Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
File: TmROKYPFxQTYAPLQWCsYLrq_JIc.mft (raw, json)
Hash identifier: f/IQumH8GEyVnXE/HafLP+Wff7mSFN8l3/HHIiPPSKM=
Subject key identifier: 61:0B:D1:AB:40:13:FB:1A:6B:49:DB:22:91:A7:E5:E9:67:F2:45:41
Authority key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
Certificate issuer: /CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Certificate serial: 0197B6A03F6623F68DE19ACC0DE06436923C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
Manifest number: 0877
Signing time: Sat 28 Jun 2025 13:00:44 +0000
Manifest this update: Sat 28 Jun 2025 13:00:44 +0000
Manifest next update: Sun 29 Jun 2025 13:00:44 +0000
Files and hashes: 1: TmROKYPFxQTYAPLQWCsYLrq_JIc.crl (hash: I0bIv4od59nZC3NVhGgOkY2IWnJGwDCGyH7zQEF8Bds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:3f:66:23:f6:8d:e1:9a:cc:0d:e0:64:36:92:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Validity
Not Before: Jun 28 13:00:44 2025 GMT
Not After : Jun 29 13:00:44 2025 GMT
Subject: CN=610bd1ab4013fb1a6b49db2291a7e5e967f24541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:25:7e:ee:6a:96:f5:48:a0:64:23:e1:1c:
bb:cb:b3:c6:1e:d4:ea:f9:fc:59:a6:2e:d0:33:17:
de:d9:d8:4a:25:95:9d:ce:5b:62:de:32:47:20:1c:
84:2c:09:ce:98:1e:95:bf:a0:bf:32:15:e8:36:af:
c6:fa:8c:f0:58:95:73:23:87:19:02:66:75:dc:1e:
06:36:e7:97:17:0c:e0:14:ae:3b:66:b8:84:00:9a:
23:e6:14:64:85:ce:78:8c:84:d3:04:71:6d:64:09:
67:b8:5c:bf:a7:ca:89:56:f1:38:f1:68:d9:25:f1:
e0:26:78:64:34:39:f0:2d:8a:1e:7d:fd:b2:7d:2c:
1c:60:69:73:74:81:31:ff:28:ba:ca:fd:23:c2:b7:
53:7b:3f:66:04:a5:88:03:7f:c1:67:65:42:66:4b:
2b:bd:4c:22:2f:ef:ef:92:f6:a7:19:1a:a6:48:92:
bb:1b:93:44:48:66:a6:03:e7:0a:f4:71:49:4f:7b:
31:ff:c9:d6:66:99:29:dd:f1:e2:a4:2f:63:37:ba:
a4:f3:28:0f:de:40:be:16:37:1c:dc:4a:78:53:f2:
a5:db:b3:d5:7d:04:bd:66:6b:97:60:02:bd:bb:11:
f6:9f:bc:aa:36:aa:b3:20:98:73:75:4f:1f:65:7b:
ad:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0B:D1:AB:40:13:FB:1A:6B:49:DB:22:91:A7:E5:E9:67:F2:45:41
X509v3 Authority Key Identifier:
keyid:4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:90:5d:a4:01:11:86:98:3a:b1:87:31:52:76:8c:f7:48:8d:
06:5c:db:7c:4e:09:e8:c6:3d:37:b9:c7:0b:8b:ca:21:74:bd:
6c:80:82:2e:65:36:0b:95:d4:9f:26:b3:2e:0d:bb:76:3b:61:
15:bd:bb:03:dc:b8:88:32:9c:34:f0:96:1e:95:10:14:51:b2:
ec:d3:9a:2b:b9:67:93:36:72:33:ce:b3:6b:32:35:6d:ae:48:
8e:9b:09:3c:50:d1:88:78:85:e0:b2:09:43:2a:73:4e:30:99:
ba:14:3d:1b:dc:37:7f:13:6d:0b:6b:6e:af:3a:8f:7b:dd:4d:
11:29:6d:dd:19:04:d7:b4:e3:e4:80:c9:9a:0b:ae:28:34:0f:
6a:a2:35:ae:45:6a:7f:c7:dc:6e:c1:1a:a2:77:e9:a6:de:b8:
ab:be:ca:00:8e:45:1b:f5:17:a8:a8:15:b1:02:99:88:e4:61:
f3:36:76:c8:64:2e:d5:c8:8b:d4:bb:88:47:3c:fa:68:41:f9:
a8:96:0b:71:ed:7e:12:70:71:de:56:99:68:54:a1:43:36:ea:
13:06:ec:d8:44:65:b1:25:08:5a:61:c0:b9:ce:3a:ce:42:0c:
9d:be:7c:b0:45:ea:17:20:01:4e:4d:42:de:e7:75:72:c4:31:
ec:56:b2:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oD9mI/aN4ZrMDeBkNpI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNjQ0ZTI5ODNjNWM1MDRkODAwZjJkMDU4MmIxODJlYmFi
ZjI0ODcwHhcNMjUwNjI4MTMwMDQ0WhcNMjUwNjI5MTMwMDQ0WjAzMTEwLwYDVQQD
Eyg2MTBiZDFhYjQwMTNmYjFhNmI0OWRiMjI5MWE3ZTVlOTY3ZjI0NTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPglfu5qlvVIoGQj4Ry7y7PGHtTq
+fxZpi7QMxfe2dhKJZWdzlti3jJHIByELAnOmB6Vv6C/MhXoNq/G+ozwWJVzI4cZ
AmZ13B4GNueXFwzgFK47ZriEAJoj5hRkhc54jITTBHFtZAlnuFy/p8qJVvE48WjZ
JfHgJnhkNDnwLYoeff2yfSwcYGlzdIEx/yi6yv0jwrdTez9mBKWIA3/BZ2VCZksr
vUwiL+/vkvanGRqmSJK7G5NESGamA+cK9HFJT3sx/8nWZpkp3fHipC9jN7qk8ygP
3kC+Fjcc3Ep4U/Kl27PVfQS9ZmuXYAK9uxH2n7yqNqqzIJhzdU8fZXutJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEL0atAE/saa0nbIpGn5eln8kVBMB8GA1UdIwQY
MBaAFE5kTimDxcUE2ADy0FgrGC66vySHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG1ST0tZUEZ4UVRZQVBMUVdDc1lMcnFfSkljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jMGU2YTItOGIyMC00NDgwLWE4YWIt
YjM4OGM1NzcwZTA0LzEvVG1ST0tZUEZ4UVRZQVBMUVdDc1lMcnFfSkljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9jMGU2YTItOGIyMC00NDgwLWE4YWItYjM4OGM1NzcwZTA0
LzEvVG1ST0tZUEZ4UVRZQVBMUVdDc1lMcnFfSkljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5BdpAER
hpg6sYcxUnaM90iNBlzbfE4J6MY9N7nHC4vKIXS9bICCLmU2C5XUnyazLg27djth
Fb27A9y4iDKcNPCWHpUQFFGy7NOaK7lnkzZyM86zazI1ba5IjpsJPFDRiHiF4LIJ
QypzTjCZuhQ9G9w3fxNtC2turzqPe91NESlt3RkE17Tj5IDJmguuKDQPaqI1rkVq
f8fcbsEaonfppt64q77KAI5FG/UXqKgVsQKZiORh8zZ2yGQu1ciL1LuIRzz6aEH5
qJYLce1+EnBx3laZaFShQzbqEwbs2ERlsSUIWmHAuc46zkIMnb58sEXqFyABTk1C
3ud1csQx7Fay9A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:09 2025 by rpki-client