
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
File: t0QwmQgmnlOLK0-pYzcMnsIHeng.mft (raw, json)
Hash identifier: TsGkRnER9sjhj/lGIa4b2va07xCqiTl37sAtLA4Ita4=
Subject key identifier: E8:D8:7A:24:2B:4C:1B:DB:06:4E:0D:DB:F8:3D:D5:49:25:14:E8:0F
Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
Certificate issuer: /CN=b744309908269e538b2b4fa963370c9ec2077a78
Certificate serial: 0198D6984597D5DDF14F02C94465B00878EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
Manifest number: 109B
Signing time: Sat 23 Aug 2025 11:02:40 +0000
Manifest this update: Sat 23 Aug 2025 11:02:40 +0000
Manifest next update: Sun 24 Aug 2025 11:02:40 +0000
Files and hashes: 1: YBLZGJHJKH4DoV9XrJh7KrLAY0g.roa (hash: L0o/zjJZLOmk6cpaT73kurdvyrzNoMlbhiuzTQLNAKg=)
2: t0QwmQgmnlOLK0-pYzcMnsIHeng.crl (hash: 2DLnOL3fI8W7vJ77w16mBOx9STf7xomgUVKb0/yDLBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:45:97:d5:dd:f1:4f:02:c9:44:65:b0:08:78:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78
Validity
Not Before: Aug 23 11:02:40 2025 GMT
Not After : Aug 24 11:02:40 2025 GMT
Subject: CN=e8d87a242b4c1bdb064e0ddbf83dd5492514e80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:81:89:e5:b9:9d:54:d3:0c:3c:42:ee:7a:
9e:5a:c2:de:be:4d:cb:87:c2:02:4e:93:25:19:68:
8a:1c:14:11:86:8e:10:01:93:34:cb:85:2d:bb:46:
73:61:ad:e8:c7:91:c2:da:ba:dc:b5:c1:b9:53:a2:
c8:c1:8f:2f:27:91:e3:ea:87:c6:84:fe:17:be:3f:
e2:a0:ef:c2:25:bf:a8:b2:a0:ad:b3:6a:b9:fc:39:
78:ad:9c:6c:2a:e7:e7:e1:ae:97:29:fa:b8:69:f3:
7f:06:96:c6:75:f3:6b:ab:f2:cb:73:bc:de:92:08:
91:3d:d4:ec:de:bc:f8:d9:a5:5d:a9:03:e3:25:c8:
17:c2:56:94:f4:96:5f:c5:90:0b:8e:55:02:6a:4a:
09:26:e1:41:04:7b:f6:81:7e:87:b1:a5:1b:b7:41:
39:32:f0:c3:22:00:4e:69:ef:8c:fa:3d:a5:e9:2c:
5e:54:d5:20:31:de:d0:58:4c:2f:a2:61:22:0a:53:
75:57:a4:19:8a:82:8d:45:f0:ee:14:79:4e:18:63:
ec:a7:04:e8:80:d4:ec:3e:42:18:26:d1:1b:70:02:
0a:1e:0e:87:65:57:d0:cb:47:9c:66:69:04:a6:bb:
77:48:2e:aa:09:14:35:c6:59:39:41:bf:4b:9d:9f:
e5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D8:7A:24:2B:4C:1B:DB:06:4E:0D:DB:F8:3D:D5:49:25:14:E8:0F
X509v3 Authority Key Identifier:
keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:86:70:54:c1:5f:61:f0:80:f4:82:94:6a:61:aa:54:ba:c3:
4b:ab:84:7b:89:7d:9a:ed:07:69:38:ec:f0:a2:42:1c:2b:65:
21:84:31:1d:2c:b2:14:55:67:fe:bf:8f:0a:7e:0a:05:e6:bc:
b3:40:2f:c2:77:ef:f8:25:4e:df:68:18:a7:8b:c2:de:39:4d:
14:d4:b6:a6:34:39:00:81:a7:b9:82:a0:86:92:a9:b8:d9:8f:
17:e6:e7:9d:f3:8c:8c:61:e5:88:a7:0c:90:f5:e0:88:a3:59:
35:ec:8c:8a:85:08:a4:31:3b:3c:17:68:ca:b8:b6:88:d2:d6:
57:0a:ea:4f:ec:7a:74:fa:74:16:51:cc:da:fa:a7:0d:a3:d2:
54:2f:75:10:17:2b:e2:8a:f2:b7:e4:f6:34:b3:6a:6c:c0:bd:
06:bc:0b:37:63:90:96:e3:fa:4a:98:e4:6b:11:90:11:90:a0:
47:34:3a:99:bb:20:b2:3b:7f:7d:fa:34:02:a7:30:ff:20:99:
c0:fd:e8:50:b8:5f:4a:b6:a9:7d:79:48:8f:98:aa:ad:f1:66:
da:48:20:33:12:75:d1:91:58:6c:d6:ec:a9:1a:4a:2b:cd:7b:
d2:ae:0d:e1:54:ad:b4:d7:5e:fb:6b:31:77:c4:30:97:7d:88:
02:83:de:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmEWX1d3xTwLJRGWwCHjvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NDQzMDk5MDgyNjllNTM4YjJiNGZhOTYzMzcwYzllYzIw
NzdhNzgwHhcNMjUwODIzMTEwMjQwWhcNMjUwODI0MTEwMjQwWjAzMTEwLwYDVQQD
EyhlOGQ4N2EyNDJiNGMxYmRiMDY0ZTBkZGJmODNkZDU0OTI1MTRlODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmiBieW5nVTTDDxC7nqeWsLevk3L
h8ICTpMlGWiKHBQRho4QAZM0y4Utu0ZzYa3ox5HC2rrctcG5U6LIwY8vJ5Hj6ofG
hP4Xvj/ioO/CJb+osqCts2q5/Dl4rZxsKufn4a6XKfq4afN/BpbGdfNrq/LLc7ze
kgiRPdTs3rz42aVdqQPjJcgXwlaU9JZfxZALjlUCakoJJuFBBHv2gX6HsaUbt0E5
MvDDIgBOae+M+j2l6SxeVNUgMd7QWEwvomEiClN1V6QZioKNRfDuFHlOGGPspwTo
gNTsPkIYJtEbcAIKHg6HZVfQy0ecZmkEprt3SC6qCRQ1xlk5Qb9LnZ/lDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjYeiQrTBvbBk4N2/g91UklFOgPMB8GA1UdIwQY
MBaAFLdEMJkIJp5TiytPqWM3DJ7CB3p4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NjUyZTgtNWQyMC00MmY2LWE3Mzkt
ZDU0OTIxNjA0ZWNkLzEvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80NjUyZTgtNWQyMC00MmY2LWE3MzktZDU0OTIxNjA0ZWNk
LzEvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIZwVMFf
YfCA9IKUamGqVLrDS6uEe4l9mu0HaTjs8KJCHCtlIYQxHSyyFFVn/r+PCn4KBea8
s0Avwnfv+CVO32gYp4vC3jlNFNS2pjQ5AIGnuYKghpKpuNmPF+bnnfOMjGHliKcM
kPXgiKNZNeyMioUIpDE7PBdoyri2iNLWVwrqT+x6dPp0FlHM2vqnDaPSVC91EBcr
4oryt+T2NLNqbMC9BrwLN2OQluP6SpjkaxGQEZCgRzQ6mbsgsjt/ffo0Aqcw/yCZ
wP3oULhfSrapfXlIj5iqrfFm2kggMxJ10ZFYbNbsqRpKK8170q4N4VSttNde+2sx
d8Qwl32IAoPeCA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:17 2025 by rpki-client