Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
File: Tm_7mQbuvrofWxpVju1jcvZTzoY.mft (raw, json)
Hash identifier: UMzTWgHHD0jzwyeRxSdKH57RG7+ZQmRNIGx4bgRq1/Q=
Subject key identifier: F5:A7:99:32:D1:F1:58:C0:0B:9C:DD:94:7B:C1:86:AB:3E:41:73:B6
Authority key identifier: 4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86
Certificate issuer: /CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
Certificate serial: 01989336A051FE3AD757328D0DE6F2376AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
Manifest number: 1624
Signing time: Sun 10 Aug 2025 09:01:27 +0000
Manifest this update: Sun 10 Aug 2025 09:01:27 +0000
Manifest next update: Mon 11 Aug 2025 09:01:27 +0000
Files and hashes: 1: Tm_7mQbuvrofWxpVju1jcvZTzoY.crl (hash: KRQvQVSHFt3Eby8C86xwuVeywj1wuGOjiZowit0IBV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:a0:51:fe:3a:d7:57:32:8d:0d:e6:f2:37:6a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
Validity
Not Before: Aug 10 09:01:27 2025 GMT
Not After : Aug 11 09:01:27 2025 GMT
Subject: CN=f5a79932d1f158c00b9cdd947bc186ab3e4173b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f2:78:16:7d:fc:f9:b8:16:73:50:ac:ab:04:
1a:6b:55:7e:f5:ac:d5:a1:d5:ea:4c:55:42:fe:19:
9a:df:67:be:3c:55:a0:30:7c:56:9a:fc:d8:65:40:
8b:5c:ed:87:c6:12:de:27:24:48:0f:f1:99:cc:f2:
3d:6d:8b:92:5b:36:7a:ed:64:4e:11:13:7b:9f:8f:
a9:da:c3:c6:ec:25:b5:31:ac:2b:00:65:94:cc:10:
d8:57:39:59:23:dc:91:7e:3e:a2:e7:c4:c2:44:0e:
e4:f6:3c:80:f2:cd:6c:a6:a2:2a:08:0a:60:cf:10:
e4:55:cb:df:ad:9d:fb:11:0b:84:9c:20:ea:3d:f3:
0e:09:ac:57:29:96:33:15:6b:5b:f4:a3:d7:f1:8d:
a5:01:b2:a9:88:9d:c7:d2:89:ab:20:22:6f:43:b5:
af:88:50:3d:b5:2a:d0:87:5d:83:ab:e5:7f:c7:3c:
97:f7:3d:2e:f1:bf:74:19:8a:1e:ae:6b:88:59:98:
b3:0f:09:23:bf:f2:3f:de:b0:55:e5:60:44:bf:c1:
9b:46:99:95:86:53:0a:f4:97:c1:8a:52:4e:f9:0f:
6e:cd:9c:ce:e9:cc:3a:49:87:08:79:7b:e4:55:5c:
38:cb:df:b1:54:da:0c:66:4e:b0:21:f8:c0:63:bc:
ef:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A7:99:32:D1:F1:58:C0:0B:9C:DD:94:7B:C1:86:AB:3E:41:73:B6
X509v3 Authority Key Identifier:
keyid:4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:85:42:fc:44:eb:ad:64:ca:d1:39:09:74:5b:7c:fe:5a:9a:
08:9e:b9:a6:75:34:b0:e9:bf:4d:44:38:96:2f:75:69:97:06:
d0:75:3b:23:39:4f:ba:86:aa:21:7c:81:05:ac:6c:a8:03:94:
ed:0a:ef:9e:f3:de:64:62:ae:e9:70:53:b8:ab:49:c6:5d:dc:
ea:8b:b4:1e:6e:a8:18:0e:22:37:f6:96:97:8f:a7:7f:f3:95:
25:d3:c8:f0:2d:83:bc:85:00:26:47:43:40:01:f5:37:70:21:
15:d7:f2:ab:e9:dc:49:d1:04:9e:72:bf:7a:75:be:f3:8c:01:
5f:42:79:9d:f4:1a:8b:b0:ae:ec:a0:67:d7:8a:18:a0:0a:08:
99:79:e9:e9:5a:08:e5:d1:8a:ff:45:f1:cd:e9:e3:63:c2:2c:
8c:7b:37:1d:6a:fe:d1:fa:e6:1b:cb:03:4d:8b:ee:31:b4:b3:
52:2e:11:6b:71:04:56:cb:b3:95:b4:c7:3f:17:25:95:b2:60:
1e:17:0a:39:ce:dd:8b:5b:45:41:8c:da:84:3d:11:e0:bc:7e:
71:d2:ab:51:a4:4e:a4:0f:a0:43:e2:02:3c:eb:53:29:92:26:
19:53:8c:0a:00:d4:98:02:c5:86:80:e1:04:54:77:78:07:8b:
e2:aa:f2:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTNqBR/jrXVzKNDebyN2qyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNmZmYjk5MDZlZWJlYmExZjViMWE1NThlZWQ2MzcyZjY1
M2NlODYwHhcNMjUwODEwMDkwMTI3WhcNMjUwODExMDkwMTI3WjAzMTEwLwYDVQQD
EyhmNWE3OTkzMmQxZjE1OGMwMGI5Y2RkOTQ3YmMxODZhYjNlNDE3M2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/J4Fn38+bgWc1CsqwQaa1V+9azV
odXqTFVC/hma32e+PFWgMHxWmvzYZUCLXO2HxhLeJyRID/GZzPI9bYuSWzZ67WRO
ERN7n4+p2sPG7CW1MawrAGWUzBDYVzlZI9yRfj6i58TCRA7k9jyA8s1spqIqCApg
zxDkVcvfrZ37EQuEnCDqPfMOCaxXKZYzFWtb9KPX8Y2lAbKpiJ3H0omrICJvQ7Wv
iFA9tSrQh12Dq+V/xzyX9z0u8b90GYoermuIWZizDwkjv/I/3rBV5WBEv8GbRpmV
hlMK9JfBilJO+Q9uzZzO6cw6SYcIeXvkVVw4y9+xVNoMZk6wIfjAY7zvMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWnmTLR8VjAC5zdlHvBhqs+QXO2MB8GA1UdIwQY
MBaAFE5v+5kG7r66H1saVY7tY3L2U86GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xOTgwYmQtMDc1My00MTYxLWI2ZjUt
OWM3MmUxNTdhYmIzLzEvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8xOTgwYmQtMDc1My00MTYxLWI2ZjUtOWM3MmUxNTdhYmIz
LzEvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYVC/ETr
rWTK0TkJdFt8/lqaCJ65pnU0sOm/TUQ4li91aZcG0HU7IzlPuoaqIXyBBaxsqAOU
7QrvnvPeZGKu6XBTuKtJxl3c6ou0Hm6oGA4iN/aWl4+nf/OVJdPI8C2DvIUAJkdD
QAH1N3AhFdfyq+ncSdEEnnK/enW+84wBX0J5nfQai7Cu7KBn14oYoAoImXnp6VoI
5dGK/0XxzenjY8IsjHs3HWr+0frmG8sDTYvuMbSzUi4Ra3EEVsuzlbTHPxcllbJg
HhcKOc7di1tFQYzahD0R4Lx+cdKrUaROpA+gQ+ICPOtTKZImGVOMCgDUmALFhoDh
BFR3eAeL4qryFg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:27 2025 by rpki-client