Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
File: tTVrOmd4voxhFK2H2q_NB8pV2AA.mft (raw, json)
Hash identifier: qFLQUX8/iQVgiwLT2iAmLQKJmt7sqdpOz4xoakGKP2M=
Subject key identifier: 44:59:85:CC:6E:5A:C4:B6:22:36:B3:B9:65:BB:38:97:E3:6D:92:4B
Authority key identifier: B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
Certificate issuer: /CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Certificate serial: 0198D5BC3BA4495535556553B6ACE6839E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:02:19 +0000
Manifest this update: Sat 23 Aug 2025 07:02:19 +0000
Manifest next update: Sun 24 Aug 2025 07:02:19 +0000
Files and hashes: 1: NQNYc6fmHLA_NSQLy1429x1Q7Rs.roa (hash: 9fkXQ4KSWlEupj10JS2rCXdqinSmRcwnxokumXbhroc=)
2: QbjMGccKG5d5ZKbesdYHgP5_B94.roa (hash: 4D93Q+Whu8oYfv+HOP7uP002kldwgOYc75DA0DhrTb4=)
3: tTVrOmd4voxhFK2H2q_NB8pV2AA.crl (hash: TPI8J+0livumpFhEEmeBj8zmM7L8T66RzD7PdIFbr/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:3b:a4:49:55:35:55:65:53:b6:ac:e6:83:9e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Validity
Not Before: Aug 23 07:02:19 2025 GMT
Not After : Aug 24 07:02:19 2025 GMT
Subject: CN=445985cc6e5ac4b62236b3b965bb3897e36d924b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:24:a0:62:d1:3a:6a:bf:9a:3b:92:0a:a4:
e8:6a:40:ae:53:5b:48:3d:54:09:7d:2d:bb:9b:04:
a8:a9:ca:13:7e:5b:4a:89:1f:44:c8:36:f6:c0:52:
8c:55:a4:4f:ab:b6:fa:fa:60:04:41:8b:0a:69:a6:
26:e7:f2:2b:df:a0:6f:07:d7:16:66:8c:7d:0b:20:
29:05:c2:9f:4a:d3:d8:bf:bb:ab:7f:3b:c4:8b:98:
92:49:17:c1:28:d1:95:e0:54:39:b1:08:49:0d:7b:
ef:e3:f3:35:37:19:48:31:67:67:ad:35:96:57:57:
65:e1:3a:07:e5:77:5f:69:fc:97:e1:12:83:18:91:
2c:12:93:d2:82:36:b9:c4:b8:4a:64:1a:e3:45:30:
f6:09:d5:e7:13:a6:cf:34:d0:77:04:12:b1:b8:ca:
48:10:9b:f6:ed:d9:00:9a:f8:a6:fe:74:1b:76:8d:
bf:f6:39:ca:29:b0:03:35:af:71:1d:03:44:72:58:
9b:0e:50:0c:80:7f:e9:f6:13:4a:ea:dc:ff:94:38:
20:a2:1a:02:ef:1d:46:d8:dc:ec:65:44:1f:4b:79:
f9:af:dc:f4:e4:25:99:a2:62:19:73:f0:68:18:cb:
68:1f:74:1a:0b:6d:70:f3:39:6e:d3:12:f4:e7:ac:
5d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:59:85:CC:6E:5A:C4:B6:22:36:B3:B9:65:BB:38:97:E3:6D:92:4B
X509v3 Authority Key Identifier:
keyid:B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:06:44:f6:9e:2d:f3:48:40:5b:dd:41:dd:cf:94:20:62:62:
7c:2a:ad:a2:b3:24:65:54:6b:5c:ee:88:fc:f4:c6:7e:04:be:
25:d1:c9:86:18:a8:b3:b3:3a:7e:36:93:ac:2a:19:a2:a7:21:
8a:37:03:dd:84:f2:0d:57:e0:b9:5a:0c:82:19:16:b8:26:9d:
8f:e8:fa:96:0b:9f:02:c7:90:96:ee:8e:88:bb:5f:89:d8:a8:
74:b6:4f:95:01:88:3d:8c:7e:8f:86:5e:29:fc:f6:96:1b:59:
9a:0c:65:ef:12:b7:92:db:ac:b7:52:22:bb:07:f0:79:62:05:
3e:61:57:f0:f1:09:6c:32:74:af:8f:32:67:c6:03:dc:9f:72:
ab:01:89:76:dd:7c:67:ac:44:4d:e9:e8:dc:c5:a0:fd:53:fd:
50:c5:3e:58:d4:b8:91:33:9c:ea:c4:2a:e8:f1:96:fd:fa:19:
1b:ea:f9:76:15:d1:02:15:c0:c6:e6:4c:81:69:8d:79:ab:dc:
7a:58:01:70:eb:2b:4e:1a:48:d0:36:af:94:66:0a:e8:63:a1:
4b:67:4e:b2:47:4b:54:b2:54:7a:d8:b1:a8:40:e3:1d:42:2f:
a0:f0:de:a7:f7:a0:fd:ef:ec:5f:2b:00:d9:e9:0e:57:41:e7:
cb:82:37:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvDukSVU1VWVTtqzmg55/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MzU2YjNhNjc3OGJlOGM2MTE0YWQ4N2RhYWZjZDA3Y2E1
NWQ4MDAwHhcNMjUwODIzMDcwMjE5WhcNMjUwODI0MDcwMjE5WjAzMTEwLwYDVQQD
Eyg0NDU5ODVjYzZlNWFjNGI2MjIzNmIzYjk2NWJiMzg5N2UzNmQ5MjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcYkoGLROmq/mjuSCqToakCuU1tI
PVQJfS27mwSoqcoTfltKiR9EyDb2wFKMVaRPq7b6+mAEQYsKaaYm5/Ir36BvB9cW
Zox9CyApBcKfStPYv7urfzvEi5iSSRfBKNGV4FQ5sQhJDXvv4/M1NxlIMWdnrTWW
V1dl4ToH5XdfafyX4RKDGJEsEpPSgja5xLhKZBrjRTD2CdXnE6bPNNB3BBKxuMpI
EJv27dkAmvim/nQbdo2/9jnKKbADNa9xHQNEclibDlAMgH/p9hNK6tz/lDggohoC
7x1G2NzsZUQfS3n5r9z05CWZomIZc/BoGMtoH3QaC21w8zlu0xL056xdaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERZhcxuWsS2IjazuWW7OJfjbZJLMB8GA1UdIwQY
MBaAFLU1azpneL6MYRSth9qvzQfKVdgAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFRWck9tZDR2b3hoRksySDJxX05COHBWMkFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85MWIzMWUtMDcxMS00M2ZhLWJjMjkt
OTMyYjRhYzBhYWZkLzEvdFRWck9tZDR2b3hoRksySDJxX05COHBWMkFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS85MWIzMWUtMDcxMS00M2ZhLWJjMjktOTMyYjRhYzBhYWZk
LzEvdFRWck9tZDR2b3hoRksySDJxX05COHBWMkFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArgZE9p4t
80hAW91B3c+UIGJifCqtorMkZVRrXO6I/PTGfgS+JdHJhhios7M6fjaTrCoZoqch
ijcD3YTyDVfguVoMghkWuCadj+j6lgufAseQlu6OiLtfidiodLZPlQGIPYx+j4Ze
Kfz2lhtZmgxl7xK3ktust1IiuwfweWIFPmFX8PEJbDJ0r48yZ8YD3J9yqwGJdt18
Z6xETeno3MWg/VP9UMU+WNS4kTOc6sQq6PGW/foZG+r5dhXRAhXAxuZMgWmNeavc
elgBcOsrThpI0DavlGYK6GOhS2dOskdLVLJUetixqEDjHUIvoPDep/eg/e/sXysA
2ekOV0Hny4I3/w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:09:22 2025 by rpki-client