Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
File: tTcRWWHGq_W4er5KIAU-SsobbsI.mft (raw, json)
Hash identifier: 5FL7zSR0dZUX4RFeOXHqcZUlS9Y5QDe1PLw4i960mlk=
Subject key identifier: CA:CB:50:9C:39:DC:F1:A5:58:51:27:86:BE:F5:12:31:EA:35:D7:D4
Authority key identifier: B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2
Certificate issuer: /CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2
Certificate serial: 01987486CF7EFBD26DEB8A625854ED7D8287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 10:00:48 +0000
Manifest this update: Mon 04 Aug 2025 10:00:48 +0000
Manifest next update: Tue 05 Aug 2025 10:00:48 +0000
Files and hashes: 1: tTcRWWHGq_W4er5KIAU-SsobbsI.crl (hash: u2Rhzq8i0mreU0qGQOQnU3RnClPAzuVzM5ecU7FnlaE=)
2: yv-lKnLJ7FH3ebM94G5o9mRIoI0.roa (hash: NaXQYxgPfjl+IpTUFv/7Iibu/QutlXyZxHu9Cx6Aoy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:cf:7e:fb:d2:6d:eb:8a:62:58:54:ed:7d:82:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2
Validity
Not Before: Aug 4 10:00:48 2025 GMT
Not After : Aug 5 10:00:48 2025 GMT
Subject: CN=cacb509c39dcf1a558512786bef51231ea35d7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e7:b2:23:dc:dd:19:2a:5e:d5:cd:ef:c3:6f:
0d:7f:b1:f9:9c:dd:54:f7:4d:b0:93:e3:9f:d5:16:
c3:3c:c9:89:b6:4f:77:3c:8c:c2:10:09:9a:8e:49:
0d:6c:22:42:ab:49:e4:97:3d:8e:37:f8:e6:4e:eb:
56:ba:32:c4:fe:65:a7:a2:44:06:8e:a8:82:23:09:
2a:c1:a7:66:05:db:69:0d:47:f2:ac:e2:f1:ae:ef:
1f:9f:87:cb:37:f6:8c:a6:2d:0a:8b:fe:c4:b7:0e:
98:19:3a:92:68:a0:91:b5:a9:f3:93:47:05:63:f3:
bc:64:38:30:e0:41:45:f7:48:13:d2:b3:c2:65:c8:
24:11:62:85:c3:78:a2:9d:51:f1:b9:48:8a:8a:31:
de:16:35:34:80:46:f5:da:3c:b6:dd:7a:b0:2f:3f:
c1:d2:87:82:a2:e6:08:5a:e2:0c:fe:76:b2:05:fa:
9d:83:dc:db:68:52:db:50:b6:1e:77:7e:98:92:8d:
f8:b8:d3:df:0a:e5:9f:7b:50:04:89:8e:93:40:b0:
b9:42:51:75:8b:7f:21:83:52:71:24:8a:a1:aa:d6:
47:23:17:3c:02:53:56:12:53:3d:07:65:0f:d8:cd:
09:0c:c8:7a:17:b7:6a:57:e3:b0:60:ba:c6:02:c8:
22:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CB:50:9C:39:DC:F1:A5:58:51:27:86:BE:F5:12:31:EA:35:D7:D4
X509v3 Authority Key Identifier:
keyid:B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:12:ab:25:5f:f6:0e:d2:68:72:bd:d7:25:c4:09:b0:85:af:
93:25:0f:dc:56:13:74:61:4f:35:7d:43:6c:71:d4:24:a4:a4:
fb:b5:1b:87:39:c2:ce:be:e9:66:03:ab:b0:ea:71:80:a1:5b:
a7:d7:29:c2:d0:34:4a:72:39:9d:2e:6b:61:eb:d6:a8:f6:b8:
6d:a4:88:b3:ce:f0:da:f9:8b:9d:f7:c9:bf:9a:ed:57:a8:2f:
c5:02:0d:aa:ca:09:dd:41:4c:10:53:d8:b7:fe:3d:d0:72:0c:
e7:37:5f:0c:13:7c:84:ca:20:b3:ee:2d:45:f3:b7:9f:5a:bc:
67:69:41:ef:79:8a:43:d7:33:bc:76:95:1a:be:94:d8:1b:8e:
f6:9b:11:33:3b:c5:e5:e1:8d:af:48:21:d6:87:b6:98:6d:95:
6c:be:9a:ea:6b:33:e4:b5:99:49:31:5d:f5:4e:0e:c4:a7:85:
5b:c3:3a:08:2a:56:e5:0a:76:11:19:bc:92:4a:02:ca:c8:6d:
ea:b0:f7:69:93:57:ad:69:4b:9e:47:55:95:8e:96:f2:b3:05:
28:cd:d9:7e:8e:a5:3d:5b:a2:06:df:f4:29:b4:c4:bf:79:63:
2b:d5:42:6e:ff:13:59:0f:0d:af:24:9a:65:a2:bf:9f:98:ea:
04:06:c8:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0hs9++9Jt64piWFTtfYKHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MzcxMTU5NjFjNmFiZjViODdhYmU0YTIwMDUzZTRhY2Ex
YjZlYzIwHhcNMjUwODA0MTAwMDQ4WhcNMjUwODA1MTAwMDQ4WjAzMTEwLwYDVQQD
EyhjYWNiNTA5YzM5ZGNmMWE1NTg1MTI3ODZiZWY1MTIzMWVhMzVkN2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OeyI9zdGSpe1c3vw28Nf7H5nN1U
902wk+Of1RbDPMmJtk93PIzCEAmajkkNbCJCq0nklz2ON/jmTutWujLE/mWnokQG
jqiCIwkqwadmBdtpDUfyrOLxru8fn4fLN/aMpi0Ki/7Etw6YGTqSaKCRtanzk0cF
Y/O8ZDgw4EFF90gT0rPCZcgkEWKFw3iinVHxuUiKijHeFjU0gEb12jy23XqwLz/B
0oeCouYIWuIM/nayBfqdg9zbaFLbULYed36Yko34uNPfCuWfe1AEiY6TQLC5QlF1
i38hg1JxJIqhqtZHIxc8AlNWElM9B2UP2M0JDMh6F7dqV+OwYLrGAsgi1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrLUJw53PGlWFEnhr71EjHqNdfUMB8GA1UdIwQY
MBaAFLU3EVlhxqv1uHq+SiAFPkrKG27CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFRjUldXSEdxX1c0ZXI1S0lBVS1Tc29iYnNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8yNmNjNmEtNmYxNy00MGE5LWI5ODct
NmZjNzE3MTc1ZTU4LzEvdFRjUldXSEdxX1c0ZXI1S0lBVS1Tc29iYnNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8yNmNjNmEtNmYxNy00MGE5LWI5ODctNmZjNzE3MTc1ZTU4
LzEvdFRjUldXSEdxX1c0ZXI1S0lBVS1Tc29iYnNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORKrJV/2
DtJocr3XJcQJsIWvkyUP3FYTdGFPNX1DbHHUJKSk+7UbhznCzr7pZgOrsOpxgKFb
p9cpwtA0SnI5nS5rYevWqPa4baSIs87w2vmLnffJv5rtV6gvxQINqsoJ3UFMEFPY
t/490HIM5zdfDBN8hMogs+4tRfO3n1q8Z2lB73mKQ9czvHaVGr6U2BuO9psRMzvF
5eGNr0gh1oe2mG2VbL6a6msz5LWZSTFd9U4OxKeFW8M6CCpW5Qp2ERm8kkoCysht
6rD3aZNXrWlLnkdVlY6W8rMFKM3Zfo6lPVuiBt/0KbTEv3ljK9VCbv8TWQ8NrySa
ZaK/n5jqBAbIUQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:32:58 2025 by rpki-client