Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
File: tVG7qYKf51krGwLo1xyP18ziGrE.mft (raw, json)
Hash identifier: hpLlu2yRpVzVnLP7Mf/I5y3gdo+IqpzAZ5e0p5+GRWI=
Subject key identifier: 0A:93:A0:BE:9F:6D:BD:86:39:AB:1A:D4:97:43:BD:F1:62:28:69:58
Authority key identifier: B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1
Certificate issuer: /CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1
Certificate serial: 0198D62985350784876D57CEC4A94ECBF388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
Manifest number: 2F
Signing time: Sat 23 Aug 2025 09:01:41 +0000
Manifest this update: Sat 23 Aug 2025 09:01:41 +0000
Manifest next update: Sun 24 Aug 2025 09:01:41 +0000
Files and hashes: 1: aMimPGKaT2G8XuuZ7-2O1Nh1hh8.roa (hash: k/8LZ3MzLnclzjgMcW5jgVcEL+c+Ow+osyP79ShIXpk=)
2: tVG7qYKf51krGwLo1xyP18ziGrE.crl (hash: vSSZD5Jc0+Hbokrzvo/7Gkg4KXDQe2HsgIHrbXS1YfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:85:35:07:84:87:6d:57:ce:c4:a9:4e:cb:f3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1
Validity
Not Before: Aug 23 09:01:41 2025 GMT
Not After : Aug 24 09:01:41 2025 GMT
Subject: CN=0a93a0be9f6dbd8639ab1ad49743bdf162286958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:d2:59:f4:88:82:82:f7:df:d0:b5:eb:4c:
24:db:0d:98:86:bb:22:c7:90:4d:03:d1:05:25:d2:
7f:a8:2a:a0:f5:30:cf:c5:5c:ef:79:0e:5e:a0:5f:
db:06:ba:cf:22:af:3a:34:9a:e4:16:ba:44:d1:7a:
05:f5:bb:e4:10:d0:4b:ce:68:c3:fb:35:3c:8d:c4:
e6:5e:09:bf:a8:a6:df:9f:49:3e:86:82:04:6e:95:
2e:01:4e:04:67:3b:5f:0a:b6:27:60:0f:2e:fb:7a:
f2:81:2f:f1:0c:aa:96:fd:53:3f:9c:66:19:c8:f8:
07:fc:3e:2a:a0:6f:16:ec:db:e9:28:8e:cb:12:df:
6b:b0:29:13:9a:45:bc:2e:f5:63:6c:1a:c0:29:be:
05:e2:46:81:b9:38:b4:06:08:e6:3f:d7:be:eb:bc:
ce:46:80:05:7a:ad:e6:3e:ee:66:ed:80:77:a1:5f:
3a:74:58:50:3d:8e:00:25:07:ad:9e:52:75:f3:9f:
4f:50:28:7b:5b:ef:21:25:69:e0:2a:2d:94:6a:43:
e3:44:87:ac:cf:55:f2:6b:1a:47:42:bb:28:76:dc:
07:53:19:fd:56:e7:73:4a:8d:e6:a9:ee:3c:45:fb:
05:f6:d2:ed:39:15:7d:05:df:fe:c4:3d:84:7a:61:
60:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:93:A0:BE:9F:6D:BD:86:39:AB:1A:D4:97:43:BD:F1:62:28:69:58
X509v3 Authority Key Identifier:
keyid:B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:12:d2:3c:d8:84:00:21:28:00:57:3e:5b:1a:64:95:d7:f2:
ae:1a:5d:1a:41:4a:0a:5d:b1:9f:70:a3:6b:89:27:f4:19:16:
2b:4a:ea:e6:a2:44:29:1a:3f:a4:6d:cc:98:77:8e:3e:4f:b8:
13:48:c9:d3:3a:47:da:9b:0b:01:0d:38:a6:34:01:b1:e2:1c:
46:6b:f8:04:78:67:e9:43:1b:3e:82:5a:16:96:c8:69:95:8a:
6d:35:f6:bb:7e:4f:43:b3:56:85:64:cf:c1:4d:8b:2e:34:77:
a2:36:0c:4f:d7:da:21:ff:91:ff:80:2a:18:97:6c:43:36:a0:
d0:36:fd:c0:14:6a:02:ba:d8:b9:40:18:96:d1:9a:d1:f8:9b:
86:1d:9c:65:9c:ac:36:a5:d2:13:07:c4:8f:94:4d:6f:e1:d9:
5f:20:4c:69:a2:dd:59:9a:91:b8:77:a8:f0:ee:a5:ca:45:39:
8a:c8:da:50:20:75:d5:8b:86:23:b2:fc:18:36:92:3a:c4:7a:
3d:78:ad:28:27:2b:3d:02:1b:f1:bc:3b:f5:25:84:f8:1b:e2:
da:95:1e:c7:43:b9:46:e2:9f:e2:84:ad:11:75:60:52:9d:7d:
5a:36:ff:c3:8b:c1:4f:02:40:2c:18:49:67:6c:b7:66:18:c5:
72:84:d3:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWKYU1B4SHbVfOxKlOy/OIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTFiYmE5ODI5ZmU3NTkyYjFiMDJlOGQ3MWM4ZmQ3Y2Nl
MjFhYjEwHhcNMjUwODIzMDkwMTQxWhcNMjUwODI0MDkwMTQxWjAzMTEwLwYDVQQD
EygwYTkzYTBiZTlmNmRiZDg2MzlhYjFhZDQ5NzQzYmRmMTYyMjg2OTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudDSWfSIgoL339C160wk2w2Yhrsi
x5BNA9EFJdJ/qCqg9TDPxVzveQ5eoF/bBrrPIq86NJrkFrpE0XoF9bvkENBLzmjD
+zU8jcTmXgm/qKbfn0k+hoIEbpUuAU4EZztfCrYnYA8u+3rygS/xDKqW/VM/nGYZ
yPgH/D4qoG8W7NvpKI7LEt9rsCkTmkW8LvVjbBrAKb4F4kaBuTi0BgjmP9e+67zO
RoAFeq3mPu5m7YB3oV86dFhQPY4AJQetnlJ1859PUCh7W+8hJWngKi2UakPjRIes
z1XyaxpHQrsodtwHUxn9VudzSo3mqe48RfsF9tLtORV9Bd/+xD2EemFgkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqToL6fbb2GOasa1JdDvfFiKGlYMB8GA1UdIwQY
MBaAFLVRu6mCn+dZKxsC6Nccj9fM4hqxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZHN3FZS2Y1MWtyR3dMbzF4eVAxOHppR3JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iNWQ5NTUtYzdmOC00NjNmLTgxNWEt
NGViOTkyMjg2MGNkLzEvdFZHN3FZS2Y1MWtyR3dMbzF4eVAxOHppR3JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9iNWQ5NTUtYzdmOC00NjNmLTgxNWEtNGViOTkyMjg2MGNk
LzEvdFZHN3FZS2Y1MWtyR3dMbzF4eVAxOHppR3JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxLSPNiE
ACEoAFc+WxpkldfyrhpdGkFKCl2xn3Cja4kn9BkWK0rq5qJEKRo/pG3MmHeOPk+4
E0jJ0zpH2psLAQ04pjQBseIcRmv4BHhn6UMbPoJaFpbIaZWKbTX2u35PQ7NWhWTP
wU2LLjR3ojYMT9faIf+R/4AqGJdsQzag0Db9wBRqArrYuUAYltGa0fibhh2cZZys
NqXSEwfEj5RNb+HZXyBMaaLdWZqRuHeo8O6lykU5isjaUCB11YuGI7L8GDaSOsR6
PXitKCcrPQIb8bw79SWE+Bvi2pUex0O5RuKf4oStEXVgUp19Wjb/w4vBTwJALBhJ
Z2y3ZhjFcoTTqw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:37 2025 by rpki-client