Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
File: TKvzOws4CIj-HjuA7aSLF4G7dwk.mft (raw, json)
Hash identifier: wieD+T4jS6n+cZ4puMF185ij33HIr4wpeVDmSpq3GLA=
Subject key identifier: CC:AB:11:66:EB:92:37:FA:C5:B3:AD:48:C2:0D:6B:D4:52:4B:41:A0
Authority key identifier: 4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
Certificate issuer: /CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Certificate serial: 0197B6A0D60F2695272255278FEA846672A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:01:23 +0000
Manifest this update: Sat 28 Jun 2025 13:01:23 +0000
Manifest next update: Sun 29 Jun 2025 13:01:23 +0000
Files and hashes: 1: Ej6AGqgrDcCEmdxGQ51_3en2bK0.roa (hash: iJ7FETE7qwjnaLdIl0yVteeRiSysQ9U3gczbrqrkwXU=)
2: TKvzOws4CIj-HjuA7aSLF4G7dwk.crl (hash: 1Qd6yXgw9y+D3kMsXw3fI3A03J5mvBuzhwg1QfginII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d6:0f:26:95:27:22:55:27:8f:ea:84:66:72:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Validity
Not Before: Jun 28 13:01:23 2025 GMT
Not After : Jun 29 13:01:23 2025 GMT
Subject: CN=ccab1166eb9237fac5b3ad48c20d6bd4524b41a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:d5:d8:72:b8:f3:10:98:02:3e:86:03:ad:
e8:9f:1d:78:86:4c:bd:44:bb:8a:a2:6b:b8:d9:9c:
71:35:6d:d2:74:30:89:4f:2d:4e:76:05:d5:05:7c:
f1:61:03:c7:07:bf:67:2e:50:6b:9e:76:4d:e8:13:
18:71:9d:b2:03:be:a1:ff:44:a9:d0:f2:b4:c8:cc:
ee:03:06:11:29:58:46:3b:48:b4:3a:1b:6c:0b:20:
2a:3e:65:9c:53:79:bc:85:1d:52:f5:85:d3:59:88:
98:c4:e6:2d:29:44:73:99:77:48:6e:31:46:37:7e:
ee:e8:f4:a0:77:8e:91:6c:85:26:df:9b:b1:9d:95:
45:29:71:05:c5:30:f2:d9:36:be:0e:94:b7:33:73:
75:b7:9c:d5:1d:d3:c5:0c:fc:29:3b:8f:09:ed:c7:
1d:e5:1b:d8:7f:64:7a:d7:65:33:dd:54:31:6c:39:
fa:03:8e:60:b3:90:b1:4d:30:76:b4:d7:6f:bf:cd:
43:ce:cf:45:c0:9e:66:60:9e:21:ff:59:6e:36:5b:
50:91:b5:00:22:10:4b:c7:f7:49:22:4f:f7:98:19:
86:3b:40:f4:de:87:20:41:41:f7:13:64:32:fe:90:
70:b7:31:e6:29:69:d9:eb:dc:81:45:1e:40:9f:1e:
8f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AB:11:66:EB:92:37:FA:C5:B3:AD:48:C2:0D:6B:D4:52:4B:41:A0
X509v3 Authority Key Identifier:
keyid:4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7b:37:91:e2:f7:a8:fa:56:40:78:b6:20:95:ad:04:91:4c:
ac:59:0e:cf:ea:63:46:7a:78:ab:a7:3b:d4:04:ab:30:b7:b2:
3d:90:54:54:36:71:f1:e2:d0:b5:eb:ef:28:cf:5d:10:11:0f:
48:ae:fa:0d:cd:0f:e1:ab:3c:99:a1:80:51:26:ac:4d:a8:33:
16:5f:b6:ba:60:dd:9a:14:48:79:6e:04:3f:36:e7:6d:d9:ef:
d0:44:f4:22:30:59:f0:c3:77:41:92:ca:e6:ed:50:54:73:d4:
00:02:c4:70:d6:d2:3f:70:8f:bb:e6:b6:59:ac:10:a0:73:7a:
27:28:c4:a1:1a:50:42:12:76:39:09:40:b5:df:80:e1:2e:11:
68:7e:33:1a:f7:e3:c8:15:4b:a4:94:40:a3:ab:78:64:87:9a:
e8:e4:63:90:65:99:f6:ab:d8:6a:43:6a:9f:49:a2:b2:01:af:
45:08:58:60:a1:11:95:30:16:fe:2e:b0:e3:81:76:02:09:6a:
02:86:4a:aa:45:0c:2c:78:31:7a:a8:af:25:8a:f2:de:ca:ab:
23:0f:65:bf:ea:e2:b8:46:28:53:98:f6:df:0b:3d:82:1b:bd:
bb:04:be:08:be:10:dd:e1:b0:56:bd:6a:5a:c4:19:d8:d9:c4:
7d:2c:f3:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oNYPJpUnIlUnj+qEZnKhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYWJmMzNiMGIzODA4ODhmZTFlM2I4MGVkYTQ4YjE3ODFi
Yjc3MDkwHhcNMjUwNjI4MTMwMTIzWhcNMjUwNjI5MTMwMTIzWjAzMTEwLwYDVQQD
EyhjY2FiMTE2NmViOTIzN2ZhYzViM2FkNDhjMjBkNmJkNDUyNGI0MWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuPV2HK48xCYAj6GA63onx14hky9
RLuKomu42ZxxNW3SdDCJTy1OdgXVBXzxYQPHB79nLlBrnnZN6BMYcZ2yA76h/0Sp
0PK0yMzuAwYRKVhGO0i0OhtsCyAqPmWcU3m8hR1S9YXTWYiYxOYtKURzmXdIbjFG
N37u6PSgd46RbIUm35uxnZVFKXEFxTDy2Ta+DpS3M3N1t5zVHdPFDPwpO48J7ccd
5RvYf2R612Uz3VQxbDn6A45gs5CxTTB2tNdvv81Dzs9FwJ5mYJ4h/1luNltQkbUA
IhBLx/dJIk/3mBmGO0D03ocgQUH3E2Qy/pBwtzHmKWnZ69yBRR5Anx6PbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyrEWbrkjf6xbOtSMINa9RSS0GgMB8GA1UdIwQY
MBaAFEyr8zsLOAiI/h47gO2kixeBu3cJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEt2ek93czRDSWotSGp1QTdhU0xGNEc3ZHdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xODVhNDItY2I3Zi00MDU4LTg2ZjUt
NDFhZTVmNGE1MDU1LzEvVEt2ek93czRDSWotSGp1QTdhU0xGNEc3ZHdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xODVhNDItY2I3Zi00MDU4LTg2ZjUtNDFhZTVmNGE1MDU1
LzEvVEt2ek93czRDSWotSGp1QTdhU0xGNEc3ZHdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3s3keL3
qPpWQHi2IJWtBJFMrFkOz+pjRnp4q6c71ASrMLeyPZBUVDZx8eLQtevvKM9dEBEP
SK76Dc0P4as8maGAUSasTagzFl+2umDdmhRIeW4EPzbnbdnv0ET0IjBZ8MN3QZLK
5u1QVHPUAALEcNbSP3CPu+a2WawQoHN6JyjEoRpQQhJ2OQlAtd+A4S4RaH4zGvfj
yBVLpJRAo6t4ZIea6ORjkGWZ9qvYakNqn0misgGvRQhYYKERlTAW/i6w44F2Aglq
AoZKqkUMLHgxeqivJYry3sqrIw9lv+riuEYoU5j23ws9ghu9uwS+CL4Q3eGwVr1q
WsQZ2NnEfSzzPA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:38 2025 by rpki-client