Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: MeRrp7pMWYbL5GX6zn/scDf/qrDQRaglvCa+quToA/c=
Subject key identifier: 05:41:25:D3:18:0E:CD:52:C4:6C:BE:65:15:C3:64:01:36:D3:51:AA
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 0197C56EED777A8FB67A022B04C7956984E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 07A9
Signing time: Tue 01 Jul 2025 10:01:10 +0000
Manifest this update: Tue 01 Jul 2025 10:01:10 +0000
Manifest next update: Wed 02 Jul 2025 10:01:10 +0000
Files and hashes: 1: JyF5UhD9cVqjqquiR-hK995tZzw.roa (hash: 5AXS3YhQ0/Ke6SUL+/AhBjypj7cC6zgjHgX8v/ujINo=)
2: pTQKkEXtOvhz7EuIYUqt-o1qzFk.roa (hash: OW+foSbaeoc9zsDW/uMWemQINFvQAo39Gw9c3A0iOPI=)
3: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: HPtoUPiJpTj/39LuKMTNBCfSJId9K1rmDORM/b5r3nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6e:ed:77:7a:8f:b6:7a:02:2b:04:c7:95:69:84:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Jul 1 10:01:10 2025 GMT
Not After : Jul 2 10:01:10 2025 GMT
Subject: CN=054125d3180ecd52c46cbe6515c3640136d351aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:84:60:5f:9f:76:d0:3b:ed:80:32:cc:84:00:
67:7d:7d:42:ce:07:f3:24:bc:90:fb:ad:17:34:67:
4c:13:f7:f6:94:ea:fc:ec:0a:e5:c2:f5:30:8c:31:
32:8b:2b:3a:a4:e9:9b:ed:11:43:58:f6:97:0f:6c:
62:91:d0:d1:55:80:01:55:24:30:3c:22:76:58:c7:
d8:d8:15:e5:61:8a:88:13:c1:24:f9:a7:cf:80:94:
43:14:31:b6:6c:18:28:fd:bd:20:ec:92:bc:0f:db:
69:09:da:17:2f:ad:04:b2:a3:8b:87:21:a0:78:43:
e0:aa:d1:c1:06:b7:dd:03:2d:36:0b:5f:e1:1b:f7:
97:34:9c:1d:de:ef:2d:f7:45:69:64:2e:d8:e9:2f:
d6:52:29:d1:4f:8b:54:0b:f7:fd:8f:cf:66:1e:e7:
fe:95:8d:45:29:5b:2b:54:59:0b:4b:64:92:bd:c3:
72:04:64:48:f5:ec:49:b2:87:da:ab:03:f5:76:d6:
d3:48:2e:96:a0:df:2a:ff:5f:62:79:0b:08:e3:b0:
1e:77:94:43:d0:55:8c:22:d2:be:8c:a6:d6:80:ee:
5e:0d:df:fc:5f:5f:99:68:28:89:71:f4:fc:ca:06:
c8:5b:09:ae:15:d5:a3:30:36:2a:5d:7d:91:60:b0:
6a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:41:25:D3:18:0E:CD:52:C4:6C:BE:65:15:C3:64:01:36:D3:51:AA
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e0:45:5b:9b:cc:e5:67:66:b7:47:c3:a4:ee:4a:7d:4e:86:
15:ef:0b:07:53:1f:d6:fe:bc:1b:3e:9e:9d:c4:db:90:4e:76:
6d:e5:ac:5d:e0:b6:cb:ab:9a:36:d8:d3:ba:97:28:82:a1:22:
1d:8f:5a:eb:ad:4b:8a:6c:6c:7f:60:c9:f9:e8:20:39:35:78:
78:59:1b:f1:a1:d1:49:f6:17:41:30:95:43:ff:87:c1:04:db:
bf:de:65:87:47:df:41:d6:3f:01:3f:36:53:5b:4b:d6:be:58:
f7:ae:1c:b3:2a:82:08:ee:02:4a:55:99:2b:bf:b6:45:fa:24:
1a:a0:1b:96:f4:90:81:d4:e5:27:22:00:3e:b5:2c:40:26:4c:
0c:b7:0d:30:c4:eb:91:d7:08:eb:9d:6b:80:ff:69:62:c0:27:
39:d9:36:31:ac:41:99:43:25:1c:41:c6:6c:57:7a:d9:2d:ba:
a5:9f:ab:3b:48:ef:cd:86:3d:7f:cf:1c:d2:d3:5a:fb:eb:22:
28:db:31:4f:45:ea:93:fd:be:61:a4:50:5a:0f:31:74:6f:90:
b5:8f:69:f8:13:78:31:fb:e8:7e:69:9f:34:36:e5:dd:cb:0f:
32:9b:c8:85:9f:48:a5:85:89:94:bf:4a:b6:69:68:bc:3d:46:
bc:df:d6:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfFbu13eo+2egIrBMeVaYTgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MDI2Yzk5NzQwOTJlMjIwNTQyNDAxMjgxZjliZGZkMzU2
YzI4NDIwHhcNMjUwNzAxMTAwMTEwWhcNMjUwNzAyMTAwMTEwWjAzMTEwLwYDVQQD
EygwNTQxMjVkMzE4MGVjZDUyYzQ2Y2JlNjUxNWMzNjQwMTM2ZDM1MWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44RgX5920DvtgDLMhABnfX1Czgfz
JLyQ+60XNGdME/f2lOr87ArlwvUwjDEyiys6pOmb7RFDWPaXD2xikdDRVYABVSQw
PCJ2WMfY2BXlYYqIE8Ek+afPgJRDFDG2bBgo/b0g7JK8D9tpCdoXL60EsqOLhyGg
eEPgqtHBBrfdAy02C1/hG/eXNJwd3u8t90VpZC7Y6S/WUinRT4tUC/f9j89mHuf+
lY1FKVsrVFkLS2SSvcNyBGRI9exJsofaqwP1dtbTSC6WoN8q/19ieQsI47Aed5RD
0FWMItK+jKbWgO5eDd/8X1+ZaCiJcfT8ygbIWwmuFdWjMDYqXX2RYLBqZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVBJdMYDs1SxGy+ZRXDZAE201GqMB8GA1UdIwQY
MBaAFLUCbJl0CS4iBUJAEoH5vf01bChCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYt
ZWVhMjY3YTU4NDk0LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYtZWVhMjY3YTU4NDk0
LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAruBFW5vM
5Wdmt0fDpO5KfU6GFe8LB1Mf1v68Gz6encTbkE52beWsXeC2y6uaNtjTupcogqEi
HY9a661Limxsf2DJ+eggOTV4eFkb8aHRSfYXQTCVQ/+HwQTbv95lh0ffQdY/AT82
U1tL1r5Y964csyqCCO4CSlWZK7+2RfokGqAblvSQgdTlJyIAPrUsQCZMDLcNMMTr
kdcI651rgP9pYsAnOdk2MaxBmUMlHEHGbFd62S26pZ+rO0jvzYY9f88c0tNa++si
KNsxT0Xqk/2+YaRQWg8xdG+QtY9p+BN4MfvofmmfNDbl3csPMpvIhZ9IpYWJlL9K
tmlovD1GvN/WPw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 18:25:47 2025 by rpki-client