Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json)
Hash identifier: aHUNzNXMaZ8cP96hFWbR47sZu6Stn4PeW6+HEvM1JkI=
Subject key identifier: 45:1E:14:01:1E:BA:10:BD:13:E8:6A:C9:27:FE:C1:1D:C0:3D:14:8A
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial: 0197B7EA1F893E6C0AA36744D59E37E394C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
Manifest number: 1026
Signing time: Sat 28 Jun 2025 19:01:03 +0000
Manifest this update: Sat 28 Jun 2025 19:01:03 +0000
Manifest next update: Sun 29 Jun 2025 19:01:03 +0000
Files and hashes: 1: 7oTB9A6lOtEjQEsvoA-hCkKE_kU.roa (hash: CgqHCnrNWT0vsnk0wl9rl++PdFLv2TYzmWCCrA7fBCY=)
2: MfO1xzaCGvzf-Tdk8sWipKC3t-8.roa (hash: TSPXY1leU0O4gZ6iWESlm1g1sCeRvbsOHxtBl16fH1g=)
3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: gSk0+xibCkKrIT503MVS5HhQd3QCnEdNBFxJVkEQTws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:1f:89:3e:6c:0a:a3:67:44:d5:9e:37:e3:94:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Validity
Not Before: Jun 28 19:01:03 2025 GMT
Not After : Jun 29 19:01:03 2025 GMT
Subject: CN=451e14011eba10bd13e86ac927fec11dc03d148a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:59:f9:9b:65:37:4c:34:74:a3:05:93:04:9a:
96:ec:95:b0:cb:4c:f7:d0:73:f8:d2:c7:e9:74:28:
31:84:57:e8:0d:eb:97:13:ce:7a:4d:04:de:7e:f6:
95:a4:80:fd:cd:9a:f8:6c:f4:f7:8d:f2:00:75:ef:
5d:08:18:bb:8c:67:a3:d9:3f:00:e8:24:cd:90:63:
9a:da:19:14:6a:6d:c4:a6:09:46:8a:bb:8f:ee:df:
b3:f9:dd:19:2a:56:6a:a9:04:15:15:e3:e7:c5:06:
00:de:e3:fe:ee:39:e0:0f:80:53:aa:c1:b4:68:6e:
c4:0b:d9:2a:fa:11:a9:6c:0a:90:86:fe:f1:34:ec:
3d:55:bc:68:57:50:82:6b:cd:54:f9:90:6a:59:9d:
ec:5c:70:4f:4b:b2:a9:6a:47:a5:f7:c4:69:ae:95:
d3:7c:75:7f:a8:55:67:94:6e:8f:3a:c0:46:78:0b:
86:18:c7:b2:40:60:13:c2:39:a1:23:d6:2b:b3:4a:
ae:a3:6d:71:74:37:88:d0:42:43:12:de:58:ef:78:
d3:ab:ac:68:f8:45:a1:51:c4:de:b2:84:c2:e2:ca:
25:4f:84:cb:de:b9:54:06:96:93:b8:6a:20:a5:a0:
6a:af:35:e7:54:10:c0:d6:bf:56:00:40:ff:c1:e9:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1E:14:01:1E:BA:10:BD:13:E8:6A:C9:27:FE:C1:1D:C0:3D:14:8A
X509v3 Authority Key Identifier:
keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:35:c3:12:ba:38:b4:9d:d3:d6:c3:ed:5f:2b:9c:52:a1:f6:
f4:26:e7:f1:96:78:1a:39:dd:f7:a9:52:66:f5:63:55:d5:83:
4d:b9:58:e2:96:91:75:98:da:12:b5:08:25:72:98:05:df:a2:
ad:19:4a:17:6e:e6:f0:f5:49:66:33:91:4d:04:91:50:4c:26:
60:ae:21:bb:42:de:68:1a:1d:a0:e1:bc:f3:69:d0:cd:2d:4b:
9f:9c:00:61:4c:86:75:e2:a2:22:2c:fc:b3:69:8c:ef:e0:e6:
62:8e:69:2c:7f:4e:6c:97:41:a5:a0:de:38:eb:3f:76:4d:12:
11:cb:b3:b4:f6:15:95:2f:58:91:36:db:a5:e1:7c:4e:bd:de:
30:7f:11:30:d2:7e:1e:12:21:2c:ec:ea:68:9c:99:54:a1:9a:
ed:fd:6b:27:4e:0f:f3:51:a4:7f:7f:09:5c:51:33:ff:f1:f0:
f2:11:f7:6c:93:e5:1a:60:41:37:aa:bc:b9:a8:a0:3b:b8:7f:
cf:8e:f9:c5:bb:9f:3c:51:e1:8e:20:75:48:b4:94:e0:f5:2c:
04:a6:75:e5:75:e6:e3:a1:73:6e:bd:dc:f9:40:8d:5d:b9:a9:
46:b7:d4:de:cf:20:4a:c1:bf:f4:b6:89:ec:91:f3:fa:42:46:
60:f0:90:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36h+JPmwKo2dE1Z4345THMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MjBhMjA0ZjRlMDljYzgzYTYyNThkN2FhNDRmN2QyZjBm
YTQ0YTAwHhcNMjUwNjI4MTkwMTAzWhcNMjUwNjI5MTkwMTAzWjAzMTEwLwYDVQQD
Eyg0NTFlMTQwMTFlYmExMGJkMTNlODZhYzkyN2ZlYzExZGMwM2QxNDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVn5m2U3TDR0owWTBJqW7JWwy0z3
0HP40sfpdCgxhFfoDeuXE856TQTefvaVpID9zZr4bPT3jfIAde9dCBi7jGej2T8A
6CTNkGOa2hkUam3EpglGiruP7t+z+d0ZKlZqqQQVFePnxQYA3uP+7jngD4BTqsG0
aG7EC9kq+hGpbAqQhv7xNOw9VbxoV1CCa81U+ZBqWZ3sXHBPS7Kpakel98RprpXT
fHV/qFVnlG6POsBGeAuGGMeyQGATwjmhI9Yrs0quo21xdDeI0EJDEt5Y73jTq6xo
+EWhUcTesoTC4solT4TL3rlUBpaTuGogpaBqrzXnVBDA1r9WAED/wemtVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUeFAEeuhC9E+hqySf+wR3APRSKMB8GA1UdIwQY
MBaAFLUgogT04JzIOmJY16pE99Lw+kSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAt
YjhiMWU0YjRlY2I5LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAtYjhiMWU0YjRlY2I5
LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjXDEro4
tJ3T1sPtXyucUqH29Cbn8ZZ4Gjnd96lSZvVjVdWDTblY4paRdZjaErUIJXKYBd+i
rRlKF27m8PVJZjORTQSRUEwmYK4hu0LeaBodoOG882nQzS1Ln5wAYUyGdeKiIiz8
s2mM7+DmYo5pLH9ObJdBpaDeOOs/dk0SEcuztPYVlS9YkTbbpeF8Tr3eMH8RMNJ+
HhIhLOzqaJyZVKGa7f1rJ04P81Gkf38JXFEz//Hw8hH3bJPlGmBBN6q8uaigO7h/
z475xbufPFHhjiB1SLSU4PUsBKZ15XXm46Fzbr3c+UCNXbmpRrfU3s8gSsG/9LaJ
7JHz+kJGYPCQlw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:55 2025 by rpki-client