Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
File: tqiXx5jwGbJHexqc47I7tddhZsM.mft (raw, json)
Hash identifier: jrOo/vIcZW7Ratok13Yqdig5b5dHcopewkWrHULPdUk=
Subject key identifier: 7C:99:BD:A4:D6:89:6E:BA:6F:E8:3A:34:64:93:0C:26:75:28:1C:3C
Authority key identifier: B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
Certificate issuer: /CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Certificate serial: 0198D54EA6F4F42FF8992C7D535069FDE823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
Manifest number: 13EA
Signing time: Sat 23 Aug 2025 05:02:38 +0000
Manifest this update: Sat 23 Aug 2025 05:02:38 +0000
Manifest next update: Sun 24 Aug 2025 05:02:38 +0000
Files and hashes: 1: f9JCdqsJLWfadd987fFlDNk7mdM.roa (hash: 5CurkeU+eAkjrTT560cBjUlbg7hvGNi0G0d/Uo5/6r0=)
2: tqiXx5jwGbJHexqc47I7tddhZsM.crl (hash: fL2tfsOP+2z7KPOXaG1qLKPLrInc6cuwoJx/sO5Qg20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a6:f4:f4:2f:f8:99:2c:7d:53:50:69:fd:e8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Validity
Not Before: Aug 23 05:02:38 2025 GMT
Not After : Aug 24 05:02:38 2025 GMT
Subject: CN=7c99bda4d6896eba6fe83a3464930c2675281c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:98:07:27:75:68:26:27:61:71:cc:09:6a:55:
d2:9f:96:a1:85:a7:17:8e:8a:98:c7:09:fd:50:50:
1c:00:6f:66:12:34:c1:37:bc:34:b6:3a:9c:28:67:
9c:67:42:a6:45:29:02:7e:dd:26:d6:77:e8:76:f3:
e9:b2:62:d0:ce:05:0b:49:21:32:72:f6:f2:8c:df:
93:c0:3d:05:09:2e:18:0b:8a:99:4d:d4:27:b0:3b:
8b:43:b1:e0:98:a6:88:b0:8f:09:1d:ba:50:7f:51:
fd:a4:11:90:22:de:a7:ac:80:a4:78:2a:6a:99:16:
e4:d0:20:69:08:98:aa:ce:8a:82:44:07:e7:78:7b:
55:c2:0e:d5:93:08:98:43:a1:36:08:af:be:86:74:
2d:20:70:8e:be:44:36:ff:9c:84:30:60:96:a5:73:
70:ec:27:f7:55:ac:67:2c:98:ad:27:7d:7f:58:3e:
36:bb:6d:4c:c6:1a:fa:3b:92:d7:80:44:2d:f1:8c:
82:1f:f3:9c:c1:98:14:be:1d:d7:ae:fa:60:f2:a6:
ea:bf:8e:cd:9d:e2:85:4d:e7:06:69:f2:6d:08:f8:
67:a1:8d:a8:7a:f0:fb:1e:ce:ae:66:13:af:e4:7c:
ad:60:ff:7a:35:6d:a9:26:63:b9:6b:a7:41:27:1b:
fd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:99:BD:A4:D6:89:6E:BA:6F:E8:3A:34:64:93:0C:26:75:28:1C:3C
X509v3 Authority Key Identifier:
keyid:B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:17:65:f8:91:b5:87:d6:7e:d8:fe:29:7a:3b:37:a0:91:0a:
45:bc:45:51:07:14:3f:71:97:48:85:ef:dc:26:3a:db:47:ed:
00:74:b1:b1:3b:1d:f5:eb:2d:02:fb:7a:6c:17:47:58:57:a2:
31:74:1d:9e:e0:47:a2:d0:5b:5f:d7:e8:8d:8a:9c:d7:e1:5d:
3f:87:b4:e7:12:62:23:4e:dc:16:78:58:eb:e3:19:c3:02:5c:
c2:2c:47:88:00:b5:13:e5:f1:12:c6:0a:61:2a:6e:e9:74:8a:
89:6a:60:82:9e:14:75:c4:f8:75:61:bd:ac:6c:e8:db:9f:b6:
5f:00:72:cf:12:33:d5:96:dd:37:75:f8:5d:a7:c5:86:18:5d:
87:d4:79:a5:f9:5a:49:2f:ef:7e:67:43:9e:f5:33:44:40:70:
e2:ac:42:43:c4:66:24:43:df:8c:66:2c:97:df:ec:75:de:b1:
9b:c6:ac:28:8b:d1:c6:38:6f:1d:c7:fd:e4:4e:bd:69:e4:f5:
fe:68:6e:6f:76:4c:93:a2:8c:d7:b8:36:61:2d:a9:69:ef:06:
7f:b0:06:33:34:90:b6:f9:be:82:f5:9d:df:ae:6d:48:d4:fd:
a5:2e:6c:cb:5a:83:ab:85:bb:8b:95:c7:ff:e8:13:2c:08:d1:
fd:d8:ce:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTqb09C/4mSx9U1Bp/egjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YTg5N2M3OThmMDE5YjI0NzdiMWE5Y2UzYjIzYmI1ZDc2
MTY2YzMwHhcNMjUwODIzMDUwMjM4WhcNMjUwODI0MDUwMjM4WjAzMTEwLwYDVQQD
Eyg3Yzk5YmRhNGQ2ODk2ZWJhNmZlODNhMzQ2NDkzMGMyNjc1MjgxYzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JgHJ3VoJidhccwJalXSn5ahhacX
joqYxwn9UFAcAG9mEjTBN7w0tjqcKGecZ0KmRSkCft0m1nfodvPpsmLQzgULSSEy
cvbyjN+TwD0FCS4YC4qZTdQnsDuLQ7HgmKaIsI8JHbpQf1H9pBGQIt6nrICkeCpq
mRbk0CBpCJiqzoqCRAfneHtVwg7VkwiYQ6E2CK++hnQtIHCOvkQ2/5yEMGCWpXNw
7Cf3VaxnLJitJ31/WD42u21Mxhr6O5LXgEQt8YyCH/OcwZgUvh3Xrvpg8qbqv47N
neKFTecGafJtCPhnoY2oevD7Hs6uZhOv5HytYP96NW2pJmO5a6dBJxv9WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyZvaTWiW66b+g6NGSTDCZ1KBw8MB8GA1UdIwQY
MBaAFLaol8eY8BmyR3sanOOyO7XXYWbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHFpWHg1andHYkpIZXhxYzQ3STd0ZGRoWnNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTdkZDctN2Y3Yy00OTRkLWI4ODYt
NTJmODUwY2E1NWM2LzEvdHFpWHg1andHYkpIZXhxYzQ3STd0ZGRoWnNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTdkZDctN2Y3Yy00OTRkLWI4ODYtNTJmODUwY2E1NWM2
LzEvdHFpWHg1andHYkpIZXhxYzQ3STd0ZGRoWnNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhdl+JG1
h9Z+2P4pejs3oJEKRbxFUQcUP3GXSIXv3CY620ftAHSxsTsd9estAvt6bBdHWFei
MXQdnuBHotBbX9fojYqc1+FdP4e05xJiI07cFnhY6+MZwwJcwixHiAC1E+XxEsYK
YSpu6XSKiWpggp4UdcT4dWG9rGzo25+2XwByzxIz1ZbdN3X4XafFhhhdh9R5pfla
SS/vfmdDnvUzREBw4qxCQ8RmJEPfjGYsl9/sdd6xm8asKIvRxjhvHcf95E69aeT1
/mhub3ZMk6KM17g2YS2pae8Gf7AGMzSQtvm+gvWd365tSNT9pS5sy1qDq4W7i5XH
/+gTLAjR/djObw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:14 2025 by rpki-client