Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
File: TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft (raw, json)
Hash identifier: RSx9AgvHNt7UVTlEc03pkLjLRWLLb6ebwMToTwM6rxI=
Subject key identifier: 83:93:AC:24:E6:C5:3D:D5:94:40:E5:D4:B1:24:5C:3F:DB:45:51:56
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Certificate issuer: /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial: 01992CD8CBBC6A2560F7E35CDF1D4D52B643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
Manifest number: 167B
Signing time: Tue 09 Sep 2025 05:00:29 +0000
Manifest this update: Tue 09 Sep 2025 05:00:29 +0000
Manifest next update: Wed 10 Sep 2025 05:00:29 +0000
Files and hashes: 1: 3hSBBEtakLk1jIWXi3hchM-uTBM.roa (hash: NhWJmyJNB4sc9UZdlJ419SqvZ3IVwqNXUyuWTH42r1U=)
2: TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl (hash: feju8j5Trj7Ho7YFdyFn7hVMZ78lac7e0KQlZHrVp6s=)
3: fziBQYI5VQChSmnvHhKXUMLYNKw.roa (hash: NEQyAGhhDS5WgZXodzUc9okNLj3B3fbMtY+K4TNZzLs=)
4: n7v5YOrSFGoXqVJ0PeytCrFgOLg.roa (hash: +oN44CijE7GRp64D6SkmoV+lAs+Tba+IrPKezC+0CLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:d8:cb:bc:6a:25:60:f7:e3:5c:df:1d:4d:52:b6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
Validity
Not Before: Sep 9 05:00:29 2025 GMT
Not After : Sep 10 05:00:29 2025 GMT
Subject: CN=8393ac24e6c53dd59440e5d4b1245c3fdb455156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:83:24:ce:f4:a9:21:51:c9:3c:a1:02:9e:
26:49:6f:26:bd:51:f3:d6:32:e6:2c:19:f0:6e:6f:
86:81:6c:89:e2:f0:a5:30:1e:cc:6d:ca:82:25:c8:
2d:a8:13:99:c5:43:8d:7d:78:56:5a:a7:6d:e5:1c:
93:55:a1:d9:6f:47:6e:91:8e:00:ea:9e:bc:02:06:
4b:70:de:70:29:1a:df:fc:12:6b:02:d6:7b:82:cf:
94:79:d1:93:68:81:8c:4a:bd:9e:7b:db:4f:d2:1d:
4f:da:9a:eb:39:84:a2:ba:16:f4:61:19:22:52:97:
2c:5c:d2:18:01:ef:67:68:29:3d:af:01:86:82:43:
a2:b2:5a:28:be:18:d5:87:6a:9e:ea:8c:52:3c:e1:
10:99:8a:b5:d3:72:78:a8:eb:35:86:fe:54:96:16:
6f:f6:6c:7e:cb:06:b6:17:f1:f5:02:be:8c:03:1f:
ea:84:91:68:e8:d6:4e:1f:fe:cb:49:66:22:09:cf:
60:ad:46:ce:dd:29:a1:5c:43:ea:17:08:67:2d:b9:
b9:65:12:5f:84:16:7f:d2:5a:61:df:29:41:71:e4:
60:04:ee:b8:57:0f:81:1c:80:28:ce:2a:2a:22:fd:
40:d2:09:82:82:71:29:fb:31:b2:0d:8f:93:32:f2:
42:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:93:AC:24:E6:C5:3D:D5:94:40:E5:D4:B1:24:5C:3F:DB:45:51:56
X509v3 Authority Key Identifier:
keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f9:65:ce:d9:06:ed:96:c5:1a:57:e1:53:a3:dd:4b:05:b3:
47:d0:db:98:75:63:35:8d:3f:c1:17:6f:41:b9:32:ce:dc:42:
b0:89:d8:f3:6a:b0:69:85:5a:57:1c:0c:47:83:a6:c6:1c:a9:
33:93:77:d0:d2:42:c2:6d:8c:83:13:6a:46:9e:d6:8a:76:8e:
a5:1d:89:a8:cb:56:eb:88:30:71:0a:a5:a0:5e:b0:26:d3:1b:
b0:17:02:4c:5f:a8:0e:35:48:a1:66:b1:e7:b8:12:94:aa:16:
5e:18:d6:f7:88:a8:50:6c:97:49:d0:eb:67:30:48:cc:df:12:
ea:8f:b8:3f:84:4f:45:51:9b:1c:08:1f:03:8f:ef:18:7d:a3:
09:39:1a:50:47:7c:a6:2a:09:e1:18:04:09:93:d0:3c:49:25:
e0:6d:b9:60:de:83:65:18:6d:d8:b3:56:d7:b9:8c:5c:b7:b7:
75:ca:d7:d0:2b:da:64:5e:f8:5a:d4:a9:4d:3e:5e:c5:03:49:
f8:ef:9a:c1:6d:06:cc:12:b7:9d:8f:f0:2a:b5:ee:66:ed:e2:
44:1a:56:5e:fd:a9:47:e8:f6:c5:5d:30:41:58:aa:e4:f2:bc:
14:30:e1:ed:fb:8e:6c:16:9a:fc:f8:8f:ec:b1:0f:a6:1a:2c:
f8:ba:77:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZks2Mu8aiVg9+Nc3x1NUrZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYWQwMzk3NDg3Nzk5ZTIxMThmZjRjYmNmOGYxNTk3NDdm
MzU4OTEwHhcNMjUwOTA5MDUwMDI5WhcNMjUwOTEwMDUwMDI5WjAzMTEwLwYDVQQD
Eyg4MzkzYWMyNGU2YzUzZGQ1OTQ0MGU1ZDRiMTI0NWMzZmRiNDU1MTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YODJM70qSFRyTyhAp4mSW8mvVHz
1jLmLBnwbm+GgWyJ4vClMB7MbcqCJcgtqBOZxUONfXhWWqdt5RyTVaHZb0dukY4A
6p68AgZLcN5wKRrf/BJrAtZ7gs+UedGTaIGMSr2ee9tP0h1P2prrOYSiuhb0YRki
UpcsXNIYAe9naCk9rwGGgkOisloovhjVh2qe6oxSPOEQmYq103J4qOs1hv5UlhZv
9mx+ywa2F/H1Ar6MAx/qhJFo6NZOH/7LSWYiCc9grUbO3SmhXEPqFwhnLbm5ZRJf
hBZ/0lph3ylBceRgBO64Vw+BHIAozioqIv1A0gmCgnEp+zGyDY+TMvJCUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOTrCTmxT3VlEDl1LEkXD/bRVFWMB8GA1UdIwQY
MBaAFEytA5dId5niEY/0y8+PFZdH81iRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEswRGwwaDNtZUlSal9UTHo0OFZsMGZ6V0pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lYTAxOTYtYWI3OS00MmNmLWFiMmIt
ZmM0YjAzNzEwYWUwLzEvVEswRGwwaDNtZUlSal9UTHo0OFZsMGZ6V0pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lYTAxOTYtYWI3OS00MmNmLWFiMmItZmM0YjAzNzEwYWUw
LzEvVEswRGwwaDNtZUlSal9UTHo0OFZsMGZ6V0pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivllztkG
7ZbFGlfhU6PdSwWzR9DbmHVjNY0/wRdvQbkyztxCsInY82qwaYVaVxwMR4Omxhyp
M5N30NJCwm2MgxNqRp7WinaOpR2JqMtW64gwcQqloF6wJtMbsBcCTF+oDjVIoWax
57gSlKoWXhjW94ioUGyXSdDrZzBIzN8S6o+4P4RPRVGbHAgfA4/vGH2jCTkaUEd8
pioJ4RgECZPQPEkl4G25YN6DZRht2LNW17mMXLe3dcrX0CvaZF74WtSpTT5exQNJ
+O+awW0GzBK3nY/wKrXuZu3iRBpWXv2pR+j2xV0wQViq5PK8FDDh7fuObBaa/PiP
7LEPphos+Lp3hw==
-----END CERTIFICATE-----
Generated at Tue Sep 9 09:32:38 2025 by rpki-client