Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
File: TmROKYPFxQTYAPLQWCsYLrq_JIc.mft (raw, json)
Hash identifier: NFjvvl0P2Xd1N+5ngCrr/L/+lrqr7WT27zLKRNgwubM=
Subject key identifier: 0E:8E:5E:71:2A:47:1C:67:3E:FE:CB:66:CF:E8:0D:CC:4D:F5:F9:6F
Authority key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
Certificate issuer: /CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Certificate serial: 01987F7A6082ACA02F7F35D237D9A8E88671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
Manifest number: 08DF
Signing time: Wed 06 Aug 2025 13:03:03 +0000
Manifest this update: Wed 06 Aug 2025 13:03:03 +0000
Manifest next update: Thu 07 Aug 2025 13:03:03 +0000
Files and hashes: 1: TmROKYPFxQTYAPLQWCsYLrq_JIc.crl (hash: wtVtppgLOl6We1yBpXGCJqYGu2JhyrNnitCYB2ryP4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:7a:60:82:ac:a0:2f:7f:35:d2:37:d9:a8:e8:86:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Validity
Not Before: Aug 6 13:03:03 2025 GMT
Not After : Aug 7 13:03:03 2025 GMT
Subject: CN=0e8e5e712a471c673efecb66cfe80dcc4df5f96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a8:f2:9a:0e:38:08:5d:be:b2:4d:da:45:c2:
04:ab:38:67:77:b3:98:f5:2c:6d:b3:36:2d:5d:70:
7a:6a:35:a9:2e:aa:bf:2a:da:ec:56:07:3d:7d:05:
0f:d0:ee:22:62:7d:03:c0:8e:c6:26:22:37:13:d4:
37:14:e5:d8:df:1b:30:86:a0:9b:a6:f4:01:4d:2e:
3e:3d:fd:69:ad:a4:2d:8e:9b:05:76:8e:83:a1:ce:
b7:94:d0:28:56:71:12:a2:0b:96:ae:ba:5b:4a:ea:
1d:e9:a0:54:ac:2e:2e:e8:19:34:23:b4:c0:f2:4e:
a2:8b:51:ad:5a:72:1f:ca:13:d7:7b:36:68:eb:e3:
01:56:e4:ba:f7:e2:25:96:60:d8:bd:2c:c7:2b:33:
56:86:72:00:53:e6:c3:e4:f5:cd:7d:e7:44:3c:02:
7c:fe:1a:69:5f:6d:81:02:5e:69:47:77:71:92:74:
04:80:dd:21:b7:9d:81:d1:33:48:01:6b:59:ca:60:
42:5a:a4:4f:32:b0:6b:00:93:44:fe:7b:16:25:0a:
20:e9:e3:a1:77:27:f2:70:a6:70:d6:bd:53:9a:ce:
47:22:aa:32:44:c9:5b:3d:34:c0:e6:d1:83:76:a4:
af:04:de:89:1f:9f:64:ff:c2:33:4b:d5:84:7d:72:
8c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8E:5E:71:2A:47:1C:67:3E:FE:CB:66:CF:E8:0D:CC:4D:F5:F9:6F
X509v3 Authority Key Identifier:
keyid:4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:79:a0:8b:60:81:78:10:97:49:d5:e2:49:9f:dc:e5:20:88:
61:08:47:fe:ed:70:02:da:f6:e5:cc:46:c9:d3:78:f1:b7:fd:
02:cc:85:8a:74:fb:fe:af:3b:d4:02:a5:82:a4:10:0d:5d:70:
f4:48:4a:64:fc:d4:a0:9c:84:33:f1:1e:27:fb:25:46:0e:ce:
1c:ab:55:7d:72:8a:e1:4d:c0:09:4d:88:38:00:a2:c8:af:5b:
69:12:54:b0:30:d3:77:19:14:b7:0b:d6:d4:f4:be:e7:0b:30:
1f:e6:e2:8b:4e:ce:20:9f:f0:e3:6d:9e:9d:65:91:f0:43:39:
35:11:c2:e0:58:88:90:e8:44:4f:d3:3c:95:e6:0d:d7:a9:60:
af:7a:d1:be:f9:d5:90:89:ab:ee:75:91:b0:8e:44:11:17:60:
82:50:d5:9e:a8:97:0e:3c:1a:09:6d:04:d6:42:72:73:ca:43:
86:d9:56:fe:9c:b8:31:d0:25:28:5b:81:9f:c9:33:8f:44:8b:
3f:d7:ea:c3:a0:40:2e:a9:67:47:38:b6:01:17:a7:77:4f:91:
2c:8e:8f:7c:73:59:90:ce:3a:4b:7a:f6:08:77:3d:a9:68:c5:
7e:37:21:5a:fe:ff:17:61:7e:e7:2d:36:dd:b4:c9:a6:7c:59:
69:98:78:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/emCCrKAvfzXSN9mo6IZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNjQ0ZTI5ODNjNWM1MDRkODAwZjJkMDU4MmIxODJlYmFi
ZjI0ODcwHhcNMjUwODA2MTMwMzAzWhcNMjUwODA3MTMwMzAzWjAzMTEwLwYDVQQD
EygwZThlNWU3MTJhNDcxYzY3M2VmZWNiNjZjZmU4MGRjYzRkZjVmOTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnajymg44CF2+sk3aRcIEqzhnd7OY
9SxtszYtXXB6ajWpLqq/KtrsVgc9fQUP0O4iYn0DwI7GJiI3E9Q3FOXY3xswhqCb
pvQBTS4+Pf1praQtjpsFdo6Doc63lNAoVnESoguWrrpbSuod6aBUrC4u6Bk0I7TA
8k6ii1GtWnIfyhPXezZo6+MBVuS69+IllmDYvSzHKzNWhnIAU+bD5PXNfedEPAJ8
/hppX22BAl5pR3dxknQEgN0ht52B0TNIAWtZymBCWqRPMrBrAJNE/nsWJQog6eOh
dyfycKZw1r1Tms5HIqoyRMlbPTTA5tGDdqSvBN6JH59k/8IzS9WEfXKMnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6OXnEqRxxnPv7LZs/oDcxN9flvMB8GA1UdIwQY
MBaAFE5kTimDxcUE2ADy0FgrGC66vySHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG1ST0tZUEZ4UVRZQVBMUVdDc1lMcnFfSkljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jMGU2YTItOGIyMC00NDgwLWE4YWIt
YjM4OGM1NzcwZTA0LzEvVG1ST0tZUEZ4UVRZQVBMUVdDc1lMcnFfSkljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9jMGU2YTItOGIyMC00NDgwLWE4YWItYjM4OGM1NzcwZTA0
LzEvVG1ST0tZUEZ4UVRZQVBMUVdDc1lMcnFfSkljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHmgi2CB
eBCXSdXiSZ/c5SCIYQhH/u1wAtr25cxGydN48bf9AsyFinT7/q871AKlgqQQDV1w
9EhKZPzUoJyEM/EeJ/slRg7OHKtVfXKK4U3ACU2IOACiyK9baRJUsDDTdxkUtwvW
1PS+5wswH+bii07OIJ/w422enWWR8EM5NRHC4FiIkOhET9M8leYN16lgr3rRvvnV
kImr7nWRsI5EERdgglDVnqiXDjwaCW0E1kJyc8pDhtlW/py4MdAlKFuBn8kzj0SL
P9fqw6BALqlnRzi2ARend0+RLI6PfHNZkM46S3r2CHc9qWjFfjchWv7/F2F+5y02
3bTJpnxZaZh41w==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:01:24 2025 by rpki-client