Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
File: TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft (raw, json)
Hash identifier: IGko8E+pd9EgwlFugHhTsJFmG5GoB7CjV5v2gfNNBv8=
Subject key identifier: A3:71:1D:14:56:2A:FF:71:0F:49:6E:EC:38:86:35:93:9C:26:0A:C8
Authority key identifier: 4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3
Certificate issuer: /CN=4c8343edc843542f529fbc3e650cb6578c9206c3
Certificate serial: 0199240D2C5AF0D49389B09D0BD50C73A913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
Manifest number: 0ECD
Signing time: Sun 07 Sep 2025 12:01:06 +0000
Manifest this update: Sun 07 Sep 2025 12:01:06 +0000
Manifest next update: Mon 08 Sep 2025 12:01:06 +0000
Files and hashes: 1: TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl (hash: 3AaG3uRhzb5r57QYPVBagcLolWuteGlWk5svF95Vv2k=)
2: yO8yGDlp-pgPsfCtW6-Sdqgf6z8.roa (hash: SH391E3HYBBZSzKR5WZ5E1ALuIU3dss9i9wIgwa0Lyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:2c:5a:f0:d4:93:89:b0:9d:0b:d5:0c:73:a9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8343edc843542f529fbc3e650cb6578c9206c3
Validity
Not Before: Sep 7 12:01:06 2025 GMT
Not After : Sep 8 12:01:06 2025 GMT
Subject: CN=a3711d14562aff710f496eec388635939c260ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:2c:3e:05:01:28:ea:80:10:a8:89:16:e5:
ce:c6:d7:f9:ae:e9:f9:5d:e7:29:da:cb:3d:d1:a1:
98:8c:2e:81:61:2d:49:75:0b:fb:5f:3f:62:bb:41:
ef:d6:d9:73:dc:38:e8:9c:65:57:5d:4d:3e:dc:84:
5b:07:de:01:67:99:12:ef:04:76:77:eb:fb:83:a6:
e9:5f:6c:d2:86:9a:3e:64:fa:77:ca:e1:a3:cd:41:
50:e4:6e:cd:ab:82:78:06:a6:11:e2:0e:25:64:7d:
33:65:da:05:69:ff:1e:cd:c1:f7:c5:e5:91:ef:13:
3c:71:be:af:a7:60:68:fd:77:01:3c:8f:2b:2c:0d:
bf:29:03:5f:b8:f8:1e:21:6a:cc:25:b2:e9:da:84:
3a:76:25:c8:31:a6:88:de:e8:c6:ad:93:88:54:40:
3b:ab:a1:af:ed:31:ce:65:9f:b0:e4:b5:11:84:13:
38:13:99:c8:9f:6b:21:ca:6f:a5:2b:b4:ec:26:d1:
b9:42:67:81:7d:9c:90:25:a4:86:7c:b7:eb:91:ed:
d1:a3:c3:18:2b:ec:ed:8c:72:3c:5a:aa:ab:3d:de:
ee:e9:fa:8f:47:05:d0:28:07:cb:5d:cf:ae:6e:75:
b7:b2:fb:66:81:d6:e6:dd:82:47:1c:4f:b5:1b:d2:
97:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:71:1D:14:56:2A:FF:71:0F:49:6E:EC:38:86:35:93:9C:26:0A:C8
X509v3 Authority Key Identifier:
keyid:4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:45:1b:57:5f:c8:24:2a:84:4e:c0:70:cf:26:19:48:dc:0c:
ab:0c:34:64:08:b9:74:a9:87:03:c5:94:cd:20:d4:54:c5:dc:
73:f6:d1:fc:13:34:23:be:56:6e:3e:a9:02:06:bf:64:c8:31:
88:d2:52:b5:75:8c:94:bb:e2:e6:60:f0:a7:f2:cb:d9:56:83:
f3:35:18:63:77:b2:e1:b5:32:12:f8:8f:2d:0a:2c:4c:0c:57:
7c:39:18:b4:53:7b:ad:73:a7:be:37:2a:f4:8e:e4:a7:f8:5e:
0b:51:9f:27:2c:82:9f:6b:61:3a:32:b9:bd:1c:2f:89:47:20:
27:c1:47:22:a9:22:34:fb:00:94:d8:f9:41:f0:3c:92:ea:7b:
c7:de:63:f1:5d:fa:1a:24:6c:4b:ed:66:c2:f9:08:90:a9:5f:
ca:5d:bc:5c:07:c2:d0:a4:b5:9b:41:e2:c2:0a:d7:4a:6b:cf:
e7:3c:99:c1:3c:d2:d9:e9:6e:07:2f:d1:ae:e9:96:b9:11:f9:
6d:44:8a:fc:bf:1f:e3:c6:f5:dd:8e:e9:9b:48:11:3c:3a:7d:
6c:15:8c:d8:f6:06:07:0f:3c:f9:4f:e6:7f:a4:c7:07:cf:43:
44:40:f6:01:9e:5b:a5:64:c7:f7:fd:cb:87:12:e6:69:58:2a:
1f:d6:48:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDSxa8NSTibCdC9UMc6kTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjODM0M2VkYzg0MzU0MmY1MjlmYmMzZTY1MGNiNjU3OGM5
MjA2YzMwHhcNMjUwOTA3MTIwMTA2WhcNMjUwOTA4MTIwMTA2WjAzMTEwLwYDVQQD
EyhhMzcxMWQxNDU2MmFmZjcxMGY0OTZlZWMzODg2MzU5MzljMjYwYWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYksPgUBKOqAEKiJFuXOxtf5run5
Xecp2ss90aGYjC6BYS1JdQv7Xz9iu0Hv1tlz3DjonGVXXU0+3IRbB94BZ5kS7wR2
d+v7g6bpX2zShpo+ZPp3yuGjzUFQ5G7Nq4J4BqYR4g4lZH0zZdoFaf8ezcH3xeWR
7xM8cb6vp2Bo/XcBPI8rLA2/KQNfuPgeIWrMJbLp2oQ6diXIMaaI3ujGrZOIVEA7
q6Gv7THOZZ+w5LURhBM4E5nIn2shym+lK7TsJtG5QmeBfZyQJaSGfLfrke3Ro8MY
K+ztjHI8WqqrPd7u6fqPRwXQKAfLXc+ubnW3svtmgdbm3YJHHE+1G9KXgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNxHRRWKv9xD0lu7DiGNZOcJgrIMB8GA1UdIwQY
MBaAFEyDQ+3IQ1QvUp+8PmUMtleMkgbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVElORDdjaERWQzlTbjd3LVpReTJWNHlTQnNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC84ZTgyMTgtNmZiNi00ZTY5LTkyZTYt
ZTljZTI5MWQyMThmLzEvVElORDdjaERWQzlTbjd3LVpReTJWNHlTQnNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC84ZTgyMTgtNmZiNi00ZTY5LTkyZTYtZTljZTI5MWQyMThm
LzEvVElORDdjaERWQzlTbjd3LVpReTJWNHlTQnNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0UbV1/I
JCqETsBwzyYZSNwMqww0ZAi5dKmHA8WUzSDUVMXcc/bR/BM0I75Wbj6pAga/ZMgx
iNJStXWMlLvi5mDwp/LL2VaD8zUYY3ey4bUyEviPLQosTAxXfDkYtFN7rXOnvjcq
9I7kp/heC1GfJyyCn2thOjK5vRwviUcgJ8FHIqkiNPsAlNj5QfA8kup7x95j8V36
GiRsS+1mwvkIkKlfyl28XAfC0KS1m0HiwgrXSmvP5zyZwTzS2eluBy/RrumWuRH5
bUSK/L8f48b13Y7pm0gRPDp9bBWM2PYGBw88+U/mf6THB89DRED2AZ5bpWTH9/3L
hxLmaVgqH9ZI9g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 16:12:20 2025 by rpki-client