
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
File: tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft (raw, json)
Hash identifier: o9c4N595JQPyLeLnpOej9velY+Jk4IyJq89WvKgGm3M=
Subject key identifier: BC:35:87:8E:58:2C:5D:C5:26:40:4E:1C:BE:60:0E:19:5A:A9:66:03
Authority key identifier: B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
Certificate issuer: /CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Certificate serial: 01988168693FE74D7080CED4BB466B2892B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
Manifest number: 086B
Signing time: Wed 06 Aug 2025 22:02:40 +0000
Manifest this update: Wed 06 Aug 2025 22:02:40 +0000
Manifest next update: Thu 07 Aug 2025 22:02:40 +0000
Files and hashes: 1: tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl (hash: vLT+gq01kz3vqJ3Ew12lFaG1LYhGTp7awK1k9hmEE5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:69:3f:e7:4d:70:80:ce:d4:bb:46:6b:28:92:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Validity
Not Before: Aug 6 22:02:40 2025 GMT
Not After : Aug 7 22:02:40 2025 GMT
Subject: CN=bc35878e582c5dc526404e1cbe600e195aa96603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:14:84:dc:e6:94:83:6d:a9:46:35:9f:8a:
17:33:82:6b:62:09:32:8e:cc:76:d3:f6:92:98:9a:
d0:64:b1:c1:c4:b3:c2:0f:c1:41:2a:96:dd:f3:f7:
31:76:c3:dd:62:73:ce:19:f5:08:0a:fd:78:84:57:
91:db:bf:c1:66:c0:9c:81:d7:de:3e:9f:bb:b5:46:
a9:12:28:df:e0:7f:1d:e0:b0:cf:61:af:6b:5a:57:
f4:aa:fd:56:14:a8:c5:df:26:b6:3f:3f:fe:c5:4b:
59:da:a2:6a:2f:27:b8:3e:a8:42:be:76:00:24:ab:
f7:1c:d2:90:5f:6c:82:ea:82:15:32:85:e3:01:74:
70:a0:30:57:68:b5:65:67:e2:2d:25:b9:2a:bf:f4:
9a:d0:73:22:59:b5:d1:1e:a0:a6:a7:ad:85:73:8b:
cb:7a:86:b5:0f:78:75:59:f5:a9:44:cf:4f:dd:f6:
7b:04:73:e0:14:12:13:28:c8:70:20:01:97:7a:b0:
3f:88:b8:a8:ea:cb:44:2d:32:78:00:81:66:a9:27:
f1:6a:47:e3:c6:5d:ee:ba:fe:ac:53:f1:b0:28:73:
a4:cc:0e:19:c3:ff:97:e8:1e:9f:68:1f:7e:8a:23:
12:89:50:99:13:be:fa:e8:49:1e:ec:c6:a5:1f:aa:
91:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:35:87:8E:58:2C:5D:C5:26:40:4E:1C:BE:60:0E:19:5A:A9:66:03
X509v3 Authority Key Identifier:
keyid:B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:60:33:4d:63:fe:02:f3:f4:28:6d:0a:e7:8b:ce:5f:1e:94:
af:f5:32:17:ce:59:e6:b0:01:c6:58:fc:30:dc:a5:a2:e6:63:
35:09:fe:33:8b:88:8d:23:f4:62:3a:3a:a6:1d:e9:1e:e3:03:
52:56:12:ad:20:0e:28:5e:39:39:3d:97:fd:10:a7:5d:4d:6d:
35:07:b7:4d:71:65:90:11:c4:2c:9f:60:31:a0:fb:81:27:96:
78:14:7d:ea:b7:f0:d4:26:97:47:f5:0a:1f:38:37:c1:45:4e:
2a:68:2b:64:9a:60:d9:2a:0e:99:c9:72:6f:89:83:ba:c1:f0:
de:30:67:7c:19:f0:d1:22:22:80:8b:4e:a7:e5:22:8f:3c:3c:
33:25:8a:13:d8:19:79:4f:63:78:1e:08:1f:1f:bc:b5:da:0c:
fc:1e:cb:ce:47:4f:9f:66:5e:f3:98:4d:0a:b2:6d:30:9c:e3:
1b:5f:da:8b:65:bf:cd:d5:93:c5:d9:e8:97:fc:08:17:ff:2b:
44:db:9d:0d:28:a9:33:a1:de:89:e6:0f:e4:13:1b:27:70:17:
94:30:c3:6a:1e:c9:b1:ac:c9:53:53:60:fe:69:0a:93:6d:f8:
98:23:74:4f:63:b7:1d:13:a0:ca:22:b4:3e:aa:d6:29:12:da:
d1:a6:9b:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBaGk/501wgM7Uu0ZrKJK5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NmM0OTg1Y2Q2MDY0MzIyMGUwNjRhMmUxMTRkNzhmNWIw
MzljMmIwHhcNMjUwODA2MjIwMjQwWhcNMjUwODA3MjIwMjQwWjAzMTEwLwYDVQQD
EyhiYzM1ODc4ZTU4MmM1ZGM1MjY0MDRlMWNiZTYwMGUxOTVhYTk2NjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ0UhNzmlINtqUY1n4oXM4JrYgky
jsx20/aSmJrQZLHBxLPCD8FBKpbd8/cxdsPdYnPOGfUICv14hFeR27/BZsCcgdfe
Pp+7tUapEijf4H8d4LDPYa9rWlf0qv1WFKjF3ya2Pz/+xUtZ2qJqLye4PqhCvnYA
JKv3HNKQX2yC6oIVMoXjAXRwoDBXaLVlZ+ItJbkqv/Sa0HMiWbXRHqCmp62Fc4vL
eoa1D3h1WfWpRM9P3fZ7BHPgFBITKMhwIAGXerA/iLio6stELTJ4AIFmqSfxakfj
xl3uuv6sU/GwKHOkzA4Zw/+X6B6faB9+iiMSiVCZE7766Eke7MalH6qRJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLw1h45YLF3FJkBOHL5gDhlaqWYDMB8GA1UdIwQY
MBaAFLZsSYXNYGQyIOBkouEU149bA5wrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG14SmhjMWdaRElnNEdTaTRSVFhqMXNEbkNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xZDBjMzktMjU1NS00NjhmLWJlNjYt
ZmY5YmFiOTBhZjE4LzEvdG14SmhjMWdaRElnNEdTaTRSVFhqMXNEbkNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8xZDBjMzktMjU1NS00NjhmLWJlNjYtZmY5YmFiOTBhZjE4
LzEvdG14SmhjMWdaRElnNEdTaTRSVFhqMXNEbkNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGAzTWP+
AvP0KG0K54vOXx6Ur/UyF85Z5rABxlj8MNylouZjNQn+M4uIjSP0Yjo6ph3pHuMD
UlYSrSAOKF45OT2X/RCnXU1tNQe3TXFlkBHELJ9gMaD7gSeWeBR96rfw1CaXR/UK
Hzg3wUVOKmgrZJpg2SoOmclyb4mDusHw3jBnfBnw0SIigItOp+Uijzw8MyWKE9gZ
eU9jeB4IHx+8tdoM/B7LzkdPn2Ze85hNCrJtMJzjG1/ai2W/zdWTxdnol/wIF/8r
RNudDSipM6HeieYP5BMbJ3AXlDDDah7JsazJU1Ng/mkKk234mCN0T2O3HROgyiK0
PqrWKRLa0aabDQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:32:55 2025 by rpki-client