Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
File: tbYylyVHZz3w91qryDmiQihUoio.mft (raw, json)
Hash identifier: vXqxTV0WPZIKArp9EVOmKQg5aPpz+xBwjk8oOR4a0CE=
Subject key identifier: 20:59:43:16:11:32:85:81:75:DA:B6:D5:E6:62:C9:BB:4F:ED:D1:CF
Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
Certificate issuer: /CN=b5b632972547673df0f75aabc839a2422854a22a
Certificate serial: 0198D5F1362E947228B95E4437745C72CA3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:11 +0000
Manifest this update: Sat 23 Aug 2025 08:00:11 +0000
Manifest next update: Sun 24 Aug 2025 08:00:11 +0000
Files and hashes: 1: cUeWbg23uzdb5xSz99WNI9WtnoI.roa (hash: s+577iLuT/1Ct4G1mVjBy6TiewUwm3DkGU10CzpZuFE=)
2: tbYylyVHZz3w91qryDmiQihUoio.crl (hash: F907JhITYnScWy3FeUmK4XcHKJ1ma0M4JhrOhOept7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:36:2e:94:72:28:b9:5e:44:37:74:5c:72:ca:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a
Validity
Not Before: Aug 23 08:00:11 2025 GMT
Not After : Aug 24 08:00:11 2025 GMT
Subject: CN=205943161132858175dab6d5e662c9bb4fedd1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:90:52:a1:8a:70:74:e4:db:2e:e9:7c:96:
97:ec:aa:95:d1:2a:19:4f:c1:37:73:e6:6f:8c:0b:
b2:08:5a:01:0e:89:72:90:62:e2:34:f4:40:ac:ca:
3a:ae:13:66:97:de:67:d0:4c:c2:20:0a:26:69:da:
48:b8:32:f0:97:b6:1e:ab:fc:67:16:13:f8:3c:e6:
9a:43:e9:e4:74:1b:21:01:08:9d:94:0a:02:c4:fa:
60:0f:35:0b:2a:ae:64:0a:ae:e0:3e:35:29:b6:76:
a7:a2:5e:a2:22:10:ef:68:c1:cd:59:39:e9:38:38:
ab:d3:26:6b:8d:0b:a1:3c:b8:34:34:34:37:dc:68:
59:94:c2:bd:8e:b4:da:ef:c3:c0:15:2b:24:3d:0e:
70:7a:77:e4:ba:29:f5:57:60:ae:e6:c5:78:3c:36:
54:93:e5:e6:a4:71:b0:28:fa:24:eb:75:01:22:10:
c1:55:a3:5f:a0:81:71:4e:ea:fa:83:03:b4:49:71:
26:a8:1d:cf:94:72:83:c9:47:4e:40:77:17:66:00:
31:2c:bb:a2:ba:d5:00:6d:30:69:b1:b5:7d:20:58:
04:8b:dc:22:15:70:ec:b2:73:34:93:7c:6a:a3:3b:
bf:39:c3:11:1b:84:c7:79:10:e3:37:10:91:53:d5:
45:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:59:43:16:11:32:85:81:75:DA:B6:D5:E6:62:C9:BB:4F:ED:D1:CF
X509v3 Authority Key Identifier:
keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4e:f3:c5:c8:c6:69:4b:f7:7d:5b:88:f5:ce:ab:d6:05:9f:
33:8e:c1:7d:ea:c8:5d:5f:c7:a5:38:dd:74:26:12:36:ec:38:
8d:91:7c:1d:8f:02:7a:76:ab:2e:38:48:a3:37:30:9e:b2:3b:
fd:0a:c1:38:75:02:5c:78:52:d0:33:0e:3d:aa:72:84:3a:ce:
2a:d8:50:1a:f0:e0:d2:2e:03:e7:94:85:61:fb:b5:38:90:f9:
ed:64:f9:53:5f:03:36:96:c7:ae:8b:b6:90:02:2c:13:44:b3:
3a:64:59:aa:2a:64:54:70:93:98:6f:a3:70:ce:95:02:6e:25:
fa:b7:48:ce:08:1d:b5:48:a4:bd:2e:8a:b5:55:eb:0f:50:77:
f7:8d:64:a3:20:54:ea:be:12:f8:80:8a:01:92:fa:2b:1f:05:
d5:1a:94:e8:4c:d3:59:b5:e5:50:03:dd:0c:a5:31:0b:3e:13:
00:75:b1:16:31:6b:43:fd:ba:64:bd:de:ec:f2:18:df:64:d0:
e4:63:e4:fd:cd:25:e9:0b:92:b0:3d:fb:46:7a:9b:98:d5:16:
81:c0:7a:65:19:3e:36:52:c5:04:d3:99:fe:93:8e:61:9a:6e:
fe:a6:79:48:07:40:f6:43:b8:7c:c2:ec:3e:9e:b8:65:1c:ef:
55:8b:06:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8TYulHIouV5EN3Rccso7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YjYzMjk3MjU0NzY3M2RmMGY3NWFhYmM4MzlhMjQyMjg1
NGEyMmEwHhcNMjUwODIzMDgwMDExWhcNMjUwODI0MDgwMDExWjAzMTEwLwYDVQQD
EygyMDU5NDMxNjExMzI4NTgxNzVkYWI2ZDVlNjYyYzliYjRmZWRkMWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzyQUqGKcHTk2y7pfJaX7KqV0SoZ
T8E3c+ZvjAuyCFoBDolykGLiNPRArMo6rhNml95n0EzCIAomadpIuDLwl7Yeq/xn
FhP4POaaQ+nkdBshAQidlAoCxPpgDzULKq5kCq7gPjUptnanol6iIhDvaMHNWTnp
ODir0yZrjQuhPLg0NDQ33GhZlMK9jrTa78PAFSskPQ5wenfkuin1V2Cu5sV4PDZU
k+XmpHGwKPok63UBIhDBVaNfoIFxTur6gwO0SXEmqB3PlHKDyUdOQHcXZgAxLLui
utUAbTBpsbV9IFgEi9wiFXDssnM0k3xqozu/OcMRG4THeRDjNxCRU9VFjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBZQxYRMoWBddq21eZiybtP7dHPMB8GA1UdIwQY
MBaAFLW2MpclR2c98Pdaq8g5okIoVKIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGIt
YTZhYmIxMjE1ZGVjLzEvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGItYTZhYmIxMjE1ZGVj
LzEvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHk7zxcjG
aUv3fVuI9c6r1gWfM47BferIXV/HpTjddCYSNuw4jZF8HY8CenarLjhIozcwnrI7
/QrBOHUCXHhS0DMOPapyhDrOKthQGvDg0i4D55SFYfu1OJD57WT5U18DNpbHrou2
kAIsE0SzOmRZqipkVHCTmG+jcM6VAm4l+rdIzggdtUikvS6KtVXrD1B3941koyBU
6r4S+ICKAZL6Kx8F1RqU6EzTWbXlUAPdDKUxCz4TAHWxFjFrQ/26ZL3e7PIY32TQ
5GPk/c0l6QuSsD37RnqbmNUWgcB6ZRk+NlLFBNOZ/pOOYZpu/qZ5SAdA9kO4fMLs
Pp64ZRzvVYsG0w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:32 2025 by rpki-client