Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
File: tWyxebPbXGs2zTMINAgB_tsrfRk.mft (raw, json)
Hash identifier: ojfgVM0MF9WwdyJHZ4jTQP0Veu7wzfAB+uJ8D6hROl0=
Subject key identifier: 1E:E0:DD:F5:A6:5E:E3:B2:28:D9:20:B3:AA:F0:A3:94:0D:F4:97:A7
Authority key identifier: B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
Certificate issuer: /CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Certificate serial: 01992BC6793C987A25970CD9F43299436637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
Manifest number: 1678
Signing time: Tue 09 Sep 2025 00:00:51 +0000
Manifest this update: Tue 09 Sep 2025 00:00:51 +0000
Manifest next update: Wed 10 Sep 2025 00:00:51 +0000
Files and hashes: 1: egERklG4JDoNVaiZcO7pQtm8HwI.roa (hash: UCPCOxDDKaXVSI1SbOM7CcRIC7mRuotxlKVUCRUv8VQ=)
2: tWyxebPbXGs2zTMINAgB_tsrfRk.crl (hash: nP8RG/hHR+OkHdW57S7rxesAOkOw5dHWYigQ5RH52lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:c6:79:3c:98:7a:25:97:0c:d9:f4:32:99:43:66:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Validity
Not Before: Sep 9 00:00:51 2025 GMT
Not After : Sep 10 00:00:51 2025 GMT
Subject: CN=1ee0ddf5a65ee3b228d920b3aaf0a3940df497a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f7:05:a3:92:4f:90:11:88:07:a3:86:c4:5e:
6d:71:54:3e:ee:d2:c3:a7:5e:d6:65:be:8e:b2:97:
06:75:05:78:4c:e5:44:86:d7:fe:23:ae:b7:43:68:
fc:4b:84:77:5a:13:9f:a8:4b:b9:4b:e1:fc:5d:0f:
45:8c:4d:b1:a9:2d:cd:a9:a5:c6:7d:0b:95:33:1a:
c2:f9:e7:3c:c2:81:ae:e9:b2:4e:77:0a:91:48:aa:
89:aa:2c:ad:e0:dc:f4:42:79:7a:b8:20:51:ae:09:
82:f1:99:10:a9:90:8d:d1:c2:fb:ae:0b:16:5d:e0:
03:49:44:95:f5:85:31:86:20:5e:10:5b:2b:bf:73:
81:78:a1:63:e7:61:a1:7e:f4:bd:ef:c7:e2:3d:32:
25:fa:04:70:04:0a:8e:a1:b1:d4:de:0a:21:85:94:
fc:67:e7:d0:42:90:c9:7c:df:b5:f4:54:d5:c4:c7:
22:7d:01:03:f8:73:b0:f5:fa:73:a4:08:52:28:6e:
7a:fa:47:d4:e9:bc:a7:b7:ce:46:33:3c:87:98:54:
ed:69:35:b9:1f:e7:fb:47:27:3f:24:e0:84:30:83:
2e:6d:1f:bc:d2:16:56:2e:1d:d6:29:a6:c0:ef:46:
8c:c7:0a:5f:55:85:07:97:3a:c7:c7:b5:2d:4b:e0:
d4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E0:DD:F5:A6:5E:E3:B2:28:D9:20:B3:AA:F0:A3:94:0D:F4:97:A7
X509v3 Authority Key Identifier:
keyid:B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:88:0a:a3:fa:d0:a3:4a:8b:8d:7d:be:a0:b8:bb:f0:cc:c7:
a7:b7:8a:08:26:e7:b0:37:a2:8c:73:00:b1:d3:00:c4:78:57:
18:65:19:ee:b1:c5:d6:7d:d5:24:e0:ea:9c:95:6f:cc:ac:af:
4b:68:03:0d:ac:3d:32:bb:99:4e:55:3f:73:1c:5e:70:f3:3c:
1c:5a:13:25:e8:79:0d:f4:d8:c4:12:6e:3e:f8:dd:3a:ed:e7:
c2:13:3f:ad:0f:4a:2a:7c:91:69:5a:2b:c9:95:3c:03:87:ae:
25:32:7b:5a:9a:5b:50:ed:8e:bf:35:41:5b:17:69:1d:ca:d7:
c5:b3:76:ae:7a:71:60:89:24:d6:63:59:aa:76:d8:bd:9c:81:
b0:77:06:20:5c:af:e8:b5:22:34:d9:05:f1:fe:71:89:f1:72:
34:31:54:04:dc:45:d1:eb:b1:7d:0d:e9:38:34:77:3e:b6:0d:
bd:67:df:c6:4f:ce:e9:94:e5:0e:5c:bd:c5:fb:00:60:eb:54:
85:f7:d4:25:79:f5:91:19:b4:c9:36:a2:a6:92:91:be:28:b6:
7c:ca:b1:e9:68:50:e6:4a:e4:6d:97:65:21:f4:af:5e:75:a1:
e6:f6:b2:a4:03:9a:23:fe:7b:58:da:f6:f5:cb:6a:07:2f:05:
f7:68:85:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkrxnk8mHollwzZ9DKZQ2Y3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NmNiMTc5YjNkYjVjNmIzNmNkMzMwODM0MDgwMWZlZGIy
YjdkMTkwHhcNMjUwOTA5MDAwMDUxWhcNMjUwOTEwMDAwMDUxWjAzMTEwLwYDVQQD
EygxZWUwZGRmNWE2NWVlM2IyMjhkOTIwYjNhYWYwYTM5NDBkZjQ5N2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvcFo5JPkBGIB6OGxF5tcVQ+7tLD
p17WZb6OspcGdQV4TOVEhtf+I663Q2j8S4R3WhOfqEu5S+H8XQ9FjE2xqS3NqaXG
fQuVMxrC+ec8woGu6bJOdwqRSKqJqiyt4Nz0Qnl6uCBRrgmC8ZkQqZCN0cL7rgsW
XeADSUSV9YUxhiBeEFsrv3OBeKFj52GhfvS978fiPTIl+gRwBAqOobHU3gohhZT8
Z+fQQpDJfN+19FTVxMcifQED+HOw9fpzpAhSKG56+kfU6bynt85GMzyHmFTtaTW5
H+f7Ryc/JOCEMIMubR+80hZWLh3WKabA70aMxwpfVYUHlzrHx7UtS+DUvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7g3fWmXuOyKNkgs6rwo5QN9JenMB8GA1UdIwQY
MBaAFLVssXmz21xrNs0zCDQIAf7bK30ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFd5eGViUGJYR3MyelRNSU5BZ0JfdHNyZlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy82NDlhOTgtMzM5YS00ZjRiLTg3NTAt
NmU5ZDNiNzMyYjA4LzEvdFd5eGViUGJYR3MyelRNSU5BZ0JfdHNyZlJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy82NDlhOTgtMzM5YS00ZjRiLTg3NTAtNmU5ZDNiNzMyYjA4
LzEvdFd5eGViUGJYR3MyelRNSU5BZ0JfdHNyZlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYgKo/rQ
o0qLjX2+oLi78MzHp7eKCCbnsDeijHMAsdMAxHhXGGUZ7rHF1n3VJODqnJVvzKyv
S2gDDaw9MruZTlU/cxxecPM8HFoTJeh5DfTYxBJuPvjdOu3nwhM/rQ9KKnyRaVor
yZU8A4euJTJ7WppbUO2OvzVBWxdpHcrXxbN2rnpxYIkk1mNZqnbYvZyBsHcGIFyv
6LUiNNkF8f5xifFyNDFUBNxF0euxfQ3pODR3PrYNvWffxk/O6ZTlDly9xfsAYOtU
hffUJXn1kRm0yTaippKRvii2fMqx6WhQ5krkbZdlIfSvXnWh5vaypAOaI/57WNr2
9ctqBy8F92iFcw==
-----END CERTIFICATE-----
Generated at Tue Sep 9 04:15:50 2025 by rpki-client