Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
File: TD6do79ZOALMgz_l2UelJpb1jI0.mft (raw, json)
Hash identifier: jX65LoQtF8YfcOuKKfWiouGuFnOOMWXQZThe6yfLW8E=
Subject key identifier: 6F:8E:76:41:E4:96:F2:A1:D2:5F:9B:D1:62:B2:34:2D:22:5D:0D:11
Authority key identifier: 4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
Certificate issuer: /CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Certificate serial: 0198D65FE33F7E68615A3F65C850132F8CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
Manifest number: 158A
Signing time: Sat 23 Aug 2025 10:01:04 +0000
Manifest this update: Sat 23 Aug 2025 10:01:04 +0000
Manifest next update: Sun 24 Aug 2025 10:01:04 +0000
Files and hashes: 1: EWuOguv1P9Rw7Q-U1qAW9dBN2No.roa (hash: rN97euvDe5WCriK9EjJsNO5wn2cUGLmPhpQvNqo71q8=)
2: TD6do79ZOALMgz_l2UelJpb1jI0.crl (hash: OU2IbkAs2FhNgiHL8VEgNhOz5sI1HN4B8Wz9RAwrpWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:e3:3f:7e:68:61:5a:3f:65:c8:50:13:2f:8c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Validity
Not Before: Aug 23 10:01:04 2025 GMT
Not After : Aug 24 10:01:04 2025 GMT
Subject: CN=6f8e7641e496f2a1d25f9bd162b2342d225d0d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:4f:1a:41:0e:93:cc:04:cc:e0:3f:d5:f3:
6b:14:9f:e0:ea:a0:e7:50:a4:9a:9b:03:18:20:aa:
90:7e:0b:37:a7:bf:c9:3f:12:b4:9a:eb:e7:4d:84:
a6:92:ab:d9:5d:b9:dd:bc:ba:6f:48:60:3f:e9:b9:
72:44:77:5f:f3:e4:0b:2e:79:72:1a:a1:77:b4:b5:
a9:1d:fc:49:96:dc:53:76:48:2f:4f:38:dd:b9:e6:
69:03:d5:d6:9d:e1:eb:59:d5:10:50:39:9a:7b:e2:
cb:5c:b8:61:d6:e4:78:0d:c6:d6:4a:17:72:bd:a4:
60:33:f8:f7:ea:ba:cb:79:46:18:a5:b3:95:9a:12:
7a:bc:38:6b:4a:48:74:b4:cb:ec:4f:5e:02:e3:10:
27:06:f3:cc:b7:b7:a1:19:0d:7a:69:1f:fa:dd:89:
80:dc:e8:00:36:f7:a2:6c:09:72:66:3a:49:b6:b0:
b1:dc:ac:5e:f8:bd:be:fd:c6:de:3b:54:20:a1:87:
01:bc:95:57:97:f4:35:41:37:d2:d3:7b:c4:15:41:
b2:b4:d7:4d:10:d4:fa:f3:e8:de:77:43:68:0b:ec:
78:83:bd:0c:fe:aa:cb:9f:bf:55:09:16:ce:4c:ff:
80:d6:d8:70:28:8c:5b:8d:d8:cc:cd:84:84:0e:10:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8E:76:41:E4:96:F2:A1:D2:5F:9B:D1:62:B2:34:2D:22:5D:0D:11
X509v3 Authority Key Identifier:
keyid:4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:73:be:b6:ba:90:d6:d7:fa:99:30:6c:e8:48:8e:81:b0:63:
0b:a4:1f:82:ec:e9:06:8a:91:b1:c1:1f:18:7f:36:ea:13:7c:
4d:ba:31:63:3a:9a:20:d7:f6:22:c4:49:d4:41:eb:f6:c3:94:
a5:c0:92:d1:86:a1:fc:db:5a:38:3a:5d:51:c3:ae:5b:30:90:
8c:d1:f9:2b:e0:53:e0:0f:9a:96:5d:c1:f2:a8:42:00:a3:af:
3d:45:37:62:96:ec:11:ba:52:00:ea:ef:25:20:ce:31:39:4d:
9b:ef:0d:aa:e0:19:a2:6e:01:6f:39:7c:22:20:4c:aa:c5:d6:
9e:25:ad:2e:33:aa:4d:64:2f:1f:a4:5f:4f:6d:85:a6:2b:5d:
1e:b4:e1:95:45:63:8f:cd:f3:0e:8f:c4:40:24:19:07:cf:78:
e5:84:f3:79:b9:53:af:ea:7a:98:08:65:bd:c4:1b:87:a1:8e:
f1:61:f4:a2:24:b2:e4:47:67:6e:a5:00:b7:79:62:21:f5:1f:
8e:68:f6:90:56:50:cc:03:ca:6b:37:d3:6e:08:09:11:49:aa:
30:10:aa:0e:63:2e:9a:ea:d3:35:d2:a7:53:9f:94:ec:04:85:
bc:80:71:c6:f9:e4:19:15:a5:00:69:d6:d1:c5:18:88:5c:47:
18:40:66:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX+M/fmhhWj9lyFATL4zzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjM2U5ZGEzYmY1OTM4MDJjYzgzM2ZlNWQ5NDdhNTI2OTZm
NThjOGQwHhcNMjUwODIzMTAwMTA0WhcNMjUwODI0MTAwMTA0WjAzMTEwLwYDVQQD
Eyg2ZjhlNzY0MWU0OTZmMmExZDI1ZjliZDE2MmIyMzQyZDIyNWQwZDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7xPGkEOk8wEzOA/1fNrFJ/g6qDn
UKSamwMYIKqQfgs3p7/JPxK0muvnTYSmkqvZXbndvLpvSGA/6blyRHdf8+QLLnly
GqF3tLWpHfxJltxTdkgvTzjdueZpA9XWneHrWdUQUDmae+LLXLhh1uR4DcbWShdy
vaRgM/j36rrLeUYYpbOVmhJ6vDhrSkh0tMvsT14C4xAnBvPMt7ehGQ16aR/63YmA
3OgANveibAlyZjpJtrCx3Kxe+L2+/cbeO1QgoYcBvJVXl/Q1QTfS03vEFUGytNdN
ENT68+jed0NoC+x4g70M/qrLn79VCRbOTP+A1thwKIxbjdjMzYSEDhCRBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+OdkHklvKh0l+b0WKyNC0iXQ0RMB8GA1UdIwQY
MBaAFEw+naO/WTgCzIM/5dlHpSaW9YyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEQ2ZG83OVpPQUxNZ3pfbDJVZWxKcGIxakkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iOWE4MzAtNjk5Mi00OWM2LTg5NzMt
ZWFjYjQ5NjVmZTM4LzEvVEQ2ZG83OVpPQUxNZ3pfbDJVZWxKcGIxakkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iOWE4MzAtNjk5Mi00OWM2LTg5NzMtZWFjYjQ5NjVmZTM4
LzEvVEQ2ZG83OVpPQUxNZ3pfbDJVZWxKcGIxakkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA53O+trqQ
1tf6mTBs6EiOgbBjC6QfguzpBoqRscEfGH826hN8TboxYzqaINf2IsRJ1EHr9sOU
pcCS0Yah/NtaODpdUcOuWzCQjNH5K+BT4A+all3B8qhCAKOvPUU3YpbsEbpSAOrv
JSDOMTlNm+8NquAZom4Bbzl8IiBMqsXWniWtLjOqTWQvH6RfT22FpitdHrThlUVj
j83zDo/EQCQZB8945YTzeblTr+p6mAhlvcQbh6GO8WH0oiSy5EdnbqUAt3liIfUf
jmj2kFZQzAPKazfTbggJEUmqMBCqDmMumurTNdKnU5+U7ASFvIBxxvnkGRWlAGnW
0cUYiFxHGEBmWA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:26 2025 by rpki-client