Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json)
Hash identifier: KRF1EZYUwD8IjWEgVTgQqxhFFhIE7+dXio97PpdLiqA=
Subject key identifier: 1B:61:44:41:A3:41:6A:E4:E0:ED:86:A8:3D:C7:CD:1F:47:68:62:A3
Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Certificate serial: 0197BE5B77996058B0A2C432C0289C899C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
Manifest number: 154B
Signing time: Mon 30 Jun 2025 01:02:34 +0000
Manifest this update: Mon 30 Jun 2025 01:02:34 +0000
Manifest next update: Tue 01 Jul 2025 01:02:34 +0000
Files and hashes: 1: BeOIJLd8_MIXUGufXTnw_YPsJgs.roa (hash: UFekJjmZxy4vjH3dPZliRBeAZT4NRRq/0IMLKsXu0f8=)
2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: VmHara9Ptb9ypzk+msFuKKhTVkQFjHtyhYlk8spG3MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 01:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:be:5b:77:99:60:58:b0:a2:c4:32:c0:28:9c:89:9c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Validity
Not Before: Jun 30 01:02:34 2025 GMT
Not After : Jul 1 01:02:34 2025 GMT
Subject: CN=1b614441a3416ae4e0ed86a83dc7cd1f476862a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9a:cc:f2:a0:31:91:e3:b6:69:34:2c:36:96:
8d:85:c4:ca:c4:19:30:99:fc:37:f5:0f:ea:96:e4:
bf:bf:bb:d2:1c:ff:fc:14:35:01:49:57:6e:38:df:
d7:54:c6:bf:34:31:92:25:af:96:ab:2c:08:84:23:
ac:23:f3:32:88:5a:8e:63:43:98:99:8e:91:84:46:
1b:00:97:b5:1f:40:99:8e:4d:9a:bc:16:e3:73:bb:
59:c8:cb:0d:56:d3:c4:17:ab:8d:d3:bd:e3:a6:7d:
d0:f2:32:8e:c4:98:c4:58:36:35:bd:55:43:98:b5:
ff:11:54:9f:cd:49:db:0c:6f:b6:e2:78:7d:9a:fd:
00:6a:1e:7d:48:6e:b3:95:21:bf:08:3c:9b:6f:84:
3d:11:0a:3d:b9:5d:dd:a9:49:af:db:ba:16:56:64:
4f:b0:35:b5:9c:df:a9:5c:bb:cf:03:fb:6d:6f:c5:
1d:26:6b:01:4e:d2:fe:5d:97:4d:6f:fd:df:fb:a9:
a9:68:8e:fa:d8:5f:d8:8a:d1:76:54:b9:07:2d:87:
0b:45:97:f0:4f:40:36:46:60:66:fa:e8:8d:87:7b:
14:0e:a7:d5:50:e7:28:42:ed:1f:9d:5e:b0:43:51:
4b:89:55:18:e7:44:28:5e:27:c1:a7:98:99:d7:af:
3c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:61:44:41:A3:41:6A:E4:E0:ED:86:A8:3D:C7:CD:1F:47:68:62:A3
X509v3 Authority Key Identifier:
keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c6:f3:fd:db:60:d4:0f:fd:c0:76:16:ed:4d:42:d8:24:61:
a4:d9:de:ed:a9:88:f9:5c:88:c6:7b:7c:d2:a1:f9:a2:81:e7:
d1:c8:7d:b8:20:f3:5f:16:a8:26:a5:3f:ed:5f:52:9c:b7:cc:
a9:80:02:8e:ce:7a:7d:32:21:9b:6f:8d:09:fb:72:32:b5:3d:
d0:1d:95:c3:33:66:d3:f0:33:c1:b3:f2:f9:fa:00:e3:34:49:
68:1a:1a:5b:cd:b4:d3:f8:a8:30:4e:66:91:28:4b:d2:12:2c:
29:b2:08:fd:cb:88:08:e6:7e:ab:6c:2b:46:91:ee:d1:56:7b:
bb:48:02:01:4f:4f:eb:50:fd:02:d0:c6:b6:75:da:6a:fa:7c:
a0:3d:32:fe:ee:da:03:4f:fc:cb:b7:88:dc:ff:9f:b4:93:b4:
f0:63:b1:1b:90:4c:76:ff:28:74:87:68:4b:e2:79:f4:7e:de:
0c:02:35:43:d4:56:50:6a:0f:26:97:dc:fd:57:a1:c4:f6:2e:
2d:28:49:98:42:32:a3:b3:ec:d5:6a:48:ac:cd:bc:d7:6d:a4:
66:eb:2f:d4:e0:c2:69:c3:85:37:1c:9b:01:a5:11:e8:4d:b0:
ef:30:aa:1c:4b:f0:90:80:42:1c:6d:94:3d:8d:1d:ce:4f:f0:
c7:61:68:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe+W3eZYFiwosQywCiciZwtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MGI1NzRmMDNkOTg4MTU1ZjQ0YmEyY2IwN2JjN2RmYjQ1
N2NmMGYwHhcNMjUwNjMwMDEwMjM0WhcNMjUwNzAxMDEwMjM0WjAzMTEwLwYDVQQD
EygxYjYxNDQ0MWEzNDE2YWU0ZTBlZDg2YTgzZGM3Y2QxZjQ3Njg2MmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnprM8qAxkeO2aTQsNpaNhcTKxBkw
mfw39Q/qluS/v7vSHP/8FDUBSVduON/XVMa/NDGSJa+WqywIhCOsI/MyiFqOY0OY
mY6RhEYbAJe1H0CZjk2avBbjc7tZyMsNVtPEF6uN073jpn3Q8jKOxJjEWDY1vVVD
mLX/EVSfzUnbDG+24nh9mv0Aah59SG6zlSG/CDybb4Q9EQo9uV3dqUmv27oWVmRP
sDW1nN+pXLvPA/ttb8UdJmsBTtL+XZdNb/3f+6mpaI762F/YitF2VLkHLYcLRZfw
T0A2RmBm+uiNh3sUDqfVUOcoQu0fnV6wQ1FLiVUY50QoXifBp5iZ1688/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBthREGjQWrk4O2GqD3HzR9HaGKjMB8GA1UdIwQY
MBaAFLYLV08D2YgVX0S6LLB7x9+0V88PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kOTViMmMtMWUwMi00ZTRlLTg0Mzgt
YmJjYWUwZGYxZjJmLzEvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kOTViMmMtMWUwMi00ZTRlLTg0MzgtYmJjYWUwZGYxZjJm
LzEvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcbz/dtg
1A/9wHYW7U1C2CRhpNne7amI+VyIxnt80qH5ooHn0ch9uCDzXxaoJqU/7V9SnLfM
qYACjs56fTIhm2+NCftyMrU90B2VwzNm0/AzwbPy+foA4zRJaBoaW8200/ioME5m
kShL0hIsKbII/cuICOZ+q2wrRpHu0VZ7u0gCAU9P61D9AtDGtnXaavp8oD0y/u7a
A0/8y7eI3P+ftJO08GOxG5BMdv8odIdoS+J59H7eDAI1Q9RWUGoPJpfc/VehxPYu
LShJmEIyo7Ps1WpIrM28122kZusv1ODCacOFNxybAaUR6E2w7zCqHEvwkIBCHG2U
PY0dzk/wx2FolA==
-----END CERTIFICATE-----
Generated at Mon Jun 30 11:44:26 2025 by rpki-client