Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier: bD23ab6SuOO0RaNSNjO3reWbNS1LEBkexmstYupUcUY=
Subject key identifier: E0:1D:DD:5E:2A:D5:F1:B8:6F:AC:B4:6B:03:74:F2:4E:F7:A6:9A:4D
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial: 0198D54E60678301071E5993A46D35C8963C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:02:20 +0000
Manifest this update: Sat 23 Aug 2025 05:02:20 +0000
Manifest next update: Sun 24 Aug 2025 05:02:20 +0000
Files and hashes: 1: 1lSa1sl-dNBGB6RIspgIufADhjs.roa (hash: ZUkq8NELozqtJDfHgnQK7IOC8L6Hnu5OT9um+2WKleM=)
2: TB1SNMK17klLvRw1OV09EGXDsjg.roa (hash: 3s2Ua7bRSNfwEdFtiO4U1p/wzm3QtvPjfYSSDJ4385k=)
3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: g9NK69FGek5fJrvFkaZ433W0d5ag0TdPn7jGvcBGTlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:60:67:83:01:07:1e:59:93:a4:6d:35:c8:96:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
Validity
Not Before: Aug 23 05:02:20 2025 GMT
Not After : Aug 24 05:02:20 2025 GMT
Subject: CN=e01ddd5e2ad5f1b86facb46b0374f24ef7a69a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:81:f0:98:c5:69:b0:cb:f5:51:8f:c0:12:
f8:9d:c4:06:ed:1b:9a:85:bf:88:f9:95:8d:48:78:
07:b7:43:d6:11:87:c5:fd:fe:78:43:e0:ef:c3:36:
05:b3:83:41:ec:bc:28:01:21:93:3d:2f:53:72:1d:
9b:24:0a:e1:5a:63:89:7f:5a:b3:d3:e9:0d:5c:8a:
05:4f:73:e2:48:33:c9:b7:fb:0c:e2:22:4b:92:aa:
06:2b:24:95:d7:d3:21:0c:83:d6:94:43:18:80:2c:
b1:32:31:50:34:f4:ab:7b:54:da:59:28:cf:9e:58:
c0:44:22:ef:92:77:e4:6e:92:f2:65:66:0c:6a:9f:
cf:bf:3c:82:eb:1b:d4:ea:8a:15:cd:02:5a:99:b0:
fa:6a:39:89:b3:d7:32:fe:f8:10:99:2e:9d:ea:9c:
04:1f:e3:56:31:1e:85:12:b5:78:28:5c:c1:ac:ae:
4a:bc:8e:94:8c:e6:1c:72:8c:6c:88:6f:34:33:29:
2e:38:33:f5:81:54:5b:86:aa:f0:39:41:66:9f:73:
0c:0b:f7:f2:b1:81:3f:8a:2f:a7:f2:ca:8a:84:43:
01:e0:0b:7e:d3:1b:4c:00:86:d0:ae:55:49:ca:c4:
e2:7d:63:3c:a9:f3:a4:c3:c1:dd:1f:cf:39:67:3d:
c6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1D:DD:5E:2A:D5:F1:B8:6F:AC:B4:6B:03:74:F2:4E:F7:A6:9A:4D
X509v3 Authority Key Identifier:
keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6c:70:e2:a0:75:ea:e1:dc:e8:3d:9a:81:6b:5f:ac:c4:b5:
2a:63:e2:c6:b5:25:1e:cc:c7:ab:53:69:83:27:ae:46:ea:d9:
b9:06:ab:56:a6:1f:92:ee:cb:e0:9d:04:8c:9e:c1:e1:88:28:
3b:eb:9d:dd:62:18:49:d9:20:e7:6a:9c:2e:e3:22:6c:6e:eb:
75:6e:c1:fe:e0:cf:f3:e4:89:f9:33:c3:b3:31:26:4a:90:4a:
0a:44:3c:bb:bf:ba:4f:ea:6f:e4:08:b1:4b:0b:c8:55:d3:4f:
4a:a2:64:0c:8a:98:d9:38:26:c3:3f:85:75:eb:28:2e:fb:4e:
27:68:b6:b8:33:aa:ab:96:f0:41:64:d5:62:fa:84:6b:11:ad:
6c:43:59:83:4a:a8:42:cb:be:db:ec:40:37:3d:31:d3:76:56:
b0:9d:da:7b:ca:13:99:a1:8b:73:0e:2e:79:3c:b8:c0:9a:9d:
87:7f:06:e6:0b:8e:4d:55:32:de:c5:e4:a0:20:7f:c4:33:42:
bf:0d:a8:42:1f:84:ff:38:bd:3c:31:fb:f5:fc:59:ef:74:70:
78:6e:ef:ae:cc:22:bd:82:ba:9b:00:75:fd:9c:4b:6d:de:7a:
c6:ec:99:23:b6:1a:2b:35:01:63:69:c6:39:ab:12:b6:2b:1c:
f0:e8:a9:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTmBngwEHHlmTpG01yJY8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1OTkwOWVkMTcxYjM4YzFmZGM0MzYyMjI5ZTc4ZDY5ODUx
ZGUxMWMwHhcNMjUwODIzMDUwMjIwWhcNMjUwODI0MDUwMjIwWjAzMTEwLwYDVQQD
EyhlMDFkZGQ1ZTJhZDVmMWI4NmZhY2I0NmIwMzc0ZjI0ZWY3YTY5YTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXqB8JjFabDL9VGPwBL4ncQG7Rua
hb+I+ZWNSHgHt0PWEYfF/f54Q+DvwzYFs4NB7LwoASGTPS9Tch2bJArhWmOJf1qz
0+kNXIoFT3PiSDPJt/sM4iJLkqoGKySV19MhDIPWlEMYgCyxMjFQNPSre1TaWSjP
nljARCLvknfkbpLyZWYMap/PvzyC6xvU6ooVzQJambD6ajmJs9cy/vgQmS6d6pwE
H+NWMR6FErV4KFzBrK5KvI6UjOYccoxsiG80MykuODP1gVRbhqrwOUFmn3MMC/fy
sYE/ii+n8sqKhEMB4At+0xtMAIbQrlVJysTifWM8qfOkw8HdH885Zz3GXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAd3V4q1fG4b6y0awN08k73pppNMB8GA1UdIwQY
MBaAFLWZCe0XGzjB/cQ2IinnjWmFHeEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85ZWU5ODAtNjdhMi00ZDNjLWI2Y2Et
ZmRlMDczNTg4ZjBmLzEvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi85ZWU5ODAtNjdhMi00ZDNjLWI2Y2EtZmRlMDczNTg4ZjBm
LzEvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2xw4qB1
6uHc6D2agWtfrMS1KmPixrUlHszHq1NpgyeuRurZuQarVqYfku7L4J0EjJ7B4Ygo
O+ud3WIYSdkg52qcLuMibG7rdW7B/uDP8+SJ+TPDszEmSpBKCkQ8u7+6T+pv5Aix
SwvIVdNPSqJkDIqY2Tgmwz+FdesoLvtOJ2i2uDOqq5bwQWTVYvqEaxGtbENZg0qo
Qsu+2+xANz0x03ZWsJ3ae8oTmaGLcw4ueTy4wJqdh38G5guOTVUy3sXkoCB/xDNC
vw2oQh+E/zi9PDH79fxZ73RweG7vrswivYK6mwB1/ZxLbd56xuyZI7YaKzUBY2nG
OasStisc8Oipjw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:12 2025 by rpki-client