Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
File: TPgIAsZXmk1KEGCNz5LprOmQWxY.mft (raw, json)
Hash identifier: +BsSMev522B8vd9SSBC94BaSqyTyFbBxBD3Jjvfyw/s=
Subject key identifier: 3B:FE:5C:4B:A7:82:00:5B:C9:B6:0A:49:F5:82:A5:89:7A:E7:01:D3
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial: 01977D1E3B988667CA4A5C49FB85A992F1FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
Manifest number: 0454
Signing time: Tue 17 Jun 2025 09:00:22 +0000
Manifest this update: Tue 17 Jun 2025 09:00:22 +0000
Manifest next update: Wed 18 Jun 2025 09:00:22 +0000
Files and hashes: 1: FXVByNPxdRkMO-o6GsvvheK9loQ.roa (hash: cJsMagby7QEs7crG2RTXoRPWZv4X7cM8ggqQkmQ3WIs=)
2: TPgIAsZXmk1KEGCNz5LprOmQWxY.crl (hash: 8Mt68ry27q0e3jAgOxVR7ogxWCPanGrWwwrdST4Qdyk=)
3: lUkUA-Czwa2okiPJT7Kq8pTW_Yo.roa (hash: fS+41ubfx3zCs5hYx7i3kz5j50EsoWw6NrXQjh9DDSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:1e:3b:98:86:67:ca:4a:5c:49:fb:85:a9:92:f1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Validity
Not Before: Jun 17 09:00:22 2025 GMT
Not After : Jun 18 09:00:22 2025 GMT
Subject: CN=3bfe5c4ba782005bc9b60a49f582a5897ae701d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:13:21:e7:29:b3:ac:e9:a4:35:8f:8d:d3:6c:
89:af:0d:98:f0:57:11:65:41:0b:ed:60:f1:06:74:
9a:35:9a:0c:95:a8:b9:2e:0e:1f:00:5a:e8:db:0a:
3c:8a:89:02:56:a3:e8:99:0d:99:1e:62:61:20:31:
2d:7e:1d:ca:3b:a8:e8:a4:72:79:07:b9:20:33:52:
d8:bb:fa:42:58:66:5f:e4:3c:b2:97:80:13:65:8f:
f7:81:f1:7e:24:da:21:bc:40:01:9c:70:2c:3a:ad:
ff:34:38:17:11:68:68:be:b5:29:5c:1e:d3:96:ef:
41:42:94:5e:2a:25:cf:e1:ce:05:c7:6e:ca:29:4b:
3f:a3:8e:99:48:56:48:b5:7f:fc:be:ed:da:84:ea:
b1:be:92:80:41:6e:ba:c6:c5:a1:a7:4f:02:75:0e:
fd:46:09:61:af:b2:31:43:30:56:37:e6:c3:6a:c1:
be:ce:d2:96:f6:b5:32:8c:e5:5c:04:c8:d6:1f:bb:
2d:f8:68:55:38:81:8c:58:ac:14:75:38:31:cb:e1:
90:59:e7:1c:70:1c:3b:ce:1b:0c:3a:c5:76:44:57:
ee:d0:ae:63:8a:22:56:e0:f5:48:42:6c:69:2d:f1:
36:95:44:cb:eb:b7:fc:a8:20:93:c5:f0:0b:1c:14:
a4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FE:5C:4B:A7:82:00:5B:C9:B6:0A:49:F5:82:A5:89:7A:E7:01:D3
X509v3 Authority Key Identifier:
keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6b:4e:37:72:8d:8a:fb:54:f0:08:4c:b3:9d:6f:c6:4a:cc:
0f:1e:29:6e:fb:c9:9f:91:a1:80:51:bb:cc:b3:c6:4f:22:19:
cf:2e:be:48:15:5f:f0:11:7c:ab:b1:d9:2f:84:98:d9:ab:69:
54:dd:a2:93:d1:9b:41:83:be:fa:56:ab:e0:1f:b7:3a:f9:24:
c0:7c:3c:a7:96:45:9b:d0:51:b3:ca:69:8a:46:e4:91:fd:a1:
02:22:9b:40:80:e3:ed:ce:b3:7d:b3:0f:95:97:93:2e:34:0e:
0e:3d:07:7e:a7:7f:28:76:e2:2c:ff:1d:46:ea:c0:0b:4b:8f:
41:ff:c7:af:18:dd:3c:75:ca:d3:01:21:3a:e2:95:fe:5b:9a:
3b:f5:95:28:cf:c2:c5:b8:08:f1:64:7e:f7:b4:db:98:6f:95:
81:45:11:1e:2d:1e:06:87:a0:6d:4e:21:51:aa:d8:30:be:b6:
eb:50:cb:e1:65:2a:9c:18:35:5b:a9:ca:27:a1:4c:a3:a4:30:
d8:d7:76:96:d8:78:17:65:b9:64:71:18:23:ca:87:44:92:32:
c0:13:bd:4f:36:74:fc:1f:8f:5e:2e:30:64:9f:90:66:cf:87:
6a:be:60:6f:bc:7a:d0:67:7b:cd:31:9a:85:74:6f:26:00:c1:
1b:54:e2:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd9HjuYhmfKSlxJ+4WpkvH9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZjgwODAyYzY1NzlhNGQ0YTEwNjA4ZGNmOTJlOWFjZTk5
MDViMTYwHhcNMjUwNjE3MDkwMDIyWhcNMjUwNjE4MDkwMDIyWjAzMTEwLwYDVQQD
EygzYmZlNWM0YmE3ODIwMDViYzliNjBhNDlmNTgyYTU4OTdhZTcwMWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xMh5ymzrOmkNY+N02yJrw2Y8FcR
ZUEL7WDxBnSaNZoMlai5Lg4fAFro2wo8iokCVqPomQ2ZHmJhIDEtfh3KO6jopHJ5
B7kgM1LYu/pCWGZf5Dyyl4ATZY/3gfF+JNohvEABnHAsOq3/NDgXEWhovrUpXB7T
lu9BQpReKiXP4c4Fx27KKUs/o46ZSFZItX/8vu3ahOqxvpKAQW66xsWhp08CdQ79
Rglhr7IxQzBWN+bDasG+ztKW9rUyjOVcBMjWH7st+GhVOIGMWKwUdTgxy+GQWecc
cBw7zhsMOsV2RFfu0K5jiiJW4PVIQmxpLfE2lUTL67f8qCCTxfALHBSkFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDv+XEunggBbybYKSfWCpYl65wHTMB8GA1UdIwQY
MBaAFEz4CALGV5pNShBgjc+S6azpkFsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFBnSUFzWlhtazFLRUdDTno1THByT21RV3hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zOThiYmItMTg0Zi00ODUxLWIyYTAt
OTFmNDlkOGQxMTVkLzEvVFBnSUFzWlhtazFLRUdDTno1THByT21RV3hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8zOThiYmItMTg0Zi00ODUxLWIyYTAtOTFmNDlkOGQxMTVk
LzEvVFBnSUFzWlhtazFLRUdDTno1THByT21RV3hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2tON3KN
ivtU8AhMs51vxkrMDx4pbvvJn5GhgFG7zLPGTyIZzy6+SBVf8BF8q7HZL4SY2atp
VN2ik9GbQYO++lar4B+3OvkkwHw8p5ZFm9BRs8ppikbkkf2hAiKbQIDj7c6zfbMP
lZeTLjQODj0Hfqd/KHbiLP8dRurAC0uPQf/HrxjdPHXK0wEhOuKV/luaO/WVKM/C
xbgI8WR+97TbmG+VgUURHi0eBoegbU4hUarYML6261DL4WUqnBg1W6nKJ6FMo6Qw
2Nd2lth4F2W5ZHEYI8qHRJIywBO9TzZ0/B+PXi4wZJ+QZs+Har5gb7x60Gd7zTGa
hXRvJgDBG1Ti+Q==
-----END CERTIFICATE-----
Generated at Tue Jun 17 16:21:20 2025 by rpki-client