
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft
File: tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft (raw, json)
Hash identifier: 20Ikn2gDY3ycyCBcVwdhmu5WoVZOQ3G/1SZrsHpiLi0=
Subject key identifier: DB:5A:11:01:35:E7:5D:D5:C5:58:81:05:1D:F1:F4:0F:05:41:E3:C2
Authority key identifier: B5:64:58:57:6B:A2:39:21:DD:79:2D:C0:05:2F:8F:82:86:7D:62:7B
Certificate issuer: /CN=b56458576ba23921dd792dc0052f8f82867d627b
Certificate serial: 01987486DE0F56BC1DAEFD8929AC198A45E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft
Manifest number: 12EB
Signing time: Mon 04 Aug 2025 10:00:52 +0000
Manifest this update: Mon 04 Aug 2025 10:00:52 +0000
Manifest next update: Tue 05 Aug 2025 10:00:52 +0000
Files and hashes: 1: E7d_b0PflOY76P_uC3WM3xFdSrc.roa (hash: n1OXhuOXloaQfjIyVDut9dhlUxv9V7SaFL6+utmdzjI=)
2: tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl (hash: 02TamlgyJ3SVfmbE0muitdflzJ50daD7aYzpxFMzGYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:de:0f:56:bc:1d:ae:fd:89:29:ac:19:8a:45:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56458576ba23921dd792dc0052f8f82867d627b
Validity
Not Before: Aug 4 10:00:52 2025 GMT
Not After : Aug 5 10:00:52 2025 GMT
Subject: CN=db5a110135e75dd5c55881051df1f40f0541e3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:c7:70:08:fb:d8:20:3f:8c:39:40:c1:49:
40:ff:cb:4d:16:5f:80:16:2b:68:37:4e:f8:b3:5f:
3b:d2:94:48:21:3e:c5:21:21:ca:7b:cd:3a:6c:6f:
0b:cf:08:e9:f0:1f:fb:5a:97:d7:d3:99:61:0c:7b:
69:76:46:37:1f:8b:7a:f1:ba:53:35:86:41:df:3f:
16:eb:35:18:c2:7c:2c:b0:66:62:f4:e0:4f:9a:5b:
02:f3:ba:ab:6b:06:78:29:4b:8b:39:22:9e:4f:0b:
00:40:19:26:31:d5:8b:47:7a:2b:8d:38:28:a5:0e:
b0:94:6d:ad:8e:2f:78:d7:6b:ab:6e:0f:4b:32:41:
2c:2e:50:f7:0f:f0:4a:df:04:85:79:e6:fb:8f:78:
e2:09:94:9a:9c:f0:5b:4a:f7:dd:8e:fa:72:9d:81:
0c:a7:ab:7f:b0:f3:9b:e4:b5:1b:3b:68:5d:dd:89:
62:56:1a:a1:f7:00:e6:6e:16:75:d2:c5:31:77:42:
33:86:b0:42:54:80:cb:9b:95:e7:67:4c:e6:ed:0e:
0e:b0:cf:3d:ea:3a:27:77:73:24:b5:59:a8:23:9d:
73:22:69:b3:6f:af:9d:68:59:18:7f:6e:04:e5:3c:
72:74:f3:f0:23:58:18:c8:64:d6:d9:33:b1:56:ba:
1b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5A:11:01:35:E7:5D:D5:C5:58:81:05:1D:F1:F4:0F:05:41:E3:C2
X509v3 Authority Key Identifier:
keyid:B5:64:58:57:6B:A2:39:21:DD:79:2D:C0:05:2F:8F:82:86:7D:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:04:b9:18:27:b1:dc:2e:62:9d:96:d0:3f:b6:df:12:ca:bf:
91:d8:7f:25:2f:75:71:24:03:a5:e4:b8:5f:c0:f2:78:df:7c:
d3:2e:dc:99:ea:e6:ab:57:81:ba:2b:e9:9d:4e:d1:2b:3c:bc:
c7:c6:df:6e:73:6e:ba:bf:c2:c3:eb:23:b0:c0:23:03:1f:b5:
e2:f4:bc:a9:3a:bf:55:7a:f2:80:aa:b0:31:25:95:f9:02:42:
80:ff:72:b1:e8:be:21:fa:58:aa:8d:1b:04:c7:37:54:5c:5c:
5b:c0:b4:a9:ec:36:01:fa:d0:11:2f:5a:17:52:c5:d6:96:62:
9c:db:3e:5d:5b:77:25:07:14:bb:51:ee:b6:ad:84:ea:4b:18:
31:86:22:c3:95:75:9a:8e:36:9e:a7:40:a8:6f:65:86:b6:f8:
6c:c2:90:3f:df:5f:4f:a6:0d:fd:91:ff:2c:2e:40:d9:85:02:
42:70:28:34:7d:5d:29:c0:b1:d9:52:40:c4:f6:ba:17:65:b2:
d9:93:52:e1:37:da:be:82:5f:37:84:d9:14:6c:29:19:3a:79:
31:cc:e6:8e:4e:03:a1:0b:30:36:19:47:cc:d5:0d:2f:b4:80:
37:66:ac:5c:49:29:f7:c7:57:cb:63:e3:5c:a3:ef:5b:43:af:
53:bf:33:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0ht4PVrwdrv2JKawZikXhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NjQ1ODU3NmJhMjM5MjFkZDc5MmRjMDA1MmY4ZjgyODY3
ZDYyN2IwHhcNMjUwODA0MTAwMDUyWhcNMjUwODA1MTAwMDUyWjAzMTEwLwYDVQQD
EyhkYjVhMTEwMTM1ZTc1ZGQ1YzU1ODgxMDUxZGYxZjQwZjA1NDFlM2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxvHcAj72CA/jDlAwUlA/8tNFl+A
FitoN074s1870pRIIT7FISHKe806bG8Lzwjp8B/7WpfX05lhDHtpdkY3H4t68bpT
NYZB3z8W6zUYwnwssGZi9OBPmlsC87qrawZ4KUuLOSKeTwsAQBkmMdWLR3orjTgo
pQ6wlG2tji9412urbg9LMkEsLlD3D/BK3wSFeeb7j3jiCZSanPBbSvfdjvpynYEM
p6t/sPOb5LUbO2hd3YliVhqh9wDmbhZ10sUxd0IzhrBCVIDLm5XnZ0zm7Q4OsM89
6jond3MktVmoI51zImmzb6+daFkYf24E5TxydPPwI1gYyGTW2TOxVrobhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtaEQE1513VxViBBR3x9A8FQePCMB8GA1UdIwQY
MBaAFLVkWFdrojkh3XktwAUvj4KGfWJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFdSWVYydWlPU0hkZVMzQUJTLVBnb1o5WW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9kNDkzY2MtMzI1NC00ZDk1LWJkZWUt
MWEyM2UxNWYzYjg0LzEvdFdSWVYydWlPU0hkZVMzQUJTLVBnb1o5WW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9kNDkzY2MtMzI1NC00ZDk1LWJkZWUtMWEyM2UxNWYzYjg0
LzEvdFdSWVYydWlPU0hkZVMzQUJTLVBnb1o5WW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQS5GCex
3C5inZbQP7bfEsq/kdh/JS91cSQDpeS4X8DyeN980y7cmermq1eBuivpnU7RKzy8
x8bfbnNuur/Cw+sjsMAjAx+14vS8qTq/VXrygKqwMSWV+QJCgP9ysei+IfpYqo0b
BMc3VFxcW8C0qew2AfrQES9aF1LF1pZinNs+XVt3JQcUu1Hutq2E6ksYMYYiw5V1
mo42nqdAqG9lhrb4bMKQP99fT6YN/ZH/LC5A2YUCQnAoNH1dKcCx2VJAxPa6F2Wy
2ZNS4TfavoJfN4TZFGwpGTp5Mczmjk4DoQswNhlHzNUNL7SAN2asXEkp98dXy2Pj
XKPvW0OvU78z2A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:33 2025 by rpki-client