Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.mft
File: TORqOpla2FRclax7aSMcpiT8iJM.mft (raw, json)
Hash identifier: AEVPEzDjvJBopB86UrFegqV/7F0kx75mZsi31AOzV5I=
Subject key identifier: F1:A9:33:1B:10:02:F7:3B:F7:99:9C:F3:CB:CA:4C:24:3B:ED:D5:75
Authority key identifier: 4C:E4:6A:3A:99:5A:D8:54:5C:95:AC:7B:69:23:1C:A6:24:FC:88:93
Certificate issuer: /CN=4ce46a3a995ad8545c95ac7b69231ca624fc8893
Certificate serial: 019923A010AB7FA2A3E67216417AA7AAC6A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TORqOpla2FRclax7aSMcpiT8iJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.mft
Manifest number: 1157
Signing time: Sun 07 Sep 2025 10:01:56 +0000
Manifest this update: Sun 07 Sep 2025 10:01:56 +0000
Manifest next update: Mon 08 Sep 2025 10:01:56 +0000
Files and hashes: 1: TORqOpla2FRclax7aSMcpiT8iJM.crl (hash: 2STRK5c9ZUTn3lSJdSuWtqorXw9enWbCua4fNgDkfbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TORqOpla2FRclax7aSMcpiT8iJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:10:ab:7f:a2:a3:e6:72:16:41:7a:a7:aa:c6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce46a3a995ad8545c95ac7b69231ca624fc8893
Validity
Not Before: Sep 7 10:01:56 2025 GMT
Not After : Sep 8 10:01:56 2025 GMT
Subject: CN=f1a9331b1002f73bf7999cf3cbca4c243bedd575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:78:25:69:28:77:33:06:1f:53:58:c7:3c:3e:
63:dd:20:f0:6f:1f:e2:39:5e:e6:2b:29:a5:f7:9f:
a5:ff:4b:ca:f4:79:b2:90:2f:ae:8b:c7:82:cb:ab:
99:00:e8:5c:c0:6c:d5:78:b0:89:67:0d:1d:b1:a4:
62:54:1d:35:71:cb:f1:35:3a:82:b6:55:b9:15:0d:
d9:2b:ea:ba:2d:63:97:d1:ed:07:cb:e4:6e:c6:a2:
d6:98:58:33:91:4e:3f:b4:95:a6:88:5b:ab:ff:37:
9f:98:93:bb:eb:34:9f:ed:3e:28:ca:b7:5a:25:86:
e6:d0:9b:05:80:f2:d7:9d:73:dd:e5:bd:d5:ee:d6:
97:d8:a1:72:f3:99:34:6e:65:0f:b8:8b:7d:bf:24:
4e:58:fe:64:c8:df:c6:cc:72:e3:02:4c:f5:96:c2:
ed:47:7c:a4:78:04:97:a3:57:f3:e9:ea:78:8a:47:
ed:a1:87:f1:e9:1d:25:55:ac:53:ea:26:df:61:da:
ff:21:5c:ff:50:9e:da:6f:a5:2b:15:ba:6b:7a:57:
50:bf:23:49:97:d4:f1:6b:92:bb:00:64:b3:49:8a:
75:db:12:87:5e:21:b9:37:e3:67:36:a4:cf:46:7a:
50:af:3a:56:e4:f4:20:8b:60:58:cc:ff:30:1c:ee:
90:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A9:33:1B:10:02:F7:3B:F7:99:9C:F3:CB:CA:4C:24:3B:ED:D5:75
X509v3 Authority Key Identifier:
keyid:4C:E4:6A:3A:99:5A:D8:54:5C:95:AC:7B:69:23:1C:A6:24:FC:88:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TORqOpla2FRclax7aSMcpiT8iJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:16:7d:c2:b8:b7:d1:b1:5f:37:0f:2e:14:21:98:01:d2:84:
55:72:6e:31:56:30:ff:1f:3c:1d:aa:24:a2:a3:61:8e:d0:7c:
00:ed:3f:17:03:26:89:b8:5e:87:ed:9a:67:9b:a8:1f:6c:c8:
ef:f4:e4:fd:b6:33:d8:b6:d6:eb:c5:6a:61:dd:1f:1b:e7:ea:
54:0a:78:93:0c:78:a3:8f:3f:0c:14:86:17:87:a5:e8:42:dd:
52:48:9a:98:97:3f:0c:54:95:95:cd:04:0a:c2:b7:34:61:e2:
97:5a:a5:a5:5a:80:f3:a4:32:0a:a7:1d:91:06:a7:e7:69:da:
91:31:97:61:d4:90:c2:6e:75:69:2f:26:91:8a:72:5e:fb:8b:
d8:20:13:03:bf:9d:80:74:f4:62:da:06:e0:33:89:9b:1e:b1:
81:31:0d:01:2c:0d:ad:b5:10:06:d3:00:a3:ca:0a:e8:d6:aa:
4a:3d:d0:09:8a:37:f1:f3:f8:d3:75:a1:03:5b:f2:5e:4d:a4:
07:60:f4:69:a8:8c:51:e2:38:35:a8:1a:92:50:8d:41:13:e9:
30:14:ef:6a:2a:67:4f:75:46:8e:68:07:1a:95:97:cd:38:d5:
54:8c:c0:82:22:5c:77:34:04:11:00:f0:7c:38:8a:9d:16:8b:
42:40:45:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoBCrf6Kj5nIWQXqnqsaoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTQ2YTNhOTk1YWQ4NTQ1Yzk1YWM3YjY5MjMxY2E2MjRm
Yzg4OTMwHhcNMjUwOTA3MTAwMTU2WhcNMjUwOTA4MTAwMTU2WjAzMTEwLwYDVQQD
EyhmMWE5MzMxYjEwMDJmNzNiZjc5OTljZjNjYmNhNGMyNDNiZWRkNTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XglaSh3MwYfU1jHPD5j3SDwbx/i
OV7mKyml95+l/0vK9HmykC+ui8eCy6uZAOhcwGzVeLCJZw0dsaRiVB01ccvxNTqC
tlW5FQ3ZK+q6LWOX0e0Hy+RuxqLWmFgzkU4/tJWmiFur/zefmJO76zSf7T4oyrda
JYbm0JsFgPLXnXPd5b3V7taX2KFy85k0bmUPuIt9vyROWP5kyN/GzHLjAkz1lsLt
R3ykeASXo1fz6ep4ikftoYfx6R0lVaxT6ibfYdr/IVz/UJ7ab6UrFbpreldQvyNJ
l9Txa5K7AGSzSYp12xKHXiG5N+NnNqTPRnpQrzpW5PQgi2BYzP8wHO6QOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGpMxsQAvc795mc88vKTCQ77dV1MB8GA1UdIwQY
MBaAFEzkajqZWthUXJWse2kjHKYk/IiTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9ScU9wbGEyRlJjbGF4N2FTTWNwaVQ4aUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iMzRkMDYtNTI0Ny00OGY4LTliNTYt
NjBmNmQ0YTVhNzRmLzEvVE9ScU9wbGEyRlJjbGF4N2FTTWNwaVQ4aUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iMzRkMDYtNTI0Ny00OGY4LTliNTYtNjBmNmQ0YTVhNzRm
LzEvVE9ScU9wbGEyRlJjbGF4N2FTTWNwaVQ4aUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRZ9wri3
0bFfNw8uFCGYAdKEVXJuMVYw/x88HaokoqNhjtB8AO0/FwMmibheh+2aZ5uoH2zI
7/Tk/bYz2LbW68VqYd0fG+fqVAp4kwx4o48/DBSGF4el6ELdUkiamJc/DFSVlc0E
CsK3NGHil1qlpVqA86QyCqcdkQan52nakTGXYdSQwm51aS8mkYpyXvuL2CATA7+d
gHT0YtoG4DOJmx6xgTENASwNrbUQBtMAo8oK6NaqSj3QCYo38fP403WhA1vyXk2k
B2D0aaiMUeI4NagaklCNQRPpMBTvaipnT3VGjmgHGpWXzTjVVIzAgiJcdzQEEQDw
fDiKnRaLQkBFCw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:53:45 2025 by rpki-client