
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
File: Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft (raw, json)
Hash identifier: nCNMxKy7UZluCOwPigJobPtutS0W2CY88dMy9qO/dIk=
Subject key identifier: 6E:DE:C7:D6:A9:1B:71:E4:C0:E1:C6:C6:24:A0:61:11:DF:E6:FC:FC
Authority key identifier: 4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00
Certificate issuer: /CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000
Certificate serial: 019826D99C2D9A906607341679AEC96C12B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
Manifest number: 0A
Signing time: Sun 20 Jul 2025 08:00:52 +0000
Manifest this update: Sun 20 Jul 2025 08:00:52 +0000
Manifest next update: Mon 21 Jul 2025 08:00:52 +0000
Files and hashes: 1: 91ZCHXFl5UUzytD2oCxDOo7Vf-U.roa (hash: GiWWhZLSNM54YFftILgBMiQnN9xd6n0FvV41BvORBF0=)
2: Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl (hash: +7ysOUpB0NLB2DCzyNCiW4XRAkSpVUxhBn/A22SKDck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:d9:9c:2d:9a:90:66:07:34:16:79:ae:c9:6c:12:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000
Validity
Not Before: Jul 20 08:00:52 2025 GMT
Not After : Jul 21 08:00:52 2025 GMT
Subject: CN=6edec7d6a91b71e4c0e1c6c624a06111dfe6fcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:47:0b:cc:25:7b:df:6c:2c:0c:59:94:3a:
d1:f2:db:8b:2c:e9:2d:b6:21:0b:b4:05:08:5a:d2:
1d:2a:46:4d:47:9f:6b:88:b4:dd:23:48:29:37:04:
d4:4b:28:36:83:ad:06:fb:52:f6:c5:29:c6:10:81:
cb:ff:2d:25:f9:67:0c:bd:10:b9:ba:4d:91:6d:2b:
77:52:33:c6:e9:51:e9:4e:6b:1e:72:52:fd:b6:45:
2f:bd:c3:44:14:69:9b:79:58:f2:f8:da:de:16:e4:
29:72:79:35:d2:f1:aa:19:e7:f9:1a:bc:cf:9d:3f:
43:15:85:5e:c8:82:18:e7:b8:bc:6f:c6:80:bd:57:
6a:c1:e8:5b:9a:c0:e7:95:86:2c:35:6f:e9:ff:4f:
fb:13:20:3e:86:fa:13:ec:78:f6:ed:3e:3b:f7:46:
d4:92:cb:89:51:67:a9:6e:3b:47:24:cb:9d:3a:3a:
fb:6a:18:6b:f6:3b:fa:32:6d:4f:3b:de:37:f1:9e:
45:05:72:62:74:4b:53:c6:e7:76:c1:69:c5:de:bc:
bb:38:0e:a3:f8:76:6b:63:60:09:e9:59:bb:48:0b:
7d:b2:c2:db:4b:7a:b2:f2:a1:3d:5b:f9:34:7c:5e:
75:93:88:58:8d:33:8b:99:e6:a1:c9:f5:5d:4f:f9:
fe:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DE:C7:D6:A9:1B:71:E4:C0:E1:C6:C6:24:A0:61:11:DF:E6:FC:FC
X509v3 Authority Key Identifier:
keyid:4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:3b:68:aa:5d:36:fb:56:f8:1d:d0:cf:f2:31:13:c0:5f:45:
15:ef:43:e7:e7:ba:74:4f:f5:12:a4:fb:97:e9:d1:79:d3:25:
b1:7c:03:88:3d:60:b5:96:26:ea:ae:b6:d0:82:fb:ed:dd:c7:
36:a8:1f:4c:cb:92:c6:54:93:5f:3a:ae:a8:98:7d:e1:0c:8b:
24:13:52:9f:16:92:62:de:59:20:f0:4c:db:e0:0a:7a:66:94:
69:d3:8f:e7:3f:47:51:67:cb:8a:20:23:0b:13:85:78:42:ea:
46:ee:68:cd:78:cb:c7:af:34:b2:1e:25:a1:09:ce:b5:21:3b:
cf:2c:7e:02:86:a8:12:cb:d2:63:82:0a:5a:a1:5f:01:68:70:
30:d9:25:58:4b:e5:71:c3:88:88:e3:8f:34:35:78:55:61:d7:
64:36:3e:83:f3:35:0c:8e:ff:ce:76:e2:be:d0:22:c0:1f:ac:
f4:dd:d0:80:92:50:59:24:a1:04:7f:0b:5c:6f:42:c9:d1:a1:
74:a2:2a:a7:3e:48:06:64:e5:ef:00:98:4c:fd:4d:3b:0f:24:
3f:72:57:b6:eb:51:d9:be:b2:ba:34:d2:26:0a:01:97:1f:0a:
6d:d5:5d:8f:de:68:f2:9b:b7:f9:b2:53:ab:98:a6:63:69:6e:
fa:aa:77:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgm2ZwtmpBmBzQWea7JbBK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMGYzMWM2ZWZkYjlhNDQ1YjhmMTcyZjBiZTBkZmQ1MTQy
YmUwMDAwHhcNMjUwNzIwMDgwMDUyWhcNMjUwNzIxMDgwMDUyWjAzMTEwLwYDVQQD
Eyg2ZWRlYzdkNmE5MWI3MWU0YzBlMWM2YzYyNGEwNjExMWRmZTZmY2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstNHC8wle99sLAxZlDrR8tuLLOkt
tiELtAUIWtIdKkZNR59riLTdI0gpNwTUSyg2g60G+1L2xSnGEIHL/y0l+WcMvRC5
uk2RbSt3UjPG6VHpTmseclL9tkUvvcNEFGmbeVjy+NreFuQpcnk10vGqGef5GrzP
nT9DFYVeyIIY57i8b8aAvVdqwehbmsDnlYYsNW/p/0/7EyA+hvoT7Hj27T4790bU
ksuJUWepbjtHJMudOjr7ahhr9jv6Mm1PO9438Z5FBXJidEtTxud2wWnF3ry7OA6j
+HZrY2AJ6Vm7SAt9ssLbS3qy8qE9W/k0fF51k4hYjTOLmeahyfVdT/n+kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7ex9apG3HkwOHGxiSgYRHf5vz8MB8GA1UdIwQY
MBaAFE4PMcbv25pEW48XLwvg39UUK+AAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGc4eHh1X2Jta1JianhjdkMtRGYxUlFyNEFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hY2E3OTAtNjMyOS00MTRhLWJlZDUt
YmFkMmNiNDgwOTEyLzEvVGc4eHh1X2Jta1JianhjdkMtRGYxUlFyNEFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9hY2E3OTAtNjMyOS00MTRhLWJlZDUtYmFkMmNiNDgwOTEy
LzEvVGc4eHh1X2Jta1JianhjdkMtRGYxUlFyNEFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsTtoql02
+1b4HdDP8jETwF9FFe9D5+e6dE/1EqT7l+nRedMlsXwDiD1gtZYm6q620IL77d3H
NqgfTMuSxlSTXzquqJh94QyLJBNSnxaSYt5ZIPBM2+AKemaUadOP5z9HUWfLiiAj
CxOFeELqRu5ozXjLx680sh4loQnOtSE7zyx+AoaoEsvSY4IKWqFfAWhwMNklWEvl
ccOIiOOPNDV4VWHXZDY+g/M1DI7/znbivtAiwB+s9N3QgJJQWSShBH8LXG9CydGh
dKIqpz5IBmTl7wCYTP1NOw8kP3JXtutR2b6yujTSJgoBlx8KbdVdj95o8pu3+bJT
q5imY2lu+qp3wA==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:30:33 2025 by rpki-client