Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
File: v_tlOi9T2WcLP5GEAgnz8seKwbI.mft (raw, json)
Hash identifier: 0Bsk/XMFidhTSHTN4OGV5EkrAzyXe4104fzPPpMvW64=
Subject key identifier: A2:92:32:32:F4:F4:A3:05:20:EA:DF:BA:62:CF:52:2D:BE:9D:FC:87
Authority key identifier: BF:FB:65:3A:2F:53:D9:67:0B:3F:91:84:02:09:F3:F2:C7:8A:C1:B2
Certificate issuer: /CN=bffb653a2f53d9670b3f91840209f3f2c78ac1b2
Certificate serial: 019A4D05C46C435E88976DE710D31350F6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 04:00:14 +0000
Manifest this update: Tue 04 Nov 2025 04:00:14 +0000
Manifest next update: Wed 05 Nov 2025 04:00:14 +0000
Files and hashes: 1: v_tlOi9T2WcLP5GEAgnz8seKwbI.crl (hash: iiVGtmrO60hHiihRlsWoJ5YLMcIRJdGokSzwaY7BFN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:c4:6c:43:5e:88:97:6d:e7:10:d3:13:50:f6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bffb653a2f53d9670b3f91840209f3f2c78ac1b2
Validity
Not Before: Nov 4 04:00:14 2025 GMT
Not After : Nov 5 04:00:14 2025 GMT
Subject: CN=a2923232f4f4a30520eadfba62cf522dbe9dfc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:ab:2f:44:ca:10:b3:b1:e0:0c:5d:b9:50:
f8:02:35:b5:d3:c7:d2:ef:f9:08:8a:cb:55:ca:2c:
42:45:08:d6:cb:f7:5f:b8:74:46:62:e0:e1:b9:36:
a7:c8:03:8d:76:b9:2c:60:08:3d:43:65:ec:8d:cd:
a6:8c:6d:6e:71:bb:38:7f:f8:04:e6:fe:4f:3f:05:
79:5c:4f:cd:b0:c4:80:f1:2d:d2:45:af:3e:09:97:
6b:6a:0b:51:76:8b:91:4a:1e:00:aa:aa:29:bf:9b:
ef:a5:d6:8d:b8:68:f6:b2:50:2b:66:e8:9e:06:63:
fe:7b:c3:4e:e2:87:4f:4c:3e:57:fd:7d:75:50:8b:
cc:19:21:99:24:00:95:0b:af:1a:9e:24:c3:a2:16:
92:02:9c:f3:04:41:de:26:fd:82:07:2d:25:ca:60:
fc:89:1c:3e:49:77:73:b9:bf:aa:e7:d9:63:e5:a3:
4a:31:ab:50:47:7e:81:63:69:d9:83:1c:d3:6c:41:
79:d5:a7:1b:3c:29:ed:00:d5:a4:09:0a:d3:38:2b:
be:6f:dc:8c:41:61:7b:c1:a3:05:36:fe:c4:ac:87:
3d:08:ba:dd:6d:06:2f:97:49:44:1c:ef:4b:55:25:
11:95:7e:35:45:a6:c7:0c:4f:36:4d:ca:de:50:c8:
36:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:92:32:32:F4:F4:A3:05:20:EA:DF:BA:62:CF:52:2D:BE:9D:FC:87
X509v3 Authority Key Identifier:
keyid:BF:FB:65:3A:2F:53:D9:67:0B:3F:91:84:02:09:F3:F2:C7:8A:C1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:67:2f:c7:34:5e:9a:d9:df:47:27:f8:57:0c:82:87:ea:21:
88:f3:bb:2e:80:17:32:3a:53:9a:4d:6d:6a:f5:5c:61:42:c7:
73:11:78:05:45:3c:35:2f:f6:c9:9a:c0:4e:45:40:9c:78:df:
71:2c:cb:c2:1b:6a:97:2b:a3:d6:98:3c:ea:5d:0a:32:3c:fd:
36:b6:76:ea:51:a5:69:da:90:6b:2c:f5:55:f1:88:2e:8b:9c:
8e:59:b4:fa:26:3a:c5:6f:22:e3:22:d8:94:14:13:b5:40:b6:
b9:bc:f3:ca:24:d9:54:f2:92:d4:fe:52:c2:df:ee:ed:8a:8b:
32:d3:7a:9c:83:b8:ec:bb:b8:58:04:35:f6:ce:44:76:46:3d:
54:37:21:71:39:ed:80:e2:e4:bb:f7:cd:35:81:20:9c:58:95:
13:a3:5c:3b:47:37:43:26:46:02:af:c3:9b:d1:e2:78:d8:c1:
71:17:fc:b5:a7:44:ba:ea:ec:69:cb:a2:1b:c3:e4:95:eb:0b:
30:d2:db:dc:76:57:68:ad:95:0a:a8:aa:1f:0c:69:3d:82:b9:
74:c5:74:eb:5b:90:05:02:69:bc:85:b6:82:c2:cc:e5:f2:65:
07:8b:06:16:27:cf:b3:a6:32:20:c1:15:59:df:07:a6:54:43:
a9:4c:5d:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBcRsQ16Il23nENMTUPbjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZmI2NTNhMmY1M2Q5NjcwYjNmOTE4NDAyMDlmM2YyYzc4
YWMxYjIwHhcNMjUxMTA0MDQwMDE0WhcNMjUxMTA1MDQwMDE0WjAzMTEwLwYDVQQD
EyhhMjkyMzIzMmY0ZjRhMzA1MjBlYWRmYmE2MmNmNTIyZGJlOWRmYzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2CrL0TKELOx4AxduVD4AjW108fS
7/kIistVyixCRQjWy/dfuHRGYuDhuTanyAONdrksYAg9Q2Xsjc2mjG1ucbs4f/gE
5v5PPwV5XE/NsMSA8S3SRa8+CZdragtRdouRSh4Aqqopv5vvpdaNuGj2slArZuie
BmP+e8NO4odPTD5X/X11UIvMGSGZJACVC68aniTDohaSApzzBEHeJv2CBy0lymD8
iRw+SXdzub+q59lj5aNKMatQR36BY2nZgxzTbEF51acbPCntANWkCQrTOCu+b9yM
QWF7waMFNv7ErIc9CLrdbQYvl0lEHO9LVSURlX41RabHDE82TcreUMg2jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKSMjL09KMFIOrfumLPUi2+nfyHMB8GA1UdIwQY
MBaAFL/7ZTovU9lnCz+RhAIJ8/LHisGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdl90bE9pOVQyV2NMUDVHRUFnbno4c2VLd2JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMDdlMzAtMTc3ZC00YjNmLWI1NjQt
YmQyZjhjNmQ1NDk5LzEvdl90bE9pOVQyV2NMUDVHRUFnbno4c2VLd2JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMDdlMzAtMTc3ZC00YjNmLWI1NjQtYmQyZjhjNmQ1NDk5
LzEvdl90bE9pOVQyV2NMUDVHRUFnbno4c2VLd2JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGcvxzRe
mtnfRyf4VwyCh+ohiPO7LoAXMjpTmk1tavVcYULHcxF4BUU8NS/2yZrATkVAnHjf
cSzLwhtqlyuj1pg86l0KMjz9NrZ26lGladqQayz1VfGILoucjlm0+iY6xW8i4yLY
lBQTtUC2ubzzyiTZVPKS1P5Swt/u7YqLMtN6nIO47Lu4WAQ19s5EdkY9VDchcTnt
gOLku/fNNYEgnFiVE6NcO0c3QyZGAq/Dm9HieNjBcRf8tadEuursacuiG8PklesL
MNLb3HZXaK2VCqiqHwxpPYK5dMV061uQBQJpvIW2gsLM5fJlB4sGFifPs6YyIMEV
Wd8HplRDqUxdHA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:50 2025 by rpki-client