Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
File: tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft (raw, json)
Hash identifier: zrbshAwFZEv1s3iDJnbPT052BaQI6sKbvB08VIl6PTk=
Subject key identifier: 2E:03:97:68:B9:3F:34:3D:BB:9D:1F:29:43:CC:CB:13:94:D8:8D:50
Authority key identifier: B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
Certificate issuer: /CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Certificate serial: 019897B73EA3F8FE4CFED932B70AA8E55CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
Manifest number: 1629
Signing time: Mon 11 Aug 2025 06:00:25 +0000
Manifest this update: Mon 11 Aug 2025 06:00:25 +0000
Manifest next update: Tue 12 Aug 2025 06:00:25 +0000
Files and hashes: 1: 3wD7YASUrL3NpA7N1DKGwyMvpW8.roa (hash: E3LCGPj2WzMDsMMPMtvTWx8+o6rGMeVTiLG80T025To=)
2: tCxsttlDEYs9pRw5Gm9iTgZyCBc.roa (hash: 0ZbwaGE5XpT8151KuGcEKOSEkVLV60MXa5tXdHShvII=)
3: tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl (hash: s+4NECJ99a9WCyszKXBGglXEL46T9ik/wCDya5AI/zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b7:3e:a3:f8:fe:4c:fe:d9:32:b7:0a:a8:e5:5c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Validity
Not Before: Aug 11 06:00:25 2025 GMT
Not After : Aug 12 06:00:25 2025 GMT
Subject: CN=2e039768b93f343dbb9d1f2943cccb1394d88d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:07:a2:a4:de:41:c3:0c:52:3d:46:b4:d0:86:
63:2c:81:99:7c:b4:c2:55:77:8b:49:0a:ba:32:4d:
0f:e9:28:68:65:31:af:5f:b4:51:6d:87:d4:e0:ab:
6e:e8:6c:62:e1:ec:d4:94:97:6b:dd:c2:2e:ce:c7:
18:ce:fb:d9:15:2b:8d:64:a7:35:93:07:04:6e:53:
7c:54:1f:55:47:7b:1d:7f:83:0c:13:96:9b:60:e6:
89:0c:82:3f:d2:6c:7f:43:fd:8d:0c:a1:41:cc:f5:
71:da:f7:4c:07:3b:d4:bf:eb:ea:2f:b5:f0:2f:b4:
3c:59:04:74:2e:ba:9d:e4:35:f2:96:7a:43:c1:57:
fd:e2:b0:85:4c:4c:d3:3d:03:8e:a2:04:9f:af:51:
21:3f:aa:03:dd:c0:61:8a:bf:0a:fb:78:e2:27:28:
79:0f:ef:d8:23:fd:5a:89:b7:85:a4:18:ad:d5:c8:
79:99:2e:ed:51:df:cb:75:30:ae:18:cc:ec:92:a0:
da:b8:a3:66:22:25:90:98:cc:bf:36:7a:de:d9:f6:
e9:e9:72:0f:47:98:fd:9f:45:46:cd:8c:85:84:97:
bf:d6:44:d8:36:b1:2c:29:65:96:be:14:ea:a9:44:
50:b2:91:c7:cb:c3:1a:4f:f9:53:fb:ca:46:4c:8b:
eb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:03:97:68:B9:3F:34:3D:BB:9D:1F:29:43:CC:CB:13:94:D8:8D:50
X509v3 Authority Key Identifier:
keyid:B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d6:3c:49:1e:f8:99:1b:59:1b:71:cc:13:a5:f4:ad:7c:e0:
55:6a:78:d0:d5:e0:da:da:e0:48:4a:e3:f2:d5:7a:43:6d:5d:
27:75:51:8d:61:e6:fd:30:7d:f5:17:4d:8c:bf:97:b7:4c:17:
07:a9:52:51:94:8b:96:71:e7:b0:e4:f8:0f:26:02:cf:95:ae:
ff:6c:56:89:97:40:46:4b:db:90:99:77:2f:46:d7:51:e9:c1:
39:f2:ad:98:fa:98:1e:fb:5f:42:2c:9d:ae:90:87:2a:4f:5c:
ff:49:11:00:81:8f:6c:05:7f:85:8e:41:c0:a7:01:4d:64:c9:
32:84:3b:5c:c9:16:f5:71:1f:50:03:33:f8:8c:fe:db:08:1a:
62:98:89:1a:4a:d7:60:78:db:ff:b2:bd:7d:24:84:af:49:ae:
a1:be:79:52:40:19:47:d8:b6:7c:94:8e:24:16:d2:3e:1f:6e:
a0:ac:13:3f:f8:67:df:26:90:a6:7b:20:65:60:a0:71:3e:98:
7d:a0:08:b7:36:3a:26:67:61:94:2c:92:9a:b8:2c:47:23:32:
7a:b4:99:56:c4:d5:3f:d9:74:77:41:6d:f1:5c:e6:a7:26:7c:
5d:f5:d8:75:38:70:3e:97:69:24:ba:0b:e9:31:58:f5:dc:5e:
37:7c:e6:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXtz6j+P5M/tkytwqo5VzJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MGQ2Y2E5NWUyNzcwZjU1MzQwZDkwOWVjN2M5N2VlY2Ez
ZmUyMGUwHhcNMjUwODExMDYwMDI1WhcNMjUwODEyMDYwMDI1WjAzMTEwLwYDVQQD
EygyZTAzOTc2OGI5M2YzNDNkYmI5ZDFmMjk0M2NjY2IxMzk0ZDg4ZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxweipN5BwwxSPUa00IZjLIGZfLTC
VXeLSQq6Mk0P6ShoZTGvX7RRbYfU4Ktu6Gxi4ezUlJdr3cIuzscYzvvZFSuNZKc1
kwcEblN8VB9VR3sdf4MME5abYOaJDII/0mx/Q/2NDKFBzPVx2vdMBzvUv+vqL7Xw
L7Q8WQR0Lrqd5DXylnpDwVf94rCFTEzTPQOOogSfr1EhP6oD3cBhir8K+3jiJyh5
D+/YI/1aibeFpBit1ch5mS7tUd/LdTCuGMzskqDauKNmIiWQmMy/Nnre2fbp6XIP
R5j9n0VGzYyFhJe/1kTYNrEsKWWWvhTqqURQspHHy8MaT/lT+8pGTIvr3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4Dl2i5PzQ9u50fKUPMyxOU2I1QMB8GA1UdIwQY
MBaAFLYNbKleJ3D1U0DZCex8l+7KP+IOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGcxc3FWNG5jUFZUUU5rSjdIeVg3c29fNGc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMzNlOGItYmRlMS00ZjkwLWJhZjUt
MjM4NDdhNDBkOWU0LzEvdGcxc3FWNG5jUFZUUU5rSjdIeVg3c29fNGc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wMzNlOGItYmRlMS00ZjkwLWJhZjUtMjM4NDdhNDBkOWU0
LzEvdGcxc3FWNG5jUFZUUU5rSjdIeVg3c29fNGc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdY8SR74
mRtZG3HME6X0rXzgVWp40NXg2trgSErj8tV6Q21dJ3VRjWHm/TB99RdNjL+Xt0wX
B6lSUZSLlnHnsOT4DyYCz5Wu/2xWiZdARkvbkJl3L0bXUenBOfKtmPqYHvtfQiyd
rpCHKk9c/0kRAIGPbAV/hY5BwKcBTWTJMoQ7XMkW9XEfUAMz+Iz+2wgaYpiJGkrX
YHjb/7K9fSSEr0muob55UkAZR9i2fJSOJBbSPh9uoKwTP/hn3yaQpnsgZWCgcT6Y
faAItzY6JmdhlCySmrgsRyMyerSZVsTVP9l0d0Ft8VzmpyZ8XfXYdThwPpdpJLoL
6TFY9dxeN3zmkQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:39 2025 by rpki-client