Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
File: tNc6atd6j4WbQD2yznFegtHPMv4.mft (raw, json)
Hash identifier: iMRvAAIJkVMSwy9oOmL+qYXHxC/Kbz9pRfffLf7lQ3c=
Subject key identifier: F4:FD:66:5A:68:A0:07:60:C5:33:C7:BF:60:42:18:C9:7C:F9:CE:1C
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Certificate issuer: /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial: 0198D698358BF65F03AFFBA77343F830CD19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 11:02:35 +0000
Manifest this update: Sat 23 Aug 2025 11:02:35 +0000
Manifest next update: Sun 24 Aug 2025 11:02:35 +0000
Files and hashes: 1: YO-tGwbdqI4YYY7I1KqnEaElBoQ.roa (hash: XZFdc4B2lVuIwGuWp8Gzl21H5s/bjgOkXy1zS/FUzmY=)
2: r8uOOwHL3Wt4pGrUJebg8yZ8WaY.roa (hash: Eioa5I9ONK/XZQXZG+CzeC8xkMTpLpCoDVH43Ycxzzc=)
3: tNc6atd6j4WbQD2yznFegtHPMv4.crl (hash: sozYi7a7XAXhPX4sLmG9drLY6pzSeiFMzIy4ap/lHis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:35:8b:f6:5f:03:af:fb:a7:73:43:f8:30:cd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Validity
Not Before: Aug 23 11:02:35 2025 GMT
Not After : Aug 24 11:02:35 2025 GMT
Subject: CN=f4fd665a68a00760c533c7bf604218c97cf9ce1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:be:02:d6:3f:b7:22:b9:aa:ef:26:9d:85:
d7:bc:c6:d6:e6:89:e1:75:14:a9:b9:f5:c1:1d:00:
fa:51:28:ad:4e:12:d4:50:31:27:01:c2:4b:b0:b6:
06:98:9c:93:21:3f:26:d2:92:4d:d6:26:9c:91:8e:
50:0c:2e:50:c3:85:21:db:4a:f8:eb:ba:25:4a:36:
2d:50:05:ac:d2:3f:8b:e3:19:7b:33:3a:4a:08:46:
67:db:8b:61:d3:b2:d9:f5:28:84:cd:0e:c3:f0:97:
12:29:9f:0d:a0:56:42:07:c2:55:f2:81:47:c4:5d:
13:44:67:2b:69:65:fd:8e:0d:2f:41:e1:cc:a9:4f:
2f:50:74:50:e4:4a:89:75:4c:69:15:47:24:66:c8:
f4:43:18:a6:11:fd:d3:ee:92:2a:6b:97:bf:d6:52:
23:51:17:5b:03:ea:a4:61:00:dc:0d:53:42:d9:ea:
49:90:96:9d:02:11:10:1b:3c:ec:f9:4d:f1:d5:1a:
56:2e:d0:02:e7:98:10:cd:3d:6a:01:ae:74:06:58:
64:7c:37:2a:2b:8c:f8:38:c4:e3:da:12:48:28:9e:
ff:74:c2:40:2f:77:2b:e9:03:d5:5b:0c:24:44:43:
f3:97:48:36:1f:ae:15:ba:53:da:d0:24:2d:dc:c2:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FD:66:5A:68:A0:07:60:C5:33:C7:BF:60:42:18:C9:7C:F9:CE:1C
X509v3 Authority Key Identifier:
keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f0:a4:0b:2f:09:54:4d:97:dc:ca:d5:0d:78:3c:cc:96:29:
1a:04:76:c8:2e:99:f5:e4:76:65:b5:b7:f8:d7:23:91:a5:be:
9c:5e:21:a7:da:22:50:29:47:09:5d:03:d4:ea:e5:ca:e7:0b:
2d:d5:7f:8e:2e:c6:4b:2c:93:fe:e8:8a:e9:b5:37:b0:8b:d8:
e8:97:43:6b:41:06:21:67:60:4d:11:d3:f1:86:94:75:34:6c:
02:89:b2:6c:f9:79:92:aa:9d:0e:5e:3e:e4:2d:f9:11:20:fe:
8d:4b:b5:33:0c:1f:c8:fe:2f:4d:62:16:f8:37:b0:92:98:d3:
2f:fe:ff:bd:4a:a3:9c:8b:23:df:71:7a:6e:7f:bb:c0:e0:d5:
12:e9:dc:8f:85:04:29:5a:87:b4:a3:f5:3d:78:09:f5:33:79:
ee:c3:18:a5:94:3b:9f:64:45:cd:d8:f7:b8:aa:8b:80:13:a2:
c1:42:97:9e:97:91:6f:8f:dc:68:37:cc:52:40:36:24:2f:41:
fc:70:97:11:7e:05:8b:52:e3:27:25:ae:fa:93:c6:9b:85:15:
1c:c6:02:46:ee:e3:6d:9c:91:81:b3:77:44:8c:2f:cc:9a:07:
0f:79:13:9b:d9:00:b9:52:34:fb:62:30:75:55:72:59:4c:2b:
9f:0c:84:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmDWL9l8Dr/unc0P4MM0ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZDczYTZhZDc3YThmODU5YjQwM2RiMmNlNzE1ZTgyZDFj
ZjMyZmUwHhcNMjUwODIzMTEwMjM1WhcNMjUwODI0MTEwMjM1WjAzMTEwLwYDVQQD
EyhmNGZkNjY1YTY4YTAwNzYwYzUzM2M3YmY2MDQyMThjOTdjZjljZTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv++AtY/tyK5qu8mnYXXvMbW5onh
dRSpufXBHQD6USitThLUUDEnAcJLsLYGmJyTIT8m0pJN1iackY5QDC5Qw4Uh20r4
67olSjYtUAWs0j+L4xl7MzpKCEZn24th07LZ9SiEzQ7D8JcSKZ8NoFZCB8JV8oFH
xF0TRGcraWX9jg0vQeHMqU8vUHRQ5EqJdUxpFUckZsj0QximEf3T7pIqa5e/1lIj
URdbA+qkYQDcDVNC2epJkJadAhEQGzzs+U3x1RpWLtAC55gQzT1qAa50BlhkfDcq
K4z4OMTj2hJIKJ7/dMJAL3cr6QPVWwwkREPzl0g2H64VulPa0CQt3MLm7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPT9ZlpooAdgxTPHv2BCGMl8+c4cMB8GA1UdIwQY
MBaAFLTXOmrXeo+Fm0A9ss5xXoLRzzL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83ZTdlZTctMWJkNC00NDM1LTg3MWYt
NmNmOGU1NjdmZjFjLzEvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83ZTdlZTctMWJkNC00NDM1LTg3MWYtNmNmOGU1NjdmZjFj
LzEvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfCkCy8J
VE2X3MrVDXg8zJYpGgR2yC6Z9eR2ZbW3+NcjkaW+nF4hp9oiUClHCV0D1OrlyucL
LdV/ji7GSyyT/uiK6bU3sIvY6JdDa0EGIWdgTRHT8YaUdTRsAomybPl5kqqdDl4+
5C35ESD+jUu1MwwfyP4vTWIW+DewkpjTL/7/vUqjnIsj33F6bn+7wODVEuncj4UE
KVqHtKP1PXgJ9TN57sMYpZQ7n2RFzdj3uKqLgBOiwUKXnpeRb4/caDfMUkA2JC9B
/HCXEX4Fi1LjJyWu+pPGm4UVHMYCRu7jbZyRgbN3RIwvzJoHD3kTm9kAuVI0+2Iw
dVVyWUwrnwyEWw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:54:27 2025 by rpki-client