Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
File: tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft (raw, json)
Hash identifier: B9a157o06kpb9whqH1PdM818/ZVBW4etQE1UiWi0eqg=
Subject key identifier: 60:3D:4B:EB:73:C3:72:52:9A:27:D5:A4:D5:1D:01:E5:5A:EE:6D:69
Authority key identifier: B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
Certificate issuer: /CN=b4430ba11506741d676ea202e291ec7ec6191b17
Certificate serial: 0197B7B30A83831B5D3BEB268084CD1FFBE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 18:00:53 +0000
Manifest this update: Sat 28 Jun 2025 18:00:53 +0000
Manifest next update: Sun 29 Jun 2025 18:00:53 +0000
Files and hashes: 1: Ar5ixINRYv4h1JY24F8pTYnNdfU.roa (hash: cerPS0rrVRA1DCH9YtBUW4yHi1b4My2ifCj92CGheoI=)
2: tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl (hash: NTMR0F12lwZIzDkMY8/GjoPSmgOQGrC95u05NyI8YGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:0a:83:83:1b:5d:3b:eb:26:80:84:cd:1f:fb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4430ba11506741d676ea202e291ec7ec6191b17
Validity
Not Before: Jun 28 18:00:53 2025 GMT
Not After : Jun 29 18:00:53 2025 GMT
Subject: CN=603d4beb73c372529a27d5a4d51d01e55aee6d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ac:7c:36:43:e0:70:71:ce:0b:3b:98:4c:70:
f7:74:d1:45:ad:5b:e9:60:b7:a9:5b:10:4d:99:34:
25:a6:6c:fa:f4:d5:a5:b6:65:2d:56:b7:01:23:1f:
24:a1:35:19:91:d6:b6:ea:d3:94:81:27:91:1d:1a:
d4:54:9a:d7:b8:d8:21:7e:54:19:8a:b4:5d:2b:c1:
70:56:f1:32:65:8b:b1:40:66:e7:53:9e:8a:ca:d3:
00:0a:19:dc:a2:1c:46:91:bc:f2:40:cf:0f:b4:c6:
26:80:d3:1e:60:32:cd:19:96:2c:14:fe:74:93:3f:
2f:f0:67:df:de:8d:61:20:60:44:1e:77:95:00:2e:
97:4c:b2:57:8f:a9:1f:a6:cd:13:41:c9:96:70:88:
5d:b1:4d:e1:91:68:c5:30:aa:ef:96:1c:f4:59:2d:
bd:42:5d:1e:20:0a:f3:6d:a5:db:8b:dd:36:45:ac:
c7:42:68:79:bd:a9:d3:fe:7b:ee:eb:b1:87:a8:bf:
ee:a4:02:bd:43:24:92:da:0b:c5:30:ec:1e:94:b2:
99:4f:ac:81:cb:fc:3b:14:b7:f0:ce:1f:96:d2:1a:
37:b8:8d:c1:d6:94:1f:47:08:46:96:f5:b4:dd:81:
09:2b:2c:e2:26:7c:86:69:eb:f4:ac:a4:48:9f:d6:
2a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3D:4B:EB:73:C3:72:52:9A:27:D5:A4:D5:1D:01:E5:5A:EE:6D:69
X509v3 Authority Key Identifier:
keyid:B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:43:17:0b:ba:a7:86:c3:9e:fa:13:75:00:da:8a:14:16:84:
2c:8b:2b:da:ee:6d:7d:06:62:d5:21:d7:a2:ec:28:20:ae:cd:
96:9c:93:f6:0a:28:b0:d4:04:1d:b0:94:c2:0d:56:af:19:21:
5e:ab:fa:e3:12:93:4e:5a:77:db:67:55:29:89:85:5c:2b:37:
3f:5a:64:dc:7c:06:9b:c8:b9:13:a2:98:17:9a:cd:1b:83:f2:
1f:69:b3:62:fc:aa:27:eb:9f:32:c8:b2:a1:e4:71:ff:4a:1d:
2f:32:f0:92:a1:61:f4:25:9e:74:30:f0:e3:fe:98:e7:2d:79:
81:e6:7c:c8:3f:ab:93:4d:4c:14:05:6d:e9:15:70:04:de:48:
d5:8b:c9:17:72:90:3d:dd:73:41:b5:2c:ec:c5:28:4e:35:39:
75:5f:e8:de:b4:92:e0:bb:6a:61:3b:40:3d:f0:1a:e8:c9:14:
8a:f5:b9:75:de:19:90:72:d4:bc:14:4e:d0:4a:c6:93:54:95:
ed:34:70:a0:97:a5:49:09:ed:30:4a:9a:77:b0:84:cc:d7:6b:
14:aa:49:e5:75:97:85:ad:62:4c:59:79:3b:04:d3:8d:fe:db:
c7:7a:5e:b8:40:46:a6:c9:76:1e:83:bb:5c:32:d5:ad:de:5f:
0a:15:7f:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3swqDgxtdO+smgITNH/viMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NDMwYmExMTUwNjc0MWQ2NzZlYTIwMmUyOTFlYzdlYzYx
OTFiMTcwHhcNMjUwNjI4MTgwMDUzWhcNMjUwNjI5MTgwMDUzWjAzMTEwLwYDVQQD
Eyg2MDNkNGJlYjczYzM3MjUyOWEyN2Q1YTRkNTFkMDFlNTVhZWU2ZDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKx8NkPgcHHOCzuYTHD3dNFFrVvp
YLepWxBNmTQlpmz69NWltmUtVrcBIx8koTUZkda26tOUgSeRHRrUVJrXuNghflQZ
irRdK8FwVvEyZYuxQGbnU56KytMAChncohxGkbzyQM8PtMYmgNMeYDLNGZYsFP50
kz8v8Gff3o1hIGBEHneVAC6XTLJXj6kfps0TQcmWcIhdsU3hkWjFMKrvlhz0WS29
Ql0eIArzbaXbi902RazHQmh5vanT/nvu67GHqL/upAK9QySS2gvFMOwelLKZT6yB
y/w7FLfwzh+W0ho3uI3B1pQfRwhGlvW03YEJKyziJnyGaev0rKRIn9YqSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGA9S+tzw3JSmifVpNUdAeVa7m1pMB8GA1UdIwQY
MBaAFLRDC6EVBnQdZ26iAuKR7H7GGRsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEVNTG9SVUdkQjFuYnFJQzRwSHNmc1laR3hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi82MGNjZmEtMDkzMC00NmI0LTgzMTct
ZjhjYTljYjYzMzE3LzEvdEVNTG9SVUdkQjFuYnFJQzRwSHNmc1laR3hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi82MGNjZmEtMDkzMC00NmI0LTgzMTctZjhjYTljYjYzMzE3
LzEvdEVNTG9SVUdkQjFuYnFJQzRwSHNmc1laR3hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0MXC7qn
hsOe+hN1ANqKFBaELIsr2u5tfQZi1SHXouwoIK7NlpyT9goosNQEHbCUwg1Wrxkh
Xqv64xKTTlp322dVKYmFXCs3P1pk3HwGm8i5E6KYF5rNG4PyH2mzYvyqJ+ufMsiy
oeRx/0odLzLwkqFh9CWedDDw4/6Y5y15geZ8yD+rk01MFAVt6RVwBN5I1YvJF3KQ
Pd1zQbUs7MUoTjU5dV/o3rSS4LtqYTtAPfAa6MkUivW5dd4ZkHLUvBRO0ErGk1SV
7TRwoJelSQntMEqad7CEzNdrFKpJ5XWXha1iTFl5OwTTjf7bx3peuEBGpsl2HoO7
XDLVrd5fChV/aw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:06:04 2025 by rpki-client