Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
File: tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft (raw, json)
Hash identifier: So413/EX/8rO6wLIsPgmXV+LqcMWWImwP9VhMAe5bC0=
Subject key identifier: F1:F6:D8:D1:D7:56:B4:F9:F8:8A:D0:3D:41:F0:9A:AB:88:78:B9:81
Authority key identifier: B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45
Certificate issuer: /CN=b5b537918dd90251eb36538e7181ce933c7ef845
Certificate serial: 0197C493170768EF66CF9EBFD794CF62D5FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
Manifest number: 15BE
Signing time: Tue 01 Jul 2025 06:01:03 +0000
Manifest this update: Tue 01 Jul 2025 06:01:03 +0000
Manifest next update: Wed 02 Jul 2025 06:01:03 +0000
Files and hashes: 1: tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl (hash: 2DR1qsLqQW10hT4puPvE4NexTOVSp1MmzM+kIsORgw0=)
2: y75cXyuDLpcYexdmkwYwYU3Mg-w.roa (hash: x/UMSX0QI4HQrUWQqpp/rIJY0lp7ztidnsmz2QLBnXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:93:17:07:68:ef:66:cf:9e:bf:d7:94:cf:62:d5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b537918dd90251eb36538e7181ce933c7ef845
Validity
Not Before: Jul 1 06:01:03 2025 GMT
Not After : Jul 2 06:01:03 2025 GMT
Subject: CN=f1f6d8d1d756b4f9f88ad03d41f09aab8878b981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:eb:52:e0:57:bc:fc:54:c7:9d:e6:9d:b6:39:
08:73:5e:84:c3:52:e0:5b:92:5c:f8:e9:fa:8b:59:
fe:e3:d3:5c:de:1d:96:78:2d:85:93:d4:68:5e:de:
68:78:5e:de:d1:d0:97:23:e6:e4:e9:40:99:84:5f:
da:11:35:b2:de:93:e3:a7:bd:4d:f7:af:86:58:15:
10:0f:95:e3:a9:fa:5f:67:b8:2b:b4:fe:aa:48:20:
be:c6:e9:b6:1d:3c:8b:87:a2:f7:bd:05:05:88:36:
85:44:dc:fd:eb:b4:06:30:b9:ec:03:9e:2d:c7:c4:
b0:5c:9d:37:fe:b5:e2:07:81:0e:24:59:87:34:ae:
ed:18:70:b2:e7:82:cc:00:da:c0:43:e8:ca:58:a0:
90:78:9c:e0:10:c4:72:a8:21:1f:bc:46:fa:ed:32:
91:a9:e6:d7:52:f3:67:0e:0f:5d:88:53:a8:c9:22:
1c:f1:ca:2c:a1:fe:9d:20:9b:19:5c:04:30:6d:00:
61:21:d9:88:7a:75:92:d7:30:12:9b:16:77:c2:c4:
02:e1:45:05:76:6a:5a:59:c2:c8:dc:d5:65:47:74:
e2:cc:19:2f:f2:12:ba:25:b1:36:72:e8:cc:69:12:
a8:73:57:16:a9:ef:be:55:fb:76:39:c5:26:8a:8d:
39:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F6:D8:D1:D7:56:B4:F9:F8:8A:D0:3D:41:F0:9A:AB:88:78:B9:81
X509v3 Authority Key Identifier:
keyid:B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a6:51:4c:79:0d:a1:2c:2e:e7:93:84:b6:f1:c2:20:1a:1f:
9d:93:ef:d7:01:8f:c2:9e:9d:52:41:a5:18:36:8a:84:47:85:
1c:2d:5d:48:91:ae:eb:c2:56:da:ee:11:3a:3c:9c:f7:86:70:
78:15:54:64:cc:63:cc:58:a8:c4:f3:5a:3b:6a:63:46:c6:f3:
54:43:82:a6:c2:4c:d5:2c:6b:88:b5:3a:87:f5:8c:fe:b2:ec:
a0:84:e8:fa:18:8e:04:56:ad:ac:72:35:5d:18:a2:f1:57:f4:
aa:6e:02:78:79:81:ee:16:0d:45:40:16:ef:4c:2d:5c:30:53:
40:cc:77:97:3d:5d:da:35:b9:03:44:c6:f7:bd:f4:cf:1c:cc:
47:8b:c9:28:c7:08:d9:44:bd:d1:f2:9e:bf:93:ef:73:2a:8c:
3b:97:0d:db:39:a5:1c:07:06:c0:7e:41:1b:3b:ae:39:ce:14:
37:a7:bb:5c:8b:de:c6:76:ec:3b:ed:20:5b:45:d7:f9:3d:3e:
49:5c:9d:f7:73:75:af:68:f9:93:88:82:91:89:27:96:8d:77:
ad:46:ac:a2:f2:84:39:a3:bc:69:a6:9f:43:fd:7c:73:f3:0a:
d4:2c:0b:00:09:67:42:a8:28:b5:08:b9:92:3d:a7:76:84:f6:
bd:14:f4:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEkxcHaO9mz56/15TPYtX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YjUzNzkxOGRkOTAyNTFlYjM2NTM4ZTcxODFjZTkzM2M3
ZWY4NDUwHhcNMjUwNzAxMDYwMTAzWhcNMjUwNzAyMDYwMTAzWjAzMTEwLwYDVQQD
EyhmMWY2ZDhkMWQ3NTZiNGY5Zjg4YWQwM2Q0MWYwOWFhYjg4NzhiOTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+tS4Fe8/FTHneadtjkIc16Ew1Lg
W5Jc+On6i1n+49Nc3h2WeC2Fk9RoXt5oeF7e0dCXI+bk6UCZhF/aETWy3pPjp71N
96+GWBUQD5XjqfpfZ7grtP6qSCC+xum2HTyLh6L3vQUFiDaFRNz967QGMLnsA54t
x8SwXJ03/rXiB4EOJFmHNK7tGHCy54LMANrAQ+jKWKCQeJzgEMRyqCEfvEb67TKR
qebXUvNnDg9diFOoySIc8cosof6dIJsZXAQwbQBhIdmIenWS1zASmxZ3wsQC4UUF
dmpaWcLI3NVlR3TizBkv8hK6JbE2cujMaRKoc1cWqe++Vft2OcUmio05qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPH22NHXVrT5+IrQPUHwmquIeLmBMB8GA1UdIwQY
MBaAFLW1N5GN2QJR6zZTjnGBzpM8fvhFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGJVM2tZM1pBbEhyTmxPT2NZSE9rengtLUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83NDg2ZmQtM2Y4MS00NTQwLWFhYWEt
MGIzZWQyNWY2NmU5LzEvdGJVM2tZM1pBbEhyTmxPT2NZSE9rengtLUVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83NDg2ZmQtM2Y4MS00NTQwLWFhYWEtMGIzZWQyNWY2NmU5
LzEvdGJVM2tZM1pBbEhyTmxPT2NZSE9rengtLUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdaZRTHkN
oSwu55OEtvHCIBofnZPv1wGPwp6dUkGlGDaKhEeFHC1dSJGu68JW2u4ROjyc94Zw
eBVUZMxjzFioxPNaO2pjRsbzVEOCpsJM1SxriLU6h/WM/rLsoITo+hiOBFatrHI1
XRii8Vf0qm4CeHmB7hYNRUAW70wtXDBTQMx3lz1d2jW5A0TG9730zxzMR4vJKMcI
2US90fKev5PvcyqMO5cN2zmlHAcGwH5BGzuuOc4UN6e7XIvexnbsO+0gW0XX+T0+
SVyd93N1r2j5k4iCkYknlo13rUasovKEOaO8aaafQ/18c/MK1CwLAAlnQqgotQi5
kj2ndoT2vRT0Lw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 11:29:50 2025 by rpki-client