Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
File: TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft (raw, json)
Hash identifier: VrrRNHWXlNlifuf1j04oLHJMharZc0lZoOquOLm2dY4=
Subject key identifier: BD:80:09:C5:6F:D3:AB:C2:E0:8D:9A:65:C6:A3:34:03:5B:84:2B:87
Authority key identifier: 4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
Certificate issuer: /CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Certificate serial: 0197DEF762BB7B89BBE44021312B9D3A22AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
Manifest number: 0A
Signing time: Sun 06 Jul 2025 09:00:43 +0000
Manifest this update: Sun 06 Jul 2025 09:00:43 +0000
Manifest next update: Mon 07 Jul 2025 09:00:43 +0000
Files and hashes: 1: TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl (hash: yNo/84aQGR68y6rWTUXZQwrPVUVvnWFf1qL3gZ4VOTU=)
2: uIJozNFoP5XfidjBCM0P31eTvUk.roa (hash: 82dJmEh9Xee5pf4NlP3/OL/7fNmKhnVpCwcSGBoqspI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 07:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:de:f7:62:bb:7b:89:bb:e4:40:21:31:2b:9d:3a:22:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Validity
Not Before: Jul 6 09:00:43 2025 GMT
Not After : Jul 7 09:00:43 2025 GMT
Subject: CN=bd8009c56fd3abc2e08d9a65c6a334035b842b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:73:be:15:e4:f4:c6:66:66:e7:b8:8d:a7:
2d:a4:29:64:07:a1:ea:29:75:f5:63:86:5d:c7:28:
c3:63:24:78:1b:f7:a8:e7:d2:c0:a9:d6:f5:9b:ba:
08:91:dc:a5:24:3b:c7:8e:1e:0d:ee:64:77:82:ef:
de:f5:88:6b:cc:df:52:0b:19:0a:6c:8a:a4:69:2f:
10:4f:e5:fa:ba:91:57:3f:0c:ea:19:69:6a:02:36:
06:18:e5:fb:79:d7:42:c0:2a:25:bd:35:60:e5:ec:
66:17:5a:c8:e6:00:09:80:9b:18:62:b7:b2:c8:4b:
d2:a6:de:1b:9a:5a:df:91:21:32:1f:44:52:81:87:
54:a9:0a:72:a4:eb:f0:6a:1f:3a:95:fe:86:73:e9:
9b:35:ef:c3:49:15:27:d1:72:b4:51:35:bd:1c:36:
fa:35:d6:2a:c2:f7:da:7f:4d:9f:6e:78:c8:4e:22:
2a:47:2b:5b:fc:20:86:8b:5f:16:07:5a:97:ee:cf:
99:86:f2:7c:2f:31:15:54:96:11:61:59:a1:83:22:
6e:ce:c5:8c:46:8f:aa:5a:a3:52:c7:4e:00:ca:83:
86:cf:dd:00:00:0f:59:f0:99:1c:20:a2:47:cf:ff:
07:54:50:23:22:59:4b:b9:1b:97:8b:ea:a8:05:48:
7e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:80:09:C5:6F:D3:AB:C2:E0:8D:9A:65:C6:A3:34:03:5B:84:2B:87
X509v3 Authority Key Identifier:
keyid:4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:94:d5:72:e2:06:81:3f:87:dd:69:3c:e2:4f:ba:54:df:98:
ce:63:fa:56:5a:8a:71:c4:91:b6:fc:27:ab:7e:ff:f3:0b:31:
da:6a:26:ce:8b:b6:df:34:e1:76:a5:1c:8a:e6:e1:42:d3:e9:
09:4f:f0:ea:02:6f:03:71:72:ca:56:76:3e:1a:cb:8f:28:68:
68:9b:e7:19:43:7c:02:56:8f:43:74:57:f0:ad:5a:04:88:f7:
35:cc:1f:e6:9e:06:1b:f4:a6:ef:3c:c9:5d:2f:e4:19:d8:7d:
67:bb:0b:22:4e:7d:cb:8d:32:31:ec:6f:aa:4d:47:68:ff:6c:
79:d9:9d:57:92:e7:4a:58:6e:5c:fe:f5:b5:67:ac:39:f6:d1:
db:e2:f5:69:a8:f9:99:20:cd:12:9e:b2:01:c6:ba:90:1e:f9:
88:93:6e:70:8b:6e:8d:5d:01:af:b8:c4:bd:34:1c:75:72:9d:
a3:3e:e4:64:22:2d:de:42:dc:fa:c1:8b:64:a4:c0:8a:d3:38:
f4:10:63:77:db:fb:4a:8f:e1:a8:35:37:90:e8:0c:74:a0:87:
ee:a4:e4:8c:30:b3:87:f2:27:37:98:a4:72:b6:95:e6:db:c9:
0f:69:30:4d:a9:9d:b5:11:af:52:68:ed:22:93:7d:b7:44:62:
79:81:34:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfe92K7e4m75EAhMSudOiKsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjM2M2NjVlNTFjYzRjYjVjYWYwNWI4Mjk0ODQzZTI3MzNh
MTNkZWUwHhcNMjUwNzA2MDkwMDQzWhcNMjUwNzA3MDkwMDQzWjAzMTEwLwYDVQQD
EyhiZDgwMDljNTZmZDNhYmMyZTA4ZDlhNjVjNmEzMzQwMzViODQyYjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDFzvhXk9MZmZue4jactpClkB6Hq
KXX1Y4ZdxyjDYyR4G/eo59LAqdb1m7oIkdylJDvHjh4N7mR3gu/e9YhrzN9SCxkK
bIqkaS8QT+X6upFXPwzqGWlqAjYGGOX7eddCwColvTVg5exmF1rI5gAJgJsYYrey
yEvSpt4bmlrfkSEyH0RSgYdUqQpypOvwah86lf6Gc+mbNe/DSRUn0XK0UTW9HDb6
NdYqwvfaf02fbnjITiIqRytb/CCGi18WB1qX7s+ZhvJ8LzEVVJYRYVmhgyJuzsWM
Ro+qWqNSx04AyoOGz90AAA9Z8JkcIKJHz/8HVFAjIllLuRuXi+qoBUh++wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2ACcVv06vC4I2aZcajNANbhCuHMB8GA1UdIwQY
MBaAFEw8Zl5RzEy1yvBbgpSEPiczoT3uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVER4bVhsSE1UTFhLOEZ1Q2xJUS1Kek9oUGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82YjY2YjQtMDY0Yy00MmVlLWE1ZWUt
MWE2NWI5MWJlZTU4LzEvVER4bVhsSE1UTFhLOEZ1Q2xJUS1Kek9oUGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS82YjY2YjQtMDY0Yy00MmVlLWE1ZWUtMWE2NWI5MWJlZTU4
LzEvVER4bVhsSE1UTFhLOEZ1Q2xJUS1Kek9oUGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpTVcuIG
gT+H3Wk84k+6VN+YzmP6VlqKccSRtvwnq37/8wsx2momzou23zThdqUciubhQtPp
CU/w6gJvA3FyylZ2PhrLjyhoaJvnGUN8AlaPQ3RX8K1aBIj3Ncwf5p4GG/Sm7zzJ
XS/kGdh9Z7sLIk59y40yMexvqk1HaP9sedmdV5LnSlhuXP71tWesOfbR2+L1aaj5
mSDNEp6yAca6kB75iJNucItujV0Br7jEvTQcdXKdoz7kZCIt3kLc+sGLZKTAitM4
9BBjd9v7So/hqDU3kOgMdKCH7qTkjDCzh/InN5ikcraV5tvJD2kwTamdtRGvUmjt
IpN9t0RieYE0ug==
-----END CERTIFICATE-----
Generated at Sun Jul 6 16:02:37 2025 by rpki-client