Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
File: tGTgryi3VcTsiAENlCmGl9GIOTM.mft (raw, json)
Hash identifier: 5rBTyzkSLXU3lnMSZtKMSWr63Ib0OV11AG5SO2mS8Zg=
Subject key identifier: F4:49:5C:67:74:A6:98:D9:7E:D9:81:90:23:BC:58:FF:CF:4E:0C:82
Authority key identifier: B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
Certificate issuer: /CN=b464e0af28b755c4ec88010d94298697d1883933
Certificate serial: 0198D5160F94C1F11DAE94E0A08C80E36EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
Manifest number: 080D
Signing time: Sat 23 Aug 2025 04:00:49 +0000
Manifest this update: Sat 23 Aug 2025 04:00:49 +0000
Manifest next update: Sun 24 Aug 2025 04:00:49 +0000
Files and hashes: 1: 4ZUimyMSrmZMeMTJpofdIprKN0Y.roa (hash: +sbrqZ7npPQY0M7RUiP5uMAuk7XGp56zDb3oxzfgBs8=)
2: D6cOOwuzIu0b1VD3IEBzEJwwwCo.roa (hash: v5PJLnM3bwyGnG1xvGzcUgGuOEM5ARi6RIpoEpY7P4s=)
3: fyoJ9a9SSU9QMOOAnopUi24XOCI.roa (hash: Oq4G4KqExdW+YSWtwOksmXAFXdtGTgedgjAZaCPW9DM=)
4: tGTgryi3VcTsiAENlCmGl9GIOTM.crl (hash: ZaJCHg+1EmEzqjxOe4CSu1aJWVLiXgMGRutP+1VE4zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:0f:94:c1:f1:1d:ae:94:e0:a0:8c:80:e3:6e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464e0af28b755c4ec88010d94298697d1883933
Validity
Not Before: Aug 23 04:00:49 2025 GMT
Not After : Aug 24 04:00:49 2025 GMT
Subject: CN=f4495c6774a698d97ed9819023bc58ffcf4e0c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:00:25:95:f1:60:c6:3b:5e:38:13:69:01:
1f:fb:58:ba:3d:a1:84:71:43:55:ac:14:0f:36:44:
7d:66:e0:e4:9c:be:af:93:72:d1:fa:75:c5:70:0a:
ec:ff:48:d0:dd:fe:7d:05:60:73:f0:cb:69:14:d6:
35:00:85:a1:80:1c:32:c8:15:f5:88:7d:2c:f7:27:
ba:a8:9a:a8:64:5e:32:d0:2a:7e:b5:90:e2:71:95:
a5:4a:80:57:fa:ef:b6:c0:b8:82:33:38:65:9f:97:
da:ed:4c:23:b8:1f:7c:1b:1f:58:e4:b4:ad:35:52:
46:22:2e:3b:ca:f0:bb:17:a3:2a:df:1f:84:31:46:
1f:ec:23:5a:e2:c4:01:b9:91:8b:ab:b2:fe:cb:4f:
93:05:b3:86:79:c7:8e:8e:c8:9d:16:37:e9:12:66:
75:77:1d:62:9a:17:cc:43:b3:71:36:6d:2b:06:5e:
3f:e0:98:19:25:26:8c:59:18:16:53:0a:ae:41:ac:
e0:b6:b7:5b:62:a4:67:20:a4:f8:56:5c:5f:67:77:
03:b1:84:34:86:43:25:77:46:67:0a:58:9e:ff:2a:
ba:82:fe:40:de:be:d3:4b:06:d9:03:7d:54:ff:30:
5b:83:a0:d4:61:f9:c5:83:1e:0d:29:7c:3e:31:ee:
83:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:49:5C:67:74:A6:98:D9:7E:D9:81:90:23:BC:58:FF:CF:4E:0C:82
X509v3 Authority Key Identifier:
keyid:B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:13:8a:0d:d5:d8:b3:53:2f:e5:51:e6:8c:9c:a2:bd:03:bf:
fe:55:18:c4:b3:c3:4e:d8:7f:43:6b:d8:47:47:d6:ce:b5:9d:
d7:33:33:9f:bb:ee:50:c3:d7:4c:f2:5b:18:78:54:ad:1f:29:
20:fe:ac:fe:56:1a:db:10:76:60:fb:e9:25:2a:6f:94:41:63:
66:89:8b:99:b1:29:b9:24:a8:62:0c:85:b5:32:ad:3e:a7:28:
7e:77:63:05:27:21:9f:fb:50:9d:d5:a4:bf:3c:2c:ba:64:44:
95:39:e6:31:af:8d:73:eb:63:cf:4d:62:bf:e6:48:f3:e6:fc:
ac:5b:a2:62:df:1a:48:40:27:19:24:59:c2:6f:16:63:eb:0f:
75:a3:33:a3:d3:08:29:d9:29:fd:a9:8e:c8:53:23:95:3a:c4:
da:18:5c:b4:8d:97:f9:a6:99:bf:59:af:fd:32:87:da:b5:54:
fa:8d:82:bc:18:b6:73:5d:56:1f:e1:6e:e0:13:f9:c4:92:35:
e6:ef:d7:9b:cc:3c:59:9e:f3:58:70:05:e7:bd:e4:aa:46:04:
29:cb:62:f4:d8:e3:7d:aa:ac:a1:cb:79:ac:83:37:48:b2:fc:
8d:6b:63:8f:2f:78:dc:67:b4:81:e0:1e:70:41:28:68:22:5a:
7b:6b:06:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFg+UwfEdrpTgoIyA427FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjRlMGFmMjhiNzU1YzRlYzg4MDEwZDk0Mjk4Njk3ZDE4
ODM5MzMwHhcNMjUwODIzMDQwMDQ5WhcNMjUwODI0MDQwMDQ5WjAzMTEwLwYDVQQD
EyhmNDQ5NWM2Nzc0YTY5OGQ5N2VkOTgxOTAyM2JjNThmZmNmNGUwYzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwwAJZXxYMY7XjgTaQEf+1i6PaGE
cUNVrBQPNkR9ZuDknL6vk3LR+nXFcArs/0jQ3f59BWBz8MtpFNY1AIWhgBwyyBX1
iH0s9ye6qJqoZF4y0Cp+tZDicZWlSoBX+u+2wLiCMzhln5fa7UwjuB98Gx9Y5LSt
NVJGIi47yvC7F6Mq3x+EMUYf7CNa4sQBuZGLq7L+y0+TBbOGeceOjsidFjfpEmZ1
dx1imhfMQ7NxNm0rBl4/4JgZJSaMWRgWUwquQazgtrdbYqRnIKT4VlxfZ3cDsYQ0
hkMld0ZnClie/yq6gv5A3r7TSwbZA31U/zBbg6DUYfnFgx4NKXw+Me6DbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRJXGd0ppjZftmBkCO8WP/PTgyCMB8GA1UdIwQY
MBaAFLRk4K8ot1XE7IgBDZQphpfRiDkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdUZ3J5aTNWY1RzaUFFTmxDbUdsOUdJT1RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wY2FhNmQtMTA5ZS00NWYzLWE5MzIt
NDc1YzVjOTFmNDc0LzEvdEdUZ3J5aTNWY1RzaUFFTmxDbUdsOUdJT1RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8wY2FhNmQtMTA5ZS00NWYzLWE5MzItNDc1YzVjOTFmNDc0
LzEvdEdUZ3J5aTNWY1RzaUFFTmxDbUdsOUdJT1RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUBOKDdXY
s1Mv5VHmjJyivQO//lUYxLPDTth/Q2vYR0fWzrWd1zMzn7vuUMPXTPJbGHhUrR8p
IP6s/lYa2xB2YPvpJSpvlEFjZomLmbEpuSSoYgyFtTKtPqcofndjBSchn/tQndWk
vzwsumRElTnmMa+Nc+tjz01iv+ZI8+b8rFuiYt8aSEAnGSRZwm8WY+sPdaMzo9MI
Kdkp/amOyFMjlTrE2hhctI2X+aaZv1mv/TKH2rVU+o2CvBi2c11WH+Fu4BP5xJI1
5u/Xm8w8WZ7zWHAF573kqkYEKcti9Njjfaqsoct5rIM3SLL8jWtjjy943Ge0geAe
cEEoaCJae2sG1w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:01:50 2025 by rpki-client