Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
File: tu1iBVpRkcAuxREulRgaiawGDOs.mft (raw, json)
Hash identifier: U9MWMJuesx72WxjIoP4MhXfExRtPwYUIzP206I+ISds=
Subject key identifier: 92:E7:C7:8A:71:50:98:6B:D7:BB:4E:58:69:98:BC:F5:65:69:04:78
Authority key identifier: B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB
Certificate issuer: /CN=b6ed62055a5191c02ec5112e95181a89ac060ceb
Certificate serial: 0197B6D7A55F827398BFDFC16C6158136EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
Manifest number: 0B0F
Signing time: Sat 28 Jun 2025 14:01:15 +0000
Manifest this update: Sat 28 Jun 2025 14:01:15 +0000
Manifest next update: Sun 29 Jun 2025 14:01:15 +0000
Files and hashes: 1: iOo8WZeBs16BOwEjC7IsPMOtPO0.roa (hash: FC5R1Hrtvnbfsyec/XOyQavDbuFW5mY0wSOTHI+QutE=)
2: tu1iBVpRkcAuxREulRgaiawGDOs.crl (hash: PDcxsI2R1uwIxOLjwKtVWmmUG9FAcp85eHgUzxYh/Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a5:5f:82:73:98:bf:df:c1:6c:61:58:13:6e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed62055a5191c02ec5112e95181a89ac060ceb
Validity
Not Before: Jun 28 14:01:15 2025 GMT
Not After : Jun 29 14:01:15 2025 GMT
Subject: CN=92e7c78a7150986bd7bb4e586998bcf565690478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:19:e9:fa:91:29:21:e9:f2:47:7e:2c:a7:
89:00:7e:b8:33:de:0a:e6:41:da:d8:99:f7:74:f5:
1c:1d:d5:49:4f:7c:9d:8a:11:08:d4:2f:66:b5:f3:
49:25:05:6f:a1:b0:40:2f:03:ae:f3:47:9a:3a:29:
ec:dd:26:2b:12:27:74:e5:5a:e5:d4:8c:85:18:b5:
9c:14:e3:a4:24:04:e5:19:87:eb:de:fd:f2:ee:78:
24:a3:b0:a3:16:5e:a7:95:40:be:4d:00:16:68:76:
c1:6a:44:41:8f:ca:f1:8c:e3:0f:44:ed:04:4a:e5:
06:ab:b8:6e:b0:12:9d:b1:39:ae:37:0f:53:a7:78:
24:06:0f:b6:9e:2c:86:a5:e4:aa:9c:56:c4:72:51:
1d:ea:91:85:d3:5d:f3:02:de:eb:84:c7:ca:3f:0b:
c0:22:0e:0b:f9:38:54:46:61:5b:37:72:e1:dc:92:
3f:d9:13:b2:b9:e6:d6:ec:7e:77:14:cc:3d:79:d3:
47:03:df:88:bc:33:f5:9b:bb:0c:32:39:91:75:4d:
e3:03:94:2b:68:a9:e1:9c:f8:c5:59:bb:9b:f6:71:
75:75:ce:61:10:46:1d:ce:59:3d:f5:d1:da:19:be:
02:38:5e:93:a6:12:02:10:b4:c8:0b:1c:5c:70:04:
a5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E7:C7:8A:71:50:98:6B:D7:BB:4E:58:69:98:BC:F5:65:69:04:78
X509v3 Authority Key Identifier:
keyid:B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:dd:e9:bd:80:ad:1a:79:d2:c1:40:9c:6f:6f:7e:7e:81:9a:
01:02:3d:80:6c:d5:3d:26:af:88:3a:b8:5d:60:40:19:4b:4c:
9b:7d:2b:cc:71:38:e0:04:80:20:d3:0b:38:f5:c3:47:37:11:
f0:e3:01:b1:1e:d8:1d:cb:19:6d:e1:e8:50:e7:4c:6b:e5:01:
97:1a:b4:71:57:bb:5f:91:8b:e0:18:24:fe:5d:8e:86:66:7c:
84:42:0f:12:bf:74:e9:71:d4:71:e6:95:f7:15:c4:23:e8:e0:
75:b0:d6:af:d8:f2:d0:30:33:96:26:d7:e0:14:b9:e1:9a:51:
9f:ca:db:70:cf:47:98:67:42:e3:ff:5f:57:02:da:7b:d3:88:
fa:a3:30:5c:c7:66:ac:7b:f8:ca:40:cc:b0:93:54:fe:ce:be:
97:da:8d:52:7e:61:1f:f0:de:b4:4c:68:40:cd:81:9d:58:60:
66:29:36:d8:5a:7c:12:34:34:7e:f7:8b:58:36:d0:1e:62:a8:
5f:48:27:7d:91:76:94:81:75:82:b7:24:9b:86:11:dd:a9:42:
66:0d:6d:9b:16:4c:0f:8f:26:5d:09:12:bf:5a:94:59:58:82:
8c:93:e8:3e:6f:46:f9:ad:e2:98:b1:5a:f8:36:a7:e0:e6:25:
81:af:5b:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe216VfgnOYv9/BbGFYE27GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZWQ2MjA1NWE1MTkxYzAyZWM1MTEyZTk1MTgxYTg5YWMw
NjBjZWIwHhcNMjUwNjI4MTQwMTE1WhcNMjUwNjI5MTQwMTE1WjAzMTEwLwYDVQQD
Eyg5MmU3Yzc4YTcxNTA5ODZiZDdiYjRlNTg2OTk4YmNmNTY1NjkwNDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw30Z6fqRKSHp8kd+LKeJAH64M94K
5kHa2Jn3dPUcHdVJT3ydihEI1C9mtfNJJQVvobBALwOu80eaOins3SYrEid05Vrl
1IyFGLWcFOOkJATlGYfr3v3y7ngko7CjFl6nlUC+TQAWaHbBakRBj8rxjOMPRO0E
SuUGq7husBKdsTmuNw9Tp3gkBg+2niyGpeSqnFbEclEd6pGF013zAt7rhMfKPwvA
Ig4L+ThURmFbN3Lh3JI/2ROyuebW7H53FMw9edNHA9+IvDP1m7sMMjmRdU3jA5Qr
aKnhnPjFWbub9nF1dc5hEEYdzlk99dHaGb4COF6TphICELTICxxccASlKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLnx4pxUJhr17tOWGmYvPVlaQR4MB8GA1UdIwQY
MBaAFLbtYgVaUZHALsURLpUYGomsBgzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHUxaUJWcFJrY0F1eFJFdWxSZ2FpYXdHRE9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kYzEzYzEtZGU1Ni00NDlmLTljMjkt
YzgxMjY2YjdjNDllLzEvdHUxaUJWcFJrY0F1eFJFdWxSZ2FpYXdHRE9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9kYzEzYzEtZGU1Ni00NDlmLTljMjktYzgxMjY2YjdjNDll
LzEvdHUxaUJWcFJrY0F1eFJFdWxSZ2FpYXdHRE9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGt3pvYCt
GnnSwUCcb29+foGaAQI9gGzVPSaviDq4XWBAGUtMm30rzHE44ASAINMLOPXDRzcR
8OMBsR7YHcsZbeHoUOdMa+UBlxq0cVe7X5GL4Bgk/l2OhmZ8hEIPEr906XHUceaV
9xXEI+jgdbDWr9jy0DAzlibX4BS54ZpRn8rbcM9HmGdC4/9fVwLae9OI+qMwXMdm
rHv4ykDMsJNU/s6+l9qNUn5hH/DetExoQM2BnVhgZik22Fp8EjQ0fveLWDbQHmKo
X0gnfZF2lIF1grckm4YR3alCZg1tmxZMD48mXQkSv1qUWViCjJPoPm9G+a3imLFa
+Dan4OYlga9bkA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:04:00 2025 by rpki-client