Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
File: tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft (raw, json)
Hash identifier: XuhZWljpeGU5VJ7I4kaBrbn6cKfc6IE0Q32wDG4rtUQ=
Subject key identifier: C5:DA:01:41:D8:92:D2:08:82:CE:41:49:86:11:34:F0:63:CC:1A:BF
Authority key identifier: B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
Certificate issuer: /CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Certificate serial: 0198D66074CC06286C58686D0B0F177A6778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:01:42 +0000
Manifest this update: Sat 23 Aug 2025 10:01:42 +0000
Manifest next update: Sun 24 Aug 2025 10:01:42 +0000
Files and hashes: 1: ag-uYpovt5JPQ3cFAXtXn4zz86A.roa (hash: 2LKnP2sHY9S5jGwYqiGKID4jG+yM+87plZe5I7Vq4ns=)
2: tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl (hash: 8jFQXKa9SJHkK9lkLGv9hkA/X1RCsEYCXUYJBssN5zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:74:cc:06:28:6c:58:68:6d:0b:0f:17:7a:67:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Validity
Not Before: Aug 23 10:01:42 2025 GMT
Not After : Aug 24 10:01:42 2025 GMT
Subject: CN=c5da0141d892d20882ce4149861134f063cc1abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:5d:fa:47:e0:f8:32:59:a1:10:85:fb:4d:
84:26:8b:9d:82:a5:d1:90:5f:76:77:03:8e:53:c6:
3e:cd:be:9b:86:28:b2:35:60:ad:13:07:6f:55:43:
f2:74:97:5c:d0:70:93:f9:9c:f9:80:67:37:06:1b:
58:55:eb:ce:d0:29:ac:c7:fc:a2:ef:11:d6:47:bd:
8d:e5:be:fa:a4:6a:7b:9f:77:16:ea:46:c0:90:9b:
3e:66:ef:54:e2:2d:42:5f:ed:bb:34:08:04:e3:b7:
51:8c:97:99:d0:9e:61:7a:68:1e:d0:a1:86:b5:ac:
fa:66:3c:d3:a0:63:86:0b:71:30:14:1f:c7:a0:71:
89:8e:85:97:19:aa:07:21:a9:5b:81:18:67:db:a2:
85:43:0e:c8:e4:75:53:43:b0:15:b1:e7:f1:33:03:
eb:a0:b4:af:da:4a:dd:6f:a4:dd:f9:fe:4e:bf:db:
56:4c:ed:01:77:fb:07:5a:c9:8c:11:2d:93:c1:73:
11:38:a5:cc:45:d0:a6:62:62:14:8b:b5:92:34:72:
6f:f8:b6:1b:75:d8:9d:c3:57:38:b6:4e:48:54:8d:
1f:be:93:c2:31:3c:7d:ec:e8:46:1c:b6:f9:50:ae:
f4:4e:9d:c2:85:76:6c:07:a6:df:ec:96:34:74:e9:
d1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DA:01:41:D8:92:D2:08:82:CE:41:49:86:11:34:F0:63:CC:1A:BF
X509v3 Authority Key Identifier:
keyid:B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:24:de:82:b8:36:99:d5:77:55:be:b5:29:ee:da:7e:f5:c3:
e8:e6:0f:50:15:85:e5:a5:01:f4:9c:a2:a1:a6:75:ec:e0:e8:
1e:ff:91:65:03:0f:70:79:b2:9b:aa:d6:61:c3:55:08:0e:71:
c2:2a:76:d7:d4:b6:fd:df:87:5f:51:57:fa:12:37:50:c0:40:
70:fb:39:ad:15:0a:36:34:dc:42:a9:76:77:e4:05:19:40:6c:
bd:52:60:07:32:d6:51:fe:eb:fd:c0:0d:ad:c5:c8:ac:eb:72:
91:c1:14:3f:27:37:3b:cc:4f:bf:62:2d:28:bf:da:1b:53:7a:
ec:1a:70:79:c4:7f:2b:98:c9:f0:d7:cf:43:f3:11:e6:9a:9d:
fa:e8:25:a2:20:62:45:26:1f:4d:97:02:39:a1:8f:dc:d0:4a:
12:e8:dc:90:55:16:36:f6:81:ec:eb:1c:01:36:44:f3:6b:ae:
78:da:df:ed:1a:b4:75:af:8f:ae:74:a2:3d:c1:bb:b2:e1:13:
14:ce:61:33:25:8e:2c:94:72:5a:72:de:2e:dc:77:9a:5f:3a:
f5:5c:a7:f4:e3:59:5a:71:7a:8b:a7:b2:9c:93:c9:a9:30:46:
b2:8a:6b:ad:1d:56:08:57:62:51:4d:5d:c6:b8:f5:c8:11:7b:
10:f8:3c:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYHTMBihsWGhtCw8Xemd4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YmRkZTc4NDE1YjY5YzMxMjc3YzBhYWM3ZmNhNjYwN2Q2
MzVkODgwHhcNMjUwODIzMTAwMTQyWhcNMjUwODI0MTAwMTQyWjAzMTEwLwYDVQQD
EyhjNWRhMDE0MWQ4OTJkMjA4ODJjZTQxNDk4NjExMzRmMDYzY2MxYWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArold+kfg+DJZoRCF+02EJoudgqXR
kF92dwOOU8Y+zb6bhiiyNWCtEwdvVUPydJdc0HCT+Zz5gGc3BhtYVevO0Cmsx/yi
7xHWR72N5b76pGp7n3cW6kbAkJs+Zu9U4i1CX+27NAgE47dRjJeZ0J5hemge0KGG
taz6ZjzToGOGC3EwFB/HoHGJjoWXGaoHIalbgRhn26KFQw7I5HVTQ7AVsefxMwPr
oLSv2krdb6Td+f5Ov9tWTO0Bd/sHWsmMES2TwXMROKXMRdCmYmIUi7WSNHJv+LYb
ddidw1c4tk5IVI0fvpPCMTx97OhGHLb5UK70Tp3ChXZsB6bf7JY0dOnRBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXaAUHYktIIgs5BSYYRNPBjzBq/MB8GA1UdIwQY
MBaAFLS93nhBW2nDEnfAqsf8pmB9Y12IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEwzZWVFRmJhY01TZDhDcXhfeW1ZSDFqWFlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zNGQ0NzAtNDlmNy00YWUwLWI2MWEt
MDk0NGJlZDBlZDI2LzEvdEwzZWVFRmJhY01TZDhDcXhfeW1ZSDFqWFlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8zNGQ0NzAtNDlmNy00YWUwLWI2MWEtMDk0NGJlZDBlZDI2
LzEvdEwzZWVFRmJhY01TZDhDcXhfeW1ZSDFqWFlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSTegrg2
mdV3Vb61Ke7afvXD6OYPUBWF5aUB9JyioaZ17ODoHv+RZQMPcHmym6rWYcNVCA5x
wip219S2/d+HX1FX+hI3UMBAcPs5rRUKNjTcQql2d+QFGUBsvVJgBzLWUf7r/cAN
rcXIrOtykcEUPyc3O8xPv2ItKL/aG1N67BpwecR/K5jJ8NfPQ/MR5pqd+ugloiBi
RSYfTZcCOaGP3NBKEujckFUWNvaB7OscATZE82uueNrf7Rq0da+PrnSiPcG7suET
FM5hMyWOLJRyWnLeLtx3ml869Vyn9ONZWnF6i6eynJPJqTBGsoprrR1WCFdiUU1d
xrj1yBF7EPg8ew==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:47:50 2025 by rpki-client