Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
File: Ty_D6GA1oLjpOA_7I_I_V0MLess.mft (raw, json)
Hash identifier: aFQHgx/qDzo2xVQXW10u3tjnRGAS0ZDcPkO2IZafFWI=
Subject key identifier: 21:A2:06:83:B0:0A:8D:D6:83:A0:C4:CE:AB:91:87:DD:5B:75:0A:5A
Authority key identifier: 4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB
Certificate issuer: /CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb
Certificate serial: 019874F4F7D42223E6AF9439A6088D12329B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
Manifest number: 0E87
Signing time: Mon 04 Aug 2025 12:01:07 +0000
Manifest this update: Mon 04 Aug 2025 12:01:07 +0000
Manifest next update: Tue 05 Aug 2025 12:01:07 +0000
Files and hashes: 1: Ty_D6GA1oLjpOA_7I_I_V0MLess.crl (hash: hi33+PKVE5LGv/oGrCnAx8g8McyP2nYmiJ4r2Yklgjg=)
2: WjR-M02WnGrf1hvkkNo0bZEQvnQ.roa (hash: CW8wqMfi/RZSfPuGRw3DqaK3c0hn412Beo4u95KUkQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:f7:d4:22:23:e6:af:94:39:a6:08:8d:12:32:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb
Validity
Not Before: Aug 4 12:01:07 2025 GMT
Not After : Aug 5 12:01:07 2025 GMT
Subject: CN=21a20683b00a8dd683a0c4ceab9187dd5b750a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:60:f7:96:c0:3a:26:f6:38:90:98:cf:94:
28:48:22:23:55:c4:c7:f2:09:13:70:da:ae:ff:9f:
8a:8d:bf:4f:87:37:6f:db:18:87:52:a3:cb:1e:a8:
08:45:c6:13:9f:2d:f6:17:b1:7e:e3:f6:33:ab:e6:
bb:78:dd:32:f7:b9:9b:aa:05:38:e1:fb:fd:be:73:
6f:41:0c:d0:44:3b:b1:15:bf:b0:16:71:12:d1:5d:
d5:a7:00:8e:c6:ff:79:eb:d8:af:b8:66:30:d5:91:
d8:43:8b:28:1f:67:46:f6:f9:d7:3a:4c:c9:bb:29:
12:87:d1:46:ab:16:a0:7e:82:58:8a:1d:ea:bd:0f:
b8:0b:43:94:c8:9c:64:0e:fc:ab:a5:41:62:57:d5:
a3:12:fb:8d:df:05:15:13:00:69:c8:67:df:aa:ae:
2c:d8:e4:bd:2b:d6:a5:dc:b3:a8:31:b7:23:3a:e4:
ea:1b:93:25:47:5c:d2:81:8c:f4:7b:86:98:d2:9c:
ef:3a:e7:ef:79:0e:12:ee:cc:4b:3d:12:57:87:9a:
73:62:4c:4b:e9:9d:c6:ef:57:50:df:5a:4a:92:da:
47:e6:69:41:e8:67:b2:89:ae:5b:4b:4d:4c:d3:2b:
96:53:05:42:de:b4:f3:fa:c8:2b:9f:c9:0f:43:c6:
5a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A2:06:83:B0:0A:8D:D6:83:A0:C4:CE:AB:91:87:DD:5B:75:0A:5A
X509v3 Authority Key Identifier:
keyid:4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ca:87:e7:7e:d9:fe:2e:bd:d6:a1:18:84:16:e2:c6:9e:c6:
cb:31:e4:3a:4c:1a:da:91:d5:1f:35:7b:d0:d9:2c:d6:90:fd:
37:f6:45:ba:db:84:f6:08:38:db:94:13:15:d6:c7:24:c8:ed:
ed:7f:f7:63:1e:9d:e5:76:9b:da:35:b9:2c:d6:d4:b5:76:49:
2c:23:df:24:08:b9:e9:d4:af:e8:71:72:be:63:aa:71:19:aa:
67:72:3a:33:b6:d5:69:46:68:31:c5:ce:b6:0f:42:d9:c7:dd:
75:79:45:76:7b:8c:f0:22:35:47:f8:21:08:ec:22:5a:ed:4e:
ce:e6:48:73:ee:b6:a0:50:9f:a2:71:90:14:f4:99:1d:ba:49:
f6:e2:77:e1:14:56:7a:a3:5f:85:22:d2:24:f1:69:a9:b2:1b:
fe:1a:ea:b3:c8:5b:29:5b:0d:3f:80:80:46:45:c9:16:25:1f:
26:cd:f6:25:72:f9:32:f3:92:b0:ef:39:dd:f3:c8:41:0d:ae:
36:87:b8:a6:01:c9:b2:91:3c:9c:aa:9b:0b:95:57:14:a8:ee:
ce:01:be:5f:aa:e0:4d:b9:63:26:f7:8d:5d:1f:6f:43:f3:7d:
fa:97:dc:c0:15:0a:aa:87:98:3e:11:8b:6d:4c:cb:6d:cb:0f:
0b:d2:aa:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh09PfUIiPmr5Q5pgiNEjKbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMmZjM2U4NjAzNWEwYjhlOTM4MGZmYjIzZjIzZjU3NDMw
YjdhY2IwHhcNMjUwODA0MTIwMTA3WhcNMjUwODA1MTIwMTA3WjAzMTEwLwYDVQQD
EygyMWEyMDY4M2IwMGE4ZGQ2ODNhMGM0Y2VhYjkxODdkZDViNzUwYTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0k5g95bAOib2OJCYz5QoSCIjVcTH
8gkTcNqu/5+Kjb9Phzdv2xiHUqPLHqgIRcYTny32F7F+4/Yzq+a7eN0y97mbqgU4
4fv9vnNvQQzQRDuxFb+wFnES0V3VpwCOxv9569ivuGYw1ZHYQ4soH2dG9vnXOkzJ
uykSh9FGqxagfoJYih3qvQ+4C0OUyJxkDvyrpUFiV9WjEvuN3wUVEwBpyGffqq4s
2OS9K9al3LOoMbcjOuTqG5MlR1zSgYz0e4aY0pzvOufveQ4S7sxLPRJXh5pzYkxL
6Z3G71dQ31pKktpH5mlB6Geyia5bS01M0yuWUwVC3rTz+sgrn8kPQ8ZaJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGiBoOwCo3Wg6DEzquRh91bdQpaMB8GA1UdIwQY
MBaAFE8vw+hgNaC46TgP+yPyP1dDC3rLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHlfRDZHQTFvTGpwT0FfN0lfSV9WME1MZXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8xZTM2ZTgtOGZhNi00YzE3LWEyNDAt
MzJlNTdiYzU0NzRiLzEvVHlfRDZHQTFvTGpwT0FfN0lfSV9WME1MZXNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8xZTM2ZTgtOGZhNi00YzE3LWEyNDAtMzJlNTdiYzU0NzRi
LzEvVHlfRDZHQTFvTGpwT0FfN0lfSV9WME1MZXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXcqH537Z
/i691qEYhBbixp7GyzHkOkwa2pHVHzV70Nks1pD9N/ZFutuE9gg425QTFdbHJMjt
7X/3Yx6d5Xab2jW5LNbUtXZJLCPfJAi56dSv6HFyvmOqcRmqZ3I6M7bVaUZoMcXO
tg9C2cfddXlFdnuM8CI1R/ghCOwiWu1OzuZIc+62oFCfonGQFPSZHbpJ9uJ34RRW
eqNfhSLSJPFpqbIb/hrqs8hbKVsNP4CARkXJFiUfJs32JXL5MvOSsO853fPIQQ2u
Noe4pgHJspE8nKqbC5VXFKjuzgG+X6rgTbljJveNXR9vQ/N9+pfcwBUKqoeYPhGL
bUzLbcsPC9KqDg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:24:23 2025 by rpki-client