Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
File: TnCtvlP18oWwVz3yRuJdUWUdeEk.mft (raw, json)
Hash identifier: OIsbn06hJ0UOSigz5ySrH+ArzvTjMs4xQATVc0C2aBg=
Subject key identifier: F8:07:AE:B4:0D:87:6B:F6:B2:87:0F:AF:04:51:8D:C2:BA:82:67:4C
Authority key identifier: 4E:70:AD:BE:53:F5:F2:85:B0:57:3D:F2:46:E2:5D:51:65:1D:78:49
Certificate issuer: /CN=4e70adbe53f5f285b0573df246e25d51651d7849
Certificate serial: 01988168361AA7FCA3254B210B448AF969B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
Manifest number: D2
Signing time: Wed 06 Aug 2025 22:02:26 +0000
Manifest this update: Wed 06 Aug 2025 22:02:26 +0000
Manifest next update: Thu 07 Aug 2025 22:02:26 +0000
Files and hashes: 1: TnCtvlP18oWwVz3yRuJdUWUdeEk.crl (hash: vcJCfFpwPg2bbvpATHOMi4CJu4v1If+TD4lKLpXbfpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:36:1a:a7:fc:a3:25:4b:21:0b:44:8a:f9:69:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e70adbe53f5f285b0573df246e25d51651d7849
Validity
Not Before: Aug 6 22:02:26 2025 GMT
Not After : Aug 7 22:02:26 2025 GMT
Subject: CN=f807aeb40d876bf6b2870faf04518dc2ba82674c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:44:c1:68:9a:6e:15:f1:eb:54:8e:8e:57:d7:
48:28:ea:a9:9e:91:29:9a:c6:77:c2:23:ae:72:71:
f0:69:2c:d7:0e:ee:98:08:8d:83:9d:25:6e:21:a4:
e6:a5:53:5b:0a:77:a8:5e:ee:56:03:f1:77:f8:6e:
53:0d:8c:b0:82:de:a0:b0:b4:d7:49:05:98:d0:43:
5b:b5:0c:63:a3:ba:b4:1b:34:dc:b3:ae:c8:45:2f:
9d:f1:da:9d:12:4c:74:2a:01:a1:3d:f4:ee:76:c2:
74:dd:9d:f7:38:a2:f6:5f:ea:b0:19:d2:da:65:93:
74:f0:64:06:0f:35:a1:e8:98:c5:e7:44:f4:00:52:
84:b4:ce:3b:d8:37:ab:08:30:29:fd:70:a0:35:f0:
5f:a2:26:45:9b:75:6a:41:44:47:85:9b:80:b1:3b:
cc:ea:01:74:10:60:7b:e4:29:6a:c0:34:2b:55:e4:
4a:dc:b4:33:3d:c4:28:cb:ff:ab:e4:be:4d:d5:35:
eb:6f:1b:8d:9d:2a:57:b7:c2:83:14:c8:0a:dc:7b:
f9:cf:a7:51:6a:a2:fc:1f:e4:34:0b:aa:ca:94:ab:
39:4a:82:f5:42:a1:b3:5d:bc:a5:7a:c9:b9:a0:41:
a9:26:ba:31:98:a2:25:80:84:fc:2d:5e:b9:9b:32:
d7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:07:AE:B4:0D:87:6B:F6:B2:87:0F:AF:04:51:8D:C2:BA:82:67:4C
X509v3 Authority Key Identifier:
keyid:4E:70:AD:BE:53:F5:F2:85:B0:57:3D:F2:46:E2:5D:51:65:1D:78:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0e:cd:59:fb:a9:11:3b:26:ec:e2:7c:93:97:cc:1d:42:c3:
55:a6:92:8b:2f:76:9e:48:99:06:50:96:4f:ff:ff:af:bc:79:
82:b3:5b:ee:2a:3b:4b:4b:3f:db:d7:f2:8b:12:f1:c2:26:ce:
90:5e:f1:a7:38:58:b1:bb:46:bc:ba:b0:39:f8:20:01:69:a1:
03:32:49:0f:35:47:76:78:32:de:63:f0:cc:d6:b2:00:48:80:
a5:3e:a0:67:13:03:cc:32:9c:09:dd:d9:dc:55:e8:40:56:53:
04:6f:a2:6d:16:26:df:bb:ae:c1:fe:2b:99:45:ef:ae:1d:00:
79:b6:c6:57:d2:8f:d6:46:82:88:90:3f:fe:83:54:b0:e0:9f:
45:0a:a1:fe:ac:07:ed:09:75:1a:58:ca:17:ca:e5:36:c9:7f:
31:36:a5:fc:cd:aa:96:e3:00:71:d0:20:ee:c2:83:7b:26:6e:
83:10:fc:b2:c0:d7:08:0e:13:f0:7f:e6:14:8d:3f:f6:3c:62:
bf:95:d2:2f:2b:35:49:b5:61:45:4f:d1:0a:26:9b:21:2b:76:
bc:51:f4:b8:f9:60:82:64:08:d3:38:58:5d:11:64:9f:5d:27:
37:d8:65:66:05:b4:2f:74:7e:c2:cd:1b:82:c2:39:1b:9a:77:
87:78:4c:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBaDYap/yjJUshC0SK+WmxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNzBhZGJlNTNmNWYyODViMDU3M2RmMjQ2ZTI1ZDUxNjUx
ZDc4NDkwHhcNMjUwODA2MjIwMjI2WhcNMjUwODA3MjIwMjI2WjAzMTEwLwYDVQQD
EyhmODA3YWViNDBkODc2YmY2YjI4NzBmYWYwNDUxOGRjMmJhODI2NzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUTBaJpuFfHrVI6OV9dIKOqpnpEp
msZ3wiOucnHwaSzXDu6YCI2DnSVuIaTmpVNbCneoXu5WA/F3+G5TDYywgt6gsLTX
SQWY0ENbtQxjo7q0GzTcs67IRS+d8dqdEkx0KgGhPfTudsJ03Z33OKL2X+qwGdLa
ZZN08GQGDzWh6JjF50T0AFKEtM472DerCDAp/XCgNfBfoiZFm3VqQURHhZuAsTvM
6gF0EGB75ClqwDQrVeRK3LQzPcQoy/+r5L5N1TXrbxuNnSpXt8KDFMgK3Hv5z6dR
aqL8H+Q0C6rKlKs5SoL1QqGzXbylesm5oEGpJroxmKIlgIT8LV65mzLXJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgHrrQNh2v2socPrwRRjcK6gmdMMB8GA1UdIwQY
MBaAFE5wrb5T9fKFsFc98kbiXVFlHXhJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG5DdHZsUDE4b1d3VnozeVJ1SmRVV1VkZUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83NGY0M2UtYmJmZS00OTYwLThmMzMt
YzFlNmMxYjMxOTFkLzEvVG5DdHZsUDE4b1d3VnozeVJ1SmRVV1VkZUVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC83NGY0M2UtYmJmZS00OTYwLThmMzMtYzFlNmMxYjMxOTFk
LzEvVG5DdHZsUDE4b1d3VnozeVJ1SmRVV1VkZUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATw7NWfup
ETsm7OJ8k5fMHULDVaaSiy92nkiZBlCWT///r7x5grNb7io7S0s/29fyixLxwibO
kF7xpzhYsbtGvLqwOfggAWmhAzJJDzVHdngy3mPwzNayAEiApT6gZxMDzDKcCd3Z
3FXoQFZTBG+ibRYm37uuwf4rmUXvrh0AebbGV9KP1kaCiJA//oNUsOCfRQqh/qwH
7Ql1GljKF8rlNsl/MTal/M2qluMAcdAg7sKDeyZugxD8ssDXCA4T8H/mFI0/9jxi
v5XSLys1SbVhRU/RCiabISt2vFH0uPlggmQI0zhYXRFkn10nN9hlZgW0L3R+ws0b
gsI5G5p3h3hMFw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:00:16 2025 by rpki-client