Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
File: a-tglLyrS9Ox9vVsUYK6EiDiK28.mft (raw, json)
Hash identifier: urdLKiG9+6TD6J9J3DnE0n7jW/7CfLgj+j8j/lcDdr8=
Subject key identifier: 88:94:73:46:4D:1A:AE:C5:7C:BB:E6:EA:A3:D6:A0:50:15:80:BA:8E
Authority key identifier: 6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
Certificate issuer: /CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
Certificate serial: 0198D583D352DEA1E5C8E0FF21B0C49B2BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
Manifest number: 04C8
Signing time: Sat 23 Aug 2025 06:00:42 +0000
Manifest this update: Sat 23 Aug 2025 06:00:42 +0000
Manifest next update: Sun 24 Aug 2025 06:00:42 +0000
Files and hashes: 1: a-tglLyrS9Ox9vVsUYK6EiDiK28.crl (hash: 340ZtkSVRldb22YWzguXELU2hUUe9YF8D1wR0RApv/Y=)
2: br9nNW8HTMSPThu0IYs9YJPit9M.roa (hash: +GZtKTMjwkIHJlC7o9X+rvG+Xi3NBXRyc3GslA3d0UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d3:52:de:a1:e5:c8:e0:ff:21:b0:c4:9b:2b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
Validity
Not Before: Aug 23 06:00:42 2025 GMT
Not After : Aug 24 06:00:42 2025 GMT
Subject: CN=889473464d1aaec57cbbe6eaa3d6a0501580ba8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:98:ff:7e:96:ef:b3:b8:b2:6b:b8:51:d5:4c:
57:60:b3:d8:0d:cf:87:7c:e7:f9:4a:73:ee:f6:f4:
02:24:32:fa:49:f6:33:d0:24:18:10:4a:17:98:72:
96:a5:c4:0b:6f:a8:b8:2e:9f:7f:26:40:d5:c1:fc:
fc:c4:33:e9:08:b4:c6:13:6a:07:8f:53:a1:a7:07:
40:88:2b:92:dc:0d:01:22:77:ba:5b:43:eb:4b:2b:
63:4e:f9:29:16:1c:52:12:a0:62:b3:13:df:6b:8f:
b3:e9:99:22:a4:60:49:ae:08:52:e3:d0:a3:c3:94:
7f:09:00:cf:a7:31:80:b4:0e:4a:f1:fe:a2:88:83:
e5:ac:ab:3b:ad:de:76:f2:b5:1e:04:ce:8c:a0:0a:
a7:c2:a5:e1:62:d5:2a:dc:c6:43:7e:5b:d4:40:c0:
90:f6:eb:e9:63:e3:fd:7e:0d:eb:a0:18:40:ad:1e:
ca:b1:21:32:a9:de:09:0e:6f:e9:14:ce:25:b5:39:
9e:3e:b6:72:0f:44:0a:d7:3e:9f:17:85:48:15:c8:
11:53:c3:97:de:67:37:0a:16:89:a4:a9:dd:a5:b5:
8f:a9:ca:86:e3:96:12:04:5c:5c:da:0d:71:59:1d:
f0:62:66:82:f2:34:80:85:4e:5a:3c:35:06:9c:8d:
ea:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:94:73:46:4D:1A:AE:C5:7C:BB:E6:EA:A3:D6:A0:50:15:80:BA:8E
X509v3 Authority Key Identifier:
keyid:6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:10:40:25:43:8a:3c:73:b9:3b:61:ba:e3:b9:5e:a6:3b:dd:
99:ce:12:43:a6:ab:86:77:ed:9a:c8:33:e2:74:aa:17:10:1e:
21:46:3c:23:93:09:42:a5:eb:34:ab:05:35:e0:df:5d:12:8c:
b2:0d:59:72:cd:c2:11:c7:09:04:ed:76:b1:0e:30:91:b8:fe:
b4:84:8b:97:6c:44:52:de:e2:aa:02:a1:39:ba:c7:89:ff:81:
97:b8:21:c1:ea:b6:1d:16:76:ef:46:19:54:6c:ba:9b:c0:3c:
35:2d:17:45:31:f4:28:73:1a:b8:ed:82:32:f4:b4:64:88:50:
74:0d:58:47:89:e3:8e:3f:eb:5c:3a:1c:9e:8b:2b:ae:84:9a:
2d:d9:bd:02:f8:15:4c:1e:0c:60:a2:87:8f:d2:8e:91:e1:6b:
1b:59:7b:c9:83:9f:e1:0a:f6:3b:18:e2:2c:2a:39:23:73:b4:
35:0b:91:df:dd:e6:b1:85:a6:66:cb:46:99:71:6c:16:9a:f2:
52:34:36:cc:10:fd:91:76:c2:eb:5e:03:1b:0f:0f:79:ef:60:
6c:a1:dc:48:91:3a:b6:93:b3:9d:b8:34:e6:99:67:35:56:13:
77:15:c1:8c:a0:c2:4a:43:be:aa:b8:8f:cd:82:c3:0e:d3:25:
e8:1b:d8:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg9NS3qHlyOD/IbDEmyv8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZWI2MDk0YmNhYjRiZDNiMWY2ZjU2YzUxODJiYTEyMjBl
MjJiNmYwHhcNMjUwODIzMDYwMDQyWhcNMjUwODI0MDYwMDQyWjAzMTEwLwYDVQQD
Eyg4ODk0NzM0NjRkMWFhZWM1N2NiYmU2ZWFhM2Q2YTA1MDE1ODBiYThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZj/fpbvs7iya7hR1UxXYLPYDc+H
fOf5SnPu9vQCJDL6SfYz0CQYEEoXmHKWpcQLb6i4Lp9/JkDVwfz8xDPpCLTGE2oH
j1OhpwdAiCuS3A0BIne6W0PrSytjTvkpFhxSEqBisxPfa4+z6ZkipGBJrghS49Cj
w5R/CQDPpzGAtA5K8f6iiIPlrKs7rd528rUeBM6MoAqnwqXhYtUq3MZDflvUQMCQ
9uvpY+P9fg3roBhArR7KsSEyqd4JDm/pFM4ltTmePrZyD0QK1z6fF4VIFcgRU8OX
3mc3ChaJpKndpbWPqcqG45YSBFxc2g1xWR3wYmaC8jSAhU5aPDUGnI3qPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiUc0ZNGq7FfLvm6qPWoFAVgLqOMB8GA1UdIwQY
MBaAFGvrYJS8q0vTsfb1bFGCuhIg4itvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iYTQ2NDAtMTYzZS00NjVmLTkwZjkt
ZWE1ODdmZDY1OGIyLzEvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iYTQ2NDAtMTYzZS00NjVmLTkwZjktZWE1ODdmZDY1OGIy
LzEvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBBAJUOK
PHO5O2G647lepjvdmc4SQ6arhnftmsgz4nSqFxAeIUY8I5MJQqXrNKsFNeDfXRKM
sg1Zcs3CEccJBO12sQ4wkbj+tISLl2xEUt7iqgKhObrHif+Bl7ghweq2HRZ270YZ
VGy6m8A8NS0XRTH0KHMauO2CMvS0ZIhQdA1YR4njjj/rXDocnosrroSaLdm9AvgV
TB4MYKKHj9KOkeFrG1l7yYOf4Qr2OxjiLCo5I3O0NQuR393msYWmZstGmXFsFpry
UjQ2zBD9kXbC614DGw8Pee9gbKHcSJE6tpOznbg05plnNVYTdxXBjKDCSkO+qriP
zYLDDtMl6BvYjw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:28:04 2025 by rpki-client