Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
File: tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft (raw, json)
Hash identifier: AcKMcODXPAVi+le3U6DB/0TKU5oXYfZOtu4M/rg5O7U=
Subject key identifier: 34:F0:26:BB:B6:A5:20:A9:01:7B:81:8A:85:0B:42:10:2A:24:8F:16
Authority key identifier: B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
Certificate issuer: /CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Certificate serial: 0199FBEAA13CE3A6CF3D3ED59DA312286719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
Manifest number: 07B8
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: rgegcxxJ3TsTdq27HR0NAjR9oC8.roa (hash: c0wEsNYvh664VokeqgrZS5bI3twxSLXX7CSRIaVE4Zs=)
2: tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl (hash: azsdabeWUyKUTxLZ0Olnx3dBGYqrLLXIyWnuHDS0U6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a1:3c:e3:a6:cf:3d:3e:d5:9d:a3:12:28:67:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=34f026bbb6a520a9017b818a850b42102a248f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:ae:1a:9e:e3:34:d3:b7:48:93:fd:19:91:
50:ba:60:fa:75:a0:4d:44:49:8e:cd:cc:86:08:32:
53:94:c7:6d:20:97:6a:b6:03:2c:ac:3d:15:d1:73:
49:98:4b:ee:3b:74:44:b6:77:d4:1f:f2:ba:35:b9:
f2:d1:5d:5f:23:15:31:6b:73:c4:ae:b4:a2:f0:cd:
f7:ae:3c:65:48:f3:fa:0b:8b:9a:0d:7a:98:83:4c:
11:bc:5c:ef:9b:4a:ca:2f:7e:55:0b:d2:b0:cf:f3:
12:41:4f:e9:c6:4a:1d:cc:0b:60:5a:2f:3d:fa:3c:
42:ef:a7:f7:f2:45:3e:dc:09:ca:ca:40:4a:21:69:
d9:7a:45:fc:b2:55:53:d4:16:e6:d5:c6:04:35:2d:
10:d6:a5:c8:f3:98:ab:dd:d8:d2:59:c9:64:b9:25:
51:6b:34:f0:9a:56:bf:0f:21:da:dc:5c:e9:1a:57:
94:d9:eb:3a:19:93:33:55:b1:51:59:45:f1:d1:2c:
0d:c5:01:22:ba:8a:b4:7f:75:15:7b:f2:5a:90:e8:
30:41:0f:69:85:2f:75:54:66:5a:36:c8:e5:10:b8:
4d:d6:c3:3f:e2:ea:f7:2b:5f:bd:d9:84:4f:88:26:
6b:5e:d0:20:23:e6:51:aa:78:b6:40:5c:a8:8f:3d:
f7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F0:26:BB:B6:A5:20:A9:01:7B:81:8A:85:0B:42:10:2A:24:8F:16
X509v3 Authority Key Identifier:
keyid:B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ba:16:67:de:85:75:67:94:de:9d:35:3f:2b:a6:1e:86:2c:
9a:28:b7:63:81:d6:7c:d6:62:4c:09:d6:ad:92:d5:28:89:f2:
dc:51:7a:22:41:e3:aa:08:d7:93:02:b2:fa:9b:06:30:af:70:
90:f2:e7:d4:f4:c7:75:e6:6f:cf:4d:a8:1e:bf:02:78:6b:6a:
19:08:bb:b4:dc:62:dd:0c:59:98:76:54:1e:82:44:e5:a8:69:
c5:c4:1b:be:d2:79:b8:0b:3e:c4:ae:7b:ae:30:e2:61:28:27:
2f:af:a2:54:17:d2:94:36:4d:62:58:9c:9b:da:34:f3:f3:d1:
22:54:2e:2f:dc:88:a6:81:ac:70:a1:5c:f0:2c:81:b0:8c:22:
96:1e:ef:f2:a0:ff:97:98:43:96:75:0b:c9:f6:2a:c4:9c:bd:
ad:ba:e2:bd:e5:6c:a4:e6:e1:1a:d1:bd:d6:98:09:f3:01:f8:
87:ec:42:e2:3e:db:3f:8e:94:ae:4a:1a:58:2c:aa:63:eb:57:
5b:b6:97:7d:2e:07:d6:42:aa:35:3e:d2:23:eb:d5:d3:de:eb:
a5:f3:66:97:4d:16:95:10:23:11:f4:b5:0d:1f:c3:ca:fa:68:
62:24:64:c2:b6:b0:63:da:cc:d7:8d:06:56:11:1d:93:38:65:
48:2c:20:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76qE846bPPT7VnaMSKGcZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZTNhMmE0OTA4ZGQ5NjgyMWM4MGM2NGQxNWQxNzE0MTQz
YWFhOTQwHhcNMjUxMDE5MTAwMTIxWhcNMjUxMDIwMTAwMTIxWjAzMTEwLwYDVQQD
EygzNGYwMjZiYmI2YTUyMGE5MDE3YjgxOGE4NTBiNDIxMDJhMjQ4ZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsReuGp7jNNO3SJP9GZFQumD6daBN
REmOzcyGCDJTlMdtIJdqtgMsrD0V0XNJmEvuO3REtnfUH/K6Nbny0V1fIxUxa3PE
rrSi8M33rjxlSPP6C4uaDXqYg0wRvFzvm0rKL35VC9Kwz/MSQU/pxkodzAtgWi89
+jxC76f38kU+3AnKykBKIWnZekX8slVT1Bbm1cYENS0Q1qXI85ir3djSWclkuSVR
azTwmla/DyHa3FzpGleU2es6GZMzVbFRWUXx0SwNxQEiuoq0f3UVe/JakOgwQQ9p
hS91VGZaNsjlELhN1sM/4ur3K1+92YRPiCZrXtAgI+ZRqni2QFyojz33IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTwJru2pSCpAXuBioULQhAqJI8WMB8GA1UdIwQY
MBaAFLbjoqSQjdloIcgMZNFdFxQUOqqUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHVPaXBKQ04yV2doeUF4azBWMFhGQlE2cXBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iMzZmMzEtMWNjZC00ZGEzLTljZjkt
MGVkYmRmZjlmOGYyLzEvdHVPaXBKQ04yV2doeUF4azBWMFhGQlE2cXBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iMzZmMzEtMWNjZC00ZGEzLTljZjktMGVkYmRmZjlmOGYy
LzEvdHVPaXBKQ04yV2doeUF4azBWMFhGQlE2cXBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlroWZ96F
dWeU3p01PyumHoYsmii3Y4HWfNZiTAnWrZLVKIny3FF6IkHjqgjXkwKy+psGMK9w
kPLn1PTHdeZvz02oHr8CeGtqGQi7tNxi3QxZmHZUHoJE5ahpxcQbvtJ5uAs+xK57
rjDiYSgnL6+iVBfSlDZNYlicm9o08/PRIlQuL9yIpoGscKFc8CyBsIwilh7v8qD/
l5hDlnULyfYqxJy9rbriveVspObhGtG91pgJ8wH4h+xC4j7bP46UrkoaWCyqY+tX
W7aXfS4H1kKqNT7SI+vV097rpfNml00WlRAjEfS1DR/DyvpoYiRkwrawY9rM140G
VhEdkzhlSCwgow==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:13 2025 by rpki-client