Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
File: tjowlEOcrA9VVwEobNVDc7zmy1A.mft (raw, json)
Hash identifier: xbH2EAkSlGUf8J/KDjU1h1HQoftUP7xVVcqLz3j5LfQ=
Subject key identifier: A9:77:80:C3:5F:0E:B4:97:64:C7:F2:88:FA:3F:B2:D4:79:DD:0A:61
Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
Certificate issuer: /CN=b63a3094439cac0f555701286cd54373bce6cb50
Certificate serial: 0198D583F496AA3B75099868628D1B372551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
Manifest number: 03EB
Signing time: Sat 23 Aug 2025 06:00:51 +0000
Manifest this update: Sat 23 Aug 2025 06:00:51 +0000
Manifest next update: Sun 24 Aug 2025 06:00:51 +0000
Files and hashes: 1: lCtCcNNufTLwFJhkrWabEjjBy0k.roa (hash: mf7pg/6iwjdXTSMTSKNkIUvc6nvXHprTVxoK02WKi+Y=)
2: tjowlEOcrA9VVwEobNVDc7zmy1A.crl (hash: 5bL4+Fajp7N5M9Obd/qnACorqHDWAGQZI+4uQTbVo3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f4:96:aa:3b:75:09:98:68:62:8d:1b:37:25:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50
Validity
Not Before: Aug 23 06:00:51 2025 GMT
Not After : Aug 24 06:00:51 2025 GMT
Subject: CN=a97780c35f0eb49764c7f288fa3fb2d479dd0a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:20:9a:df:3f:b7:79:82:d7:09:d9:95:38:10:
ba:cc:9a:bf:d4:dd:18:0d:c9:f3:67:23:65:b7:17:
59:88:7d:08:ac:51:17:fe:78:76:51:7f:06:0b:29:
5b:09:73:98:b3:e4:9e:4e:b6:43:20:ea:7a:83:78:
55:a8:84:2e:e3:b0:99:26:f4:f1:28:4e:cd:65:9e:
b2:af:71:15:3c:86:e3:be:55:78:cf:52:2b:ed:5e:
a8:ea:32:51:f1:d7:0a:5d:1e:c4:6a:ee:c0:52:6e:
56:15:cc:14:b3:69:1f:c2:9e:2b:04:3a:ec:5b:e1:
71:77:75:97:8f:68:18:8f:a6:55:dc:c3:c6:98:01:
7a:63:b7:70:6d:9d:b3:76:1a:ce:12:b2:1f:cf:b4:
b5:4e:4d:be:37:20:8a:b2:df:40:9a:59:34:c5:b2:
f0:cc:50:94:57:2d:4d:96:db:d8:75:5f:e0:5d:40:
ce:ae:00:2a:fe:0b:13:24:8a:42:7f:30:24:1f:55:
1f:c4:a2:d0:ea:0c:af:2a:17:04:6f:c2:5e:99:af:
d5:c7:e9:ea:82:99:63:a8:38:ec:3f:9d:aa:59:3e:
ce:29:79:e2:ce:c4:eb:3e:d9:24:9e:99:bd:2f:cc:
bf:a3:84:5e:c6:42:39:a9:47:7c:5a:57:59:7a:5d:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:77:80:C3:5F:0E:B4:97:64:C7:F2:88:FA:3F:B2:D4:79:DD:0A:61
X509v3 Authority Key Identifier:
keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:20:14:ff:d0:90:d2:4b:7b:ec:ab:43:90:b3:3d:04:cb:d9:
7e:1a:c2:3d:ee:ab:05:bd:2c:16:cd:16:d4:00:02:9a:44:db:
a0:c9:b1:c8:2a:86:3f:8f:d5:bd:50:e2:50:db:36:2c:dc:58:
2d:b8:a8:67:5e:40:3f:73:1a:fa:ac:2e:78:82:86:a5:23:77:
2f:24:89:7e:a8:4d:d5:d2:ff:2b:cf:0d:41:f6:92:13:ce:8a:
41:a4:f8:0b:df:e0:ef:fc:dd:80:38:4c:4b:4f:21:e8:65:a5:
3b:c8:37:2b:10:b9:b0:38:1e:20:e4:3b:93:46:e9:d9:53:02:
35:18:e3:b1:11:31:7b:4d:94:20:f8:48:0f:58:a6:d6:9b:cc:
77:71:5b:95:2d:d1:96:11:85:f6:f4:be:1a:8f:a5:da:10:54:
08:f3:41:2d:73:45:40:42:01:a2:91:b2:ce:66:ac:01:87:8b:
e2:6b:b0:fe:0f:a1:66:dc:c2:e7:0c:5b:5f:95:2d:46:3d:e2:
28:21:b4:48:43:2a:1c:39:cd:35:be:60:dd:a1:b6:e3:73:9c:
16:6a:26:a9:0c:06:ad:9c:08:59:9b:c1:7b:40:44:be:86:0e:
cd:70:77:e2:e8:c7:8f:50:0c:d9:36:b4:29:03:99:0c:12:a5:
e7:58:e2:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg/SWqjt1CZhoYo0bNyVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2M2EzMDk0NDM5Y2FjMGY1NTU3MDEyODZjZDU0MzczYmNl
NmNiNTAwHhcNMjUwODIzMDYwMDUxWhcNMjUwODI0MDYwMDUxWjAzMTEwLwYDVQQD
EyhhOTc3ODBjMzVmMGViNDk3NjRjN2YyODhmYTNmYjJkNDc5ZGQwYTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SCa3z+3eYLXCdmVOBC6zJq/1N0Y
DcnzZyNltxdZiH0IrFEX/nh2UX8GCylbCXOYs+SeTrZDIOp6g3hVqIQu47CZJvTx
KE7NZZ6yr3EVPIbjvlV4z1Ir7V6o6jJR8dcKXR7Eau7AUm5WFcwUs2kfwp4rBDrs
W+Fxd3WXj2gYj6ZV3MPGmAF6Y7dwbZ2zdhrOErIfz7S1Tk2+NyCKst9Amlk0xbLw
zFCUVy1NltvYdV/gXUDOrgAq/gsTJIpCfzAkH1UfxKLQ6gyvKhcEb8Jema/Vx+nq
gpljqDjsP52qWT7OKXnizsTrPtkknpm9L8y/o4RexkI5qUd8WldZel0/wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKl3gMNfDrSXZMfyiPo/stR53QphMB8GA1UdIwQY
MBaAFLY6MJRDnKwPVVcBKGzVQ3O85stQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lNGQyMGYtNmRjOC00OTdkLWE4ZDYt
OWRkZGQ2ODAyMDg4LzEvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9lNGQyMGYtNmRjOC00OTdkLWE4ZDYtOWRkZGQ2ODAyMDg4
LzEvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCAU/9CQ
0kt77KtDkLM9BMvZfhrCPe6rBb0sFs0W1AACmkTboMmxyCqGP4/VvVDiUNs2LNxY
LbioZ15AP3Ma+qwueIKGpSN3LySJfqhN1dL/K88NQfaSE86KQaT4C9/g7/zdgDhM
S08h6GWlO8g3KxC5sDgeIOQ7k0bp2VMCNRjjsRExe02UIPhID1im1pvMd3FblS3R
lhGF9vS+Go+l2hBUCPNBLXNFQEIBopGyzmasAYeL4muw/g+hZtzC5wxbX5UtRj3i
KCG0SEMqHDnNNb5g3aG243OcFmomqQwGrZwIWZvBe0BEvoYOzXB34ujHj1AM2Ta0
KQOZDBKl51jitg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:06 2025 by rpki-client