Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
File: tYe8Eust4poQJrj1a-jUafL1jPM.mft (raw, json)
Hash identifier: 6gxVkP5SyU4iDxLjdzTICYqwXwp4MDce0TK4Cy4koFY=
Subject key identifier: DA:CE:C0:A8:C6:99:12:CA:CE:8B:0F:FD:45:AA:3D:FF:D1:CD:0D:74
Authority key identifier: B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
Certificate issuer: /CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Certificate serial: 0198D5F127D20F9BCDE2A386C662DA7FABF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 08:00:07 +0000
Manifest this update: Sat 23 Aug 2025 08:00:07 +0000
Manifest next update: Sun 24 Aug 2025 08:00:07 +0000
Files and hashes: 1: SRbcYTDvBK2K42GBZURfc-9owLk.roa (hash: ou7G18aw8/QVFexo/f3lobAxj/5Hzi02IWmge/V7dxQ=)
2: tYe8Eust4poQJrj1a-jUafL1jPM.crl (hash: 35BTPMTi0wO0mTfVx4aYHQMOiav56NF3RUuKqWe4ACo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:27:d2:0f:9b:cd:e2:a3:86:c6:62:da:7f:ab:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Validity
Not Before: Aug 23 08:00:07 2025 GMT
Not After : Aug 24 08:00:07 2025 GMT
Subject: CN=dacec0a8c69912cace8b0ffd45aa3dffd1cd0d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:3c:63:dd:cb:58:2e:bd:03:79:44:9e:29:85:
cc:f4:0a:63:96:c3:94:d0:11:da:b5:13:bc:13:cc:
8d:43:43:e4:a9:30:b4:a5:e5:c6:7e:fa:69:e4:00:
a0:84:7d:5e:61:65:2b:77:c4:88:dc:3c:6f:11:6f:
f7:80:3c:a8:4c:d5:b4:9f:6b:78:56:4b:92:a4:d9:
46:88:33:4d:01:d0:f7:af:14:d7:b7:cf:a1:c1:88:
c2:64:32:1c:e0:29:e7:d6:f6:26:20:51:81:cd:d1:
95:8d:6d:9d:73:74:8f:28:28:d7:9b:72:d5:d8:0e:
11:f4:a3:2c:19:47:f8:e2:f4:e4:05:23:2f:a0:42:
4b:b5:12:04:ca:8a:70:c0:da:26:8a:a6:fd:0a:66:
d4:bd:16:05:9a:65:95:36:b0:de:6a:bd:84:ae:3b:
9b:ea:b2:8e:89:ca:b1:22:4e:9e:06:b9:08:34:8f:
d0:04:8c:5e:2b:2f:af:b1:c7:e1:5b:87:29:07:31:
36:36:ac:65:5e:9a:a3:b9:bf:49:bb:6a:ad:de:87:
e4:64:7e:07:53:38:6d:28:11:fb:08:4a:c6:85:1e:
9e:31:62:62:a2:d7:37:cd:c0:b9:a7:a2:c1:72:95:
0e:7a:df:c9:ec:e4:d9:e0:f9:cf:df:2b:b5:21:18:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CE:C0:A8:C6:99:12:CA:CE:8B:0F:FD:45:AA:3D:FF:D1:CD:0D:74
X509v3 Authority Key Identifier:
keyid:B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7e:d1:c1:b0:c8:c9:a4:7e:b8:3b:e5:d1:93:90:dd:84:c5:
74:49:a3:e3:9a:8f:e6:2c:7d:2d:df:60:c3:0f:e7:79:fd:27:
d9:44:0d:1c:b6:18:f1:45:f5:0c:fe:80:67:53:c6:f8:3e:68:
2d:5c:0f:0c:c6:f1:ee:fd:99:54:3a:b5:9d:57:e6:11:53:ee:
fb:70:88:a4:ec:c0:0d:41:51:8d:6c:4a:35:a8:46:57:c0:db:
31:91:f8:11:1e:46:2e:d0:21:6e:13:78:62:5d:e2:90:81:04:
16:16:c0:28:51:22:83:17:f8:d3:ac:79:e8:81:fa:0f:60:f5:
b1:ad:65:36:9a:ce:2a:0f:5b:56:b4:d0:64:36:36:77:4d:aa:
0a:dc:a8:7b:be:a7:bd:09:c6:43:4f:b9:af:07:ce:df:c3:42:
68:a0:f8:04:1a:d9:d4:2b:9e:8b:53:26:c0:4f:91:02:f0:63:
7e:da:4d:dd:db:a7:42:5c:1c:0f:1f:8e:ec:e5:03:09:bf:e0:
da:38:6e:b8:b6:a0:c8:d9:20:9c:5f:71:eb:c3:4f:40:d0:96:
e9:21:d9:f4:36:e0:66:da:88:e2:26:78:6d:bb:3b:11:9b:aa:
37:2d:ea:1a:d3:43:d9:db:89:bd:47:15:d9:55:93:24:b1:ea:
75:ea:e7:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8SfSD5vN4qOGxmLaf6vwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ODdiYzEyZWIyZGUyOWExMDI2YjhmNTZiZThkNDY5ZjJm
NThjZjMwHhcNMjUwODIzMDgwMDA3WhcNMjUwODI0MDgwMDA3WjAzMTEwLwYDVQQD
EyhkYWNlYzBhOGM2OTkxMmNhY2U4YjBmZmQ0NWFhM2RmZmQxY2QwZDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9zxj3ctYLr0DeUSeKYXM9ApjlsOU
0BHatRO8E8yNQ0PkqTC0peXGfvpp5ACghH1eYWUrd8SI3DxvEW/3gDyoTNW0n2t4
VkuSpNlGiDNNAdD3rxTXt8+hwYjCZDIc4Cnn1vYmIFGBzdGVjW2dc3SPKCjXm3LV
2A4R9KMsGUf44vTkBSMvoEJLtRIEyopwwNomiqb9CmbUvRYFmmWVNrDear2Erjub
6rKOicqxIk6eBrkINI/QBIxeKy+vscfhW4cpBzE2NqxlXpqjub9Ju2qt3ofkZH4H
UzhtKBH7CErGhR6eMWJiotc3zcC5p6LBcpUOet/J7OTZ4PnP3yu1IRgh9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrOwKjGmRLKzosP/UWqPf/RzQ10MB8GA1UdIwQY
MBaAFLWHvBLrLeKaECa49Wvo1Gny9YzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFllOEV1c3Q0cG9RSnJqMWEtalVhZkwxalBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80YzNlMTktYTQ4OS00ZTNhLWEzYTIt
N2U1MmU3NDljM2FkLzEvdFllOEV1c3Q0cG9RSnJqMWEtalVhZkwxalBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80YzNlMTktYTQ4OS00ZTNhLWEzYTItN2U1MmU3NDljM2Fk
LzEvdFllOEV1c3Q0cG9RSnJqMWEtalVhZkwxalBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhX7RwbDI
yaR+uDvl0ZOQ3YTFdEmj45qP5ix9Ld9gww/nef0n2UQNHLYY8UX1DP6AZ1PG+D5o
LVwPDMbx7v2ZVDq1nVfmEVPu+3CIpOzADUFRjWxKNahGV8DbMZH4ER5GLtAhbhN4
Yl3ikIEEFhbAKFEigxf406x56IH6D2D1sa1lNprOKg9bVrTQZDY2d02qCtyoe76n
vQnGQ0+5rwfO38NCaKD4BBrZ1Cuei1MmwE+RAvBjftpN3dunQlwcDx+O7OUDCb/g
2jhuuLagyNkgnF9x68NPQNCW6SHZ9DbgZtqI4iZ4bbs7EZuqNy3qGtND2duJvUcV
2VWTJLHqdernZA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:27:11 2025 by rpki-client