Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
File: tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json)
Hash identifier: WgkmifMgHmbqVXQldddumPGNw1Gmz9JzOkF0+N8o+CA=
Subject key identifier: 81:27:EF:48:6F:9E:DE:A4:56:16:AC:14:AA:6E:99:E2:E5:D3:F6:EE
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial: 0199239FCA9E239B90BADB28FFD13F53F806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
Manifest number: 0910
Signing time: Sun 07 Sep 2025 10:01:38 +0000
Manifest this update: Sun 07 Sep 2025 10:01:38 +0000
Manifest next update: Mon 08 Sep 2025 10:01:38 +0000
Files and hashes: 1: Tj8ieaPk-ZVdznj4QGZQsDa6PTU.roa (hash: rpKu+SpVkA4o9g3c9SIuQedHFHqzu4mcB4TaNuy/SKw=)
2: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: ZggSyJvYJskevGgljeVgoQ2n24b7+c6FH/65TGNpc1A=)
3: uWZIzr5sI_obeqk4P_AP6Hrzzsc.roa (hash: Ao6L2xVS/ORm+dRe6MtZy2PpenoZKqpKXENIdtVG26s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:ca:9e:23:9b:90:ba:db:28:ff:d1:3f:53:f8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Validity
Not Before: Sep 7 10:01:38 2025 GMT
Not After : Sep 8 10:01:38 2025 GMT
Subject: CN=8127ef486f9edea45616ac14aa6e99e2e5d3f6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ec:86:7d:f4:b4:17:2d:a6:bf:8b:e2:ad:b2:
54:9b:11:0e:b7:bd:dd:3d:4b:bc:bf:60:41:b8:f2:
32:55:98:bf:c4:6e:c7:18:da:cd:25:a3:0c:03:23:
ca:91:56:b3:36:66:fa:92:20:c0:30:03:8d:ee:a9:
ba:11:19:d6:60:7b:d6:3b:39:74:a2:ae:93:ce:12:
e6:6d:c9:a9:34:16:b6:fb:cb:bd:1c:bd:d0:c9:d0:
6f:03:4f:dd:9d:fe:42:ce:0f:05:df:f1:97:c8:24:
ed:eb:80:2b:1d:de:a3:88:7d:57:c4:0c:00:17:69:
60:5f:e7:1b:6b:d9:52:35:95:18:f4:e2:1a:3c:c0:
bd:9a:b1:9b:14:e1:e0:f4:a0:78:82:9a:c2:6c:5c:
e0:6a:ed:42:77:86:4a:a8:38:28:34:fb:5d:1f:23:
cc:14:ea:35:22:9f:7d:fe:83:71:29:f3:db:3d:68:
26:fb:0b:04:09:7e:56:a4:f6:d8:a7:f0:6b:3c:f6:
24:b1:26:54:78:9a:6a:2c:b2:4b:23:59:da:54:92:
61:dd:5f:35:6a:8a:7f:30:5e:b4:19:67:e7:59:05:
64:87:de:d1:8f:e7:f6:b8:37:71:d8:ba:4d:b4:8c:
25:5a:b6:11:3e:ca:52:7e:6e:a2:b6:c5:bb:eb:b0:
1b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:27:EF:48:6F:9E:DE:A4:56:16:AC:14:AA:6E:99:E2:E5:D3:F6:EE
X509v3 Authority Key Identifier:
keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:83:e1:24:5b:55:14:f7:eb:1b:ff:c0:ce:d7:8b:9c:92:5a:
47:95:3a:2f:9b:b4:49:5d:5a:63:e3:91:8c:dd:d5:05:da:c2:
20:84:c0:d3:ce:5f:d8:0b:af:c9:7d:c6:30:47:91:fb:1b:11:
06:5d:16:d0:3e:92:7a:0b:88:75:70:6e:cd:bb:4d:15:d7:16:
7c:43:2d:d6:4a:45:aa:38:24:74:16:a5:c4:0b:e7:1d:7f:d7:
f8:81:78:c7:2d:88:10:99:2b:2c:79:43:27:32:fc:e6:8c:f4:
81:4a:4a:62:d4:45:56:b8:73:18:04:67:2a:08:2f:5b:0c:bc:
6b:b9:d3:a1:65:10:0b:b1:b5:00:2f:43:f3:8b:e3:2c:39:f4:
f5:0e:02:09:c1:bd:d9:aa:1d:21:f8:3f:2b:26:11:ba:74:0e:
58:48:de:69:66:09:bf:84:00:2a:4b:2f:8f:d8:cf:32:11:4f:
18:4b:99:14:df:ce:df:ad:54:8b:83:74:c8:68:6b:8b:c1:68:
4e:0c:7b:b8:e9:c2:29:b9:a3:59:1b:e6:7b:92:74:2c:6b:e9:
2c:58:1d:82:55:1e:76:a7:e7:68:bc:4c:37:02:f5:8d:e6:72:
61:57:fb:50:23:a7:8f:68:70:c5:49:98:04:c6:57:63:c2:40:
95:e3:96:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn8qeI5uQutso/9E/U/gGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NmE4YzkxYWQzMTc0NWZmNzI3ZGEwNDgyZWRlMWIyZmFi
NDYyZTcwHhcNMjUwOTA3MTAwMTM4WhcNMjUwOTA4MTAwMTM4WjAzMTEwLwYDVQQD
Eyg4MTI3ZWY0ODZmOWVkZWE0NTYxNmFjMTRhYTZlOTllMmU1ZDNmNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OyGffS0Fy2mv4virbJUmxEOt73d
PUu8v2BBuPIyVZi/xG7HGNrNJaMMAyPKkVazNmb6kiDAMAON7qm6ERnWYHvWOzl0
oq6TzhLmbcmpNBa2+8u9HL3QydBvA0/dnf5Czg8F3/GXyCTt64ArHd6jiH1XxAwA
F2lgX+cba9lSNZUY9OIaPMC9mrGbFOHg9KB4gprCbFzgau1Cd4ZKqDgoNPtdHyPM
FOo1Ip99/oNxKfPbPWgm+wsECX5WpPbYp/BrPPYksSZUeJpqLLJLI1naVJJh3V81
aop/MF60GWfnWQVkh97Rj+f2uDdx2LpNtIwlWrYRPspSfm6itsW767Ab+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEn70hvnt6kVhasFKpumeLl0/buMB8GA1UdIwQY
MBaAFLVqjJGtMXRf9yfaBILt4bL6tGLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zNWZmMzItYTY4Ny00ZjUwLTk2OWEt
OTg2NDg5MDE2ODhmLzEvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8zNWZmMzItYTY4Ny00ZjUwLTk2OWEtOTg2NDg5MDE2ODhm
LzEvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYoPhJFtV
FPfrG//AzteLnJJaR5U6L5u0SV1aY+ORjN3VBdrCIITA085f2AuvyX3GMEeR+xsR
Bl0W0D6SeguIdXBuzbtNFdcWfEMt1kpFqjgkdBalxAvnHX/X+IF4xy2IEJkrLHlD
JzL85oz0gUpKYtRFVrhzGARnKggvWwy8a7nToWUQC7G1AC9D84vjLDn09Q4CCcG9
2aodIfg/KyYRunQOWEjeaWYJv4QAKksvj9jPMhFPGEuZFN/O361Ui4N0yGhri8Fo
Tgx7uOnCKbmjWRvme5J0LGvpLFgdglUedqfnaLxMNwL1jeZyYVf7UCOnj2hwxUmY
BMZXY8JAleOWAA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:01 2025 by rpki-client