Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json)
Hash identifier: MV82zXSEY0IQJs8696rYzvZuyr+TJ8sAddpBFHDoUKc=
Subject key identifier: 83:54:C8:C7:DC:10:A3:FA:57:F7:AE:50:CA:9C:91:F3:7E:5B:51:5D
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial: 0198D5BC276398EF649E88B6AE30203B9E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
Manifest number: 10BA
Signing time: Sat 23 Aug 2025 07:02:14 +0000
Manifest this update: Sat 23 Aug 2025 07:02:14 +0000
Manifest next update: Sun 24 Aug 2025 07:02:14 +0000
Files and hashes: 1: 7oTB9A6lOtEjQEsvoA-hCkKE_kU.roa (hash: CgqHCnrNWT0vsnk0wl9rl++PdFLv2TYzmWCCrA7fBCY=)
2: MfO1xzaCGvzf-Tdk8sWipKC3t-8.roa (hash: TSPXY1leU0O4gZ6iWESlm1g1sCeRvbsOHxtBl16fH1g=)
3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: qJH2VdGsI4RySEdqMaL8SMk6yr58SM9DWhoSh+d9IWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:27:63:98:ef:64:9e:88:b6:ae:30:20:3b:9e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Validity
Not Before: Aug 23 07:02:14 2025 GMT
Not After : Aug 24 07:02:14 2025 GMT
Subject: CN=8354c8c7dc10a3fa57f7ae50ca9c91f37e5b515d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1f:c8:af:fd:d3:d0:23:e8:d6:90:0c:0c:9e:
ad:4a:bb:7b:d9:4f:1e:52:e1:9a:5a:dd:39:86:04:
21:20:e2:dd:fe:55:82:67:d9:85:ea:e5:32:31:fe:
7f:85:73:03:bd:10:d7:e2:73:3a:b0:8a:ee:6c:ba:
ec:8f:fe:b3:24:3f:49:c6:21:19:cf:45:71:51:a8:
3a:36:f0:cc:95:a3:4e:e4:92:13:38:d3:9f:35:5c:
64:6b:08:f8:49:26:bf:b5:95:97:7d:87:eb:82:1c:
a1:52:be:0a:11:9d:24:39:a2:29:43:61:7a:7e:0e:
05:99:48:b0:f5:df:b9:60:d8:51:cf:ab:31:5f:6a:
bc:58:25:0b:34:60:29:65:50:9d:65:02:07:dc:12:
54:71:ff:26:26:41:4c:89:a3:03:85:28:73:0d:6e:
8f:c6:3e:8f:da:85:ee:09:0d:e5:3d:6c:79:a4:af:
1e:31:4b:d6:90:b3:77:6c:f0:23:cc:57:73:32:b4:
96:d6:f6:84:f5:11:41:c4:c7:5d:cc:38:39:88:45:
f1:0e:d6:f1:aa:88:36:09:7e:ad:c6:25:a5:66:5d:
51:8e:a1:0b:18:51:ed:89:ed:18:7b:17:1a:9f:43:
7d:fe:b2:a9:f0:cf:bf:31:13:db:3a:e3:b4:a8:3d:
15:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:54:C8:C7:DC:10:A3:FA:57:F7:AE:50:CA:9C:91:F3:7E:5B:51:5D
X509v3 Authority Key Identifier:
keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:74:97:f6:0e:52:32:91:3d:b3:0c:8d:ed:ce:d8:e6:89:4e:
48:d6:91:9b:b2:b7:b5:56:75:51:5d:59:ed:23:37:4f:6f:71:
2b:9a:1a:2a:c9:bd:ee:41:73:ad:f2:38:13:b2:e8:19:77:6a:
99:53:8b:dc:b5:a2:4c:06:e7:a0:11:d0:c4:56:ea:a6:b5:b5:
4e:cc:8e:84:ee:65:48:d2:c6:1a:7d:c6:36:70:a0:7c:06:25:
91:a8:42:0b:26:86:b9:5b:e2:9b:f2:03:e0:e1:63:94:44:6d:
73:0e:5e:e9:c0:66:fd:c5:9f:68:a5:55:1a:01:79:40:1e:ff:
2a:32:dc:ff:37:75:24:09:8b:e2:d9:48:a8:4e:fb:1c:17:12:
a1:b9:8e:f8:9f:20:bf:b7:09:4d:20:25:41:cd:d3:a9:d8:70:
2a:d4:b8:b2:47:e4:4c:cc:b2:09:83:f2:97:21:37:79:46:1b:
c9:ef:b6:dc:c6:75:e5:7d:39:8b:a6:05:0b:c8:e0:a3:b2:00:
07:3f:5a:f4:bf:18:7c:0a:3b:f9:da:25:c7:00:41:55:6e:c1:
15:30:8e:ac:c2:64:26:29:51:27:61:94:08:69:ac:f3:cc:3f:
f3:0f:cc:2c:b2:5b:47:6b:35:35:2f:d7:09:87:ec:3b:fb:f1:
3e:b6:1c:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvCdjmO9knoi2rjAgO54/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MjBhMjA0ZjRlMDljYzgzYTYyNThkN2FhNDRmN2QyZjBm
YTQ0YTAwHhcNMjUwODIzMDcwMjE0WhcNMjUwODI0MDcwMjE0WjAzMTEwLwYDVQQD
Eyg4MzU0YzhjN2RjMTBhM2ZhNTdmN2FlNTBjYTljOTFmMzdlNWI1MTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR/Ir/3T0CPo1pAMDJ6tSrt72U8e
UuGaWt05hgQhIOLd/lWCZ9mF6uUyMf5/hXMDvRDX4nM6sIrubLrsj/6zJD9JxiEZ
z0VxUag6NvDMlaNO5JITONOfNVxkawj4SSa/tZWXfYfrghyhUr4KEZ0kOaIpQ2F6
fg4FmUiw9d+5YNhRz6sxX2q8WCULNGApZVCdZQIH3BJUcf8mJkFMiaMDhShzDW6P
xj6P2oXuCQ3lPWx5pK8eMUvWkLN3bPAjzFdzMrSW1vaE9RFBxMddzDg5iEXxDtbx
qog2CX6txiWlZl1RjqELGFHtie0Yexcan0N9/rKp8M+/MRPbOuO0qD0VHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINUyMfcEKP6V/euUMqckfN+W1FdMB8GA1UdIwQY
MBaAFLUgogT04JzIOmJY16pE99Lw+kSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAt
YjhiMWU0YjRlY2I5LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAtYjhiMWU0YjRlY2I5
LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnSX9g5S
MpE9swyN7c7Y5olOSNaRm7K3tVZ1UV1Z7SM3T29xK5oaKsm97kFzrfI4E7LoGXdq
mVOL3LWiTAbnoBHQxFbqprW1TsyOhO5lSNLGGn3GNnCgfAYlkahCCyaGuVvim/ID
4OFjlERtcw5e6cBm/cWfaKVVGgF5QB7/KjLc/zd1JAmL4tlIqE77HBcSobmO+J8g
v7cJTSAlQc3TqdhwKtS4skfkTMyyCYPylyE3eUYbye+23MZ15X05i6YFC8jgo7IA
Bz9a9L8YfAo7+dolxwBBVW7BFTCOrMJkJilRJ2GUCGms88w/8w/MLLJbR2s1NS/X
CYfsO/vxPrYc6Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:01 2025 by rpki-client