Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
File: tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json)
Hash identifier: fT4Rhl0Gr2ypHspSI3Zu718WyfFbM+Swxr0DvxBwBx8=
Subject key identifier: 51:09:96:17:EC:04:4E:28:2B:85:A3:93:84:B7:55:AC:A8:4C:19:81
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial: 0198D706188807861779640914CBE3620805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 13:02:37 +0000
Manifest this update: Sat 23 Aug 2025 13:02:37 +0000
Manifest next update: Sun 24 Aug 2025 13:02:37 +0000
Files and hashes: 1: WmxX7pBfpD5c2m2kHOUO4M_bBgA.roa (hash: q0DpW8XtR4IxHRwLJz0IGFkpb8cJ4HYo8d4HsEmNl8o=)
2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: 4ir4dAlBmCEG3GM05aB+4oB8X7eXMaWkQuXNt88edZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:18:88:07:86:17:79:64:09:14:cb:e3:62:08:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Validity
Not Before: Aug 23 13:02:37 2025 GMT
Not After : Aug 24 13:02:37 2025 GMT
Subject: CN=51099617ec044e282b85a39384b755aca84c1981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:76:9e:8c:65:83:e0:d3:f9:69:87:1a:01:
f6:9b:ae:9c:7c:79:89:4a:a1:28:8e:e9:18:43:6f:
6c:2d:a2:66:52:f9:42:d2:39:b6:2a:e1:07:f0:a3:
94:fc:10:4d:98:46:c8:c6:6b:b7:a8:8b:86:b3:06:
ef:a9:d6:b9:ca:a1:94:fc:5e:a6:d7:e3:99:db:7e:
8a:1d:82:d0:33:78:d3:49:3a:49:2e:d2:da:03:3b:
24:5a:a4:39:ad:d2:e7:a1:15:b5:68:48:12:10:fa:
d4:1d:14:26:52:01:0e:a1:90:59:7c:18:c2:d9:80:
b7:ba:5e:3e:6e:e0:c1:b5:d5:d2:5a:d6:17:3d:ff:
79:c4:3b:a3:ad:9f:6e:ef:03:2d:28:2b:7c:e9:7e:
8d:e5:12:ff:d8:ae:10:0a:d5:5d:28:ab:70:14:a6:
cd:f3:d6:44:57:bb:5f:c6:16:34:2a:09:f0:23:c9:
a1:32:6b:07:ad:1a:f8:a3:38:ee:c5:42:8c:b9:42:
15:02:9d:d9:40:d4:92:51:da:e7:2e:32:70:9f:79:
ac:0d:d1:f5:88:a4:c3:04:ec:af:94:c1:07:19:8e:
bd:0f:bd:f6:a9:b0:84:8e:08:eb:57:32:d6:55:c7:
8c:e3:97:b1:26:7f:d4:51:1a:ec:fb:f5:6a:ad:17:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:09:96:17:EC:04:4E:28:2B:85:A3:93:84:B7:55:AC:A8:4C:19:81
X509v3 Authority Key Identifier:
keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:68:96:b0:b6:f7:8c:2e:c8:06:ce:1d:f9:3b:13:5c:e8:cf:
b9:53:74:38:f0:93:6f:fe:49:1d:a0:f9:bf:1e:32:24:a2:53:
99:a0:af:1e:67:dc:59:d9:85:96:00:9a:b1:81:c6:55:79:4f:
e5:ce:1c:11:c3:7a:32:14:a2:24:2b:d3:28:9e:df:de:35:72:
5c:03:60:a2:06:02:da:11:89:4a:fc:e8:b7:49:52:5d:b5:d0:
55:44:20:bf:06:e1:84:66:78:8b:9c:a9:95:89:6f:52:76:9c:
af:0d:68:d0:9c:60:a4:ec:db:97:e9:f1:6b:90:c6:0c:fe:a7:
d5:6e:53:8d:5c:9a:53:2d:96:43:f1:92:7c:cc:e5:76:91:fa:
cb:3d:c1:1b:db:e3:af:27:f2:8e:f8:f1:c8:da:08:02:d5:5e:
31:33:55:d1:f5:0d:aa:73:19:d0:a0:ef:32:cc:d0:fc:26:4e:
6f:41:11:03:3c:53:6e:87:08:15:56:4b:ef:5d:fd:20:39:f0:
08:b9:26:74:a2:3a:65:e4:92:50:76:92:96:a7:c7:7f:25:19:
64:ff:5c:e9:70:cf:96:24:60:b6:60:59:59:0e:d8:d7:92:9e:
92:b3:f9:ac:2c:f3:68:81:ae:18:04:98:e6:e2:38:e2:00:18:
46:37:75:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBhiIB4YXeWQJFMvjYggFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZTg4MmY3MTcxYWY2ZGNkY2NjOWNkNzlmOThkZWM2NzU3
ZmUxODkwHhcNMjUwODIzMTMwMjM3WhcNMjUwODI0MTMwMjM3WjAzMTEwLwYDVQQD
Eyg1MTA5OTYxN2VjMDQ0ZTI4MmI4NWEzOTM4NGI3NTVhY2E4NGMxOTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4N2noxlg+DT+WmHGgH2m66cfHmJ
SqEojukYQ29sLaJmUvlC0jm2KuEH8KOU/BBNmEbIxmu3qIuGswbvqda5yqGU/F6m
1+OZ236KHYLQM3jTSTpJLtLaAzskWqQ5rdLnoRW1aEgSEPrUHRQmUgEOoZBZfBjC
2YC3ul4+buDBtdXSWtYXPf95xDujrZ9u7wMtKCt86X6N5RL/2K4QCtVdKKtwFKbN
89ZEV7tfxhY0KgnwI8mhMmsHrRr4ozjuxUKMuUIVAp3ZQNSSUdrnLjJwn3msDdH1
iKTDBOyvlMEHGY69D732qbCEjgjrVzLWVceM45exJn/UURrs+/VqrRe43wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEJlhfsBE4oK4Wjk4S3VayoTBmBMB8GA1UdIwQY
MBaAFLTogvcXGvbc3Myc15+Y3sZ1f+GJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81ZjViYzgtZTVmMy00MjFkLTlmYTAt
ZmVmZThlMzQwMDZjLzEvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81ZjViYzgtZTVmMy00MjFkLTlmYTAtZmVmZThlMzQwMDZj
LzEvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWiWsLb3
jC7IBs4d+TsTXOjPuVN0OPCTb/5JHaD5vx4yJKJTmaCvHmfcWdmFlgCasYHGVXlP
5c4cEcN6MhSiJCvTKJ7f3jVyXANgogYC2hGJSvzot0lSXbXQVUQgvwbhhGZ4i5yp
lYlvUnacrw1o0JxgpOzbl+nxa5DGDP6n1W5TjVyaUy2WQ/GSfMzldpH6yz3BG9vj
ryfyjvjxyNoIAtVeMTNV0fUNqnMZ0KDvMszQ/CZOb0ERAzxTbocIFVZL7139IDnw
CLkmdKI6ZeSSUHaSlqfHfyUZZP9c6XDPliRgtmBZWQ7Y15KekrP5rCzzaIGuGASY
5uI44gAYRjd1wQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:23:57 2025 by rpki-client