Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
File: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft (raw, json)
Hash identifier: w8c/nnBdTmMwDhSYLRtZVToZTNLv+NFwAWCxI8Nxmho=
Subject key identifier: 71:42:44:82:63:DC:B7:B3:32:BD:32:39:59:87:B5:E8:CF:42:08:3C
Authority key identifier: B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
Certificate issuer: /CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Certificate serial: 019A4E19210F7F55E78708E606CBEF1F8637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 09:01:00 +0000
Manifest this update: Tue 04 Nov 2025 09:01:00 +0000
Manifest next update: Wed 05 Nov 2025 09:01:00 +0000
Files and hashes: 1: iRWK7zhmEqe5kSfNzw4pTeBGjvE.roa (hash: x9g5RUDfgJ6Mixu1OZfai6p4BgXIl99taX8ijSdqumo=)
2: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl (hash: tO0r+KicprVj7wB93HiMrzCMUhwQPpvPVJ3A7GwLzgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:21:0f:7f:55:e7:87:08:e6:06:cb:ef:1f:86:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Validity
Not Before: Nov 4 09:01:00 2025 GMT
Not After : Nov 5 09:01:00 2025 GMT
Subject: CN=7142448263dcb7b332bd32395987b5e8cf42083c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:02:e7:f4:f2:74:42:5e:2a:15:7d:91:2d:d4:
3f:20:e3:96:f4:0e:26:c4:02:c9:d3:35:79:ee:08:
79:7b:94:bb:78:b6:47:27:51:a5:09:2f:2d:98:0a:
3c:16:71:e4:9f:a4:b8:45:f5:f0:e5:42:6d:75:9d:
09:46:63:22:a0:66:24:dc:d9:2d:0d:38:e9:fe:28:
b0:8f:79:02:03:5d:29:c0:a6:f2:7f:2f:74:5f:f8:
c4:a1:47:7a:25:0c:67:b9:9f:7f:03:62:a2:41:5f:
38:38:52:ac:19:ee:97:5c:24:0a:a6:6b:e5:23:44:
04:3a:f9:fc:b6:e6:ad:39:9e:b3:8f:34:fd:93:da:
c8:e1:46:72:ab:f7:a1:81:bb:56:1d:5e:a7:32:a7:
9c:f2:26:9e:c8:92:29:65:d0:44:80:56:9d:8a:75:
ef:dd:16:17:38:13:e0:fe:48:58:41:c3:7d:18:47:
8d:49:9d:87:8f:d8:2a:68:58:65:43:2d:1b:14:8e:
2e:90:c9:65:5a:c7:71:6e:c6:ed:57:b4:75:42:a2:
c7:3b:79:6e:ed:eb:ac:dc:1b:1c:a5:e6:c4:0d:52:
6e:70:99:00:1a:c3:de:88:2f:b8:92:dc:9d:c2:50:
6e:55:5c:29:79:09:19:31:14:a4:5f:74:33:db:d5:
e4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:42:44:82:63:DC:B7:B3:32:BD:32:39:59:87:B5:E8:CF:42:08:3C
X509v3 Authority Key Identifier:
keyid:B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d6:9d:a5:4b:1b:68:29:00:80:84:5f:96:11:fc:df:b4:2b:
36:44:78:f0:bc:f7:b6:2d:b0:65:b9:83:b7:ea:38:06:4b:2d:
08:a8:47:f1:74:cb:d8:58:86:e5:bb:55:40:0d:88:7a:c3:d6:
fc:b4:2e:3c:ee:88:c3:94:3e:22:12:ab:c1:a8:11:26:57:df:
00:eb:be:49:cd:36:2e:ca:f0:50:18:08:43:17:5f:68:85:f3:
71:46:df:ef:76:31:fb:70:f3:bd:eb:98:18:a3:c8:73:76:5c:
b1:ae:32:3e:1e:1a:e5:8f:93:ed:58:d6:2f:ef:bb:da:8f:1e:
dd:20:7b:b4:fb:86:30:58:15:10:75:de:c1:4a:ab:5f:c8:b3:
35:a3:0a:1c:1d:97:8b:74:1e:36:7e:fc:10:89:14:50:e2:95:
db:5e:2a:29:f1:0e:62:7e:84:06:79:51:3f:4c:30:6f:b2:55:
ab:47:20:ad:a5:a3:28:ca:2e:ff:a0:a9:90:d6:a4:cb:54:75:
6e:d7:93:3c:6b:f2:43:96:82:e3:76:60:db:d5:d9:74:1f:5a:
8c:d4:b3:1f:c3:eb:93:cb:4c:fe:a5:5d:02:8f:40:60:2d:d4:
eb:6c:12:11:63:79:90:8e:49:94:de:41:67:c1:f3:8a:a3:72:
a8:e7:c6:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGSEPf1XnhwjmBsvvH4Y3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OWNiNzA5OTM0Yjk5ZjY4OWRkMWU5OWQ3MmMxYjAwMGZk
ODcyYzUwHhcNMjUxMTA0MDkwMTAwWhcNMjUxMTA1MDkwMTAwWjAzMTEwLwYDVQQD
Eyg3MTQyNDQ4MjYzZGNiN2IzMzJiZDMyMzk1OTg3YjVlOGNmNDIwODNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwLn9PJ0Ql4qFX2RLdQ/IOOW9A4m
xALJ0zV57gh5e5S7eLZHJ1GlCS8tmAo8FnHkn6S4RfXw5UJtdZ0JRmMioGYk3Nkt
DTjp/iiwj3kCA10pwKbyfy90X/jEoUd6JQxnuZ9/A2KiQV84OFKsGe6XXCQKpmvl
I0QEOvn8tuatOZ6zjzT9k9rI4UZyq/ehgbtWHV6nMqec8iaeyJIpZdBEgFadinXv
3RYXOBPg/khYQcN9GEeNSZ2Hj9gqaFhlQy0bFI4ukMllWsdxbsbtV7R1QqLHO3lu
7eus3BscpebEDVJucJkAGsPeiC+4ktydwlBuVVwpeQkZMRSkX3Qz29XkPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFCRIJj3LezMr0yOVmHtejPQgg8MB8GA1UdIwQY
MBaAFLactwmTS5n2id0emdcsGwAP2HLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHB5M0NaTkxtZmFKM1I2WjF5d2JBQV9ZY3NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80MWUyODctNTBiNC00NmVmLTgyY2Mt
Y2EzYjcyNzhkZGUyLzEvdHB5M0NaTkxtZmFKM1I2WjF5d2JBQV9ZY3NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS80MWUyODctNTBiNC00NmVmLTgyY2MtY2EzYjcyNzhkZGUy
LzEvdHB5M0NaTkxtZmFKM1I2WjF5d2JBQV9ZY3NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNadpUsb
aCkAgIRflhH837QrNkR48Lz3ti2wZbmDt+o4BkstCKhH8XTL2FiG5btVQA2IesPW
/LQuPO6Iw5Q+IhKrwagRJlffAOu+Sc02LsrwUBgIQxdfaIXzcUbf73Yx+3DzveuY
GKPIc3Zcsa4yPh4a5Y+T7VjWL++72o8e3SB7tPuGMFgVEHXewUqrX8izNaMKHB2X
i3QeNn78EIkUUOKV214qKfEOYn6EBnlRP0wwb7JVq0cgraWjKMou/6CpkNaky1R1
bteTPGvyQ5aC43Zg29XZdB9ajNSzH8Prk8tM/qVdAo9AYC3U62wSEWN5kI5JlN5B
Z8HziqNyqOfGgw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:14 2025 by rpki-client