Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
File: tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft (raw, json)
Hash identifier: cWImbkSNE/KCt6PDsPrNaBX/bxoC1fbOHsk+5WwoAz4=
Subject key identifier: EA:2B:49:69:DA:B8:8C:67:5C:43:D4:D6:54:CA:FD:72:E6:FC:29:19
Authority key identifier: B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
Certificate issuer: /CN=b414b09beeab905ff41e6813256054b182294297
Certificate serial: 0198D473DD6E406BEF5242E61A4AB62FF36E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
Manifest number: 0BAA
Signing time: Sat 23 Aug 2025 01:03:39 +0000
Manifest this update: Sat 23 Aug 2025 01:03:39 +0000
Manifest next update: Sun 24 Aug 2025 01:03:39 +0000
Files and hashes: 1: 9ie56jozGctsQMPeP2PnRQlQSUc.roa (hash: 5kDUdIA6jw7l4e4ssTIC7py/rMtiw/D++uBoc2CI0Qo=)
2: mT-8_dVnmXbsJKgoN35LXNaAywM.roa (hash: o5cN5KMUIwn/VQVHMV9OAvcCU4Z7KPV9dR9Yvh1kUlg=)
3: tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl (hash: R3qAfOyTDF7JvURgPqMw1aftVvOycN+nkGk4g0WTCg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:dd:6e:40:6b:ef:52:42:e6:1a:4a:b6:2f:f3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b414b09beeab905ff41e6813256054b182294297
Validity
Not Before: Aug 23 01:03:39 2025 GMT
Not After : Aug 24 01:03:39 2025 GMT
Subject: CN=ea2b4969dab88c675c43d4d654cafd72e6fc2919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:5f:6e:0f:89:18:28:99:da:fa:11:72:0e:
ff:0b:7a:7f:88:73:77:77:c4:24:3a:d0:64:c1:66:
a8:d7:e3:69:6d:bf:57:b7:06:90:9d:a6:77:b4:72:
bc:d3:04:e1:77:5d:78:98:a0:aa:1b:cc:b6:05:0c:
92:0c:e2:ea:31:68:4d:f5:14:23:da:5b:4e:2b:84:
6b:47:fe:4a:37:df:f8:89:33:1b:7a:23:23:74:2c:
04:68:6a:a3:32:e2:df:46:fe:7b:34:7d:6e:f4:59:
3c:1a:f7:f1:1d:87:fb:b7:ed:30:6b:7a:bf:e3:03:
5b:da:f2:fb:e1:8b:d4:9c:4d:bd:ad:b2:8b:bc:52:
4e:cc:85:58:8b:e1:97:26:8b:ed:de:59:dc:7f:d3:
bf:74:bf:38:6c:00:b2:5a:c6:ab:5d:7a:46:b4:d8:
83:a5:f4:a9:42:f9:06:78:b8:db:0e:d4:d0:8f:be:
91:91:5c:0a:56:e1:9a:49:dd:62:20:92:bd:f2:8d:
8c:65:46:49:4b:10:5f:9f:9c:ad:69:a0:eb:ae:75:
ab:82:e3:e3:b3:80:37:0c:4d:61:17:45:ec:4c:23:
ca:4b:62:86:a5:17:2c:1d:53:e3:2e:7e:78:79:8e:
c1:37:9e:16:48:a2:d2:97:0e:70:53:9c:c7:7d:e9:
79:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2B:49:69:DA:B8:8C:67:5C:43:D4:D6:54:CA:FD:72:E6:FC:29:19
X509v3 Authority Key Identifier:
keyid:B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b5:51:b3:de:7a:cb:36:c2:e5:af:d7:c5:6e:1a:a3:3a:69:
7f:57:ba:01:98:42:25:c4:ca:0c:19:be:14:aa:42:1d:fb:41:
37:c4:61:45:6b:96:52:15:bc:49:37:b3:d5:8d:3e:92:c4:fb:
08:8b:4d:95:55:a2:08:fc:3e:51:ed:45:e1:67:2d:09:14:e5:
c4:5e:f4:8f:61:a0:e7:9b:df:19:c5:8c:44:6c:5f:d8:09:f3:
77:27:db:8a:b5:6e:f8:13:04:ad:42:7a:c6:8e:00:13:21:8a:
42:6d:ab:33:4f:89:38:a3:df:60:ad:48:35:07:f3:63:75:21:
51:55:0b:2e:57:a8:d2:a3:59:67:04:88:c1:37:c0:f7:fc:9f:
8c:89:ec:30:f7:4a:c1:ff:95:7d:21:8e:45:2f:4b:97:03:c4:
bb:81:e0:05:c6:88:40:a7:b1:91:9a:51:bf:25:34:11:cd:b7:
09:16:c8:c2:9d:b6:f4:ba:d5:4d:40:e2:02:60:95:b1:9e:ec:
0e:ac:0e:4f:49:b5:56:78:1e:15:24:11:8c:f9:07:f3:01:35:
90:9c:b4:19:2c:69:07:e4:a1:16:a2:aa:bb:14:8c:33:83:5d:
37:60:aa:62:7f:a7:fb:55:91:69:a2:fd:14:2c:25:72:15:4f:
e5:74:85:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc91uQGvvUkLmGkq2L/NuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MTRiMDliZWVhYjkwNWZmNDFlNjgxMzI1NjA1NGIxODIy
OTQyOTcwHhcNMjUwODIzMDEwMzM5WhcNMjUwODI0MDEwMzM5WjAzMTEwLwYDVQQD
EyhlYTJiNDk2OWRhYjg4YzY3NWM0M2Q0ZDY1NGNhZmQ3MmU2ZmMyOTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu5fbg+JGCiZ2voRcg7/C3p/iHN3
d8QkOtBkwWao1+Npbb9XtwaQnaZ3tHK80wThd114mKCqG8y2BQySDOLqMWhN9RQj
2ltOK4RrR/5KN9/4iTMbeiMjdCwEaGqjMuLfRv57NH1u9Fk8GvfxHYf7t+0wa3q/
4wNb2vL74YvUnE29rbKLvFJOzIVYi+GXJovt3lncf9O/dL84bACyWsarXXpGtNiD
pfSpQvkGeLjbDtTQj76RkVwKVuGaSd1iIJK98o2MZUZJSxBfn5ytaaDrrnWrguPj
s4A3DE1hF0XsTCPKS2KGpRcsHVPjLn54eY7BN54WSKLSlw5wU5zHfel5BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOorSWnauIxnXEPU1lTK/XLm/CkZMB8GA1UdIwQY
MBaAFLQUsJvuq5Bf9B5oEyVgVLGCKUKXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEJTd20tNnJrRl8wSG1nVEpXQlVzWUlwUXBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84MDBlYjYtODY4Yi00YTMwLWI0MDIt
NGJjZTQyNDcyM2Q5LzEvdEJTd20tNnJrRl8wSG1nVEpXQlVzWUlwUXBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84MDBlYjYtODY4Yi00YTMwLWI0MDItNGJjZTQyNDcyM2Q5
LzEvdEJTd20tNnJrRl8wSG1nVEpXQlVzWUlwUXBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbVRs956
yzbC5a/XxW4aozppf1e6AZhCJcTKDBm+FKpCHftBN8RhRWuWUhW8STez1Y0+ksT7
CItNlVWiCPw+Ue1F4WctCRTlxF70j2Gg55vfGcWMRGxf2AnzdyfbirVu+BMErUJ6
xo4AEyGKQm2rM0+JOKPfYK1INQfzY3UhUVULLleo0qNZZwSIwTfA9/yfjInsMPdK
wf+VfSGORS9LlwPEu4HgBcaIQKexkZpRvyU0Ec23CRbIwp229LrVTUDiAmCVsZ7s
DqwOT0m1VngeFSQRjPkH8wE1kJy0GSxpB+ShFqKquxSMM4NdN2CqYn+n+1WRaaL9
FCwlchVP5XSFMw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:43 2025 by rpki-client