Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
File: TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json)
Hash identifier: SXqyeD7VYqdkxbvZR8E6hWF9qBW+LJHLOlM4qIZL0Sw=
Subject key identifier: 54:BF:EA:FF:2B:46:E3:35:CB:B7:41:E7:C0:9B:CE:1E:BB:C9:30:AF
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 01987374A2C7F7072AE22B63E5233BD12981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
Manifest number: 15B2
Signing time: Mon 04 Aug 2025 05:01:20 +0000
Manifest this update: Mon 04 Aug 2025 05:01:20 +0000
Manifest next update: Tue 05 Aug 2025 05:01:20 +0000
Files and hashes: 1: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: 7P2HNkAj69fuWgNLBFLudSuF5U6G+6+N7GuUrrNKiUI=)
2: Zo-iXOH7eoz1wcNDU4gFPp4lbTo.roa (hash: lEXdntgkazPfcD7Ym6WQrguJ42W+/3phyup2XOjaUaA=)
3: w0BgVrxvQVnjW2X3qjBQ3ko9xOc.roa (hash: Ucfa4JRcD7zc33DVXeSZa1Nus1iwZHoQ8xtQZD2xfUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:a2:c7:f7:07:2a:e2:2b:63:e5:23:3b:d1:29:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: Aug 4 05:01:20 2025 GMT
Not After : Aug 5 05:01:20 2025 GMT
Subject: CN=54bfeaff2b46e335cbb741e7c09bce1ebbc930af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:2d:a4:f9:80:75:ca:35:75:98:d2:0a:69:
eb:d5:a6:d1:e6:f4:71:9e:51:5f:5c:d6:6b:2a:d8:
66:22:01:d1:6f:02:e1:d7:ee:07:f0:2a:d5:56:56:
0e:fb:59:0b:f0:69:28:a0:2e:28:a7:b5:92:c9:d8:
47:8e:fb:e2:13:f4:d1:ef:e2:f9:c7:17:bb:4e:35:
e3:12:d8:ce:75:2e:e7:c8:a4:c6:82:89:3c:10:be:
17:b0:11:c8:28:8e:f6:73:76:60:4d:18:3c:96:f4:
0b:f1:e6:aa:fa:eb:2c:03:c8:22:62:9c:32:9c:f2:
98:d6:dd:9d:60:7c:cf:5b:2f:0e:0f:17:e9:54:41:
02:fe:55:fb:0f:a8:a0:73:f4:89:87:eb:a2:19:21:
5f:0a:58:17:bc:1d:98:e9:72:44:ca:ba:e1:87:2a:
e9:bd:49:e4:2e:b9:8c:98:7c:3b:aa:26:4d:e9:72:
49:74:b7:30:4d:39:33:40:f0:03:87:02:c9:43:dc:
8b:68:f9:d7:c3:16:65:82:5b:a1:fc:2d:47:b0:85:
48:93:bd:6e:4d:a4:fc:94:23:36:07:61:d8:0f:62:
51:31:fa:b2:b6:a1:9b:a1:25:33:cd:57:75:6a:62:
5f:f3:1c:20:d6:45:01:a5:0d:c0:2c:13:b7:e5:7f:
e5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BF:EA:FF:2B:46:E3:35:CB:B7:41:E7:C0:9B:CE:1E:BB:C9:30:AF
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:61:7b:5b:5c:ae:c2:6a:50:7c:24:79:82:7c:29:b3:ee:da:
f3:b4:aa:bb:dd:3c:e0:e9:04:53:fe:bd:f1:62:21:91:dd:ac:
98:f0:a8:27:33:74:d5:0e:92:72:8f:ee:be:dc:45:32:7d:d7:
4b:c2:04:24:5e:19:cb:ac:5d:5f:aa:80:59:a0:98:d7:d1:f8:
04:59:8e:f0:96:5a:3a:1c:a2:9f:41:84:2e:ce:53:13:21:a3:
b5:d8:65:ff:32:28:34:d5:f2:18:13:d5:3a:14:e3:5d:75:33:
64:c4:c2:01:fe:ad:27:3a:61:e3:8b:c5:aa:93:51:fb:27:89:
76:05:ea:43:bd:17:66:c5:7d:0c:95:49:d3:3c:b7:ad:db:dd:
55:38:84:cd:76:7e:74:8e:c7:b2:fc:7b:44:69:f7:f0:99:5d:
d3:e9:fa:cd:ba:19:4c:93:bb:32:f1:a2:e9:32:49:d5:03:38:
c5:3c:ff:40:db:44:bf:19:e8:f5:b0:84:74:55:b5:dd:fe:f4:
d5:11:29:09:30:10:6f:c6:a0:9e:c2:16:08:89:ea:f6:5f:bf:
cb:46:b1:6b:77:19:83:59:10:ca:6a:26:ce:53:64:f2:e3:16:
9b:f4:dc:ee:e1:80:71:e5:87:db:46:b0:27:9f:e6:86:28:4d:
e1:50:ba:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdKLH9wcq4itj5SM70SmBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYzNhMDYyY2I5NmQ5YTNmMjFhOGIyZGE4NDhmODFjNmY3
M2JmOTUwHhcNMjUwODA0MDUwMTIwWhcNMjUwODA1MDUwMTIwWjAzMTEwLwYDVQQD
Eyg1NGJmZWFmZjJiNDZlMzM1Y2JiNzQxZTdjMDliY2UxZWJiYzkzMGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n8tpPmAdco1dZjSCmnr1abR5vRx
nlFfXNZrKthmIgHRbwLh1+4H8CrVVlYO+1kL8GkooC4op7WSydhHjvviE/TR7+L5
xxe7TjXjEtjOdS7nyKTGgok8EL4XsBHIKI72c3ZgTRg8lvQL8eaq+ussA8giYpwy
nPKY1t2dYHzPWy8ODxfpVEEC/lX7D6igc/SJh+uiGSFfClgXvB2Y6XJEyrrhhyrp
vUnkLrmMmHw7qiZN6XJJdLcwTTkzQPADhwLJQ9yLaPnXwxZlgluh/C1HsIVIk71u
TaT8lCM2B2HYD2JRMfqytqGboSUzzVd1amJf8xwg1kUBpQ3ALBO35X/lUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFS/6v8rRuM1y7dB58Cbzh67yTCvMB8GA1UdIwQY
MBaAFE7DoGLLltmj8hqLLahI+Bxvc7+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWIt
ZjU2N2MzZTlmNWZmLzEvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWItZjU2N2MzZTlmNWZm
LzEvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2F7W1yu
wmpQfCR5gnwps+7a87Squ9084OkEU/698WIhkd2smPCoJzN01Q6Sco/uvtxFMn3X
S8IEJF4Zy6xdX6qAWaCY19H4BFmO8JZaOhyin0GELs5TEyGjtdhl/zIoNNXyGBPV
OhTjXXUzZMTCAf6tJzph44vFqpNR+yeJdgXqQ70XZsV9DJVJ0zy3rdvdVTiEzXZ+
dI7Hsvx7RGn38Jld0+n6zboZTJO7MvGi6TJJ1QM4xTz/QNtEvxno9bCEdFW13f70
1REpCTAQb8agnsIWCInq9l+/y0axa3cZg1kQymomzlNk8uMWm/Tc7uGAceWH20aw
J5/mhihN4VC6gA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:30 2025 by rpki-client