Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
File: TOmGBryaXUQHT_jL7cvbz8NfBWI.mft (raw, json)
Hash identifier: lPB85zK25qDO+CdZ5rpogBsVEFOQbO8oKWCm+8MKbAc=
Subject key identifier: D0:DD:85:8A:C0:BE:F3:31:78:A9:0B:A4:DD:0B:F5:58:A4:9B:C0:FA
Authority key identifier: 4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
Certificate issuer: /CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Certificate serial: 01987AF6FF7C5D4BB4627210A20D793217DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
Manifest number: 161D
Signing time: Tue 05 Aug 2025 16:01:04 +0000
Manifest this update: Tue 05 Aug 2025 16:01:04 +0000
Manifest next update: Wed 06 Aug 2025 16:01:04 +0000
Files and hashes: 1: TOmGBryaXUQHT_jL7cvbz8NfBWI.crl (hash: a79qFEA2UZZtmMas6GzDkNXv8fVYwH3LBv8xli7xU0E=)
2: _2jPSPlgYJsD4ywwlbMtnQzhjck.roa (hash: dPt4vhrAZj1gNIW23Wk2/nT1GhYcZvAFuVHXtMeqVMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f6:ff:7c:5d:4b:b4:62:72:10:a2:0d:79:32:17:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Validity
Not Before: Aug 5 16:01:04 2025 GMT
Not After : Aug 6 16:01:04 2025 GMT
Subject: CN=d0dd858ac0bef33178a90ba4dd0bf558a49bc0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:87:42:de:99:58:27:12:33:91:e0:79:d9:9d:
7d:d8:f6:8a:72:25:c4:95:1a:27:c2:68:02:1f:0f:
6b:b4:9c:c1:ed:8a:5b:e2:11:84:29:20:b8:6c:14:
b8:62:31:1f:7e:e4:18:e1:7e:e6:cb:7f:28:fe:46:
d2:fa:1d:66:75:1e:53:96:4b:be:9c:7e:cc:b6:d0:
78:79:f5:63:e8:7a:19:e5:a8:b0:64:d8:6c:f3:62:
45:85:8c:9c:9d:80:21:e7:ae:3e:0d:73:57:d9:6c:
b3:1c:56:e7:43:b0:4f:45:59:7f:61:31:cc:88:38:
68:e5:0b:94:59:49:b5:57:49:63:af:2d:2f:d1:c0:
b7:36:86:f5:eb:7d:53:87:7a:56:2a:5c:c1:57:7e:
84:d7:60:eb:89:80:89:a2:ce:f4:f0:40:26:4c:4b:
52:04:ac:36:11:a1:1a:30:0c:e1:f4:dc:20:62:a9:
8c:3c:08:92:ca:11:b8:a1:5d:22:c0:20:c4:1a:91:
6c:82:82:7d:ef:a5:17:cf:90:33:37:99:db:3d:6e:
5f:d4:8b:6d:1d:cb:17:0a:90:13:80:bd:d2:f1:e2:
0c:2e:4b:43:7b:e6:79:f1:4c:95:da:98:66:0c:9e:
52:23:e1:3e:8f:62:c6:90:00:89:b8:e5:09:fe:8f:
8f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DD:85:8A:C0:BE:F3:31:78:A9:0B:A4:DD:0B:F5:58:A4:9B:C0:FA
X509v3 Authority Key Identifier:
keyid:4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:11:da:34:52:29:6d:aa:77:ff:14:6e:aa:57:66:23:e7:f1:
a6:fd:15:de:93:6f:79:ad:62:1f:06:fb:02:b7:78:ef:dd:36:
c7:ae:15:47:69:6a:de:7c:5c:53:a3:23:cc:aa:ed:66:59:83:
31:35:b6:4c:9d:18:87:ed:28:be:2a:6c:67:09:8b:e1:8d:aa:
9f:3e:7b:43:6c:bf:e1:bb:c3:52:3e:fd:c5:57:ca:91:18:cc:
02:16:39:13:d1:47:7b:73:88:4d:7e:45:fb:b3:cb:4a:5d:3f:
32:cb:4c:cc:8c:ce:c5:60:c7:7e:47:be:dd:08:3b:06:a2:b9:
33:04:a6:36:23:b2:ef:18:8c:a0:d6:d4:8b:16:4a:0b:73:89:
08:38:e8:96:b3:ac:a1:21:8b:8d:94:98:6f:f9:3c:a8:1e:a0:
50:9d:c9:c9:e5:b8:ac:02:4b:c7:0f:21:2b:9d:a7:53:44:f3:
64:3a:53:be:03:97:1f:d4:40:63:e3:c4:58:a8:84:39:17:bb:
19:51:df:15:fb:a1:7f:80:d2:76:c2:9a:25:2d:69:3d:e7:25:
1d:19:5f:6a:1b:9c:de:68:d9:f6:d8:27:76:27:a2:d4:6a:3f:
86:b7:39:5b:1b:b1:51:7b:ad:1d:42:4b:f5:07:de:0c:6b:54:
15:61:2f:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh69v98XUu0YnIQog15MhfaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTk4NjA2YmM5YTVkNDQwNzRmZjhjYmVkY2JkYmNmYzM1
ZjA1NjIwHhcNMjUwODA1MTYwMTA0WhcNMjUwODA2MTYwMTA0WjAzMTEwLwYDVQQD
EyhkMGRkODU4YWMwYmVmMzMxNzhhOTBiYTRkZDBiZjU1OGE0OWJjMGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74dC3plYJxIzkeB52Z192PaKciXE
lRonwmgCHw9rtJzB7Ypb4hGEKSC4bBS4YjEffuQY4X7my38o/kbS+h1mdR5Tlku+
nH7MttB4efVj6HoZ5aiwZNhs82JFhYycnYAh564+DXNX2WyzHFbnQ7BPRVl/YTHM
iDho5QuUWUm1V0ljry0v0cC3Nob1631Th3pWKlzBV36E12DriYCJos708EAmTEtS
BKw2EaEaMAzh9NwgYqmMPAiSyhG4oV0iwCDEGpFsgoJ976UXz5AzN5nbPW5f1Itt
HcsXCpATgL3S8eIMLktDe+Z58UyV2phmDJ5SI+E+j2LGkACJuOUJ/o+PcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDdhYrAvvMxeKkLpN0L9Vikm8D6MB8GA1UdIwQY
MBaAFEzphga8ml1EB0/4y+3L28/DXwViMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9tR0JyeWFYVVFIVF9qTDdjdmJ6OE5mQldJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNzllZDUtZDI1My00MjU1LTkwMTct
ODhkZjEyNWJhNjYzLzEvVE9tR0JyeWFYVVFIVF9qTDdjdmJ6OE5mQldJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xNzllZDUtZDI1My00MjU1LTkwMTctODhkZjEyNWJhNjYz
LzEvVE9tR0JyeWFYVVFIVF9qTDdjdmJ6OE5mQldJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhHaNFIp
bap3/xRuqldmI+fxpv0V3pNvea1iHwb7Ard47902x64VR2lq3nxcU6MjzKrtZlmD
MTW2TJ0Yh+0ovipsZwmL4Y2qnz57Q2y/4bvDUj79xVfKkRjMAhY5E9FHe3OITX5F
+7PLSl0/MstMzIzOxWDHfke+3Qg7BqK5MwSmNiOy7xiMoNbUixZKC3OJCDjolrOs
oSGLjZSYb/k8qB6gUJ3JyeW4rAJLxw8hK52nU0TzZDpTvgOXH9RAY+PEWKiEORe7
GVHfFfuhf4DSdsKaJS1pPeclHRlfahuc3mjZ9tgndiei1Go/hrc5WxuxUXutHUJL
9QfeDGtUFWEvtQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:41:58 2025 by rpki-client