
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
File: _TSxP72Tgd-Exofwa80HTkp1WAM.mft (raw, json)
Hash identifier: B0v/wosNjtqu4EYsV/JXAdB+Nw/nicnreHRfPn0+eIw=
Subject key identifier: E6:AC:5F:27:2C:07:A5:8B:DF:80:57:3F:F1:61:35:9E:2A:63:02:DA
Authority key identifier: FD:34:B1:3F:BD:93:81:DF:84:C6:87:F0:6B:CD:07:4E:4A:75:58:03
Certificate issuer: /CN=fd34b13fbd9381df84c687f06bcd074e4a755803
Certificate serial: 0198748723DCF4B67EDC3CF47C3FD392A973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 10:01:10 +0000
Manifest this update: Mon 04 Aug 2025 10:01:10 +0000
Manifest next update: Tue 05 Aug 2025 10:01:10 +0000
Files and hashes: 1: _TSxP72Tgd-Exofwa80HTkp1WAM.crl (hash: xZhCqtoGbUWgLJeUYu3/QJ3HI48WszyCGU+1LSmzPoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:23:dc:f4:b6:7e:dc:3c:f4:7c:3f:d3:92:a9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd34b13fbd9381df84c687f06bcd074e4a755803
Validity
Not Before: Aug 4 10:01:10 2025 GMT
Not After : Aug 5 10:01:10 2025 GMT
Subject: CN=e6ac5f272c07a58bdf80573ff161359e2a6302da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:1a:6b:de:fc:fe:1c:03:75:8b:c7:32:f8:
95:0f:e6:a0:47:c4:2a:61:80:4a:50:e0:c4:20:a2:
73:d4:82:0c:7f:9b:06:a7:6e:5a:00:f7:f9:ae:08:
6b:9f:c6:cd:db:63:27:ef:63:ec:d7:7b:01:f5:95:
cf:91:6e:84:d7:bb:a5:f8:26:23:4e:8e:9f:f5:02:
d8:7c:a6:de:5a:ac:59:57:b2:84:a5:a0:28:c3:a3:
38:16:8a:bf:02:6e:97:68:45:cc:d9:f3:65:00:87:
8b:2c:b8:c0:97:c3:61:c1:ee:c7:4a:96:23:0f:e3:
79:da:0d:fe:d6:88:5b:c3:e8:f8:4e:8e:60:1d:b5:
45:4b:bb:7b:d2:17:b5:bb:c2:61:d1:b9:b6:34:a7:
c3:5a:6b:00:d4:81:67:18:cb:72:15:7e:31:4a:2e:
40:f7:9e:61:f6:da:ed:65:03:2a:07:b6:5f:dd:58:
a0:36:10:f3:df:05:75:31:98:15:6e:e9:80:89:a4:
c8:0d:9d:9a:e5:10:dc:56:fb:72:ce:3d:f2:41:5f:
ab:7b:d1:5d:ea:15:d4:57:81:48:9a:97:48:ce:be:
9c:2e:59:16:b1:d5:55:aa:98:56:17:22:e3:d5:f0:
74:35:e9:f7:7a:36:c5:d4:ce:38:20:00:78:ad:b3:
df:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AC:5F:27:2C:07:A5:8B:DF:80:57:3F:F1:61:35:9E:2A:63:02:DA
X509v3 Authority Key Identifier:
keyid:FD:34:B1:3F:BD:93:81:DF:84:C6:87:F0:6B:CD:07:4E:4A:75:58:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:6d:51:b8:e5:7a:a5:2e:67:b3:6d:6f:15:3d:8a:78:a3:62:
47:ee:01:5e:b6:6d:12:2d:18:29:76:77:34:1d:4b:e4:b1:50:
7f:dd:b3:c2:35:7f:4b:ec:86:58:e3:cd:1f:8a:b9:fa:5e:34:
a3:ce:68:7b:0c:f7:2e:cf:b0:c7:60:84:c1:6f:d5:63:33:b2:
b2:78:05:90:dd:9d:f8:08:b5:70:f6:0f:cd:4d:e6:ae:07:1c:
0d:af:f5:bb:aa:85:ab:4e:90:8a:81:4f:3e:87:b7:02:8c:b3:
fc:58:20:95:2d:e5:38:dc:1b:04:6b:3e:57:61:6e:bc:b8:8c:
72:c7:6b:b4:7a:01:db:89:f3:c5:fa:bd:a5:51:0b:f2:9d:18:
f0:cd:a9:fc:11:e6:6a:be:da:50:5b:c0:c0:f2:4a:f7:4a:36:
de:6a:1a:b2:8d:f5:7a:7c:ec:14:e0:de:2f:6e:38:fe:fd:48:
7d:22:35:1a:d2:d7:65:36:77:a3:54:03:9c:26:a8:00:04:5a:
db:6f:ad:a4:5e:71:40:58:64:ab:70:82:7c:38:79:7a:c2:98:
fe:f6:33:4b:79:31:4f:31:2e:9f:ce:a9:75:ce:80:09:2e:1a:
e3:6a:0e:84:1e:ca:f9:15:d8:26:4e:f8:de:48:79:60:1f:af:
13:71:6b:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0hyPc9LZ+3Dz0fD/TkqlzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzRiMTNmYmQ5MzgxZGY4NGM2ODdmMDZiY2QwNzRlNGE3
NTU4MDMwHhcNMjUwODA0MTAwMTEwWhcNMjUwODA1MTAwMTEwWjAzMTEwLwYDVQQD
EyhlNmFjNWYyNzJjMDdhNThiZGY4MDU3M2ZmMTYxMzU5ZTJhNjMwMmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJcaa978/hwDdYvHMviVD+agR8Qq
YYBKUODEIKJz1IIMf5sGp25aAPf5rghrn8bN22Mn72Ps13sB9ZXPkW6E17ul+CYj
To6f9QLYfKbeWqxZV7KEpaAow6M4Foq/Am6XaEXM2fNlAIeLLLjAl8Nhwe7HSpYj
D+N52g3+1ohbw+j4To5gHbVFS7t70he1u8Jh0bm2NKfDWmsA1IFnGMtyFX4xSi5A
955h9trtZQMqB7Zf3VigNhDz3wV1MZgVbumAiaTIDZ2a5RDcVvtyzj3yQV+re9Fd
6hXUV4FImpdIzr6cLlkWsdVVqphWFyLj1fB0Nen3ejbF1M44IAB4rbPfsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOasXycsB6WL34BXP/FhNZ4qYwLaMB8GA1UdIwQY
MBaAFP00sT+9k4HfhMaH8GvNB05KdVgDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RTeFA3MlRnZC1FeG9md2E4MEhUa3AxV0FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMTk2ZjEtNDMzOS00YmRjLTgwMzQt
MmViMmYyZWQzMDI5LzEvX1RTeFA3MlRnZC1FeG9md2E4MEhUa3AxV0FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8wMTk2ZjEtNDMzOS00YmRjLTgwMzQtMmViMmYyZWQzMDI5
LzEvX1RTeFA3MlRnZC1FeG9md2E4MEhUa3AxV0FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUm1RuOV6
pS5ns21vFT2KeKNiR+4BXrZtEi0YKXZ3NB1L5LFQf92zwjV/S+yGWOPNH4q5+l40
o85oewz3Ls+wx2CEwW/VYzOysngFkN2d+Ai1cPYPzU3mrgccDa/1u6qFq06QioFP
Poe3Aoyz/FgglS3lONwbBGs+V2FuvLiMcsdrtHoB24nzxfq9pVEL8p0Y8M2p/BHm
ar7aUFvAwPJK90o23moaso31enzsFODeL244/v1IfSI1GtLXZTZ3o1QDnCaoAARa
22+tpF5xQFhkq3CCfDh5esKY/vYzS3kxTzEun86pdc6ACS4a42oOhB7K+RXYJk74
3kh5YB+vE3FrAA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:37:05 2025 by rpki-client