Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
File: tuD-D69oRJiK8vdE1RbtucXf5xw.mft (raw, json)
Hash identifier: ELKwYQcSq4rChgw89haVuhiztnBeAsNxLoTw7XXye30=
Subject key identifier: 2C:47:C8:D3:7D:5E:56:AD:93:9E:EC:C1:74:44:F1:D2:F6:0F:D4:66
Authority key identifier: B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
Certificate issuer: /CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Certificate serial: 0198D5F1615F63F083431679FB19F0CD9E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
Manifest number: 0DD1
Signing time: Sat 23 Aug 2025 08:00:22 +0000
Manifest this update: Sat 23 Aug 2025 08:00:22 +0000
Manifest next update: Sun 24 Aug 2025 08:00:22 +0000
Files and hashes: 1: a_PNkPnx5ou35JrpXNK2_iqC5Yc.roa (hash: iMkdGKK1MTR9CDFy5rjVtC+a2w/5myXmTmA9XTMLkJo=)
2: tuD-D69oRJiK8vdE1RbtucXf5xw.crl (hash: MxyNfGqEsweJFf6PimbVy4juYDqGXGYab1wknyRHbEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:61:5f:63:f0:83:43:16:79:fb:19:f0:cd:9e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Validity
Not Before: Aug 23 08:00:22 2025 GMT
Not After : Aug 24 08:00:22 2025 GMT
Subject: CN=2c47c8d37d5e56ad939eecc17444f1d2f60fd466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:94:13:77:5c:a3:a1:62:b6:20:51:c9:a7:c1:
58:6b:45:6a:15:04:ce:57:a8:6a:04:34:b7:cc:0f:
39:8d:20:be:69:08:1c:a9:ef:07:39:24:9f:78:27:
df:2e:8c:9b:50:92:3b:2a:ff:56:d3:35:6c:d1:6b:
7e:4e:ff:b2:45:24:d0:1a:74:fa:7d:35:ba:3b:b0:
52:d6:ae:07:de:5c:bf:72:38:31:58:0e:95:98:db:
e2:e7:85:15:be:46:e0:92:0f:db:0b:7b:13:08:48:
fc:98:69:a2:7d:2c:79:14:61:0c:44:eb:5c:ce:f9:
8b:48:93:29:71:f1:0a:bb:bc:f7:57:da:ab:3a:03:
cf:c8:89:09:2e:e3:6f:91:55:37:c5:a0:6c:d9:3e:
60:74:35:61:8d:94:b5:69:9b:6d:94:44:d3:4d:c5:
e4:be:33:f7:e1:6f:cf:b0:e2:fd:ee:cb:a2:84:d2:
20:05:44:7d:74:14:8a:90:f1:34:ca:78:ec:47:69:
45:3b:da:df:ef:50:d8:a0:31:35:1c:78:bc:28:7c:
50:42:14:fb:fa:98:f4:9a:2d:d2:6e:9a:d1:c6:ad:
30:1a:85:ec:89:d7:f6:46:fa:16:16:b5:12:c3:9f:
8a:3b:20:48:56:a0:07:b7:5a:db:b8:37:23:80:78:
53:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:47:C8:D3:7D:5E:56:AD:93:9E:EC:C1:74:44:F1:D2:F6:0F:D4:66
X509v3 Authority Key Identifier:
keyid:B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:1e:06:88:94:ac:31:b4:f3:59:9c:ef:3f:7d:3e:0e:6c:c2:
b8:e5:d9:1f:bd:12:78:a9:14:3e:3a:ef:81:c1:da:39:8c:4a:
88:40:2d:ed:d4:d0:7b:81:d8:d3:f6:b4:c6:5d:2c:a6:3f:96:
2c:66:14:c5:7a:d1:03:57:ab:ee:9a:08:8a:86:58:64:e3:cc:
42:ee:4d:41:d4:97:dc:21:53:ed:53:d4:79:ce:99:f3:5d:4b:
70:b7:37:cf:76:ad:81:f5:0e:32:b5:7d:f8:29:ea:3f:eb:9d:
2f:44:26:df:e3:3e:8e:1c:d9:2b:e4:35:a5:c0:db:06:ad:15:
f1:d3:05:9a:a6:b5:66:c5:f0:c1:11:f9:bc:fb:bb:60:ce:09:
87:8a:76:16:b3:d3:85:c4:e0:1a:13:39:18:2e:4e:7d:98:e5:
b0:5f:20:c0:13:a8:5f:17:e6:49:96:98:f9:b1:47:78:52:b3:
1d:b9:58:ed:77:a0:29:e5:f1:ee:22:9a:0b:1e:e6:8d:6a:49:
6d:db:4f:04:a8:90:b0:07:58:dc:31:dd:f8:25:aa:55:5c:8b:
db:1f:79:d9:4b:de:51:3c:4e:b1:3c:76:5b:ce:49:ee:db:45:
6a:06:73:5c:4d:eb:c3:8f:b3:f4:ef:ee:ec:13:28:d4:02:54:
6b:32:28:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8WFfY/CDQxZ5+xnwzZ4IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZTBmZTBmYWY2ODQ0OTg4YWYyZjc0NGQ1MTZlZGI5YzVk
ZmU3MWMwHhcNMjUwODIzMDgwMDIyWhcNMjUwODI0MDgwMDIyWjAzMTEwLwYDVQQD
EygyYzQ3YzhkMzdkNWU1NmFkOTM5ZWVjYzE3NDQ0ZjFkMmY2MGZkNDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpQTd1yjoWK2IFHJp8FYa0VqFQTO
V6hqBDS3zA85jSC+aQgcqe8HOSSfeCffLoybUJI7Kv9W0zVs0Wt+Tv+yRSTQGnT6
fTW6O7BS1q4H3ly/cjgxWA6VmNvi54UVvkbgkg/bC3sTCEj8mGmifSx5FGEMROtc
zvmLSJMpcfEKu7z3V9qrOgPPyIkJLuNvkVU3xaBs2T5gdDVhjZS1aZttlETTTcXk
vjP34W/PsOL97suihNIgBUR9dBSKkPE0ynjsR2lFO9rf71DYoDE1HHi8KHxQQhT7
+pj0mi3SbprRxq0wGoXsidf2RvoWFrUSw5+KOyBIVqAHt1rbuDcjgHhTAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxHyNN9Xlatk57swXRE8dL2D9RmMB8GA1UdIwQY
MBaAFLbg/g+vaESYivL3RNUW7bnF3+ccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHVELUQ2OW9SSmlLOHZkRTFSYnR1Y1hmNXh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kMmE5YmMtMTNiMS00YjMwLWI1NjMt
MjA5ZTFmODQyMjRlLzEvdHVELUQ2OW9SSmlLOHZkRTFSYnR1Y1hmNXh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9kMmE5YmMtMTNiMS00YjMwLWI1NjMtMjA5ZTFmODQyMjRl
LzEvdHVELUQ2OW9SSmlLOHZkRTFSYnR1Y1hmNXh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAux4GiJSs
MbTzWZzvP30+DmzCuOXZH70SeKkUPjrvgcHaOYxKiEAt7dTQe4HY0/a0xl0spj+W
LGYUxXrRA1er7poIioZYZOPMQu5NQdSX3CFT7VPUec6Z811LcLc3z3atgfUOMrV9
+CnqP+udL0Qm3+M+jhzZK+Q1pcDbBq0V8dMFmqa1ZsXwwRH5vPu7YM4Jh4p2FrPT
hcTgGhM5GC5OfZjlsF8gwBOoXxfmSZaY+bFHeFKzHblY7XegKeXx7iKaCx7mjWpJ
bdtPBKiQsAdY3DHd+CWqVVyL2x952UveUTxOsTx2W85J7ttFagZzXE3rw4+z9O/u
7BMo1AJUazIoOg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:45:06 2025 by rpki-client