Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
File: Ty_D6GA1oLjpOA_7I_I_V0MLess.mft (raw, json)
Hash identifier: mLQT6cfhuiZHle5GxUhpe7VyzyHFNX3ofRQBx8JiJxQ=
Subject key identifier: E7:3C:57:3D:8A:E8:9D:7B:65:F8:C7:0A:0E:05:76:FC:8B:07:75:A2
Authority key identifier: 4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB
Certificate issuer: /CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb
Certificate serial: 0198D7739DE16CCBE626C07C3EBCB4A161EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
Manifest number: 0EBA
Signing time: Sat 23 Aug 2025 15:02:14 +0000
Manifest this update: Sat 23 Aug 2025 15:02:14 +0000
Manifest next update: Sun 24 Aug 2025 15:02:14 +0000
Files and hashes: 1: Ty_D6GA1oLjpOA_7I_I_V0MLess.crl (hash: rHVZCTLN4NXRVrEWV7HUCSTbEILOapkwG4AEmwHAjZE=)
2: WjR-M02WnGrf1hvkkNo0bZEQvnQ.roa (hash: CW8wqMfi/RZSfPuGRw3DqaK3c0hn412Beo4u95KUkQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:9d:e1:6c:cb:e6:26:c0:7c:3e:bc:b4:a1:61:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb
Validity
Not Before: Aug 23 15:02:14 2025 GMT
Not After : Aug 24 15:02:14 2025 GMT
Subject: CN=e73c573d8ae89d7b65f8c70a0e0576fc8b0775a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c5:a6:80:85:3c:c3:1c:43:fc:04:13:f2:01:
db:d7:e8:3b:8f:3d:75:2f:c5:01:3b:ad:61:52:5e:
4c:8c:f1:d4:eb:4c:85:7a:35:c0:ff:0d:68:a4:e1:
76:1e:4f:12:a5:98:b4:b5:19:6b:92:5a:04:fe:71:
8f:62:51:ee:b6:d3:7e:74:03:d0:30:f2:df:72:56:
b5:5a:38:b6:7e:f5:a3:f5:4a:b4:a8:c1:b7:bb:db:
61:9d:a4:83:8e:4b:d4:b4:f3:d1:93:0b:24:20:67:
2f:9d:e5:ce:a5:a1:af:46:17:fd:93:a7:28:57:1c:
3c:66:04:12:ec:29:ab:96:6c:24:26:b8:bc:88:cb:
b4:ae:31:34:42:6a:29:f1:51:a8:bb:50:82:e4:2c:
ef:f1:b5:d1:3a:b2:96:5f:bc:2b:e9:da:89:86:ce:
6e:2d:1a:af:6e:c2:a8:b1:72:20:2d:e5:c0:ea:7c:
e4:8c:e1:ec:76:74:e2:9d:eb:ac:7e:65:21:f1:70:
38:2c:da:e8:f6:6c:9c:e8:72:c4:06:2a:c7:99:af:
5f:0a:42:b1:28:fa:d6:b5:db:63:96:3c:64:b4:51:
4a:38:90:44:b6:15:d9:4a:31:3b:37:af:4c:41:26:
54:9a:12:4b:cd:da:e9:82:e8:be:8a:ed:ed:4d:1e:
1f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3C:57:3D:8A:E8:9D:7B:65:F8:C7:0A:0E:05:76:FC:8B:07:75:A2
X509v3 Authority Key Identifier:
keyid:4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8d:91:e3:d2:55:47:b4:d7:d2:f6:5b:7b:fb:de:18:6a:ee:
47:a0:e0:de:77:5a:dc:9e:d7:18:aa:d8:02:d3:f2:57:7d:82:
92:d1:ec:16:72:67:9e:bb:a8:93:d7:79:04:aa:84:8c:24:77:
07:c6:40:cb:b2:30:bd:90:96:a5:7d:db:6e:79:08:6a:b5:a1:
e2:33:2f:76:3f:f1:8c:7d:f4:8a:2e:db:37:eb:0d:ac:02:7f:
0d:ce:44:41:7e:a3:85:d7:fb:72:83:ba:c7:6c:3d:32:f1:ff:
21:6a:d0:3e:3f:5d:ac:86:3b:a3:40:15:6a:1c:c5:a3:6c:5b:
01:71:4c:64:0b:84:5d:6e:b2:db:c8:bc:23:f6:e2:7c:ff:aa:
f8:3f:8f:4c:b2:98:82:6c:df:86:23:1d:06:f4:b7:41:60:d2:
24:b8:65:84:f3:d2:22:38:f3:ac:1e:ea:75:b0:a4:33:ef:13:
ca:ff:8c:f6:d4:fe:e8:13:34:3d:71:18:a8:7e:7e:60:b0:e2:
b3:d6:59:bd:fa:a4:f3:0b:95:14:96:a9:c4:d3:2c:f4:6c:44:
f3:d5:8f:b0:45:69:0e:68:c5:2a:e1:46:96:36:3f:6d:a0:f5:
96:ab:f4:c6:9b:e3:29:57:40:c9:ca:03:88:73:f5:c7:81:57:
7b:b7:75:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXc53hbMvmJsB8Pry0oWHsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMmZjM2U4NjAzNWEwYjhlOTM4MGZmYjIzZjIzZjU3NDMw
YjdhY2IwHhcNMjUwODIzMTUwMjE0WhcNMjUwODI0MTUwMjE0WjAzMTEwLwYDVQQD
EyhlNzNjNTczZDhhZTg5ZDdiNjVmOGM3MGEwZTA1NzZmYzhiMDc3NWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8WmgIU8wxxD/AQT8gHb1+g7jz11
L8UBO61hUl5MjPHU60yFejXA/w1opOF2Hk8SpZi0tRlrkloE/nGPYlHuttN+dAPQ
MPLfcla1Wji2fvWj9Uq0qMG3u9thnaSDjkvUtPPRkwskIGcvneXOpaGvRhf9k6co
Vxw8ZgQS7CmrlmwkJri8iMu0rjE0Qmop8VGou1CC5Czv8bXROrKWX7wr6dqJhs5u
LRqvbsKosXIgLeXA6nzkjOHsdnTineusfmUh8XA4LNro9myc6HLEBirHma9fCkKx
KPrWtdtjljxktFFKOJBEthXZSjE7N69MQSZUmhJLzdrpgui+iu3tTR4fJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOc8Vz2K6J17ZfjHCg4FdvyLB3WiMB8GA1UdIwQY
MBaAFE8vw+hgNaC46TgP+yPyP1dDC3rLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHlfRDZHQTFvTGpwT0FfN0lfSV9WME1MZXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8xZTM2ZTgtOGZhNi00YzE3LWEyNDAt
MzJlNTdiYzU0NzRiLzEvVHlfRDZHQTFvTGpwT0FfN0lfSV9WME1MZXNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8xZTM2ZTgtOGZhNi00YzE3LWEyNDAtMzJlNTdiYzU0NzRi
LzEvVHlfRDZHQTFvTGpwT0FfN0lfSV9WME1MZXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcY2R49JV
R7TX0vZbe/veGGruR6Dg3nda3J7XGKrYAtPyV32CktHsFnJnnruok9d5BKqEjCR3
B8ZAy7IwvZCWpX3bbnkIarWh4jMvdj/xjH30ii7bN+sNrAJ/Dc5EQX6jhdf7coO6
x2w9MvH/IWrQPj9drIY7o0AVahzFo2xbAXFMZAuEXW6y28i8I/bifP+q+D+PTLKY
gmzfhiMdBvS3QWDSJLhlhPPSIjjzrB7qdbCkM+8Tyv+M9tT+6BM0PXEYqH5+YLDi
s9ZZvfqk8wuVFJapxNMs9GxE89WPsEVpDmjFKuFGljY/baD1lqv0xpvjKVdAycoD
iHP1x4FXe7d1oA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:07:05 2025 by rpki-client