XDWkrA/vF
JpZ86WyAyBsHgh7r/Y04mFaB/2cPv5rpJWMAm4oGvyIHgkvtDM5VuD1n20Q34Ejy
NYaKcirVRyRZF3Pv8BUDsZ0645DuGeaw2xFPlqTkbhnmFr7u4viP3nEabfxpZ845
5P6zgm823mmpn15O/zI6ERN+E2bQfvXuxXr33oNdrUEmsXOOHrelZfhYyCoKOhPV
175aTk0AK5pxCrfozVhgPsN54tmx1nMZakHUvpZT10dC5tSlk03EvCC+qaqlgL7/
5MvCN0TaFKdP+w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:21:17 2025 by rpki-client