
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
File: 1tk74RT4LQJYkWqXjKy_sVu1hAo.mft (raw, json)
Hash identifier: uQ0Nkdg6ASUmK6Y3gwRp7Sk6CIlsBy50Jf2ej/g+mUA=
Subject key identifier: 76:C2:01:6E:4F:BF:8C:EE:DF:27:FF:28:4A:B8:A3:FB:98:7D:21:B8
Authority key identifier: D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
Certificate issuer: /CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Certificate serial: 0198D583E62256568C61AD425034473CAC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
Manifest number: 10BE
Signing time: Sat 23 Aug 2025 06:00:47 +0000
Manifest this update: Sat 23 Aug 2025 06:00:47 +0000
Manifest next update: Sun 24 Aug 2025 06:00:47 +0000
Files and hashes: 1: 1tk74RT4LQJYkWqXjKy_sVu1hAo.crl (hash: xjiVasMsUhaDx1wOhtv8FstgrWhqtnsSu3RhTs7oICU=)
2: EjxEvyFrbjIutBBjgjTn5G6eW5c.roa (hash: dmAYBtW0oaeyULNatDjSeKws5fd+ZFknimkAFUD4KMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e6:22:56:56:8c:61:ad:42:50:34:47:3c:ac:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Validity
Not Before: Aug 23 06:00:47 2025 GMT
Not After : Aug 24 06:00:47 2025 GMT
Subject: CN=76c2016e4fbf8ceedf27ff284ab8a3fb987d21b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:8c:6a:6a:5e:4c:36:56:d1:44:75:7a:5b:6d:
e9:a3:6b:eb:6c:c4:b2:88:25:c2:d1:28:a4:ee:12:
61:36:58:eb:b3:90:8f:b6:f8:40:67:4a:7a:1e:42:
4e:75:c2:ba:d7:ba:fd:c9:32:60:14:6e:46:ad:e2:
5d:4d:da:84:f0:e3:58:45:d6:7c:91:cf:4c:b5:7a:
1a:d0:5f:1f:4e:11:9f:23:dd:11:96:1c:24:22:95:
64:85:3b:89:d4:5e:7d:e4:22:87:08:bf:b2:48:f6:
ad:e8:b2:1a:ee:2c:2d:ce:65:b5:cd:99:11:9c:d0:
27:85:df:61:6c:78:04:d9:3e:7e:a8:53:4f:2c:27:
b3:f3:1f:c8:ef:3e:32:d1:13:79:44:b6:dc:79:c7:
1f:38:0e:7e:e4:9b:a8:51:eb:78:0b:6e:9c:73:24:
fc:29:88:fe:0f:de:5d:a3:72:26:b5:b5:6c:60:4d:
4c:a9:16:7e:4e:8e:9e:91:33:5b:a5:b5:42:91:49:
f1:e2:04:89:2a:26:6d:d9:70:90:3d:73:21:32:53:
eb:ca:60:ae:05:41:90:c8:dd:e0:1b:31:40:f0:6d:
c8:76:6a:fd:88:91:c5:a3:4a:0b:77:84:c8:5a:58:
a3:9e:b9:3a:9d:4e:bc:8e:c1:a8:dc:f2:ac:3e:b3:
1d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C2:01:6E:4F:BF:8C:EE:DF:27:FF:28:4A:B8:A3:FB:98:7D:21:B8
X509v3 Authority Key Identifier:
keyid:D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:55:e2:6a:72:09:50:7a:10:f6:66:8a:b2:73:17:1d:2f:b3:
ee:e2:87:69:6f:45:5f:a1:2b:36:66:e4:7d:63:20:44:ee:01:
1b:90:7b:0d:5c:d7:c1:23:c7:52:fa:0e:01:26:25:79:7e:94:
e3:3b:5c:b6:bc:e4:60:c7:8c:34:5d:bf:40:9a:35:f2:f3:bc:
83:88:26:1a:a5:30:18:d9:b7:75:ef:ff:d6:f9:c6:0f:6f:df:
8a:b9:c5:53:c0:f8:71:ee:a3:20:9c:94:e1:b0:94:15:2c:a3:
a7:d2:a8:2b:46:4d:b6:bb:5c:d4:da:28:cb:c0:f0:0c:18:9a:
79:17:8c:10:66:51:f1:ef:41:a5:ec:5d:3a:3a:17:7f:1a:1e:
05:44:b4:d2:30:d0:71:1f:f3:fb:5c:a2:db:71:89:f1:9c:b2:
b1:6f:f2:76:77:5b:84:6d:af:fc:7d:2d:dd:da:13:6a:1c:8f:
d3:d7:ac:d2:51:eb:b6:3f:9d:22:70:1b:06:aa:16:ca:80:37:
a7:db:cb:92:ca:15:bc:86:a2:5a:7b:f2:1c:91:78:19:fc:86:
f0:21:16:27:07:fc:d9:49:26:6a:c6:ed:11:b3:76:cd:4f:ec:
6d:ae:d7:aa:f5:43:cc:7d:c2:c1:48:49:d1:f1:d8:b5:fa:97:
cb:e4:48:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg+YiVlaMYa1CUDRHPKxnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZDkzYmUxMTRmODJkMDI1ODkxNmE5NzhjYWNiZmIxNWJi
NTg0MGEwHhcNMjUwODIzMDYwMDQ3WhcNMjUwODI0MDYwMDQ3WjAzMTEwLwYDVQQD
Eyg3NmMyMDE2ZTRmYmY4Y2VlZGYyN2ZmMjg0YWI4YTNmYjk4N2QyMWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Ixqal5MNlbRRHV6W23po2vrbMSy
iCXC0Sik7hJhNljrs5CPtvhAZ0p6HkJOdcK617r9yTJgFG5GreJdTdqE8ONYRdZ8
kc9MtXoa0F8fThGfI90RlhwkIpVkhTuJ1F595CKHCL+ySPat6LIa7iwtzmW1zZkR
nNAnhd9hbHgE2T5+qFNPLCez8x/I7z4y0RN5RLbceccfOA5+5JuoUet4C26ccyT8
KYj+D95do3ImtbVsYE1MqRZ+To6ekTNbpbVCkUnx4gSJKiZt2XCQPXMhMlPrymCu
BUGQyN3gGzFA8G3Idmr9iJHFo0oLd4TIWlijnrk6nU68jsGo3PKsPrMdmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbCAW5Pv4zu3yf/KEq4o/uYfSG4MB8GA1UdIwQY
MBaAFNbZO+EU+C0CWJFql4ysv7FbtYQKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXRrNzRSVDRMUUpZa1dxWGpLeV9zVnUxaEFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC84NDdjZjUtMjI1My00MjkwLWI3NDUt
YTE0NzQ0ZDE4YTU0LzEvMXRrNzRSVDRMUUpZa1dxWGpLeV9zVnUxaEFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC84NDdjZjUtMjI1My00MjkwLWI3NDUtYTE0NzQ0ZDE4YTU0
LzEvMXRrNzRSVDRMUUpZa1dxWGpLeV9zVnUxaEFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1XianIJ
UHoQ9maKsnMXHS+z7uKHaW9FX6ErNmbkfWMgRO4BG5B7DVzXwSPHUvoOASYleX6U
4ztctrzkYMeMNF2/QJo18vO8g4gmGqUwGNm3de//1vnGD2/firnFU8D4ce6jIJyU
4bCUFSyjp9KoK0ZNtrtc1Nooy8DwDBiaeReMEGZR8e9BpexdOjoXfxoeBUS00jDQ
cR/z+1yi23GJ8ZyysW/ydndbhG2v/H0t3doTahyP09es0lHrtj+dInAbBqoWyoA3
p9vLksoVvIaiWnvyHJF4GfyG8CEWJwf82UkmasbtEbN2zU/sba7XqvVDzH3CwUhJ
0fHYtfqXy+RICA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:20 2025 by rpki-client