Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
File: tDqirb6dQEE3M58g_VhiPIo58TA.mft (raw, json)
Hash identifier: Rfu73YRfhxyhbVNDyYZp+XwxRzUsymC98YdTvgMizxs=
Subject key identifier: 51:4A:A0:71:EA:23:AC:16:87:E1:42:C9:D7:8D:1D:1D:54:E7:8B:EF
Authority key identifier: B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
Certificate issuer: /CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Certificate serial: 0198906C29FED8AE927C6B656DD8179BD787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
Manifest number: 05D2
Signing time: Sat 09 Aug 2025 20:01:04 +0000
Manifest this update: Sat 09 Aug 2025 20:01:04 +0000
Manifest next update: Sun 10 Aug 2025 20:01:04 +0000
Files and hashes: 1: DR42yKGsjL2cx3Lp0nYZ2-J6QjI.roa (hash: SNpq+XJB/gPAUUzDmYBdIDihlauDEu/Coqako/V/GUw=)
2: tDqirb6dQEE3M58g_VhiPIo58TA.crl (hash: 2J0UmqMf8xaBjwlEOSN4Drad9y7Aw0JBoZoxsrnvSJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6c:29:fe:d8:ae:92:7c:6b:65:6d:d8:17:9b:d7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Validity
Not Before: Aug 9 20:01:04 2025 GMT
Not After : Aug 10 20:01:04 2025 GMT
Subject: CN=514aa071ea23ac1687e142c9d78d1d1d54e78bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fa:7f:61:3b:51:2e:79:c3:9f:e6:78:01:b9:
2d:1b:8f:c3:69:f2:d3:43:e5:ff:e2:dd:3c:2c:59:
38:ed:e6:18:40:ef:10:37:ac:26:2b:18:fd:20:b2:
f5:39:3b:6d:d0:79:61:c3:7a:ba:e8:2f:a7:2b:a6:
bd:96:42:06:70:be:81:f6:f7:9a:ad:64:ab:da:5f:
4e:94:3a:e0:84:8f:4b:05:09:ae:ed:d3:62:c8:a1:
ff:22:bf:d9:36:7e:59:de:8e:0d:8d:49:05:b2:fe:
d7:ba:99:6f:d2:90:60:83:87:6a:ef:97:e8:cd:b9:
48:db:ca:a3:94:dd:ae:48:1a:ff:60:3c:43:ef:57:
39:aa:5e:28:68:d2:26:a2:aa:1d:b4:6e:fe:4f:58:
a1:08:33:7b:3c:8e:a3:a5:49:35:a3:73:6b:a7:79:
36:65:f3:3e:8e:c7:b1:dc:43:67:9b:73:c3:54:7d:
fb:0d:3e:3b:7d:6c:ee:79:9b:c8:97:e6:e6:ef:05:
a6:c6:55:2a:df:b0:93:e7:69:df:90:15:0f:dc:70:
68:20:51:58:67:38:07:64:67:e7:03:da:3b:54:e6:
eb:17:be:32:8d:a7:33:80:66:a3:c9:88:8a:6f:67:
01:a9:9c:11:79:ef:21:bb:90:18:f8:03:a9:8c:d3:
af:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4A:A0:71:EA:23:AC:16:87:E1:42:C9:D7:8D:1D:1D:54:E7:8B:EF
X509v3 Authority Key Identifier:
keyid:B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:86:75:24:20:89:42:47:70:0d:64:c5:70:ba:1d:f0:95:f8:
97:5c:56:8d:bd:f3:fb:31:44:1e:a7:a1:71:fd:43:33:70:07:
32:2a:f8:84:a7:eb:fe:eb:2e:1c:03:06:a7:35:d4:34:e3:db:
db:8a:81:59:3b:68:e2:31:ba:23:58:33:e7:9a:df:9e:72:c8:
a8:49:12:f8:a8:99:6b:c7:9a:f8:47:f8:42:1b:45:c5:f3:94:
42:8e:96:42:0d:89:78:ab:18:ea:79:7f:c9:c0:e8:fb:5c:91:
c3:86:ec:97:f1:20:92:d3:28:2b:fc:93:a1:aa:29:98:0a:3e:
21:34:27:6b:cc:44:77:99:33:42:46:e4:18:69:7a:34:56:30:
c3:22:5a:89:76:34:83:30:7a:8f:fa:69:7a:e1:b2:ca:42:a6:
fa:99:63:32:c1:7d:9f:18:31:4b:84:95:1d:5d:d5:b9:bc:ab:
36:79:13:0c:88:5a:d2:46:36:f2:06:e8:0c:d3:75:99:8f:8b:
08:99:89:f7:6c:50:68:2c:43:eb:a5:28:3b:a2:fb:a5:30:4b:
7b:ab:c3:76:4e:71:c1:a9:28:37:9c:4d:2e:f3:c1:ea:6a:a6:
a1:fb:25:ea:83:d9:f2:ab:40:b9:db:fa:4b:a1:17:41:1f:da:
91:c9:c1:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQbCn+2K6SfGtlbdgXm9eHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0M2FhMmFkYmU5ZDQwNDEzNzMzOWYyMGZkNTg2MjNjOGEz
OWYxMzAwHhcNMjUwODA5MjAwMTA0WhcNMjUwODEwMjAwMTA0WjAzMTEwLwYDVQQD
Eyg1MTRhYTA3MWVhMjNhYzE2ODdlMTQyYzlkNzhkMWQxZDU0ZTc4YmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/p/YTtRLnnDn+Z4AbktG4/DafLT
Q+X/4t08LFk47eYYQO8QN6wmKxj9ILL1OTtt0Hlhw3q66C+nK6a9lkIGcL6B9vea
rWSr2l9OlDrghI9LBQmu7dNiyKH/Ir/ZNn5Z3o4NjUkFsv7Xuplv0pBgg4dq75fo
zblI28qjlN2uSBr/YDxD71c5ql4oaNImoqodtG7+T1ihCDN7PI6jpUk1o3Nrp3k2
ZfM+jsex3ENnm3PDVH37DT47fWzueZvIl+bm7wWmxlUq37CT52nfkBUP3HBoIFFY
ZzgHZGfnA9o7VObrF74yjaczgGajyYiKb2cBqZwRee8hu5AY+AOpjNOviwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFKoHHqI6wWh+FCydeNHR1U54vvMB8GA1UdIwQY
MBaAFLQ6oq2+nUBBNzOfIP1YYjyKOfEwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNjJmNDAtNDhjNy00M2M2LTlkODMt
MTU0OGFjMTM1NmJlLzEvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yNjJmNDAtNDhjNy00M2M2LTlkODMtMTU0OGFjMTM1NmJl
LzEvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioZ1JCCJ
QkdwDWTFcLod8JX4l1xWjb3z+zFEHqehcf1DM3AHMir4hKfr/usuHAMGpzXUNOPb
24qBWTto4jG6I1gz55rfnnLIqEkS+KiZa8ea+Ef4QhtFxfOUQo6WQg2JeKsY6nl/
ycDo+1yRw4bsl/EgktMoK/yToaopmAo+ITQna8xEd5kzQkbkGGl6NFYwwyJaiXY0
gzB6j/ppeuGyykKm+pljMsF9nxgxS4SVHV3VubyrNnkTDIha0kY28gboDNN1mY+L
CJmJ92xQaCxD66UoO6L7pTBLe6vDdk5xwakoN5xNLvPB6mqmofsl6oPZ8qtAudv6
S6EXQR/akcnBYQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:43:09 2025 by rpki-client