Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
File: tT1dyv8VkDIr61fsPrrvYlBBKVU.mft (raw, json)
Hash identifier: b0YLproxxKishhT6WkDAT/oUtuYg7AYpZaxIqbX+a18=
Subject key identifier: 34:36:D7:C3:3C:B2:28:BC:D3:A3:C1:8E:42:50:51:FF:02:AF:40:03
Authority key identifier: B5:3D:5D:CA:FF:15:90:32:2B:EB:57:EC:3E:BA:EF:62:50:41:29:55
Certificate issuer: /CN=b53d5dcaff1590322beb57ec3ebaef6250412955
Certificate serial: 019879AE780B7CA2BCF7E195318A4BD4D329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
Manifest number: 08E0
Signing time: Tue 05 Aug 2025 10:02:13 +0000
Manifest this update: Tue 05 Aug 2025 10:02:13 +0000
Manifest next update: Wed 06 Aug 2025 10:02:13 +0000
Files and hashes: 1: tT1dyv8VkDIr61fsPrrvYlBBKVU.crl (hash: mN1uF0g48UdrFLhsv2OC4gIM1JOzHJHJMh31I2to6VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:78:0b:7c:a2:bc:f7:e1:95:31:8a:4b:d4:d3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53d5dcaff1590322beb57ec3ebaef6250412955
Validity
Not Before: Aug 5 10:02:13 2025 GMT
Not After : Aug 6 10:02:13 2025 GMT
Subject: CN=3436d7c33cb228bcd3a3c18e425051ff02af4003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:01:2a:e5:4b:f9:9d:bf:94:44:88:a1:d7:35:
c8:a4:e6:f2:4d:c6:74:c3:c6:24:6a:af:8f:0f:c6:
39:60:89:ca:67:a2:c1:9c:65:84:32:75:94:5f:06:
d0:00:50:45:1c:eb:2d:cd:d8:8e:97:68:b0:eb:c0:
b4:a5:d6:a3:6d:57:85:6c:f6:d4:1d:69:b4:19:0e:
83:d1:65:d3:e5:99:ad:d8:82:0d:39:71:74:7f:d0:
17:0f:95:5a:a2:bc:03:ff:aa:53:da:5d:7e:28:78:
2c:9e:46:f0:16:f7:c4:4b:b6:f4:e4:1d:41:07:5b:
b2:5c:1e:ee:66:d6:88:e8:12:ed:9c:58:72:0d:d9:
33:8c:62:2a:1a:cf:21:df:09:39:e8:95:da:5f:c2:
8f:87:11:bf:a9:68:8d:dc:b5:2e:10:79:cf:15:92:
47:5b:db:79:c0:bd:85:50:e8:7a:be:da:5e:e3:7b:
db:08:af:00:2f:e4:e5:00:04:9d:6d:3e:f3:84:b1:
91:5d:0f:99:d3:b5:a4:7b:44:0a:6e:7f:89:c8:8c:
14:2c:9b:9e:89:1e:a4:95:ea:f8:94:41:15:be:18:
2c:0b:f1:78:d5:a4:1f:9e:6b:24:a4:52:a4:95:38:
af:93:05:36:7e:79:98:96:81:57:f0:c7:d9:08:7a:
18:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:36:D7:C3:3C:B2:28:BC:D3:A3:C1:8E:42:50:51:FF:02:AF:40:03
X509v3 Authority Key Identifier:
keyid:B5:3D:5D:CA:FF:15:90:32:2B:EB:57:EC:3E:BA:EF:62:50:41:29:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:77:37:f6:7b:5b:13:36:5f:f9:65:9c:b4:b4:f2:6b:f6:be:
be:7d:15:37:f2:8c:76:9c:09:bb:06:8c:cd:ee:96:65:56:9d:
a6:3f:fa:82:7b:e7:47:99:00:4f:9c:e8:9a:a0:56:e9:0e:cd:
59:61:fe:0f:3e:e7:35:64:f7:83:73:e9:49:07:05:a4:9b:29:
00:ba:64:6a:b4:6f:0e:1e:93:e3:bf:a2:a4:9a:ba:2e:54:1a:
2b:b8:41:a7:b4:13:9d:50:79:7a:6c:97:d0:03:c6:b6:d3:bd:
5b:fb:8d:4c:3f:e2:5b:64:f9:86:54:1f:80:a7:2d:f4:74:8e:
28:41:9f:ea:28:53:02:59:79:13:8c:77:76:25:16:b5:cb:ab:
fc:11:2e:60:4b:38:ba:a7:a1:1d:e4:c1:d3:1d:27:ba:de:9a:
38:e7:a0:3c:43:9f:39:2e:79:f5:69:61:95:9c:ca:c1:77:6e:
25:f9:76:5c:35:fc:97:c4:e0:66:ca:66:f5:f1:62:b4:32:f0:
44:e2:64:e4:96:a9:22:81:a3:17:66:17:f3:cb:f0:96:98:79:
a7:07:70:9c:e0:6e:5d:6d:21:8e:ca:08:ab:a2:bb:0f:71:cb:
1e:30:97:5c:70:28:63:6e:26:fa:0a:7e:e4:68:81:04:07:a3:
5b:bb:5a:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh5rngLfKK89+GVMYpL1NMpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1M2Q1ZGNhZmYxNTkwMzIyYmViNTdlYzNlYmFlZjYyNTA0
MTI5NTUwHhcNMjUwODA1MTAwMjEzWhcNMjUwODA2MTAwMjEzWjAzMTEwLwYDVQQD
EygzNDM2ZDdjMzNjYjIyOGJjZDNhM2MxOGU0MjUwNTFmZjAyYWY0MDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQEq5Uv5nb+URIih1zXIpObyTcZ0
w8Ykaq+PD8Y5YInKZ6LBnGWEMnWUXwbQAFBFHOstzdiOl2iw68C0pdajbVeFbPbU
HWm0GQ6D0WXT5Zmt2IINOXF0f9AXD5VaorwD/6pT2l1+KHgsnkbwFvfES7b05B1B
B1uyXB7uZtaI6BLtnFhyDdkzjGIqGs8h3wk56JXaX8KPhxG/qWiN3LUuEHnPFZJH
W9t5wL2FUOh6vtpe43vbCK8AL+TlAASdbT7zhLGRXQ+Z07Wke0QKbn+JyIwULJue
iR6kler4lEEVvhgsC/F41aQfnmskpFKklTivkwU2fnmYloFX8MfZCHoYtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQ218M8sii806PBjkJQUf8Cr0ADMB8GA1UdIwQY
MBaAFLU9Xcr/FZAyK+tX7D6672JQQSlVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFQxZHl2OFZrRElyNjFmc1BycnZZbEJCS1ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xZjg4OWItNDQ0NS00NzcwLWE5NWUt
ZjgwNjMyMzBlMTgzLzEvdFQxZHl2OFZrRElyNjFmc1BycnZZbEJCS1ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8xZjg4OWItNDQ0NS00NzcwLWE5NWUtZjgwNjMyMzBlMTgz
LzEvdFQxZHl2OFZrRElyNjFmc1BycnZZbEJCS1ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXc39ntb
EzZf+WWctLTya/a+vn0VN/KMdpwJuwaMze6WZVadpj/6gnvnR5kAT5zomqBW6Q7N
WWH+Dz7nNWT3g3PpSQcFpJspALpkarRvDh6T47+ipJq6LlQaK7hBp7QTnVB5emyX
0APGttO9W/uNTD/iW2T5hlQfgKct9HSOKEGf6ihTAll5E4x3diUWtcur/BEuYEs4
uqehHeTB0x0nut6aOOegPEOfOS559WlhlZzKwXduJfl2XDX8l8TgZspm9fFitDLw
ROJk5JapIoGjF2YX88vwlph5pwdwnOBuXW0hjsoIq6K7D3HLHjCXXHAoY24m+gp+
5GiBBAejW7taxQ==
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:17:26 2025 by rpki-client