Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
File: tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft (raw, json)
Hash identifier: mT+3oa0RgUEPAuM8iex/lMDJwm/G7kMwxtKSFs3mbuo=
Subject key identifier: 07:58:1D:9C:6E:B1:40:15:78:BE:8F:6E:32:39:BB:D8:7A:8C:9A:99
Authority key identifier: B5:0E:DF:C9:6D:2B:61:78:86:89:53:31:42:96:9E:65:56:65:12:AA
Certificate issuer: /CN=b50edfc96d2b61788689533142969e65566512aa
Certificate serial: 019922558A8831F41D444936C858EAD5B949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
Manifest number: 15EF
Signing time: Sun 07 Sep 2025 04:00:55 +0000
Manifest this update: Sun 07 Sep 2025 04:00:55 +0000
Manifest next update: Mon 08 Sep 2025 04:00:55 +0000
Files and hashes: 1: tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl (hash: M4SoHdAAItFhvIGESCnTs44SQ1fpzgWZ8yt7OSvRaeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:8a:88:31:f4:1d:44:49:36:c8:58:ea:d5:b9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50edfc96d2b61788689533142969e65566512aa
Validity
Not Before: Sep 7 04:00:55 2025 GMT
Not After : Sep 8 04:00:55 2025 GMT
Subject: CN=07581d9c6eb1401578be8f6e3239bbd87a8c9a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:79:9a:38:47:b2:17:da:bb:ef:95:73:74:
73:1c:eb:89:da:63:21:38:ff:60:a8:c1:b1:2c:6c:
8e:1d:3e:6d:bd:f2:42:19:a0:c1:de:56:b7:a5:2a:
79:d5:43:42:1c:97:94:81:9e:54:cd:00:85:db:99:
c4:9b:e2:a9:ae:d2:ab:38:42:73:57:5b:91:3f:ee:
83:dc:a5:ef:d4:82:30:28:e4:95:c8:f7:c1:32:bf:
73:69:e1:ea:4f:94:a3:c9:09:bf:9a:fa:60:01:e9:
de:ac:6b:b3:31:1a:f4:3a:c2:fb:48:39:af:ee:a5:
07:02:6f:fc:ed:13:3b:ed:f9:d3:1d:9d:4c:3b:2a:
e3:8f:58:68:60:58:05:1e:8a:ca:8c:c3:6f:15:97:
33:20:ba:59:41:59:0e:f0:31:59:7b:f2:e8:9b:d7:
b8:67:00:5e:7a:b9:15:ae:21:d7:3a:7f:53:46:30:
dd:86:07:7e:86:e1:02:0c:59:ad:21:95:00:6a:99:
c4:bf:93:e5:95:0c:c9:ac:68:b7:e4:00:8a:2d:18:
cf:f7:78:01:b5:9e:9f:f8:c7:eb:d8:05:f3:bf:a5:
37:c4:ae:2c:db:4d:6c:34:b1:b6:b8:2c:f4:e4:46:
c8:d5:6a:55:74:f9:19:14:99:e1:73:41:23:6c:da:
45:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:58:1D:9C:6E:B1:40:15:78:BE:8F:6E:32:39:BB:D8:7A:8C:9A:99
X509v3 Authority Key Identifier:
keyid:B5:0E:DF:C9:6D:2B:61:78:86:89:53:31:42:96:9E:65:56:65:12:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f6:d7:80:35:8a:81:e2:ee:bb:a5:14:d8:25:03:17:0a:b6:
51:b2:2f:34:43:9e:87:b6:9c:49:cb:2c:21:9a:62:e3:c1:ab:
17:3f:2d:f8:a0:63:9a:56:9b:51:16:8c:79:24:ed:29:ff:08:
3c:08:18:17:90:fe:44:14:f9:58:16:9b:2d:27:61:ce:64:5f:
7e:f0:e9:65:34:0f:de:ae:67:e5:7d:40:e9:32:0f:69:46:e9:
b8:5d:8e:a4:c0:73:a7:f9:f5:15:d7:a5:64:e5:db:64:4b:6a:
8c:1f:aa:b3:13:ce:ed:c7:02:b1:48:08:3f:77:36:ae:39:ad:
c8:78:a4:28:80:7a:de:96:1a:8f:50:4a:7a:5e:ba:a6:eb:f8:
82:e1:23:a6:e5:16:03:aa:43:1d:e3:0d:0f:3c:dd:2f:05:3b:
74:4b:8b:23:c1:0b:76:0d:82:e9:a7:ca:76:fe:4f:8f:29:ee:
2b:fd:49:f1:b1:e9:d9:c6:9b:c5:c6:35:df:d3:7f:b7:1e:89:
2b:f5:71:e9:c5:56:ba:a2:4f:35:4d:da:8e:22:55:73:de:3e:
5d:0e:fe:eb:04:09:cc:b5:e9:02:e4:db:d6:b3:60:93:e5:22:
34:72:20:7f:0c:bf:fc:90:eb:4d:18:72:52:2e:f7:50:ef:c0:
8e:70:06:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVYqIMfQdREk2yFjq1blJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MGVkZmM5NmQyYjYxNzg4Njg5NTMzMTQyOTY5ZTY1NTY2
NTEyYWEwHhcNMjUwOTA3MDQwMDU1WhcNMjUwOTA4MDQwMDU1WjAzMTEwLwYDVQQD
EygwNzU4MWQ5YzZlYjE0MDE1NzhiZThmNmUzMjM5YmJkODdhOGM5YTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqal5mjhHshfau++Vc3RzHOuJ2mMh
OP9gqMGxLGyOHT5tvfJCGaDB3la3pSp51UNCHJeUgZ5UzQCF25nEm+KprtKrOEJz
V1uRP+6D3KXv1IIwKOSVyPfBMr9zaeHqT5SjyQm/mvpgAenerGuzMRr0OsL7SDmv
7qUHAm/87RM77fnTHZ1MOyrjj1hoYFgFHorKjMNvFZczILpZQVkO8DFZe/Lom9e4
ZwBeerkVriHXOn9TRjDdhgd+huECDFmtIZUAapnEv5PllQzJrGi35ACKLRjP93gB
tZ6f+Mfr2AXzv6U3xK4s201sNLG2uCz05EbI1WpVdPkZFJnhc0EjbNpF1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdYHZxusUAVeL6PbjI5u9h6jJqZMB8GA1UdIwQY
MBaAFLUO38ltK2F4holTMUKWnmVWZRKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFE3ZnlXMHJZWGlHaVZNeFFwYWVaVlpsRXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kYzA5Y2YtNzcwYy00MTcyLWE2ZWUt
YjYxMzg0ZmYwZWMyLzEvdFE3ZnlXMHJZWGlHaVZNeFFwYWVaVlpsRXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9kYzA5Y2YtNzcwYy00MTcyLWE2ZWUtYjYxMzg0ZmYwZWMy
LzEvdFE3ZnlXMHJZWGlHaVZNeFFwYWVaVlpsRXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvPbXgDWK
geLuu6UU2CUDFwq2UbIvNEOeh7acScssIZpi48GrFz8t+KBjmlabURaMeSTtKf8I
PAgYF5D+RBT5WBabLSdhzmRffvDpZTQP3q5n5X1A6TIPaUbpuF2OpMBzp/n1Fdel
ZOXbZEtqjB+qsxPO7ccCsUgIP3c2rjmtyHikKIB63pYaj1BKel66puv4guEjpuUW
A6pDHeMNDzzdLwU7dEuLI8ELdg2C6afKdv5PjynuK/1J8bHp2cabxcY139N/tx6J
K/Vx6cVWuqJPNU3ajiJVc94+XQ7+6wQJzLXpAuTb1rNgk+UiNHIgfwy//JDrTRhy
Ui73UO/AjnAGYw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:41 2025 by rpki-client