Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
File: i-tlpxrwKVknKswA1cTBlYOF3pQ.mft (raw, json)
Hash identifier: 9sKFmtECV+Pg6GtjobSpgZPejKt1CRWuIjIW97cXATY=
Subject key identifier: F2:3C:05:01:6B:41:29:A8:15:6E:80:9D:12:B8:7F:4D:37:A4:AB:9B
Authority key identifier: 8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94
Certificate issuer: /CN=8beb65a71af02959272acc00d5c4c1958385de94
Certificate serial: 01988B45AC5A128706A6E90F2C50816E4EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
Manifest number: 1625
Signing time: Fri 08 Aug 2025 20:00:55 +0000
Manifest this update: Fri 08 Aug 2025 20:00:55 +0000
Manifest next update: Sat 09 Aug 2025 20:00:55 +0000
Files and hashes: 1: 8U8kKdz2fVZxTqZwqIjaA_g2nWA.roa (hash: VPZpp0pYKoi2I1Ak52XiESxXc7FZdh4MhOiiuF6UR+U=)
2: i-tlpxrwKVknKswA1cTBlYOF3pQ.crl (hash: TRRT90nzaec2WojqX4TPKyAqXTS45XLR38Za3lB929c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:ac:5a:12:87:06:a6:e9:0f:2c:50:81:6e:4e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8beb65a71af02959272acc00d5c4c1958385de94
Validity
Not Before: Aug 8 20:00:55 2025 GMT
Not After : Aug 9 20:00:55 2025 GMT
Subject: CN=f23c05016b4129a8156e809d12b87f4d37a4ab9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:d7:11:9e:eb:42:0e:30:30:57:46:8c:d8:
a0:9b:53:2a:3e:ec:c6:8f:99:d2:19:59:c2:9c:fe:
eb:e2:e4:00:b9:f9:b6:18:ea:22:8f:bf:29:37:be:
41:e0:1d:da:15:08:86:74:7b:8b:3d:6a:23:c7:77:
5a:2c:1d:69:21:4d:21:bc:8a:f3:fd:6c:25:30:7c:
64:94:00:7e:ce:27:b4:e9:74:59:9e:01:46:9d:7f:
8f:89:63:ca:ac:f9:58:38:7e:b4:09:56:f3:28:17:
43:e0:c2:da:a8:30:cb:83:0f:a0:2f:c6:b0:20:1d:
75:f9:cb:fa:6f:80:8f:ed:bd:60:b3:c9:b8:6f:1d:
e7:6d:d3:92:ab:84:a9:a4:e3:b4:62:4d:30:27:af:
77:13:d2:32:d8:d1:2e:fa:34:0a:18:aa:2d:bc:ae:
c0:ce:15:d1:d3:03:b9:0f:ae:d6:3e:40:a2:cd:ed:
a0:11:48:c9:17:e7:96:d4:cb:ff:22:84:41:ec:3b:
76:a3:bd:b4:27:97:f1:db:b1:f8:2d:0c:7d:05:fa:
04:b1:f2:4e:09:44:1d:66:0a:91:c1:3e:0d:e1:f5:
6e:b3:b8:c6:7a:09:b3:0f:fe:6b:c7:bc:91:d7:43:
46:9f:61:ea:f7:b3:75:10:de:49:ff:61:3c:ba:90:
88:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3C:05:01:6B:41:29:A8:15:6E:80:9D:12:B8:7F:4D:37:A4:AB:9B
X509v3 Authority Key Identifier:
keyid:8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8f:8a:2d:32:f1:49:96:66:13:6e:79:c9:7a:b9:04:d5:17:
02:d4:76:c5:fe:d2:6d:70:d4:01:88:0b:1e:ea:69:8e:eb:11:
6d:1b:af:5b:27:8a:f1:dc:17:3a:ed:36:6c:61:6e:9b:17:21:
43:91:2e:e8:83:b3:e9:70:4e:aa:ab:f6:4d:3d:9e:db:ec:d2:
14:34:1c:aa:ee:17:46:c4:87:d3:b8:52:4a:e3:3a:1d:98:b1:
c8:2b:cb:bf:8f:3e:0b:cb:22:c9:4d:1f:e0:89:28:77:c9:a6:
ba:1c:f3:ea:cd:d3:cb:26:59:03:5d:57:c7:33:4a:5e:0e:60:
84:5d:43:cb:40:d0:2f:66:9c:60:dc:c8:80:3a:27:6b:bb:40:
f8:b8:a6:76:87:e3:89:a1:94:11:32:8f:63:f3:3c:43:bc:0c:
3a:23:6d:2c:f1:61:7f:f5:42:58:4e:84:29:95:d8:a0:99:83:
81:40:4d:0a:b3:ee:38:df:e7:dc:49:fb:df:21:87:9d:ed:08:
1d:86:cc:e2:8c:fb:f4:c2:7b:a4:dc:ec:ce:0c:61:e4:d5:ed:
98:4e:b9:28:c9:ed:cc:eb:2a:40:df:a6:9b:bf:a0:b1:20:31:
4c:41:b5:b9:42:f6:38:33:a7:3f:fa:1a:88:37:9f:1f:11:06:
b1:51:df:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLRaxaEocGpukPLFCBbk7EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZWI2NWE3MWFmMDI5NTkyNzJhY2MwMGQ1YzRjMTk1ODM4
NWRlOTQwHhcNMjUwODA4MjAwMDU1WhcNMjUwODA5MjAwMDU1WjAzMTEwLwYDVQQD
EyhmMjNjMDUwMTZiNDEyOWE4MTU2ZTgwOWQxMmI4N2Y0ZDM3YTRhYjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnTXEZ7rQg4wMFdGjNigm1MqPuzG
j5nSGVnCnP7r4uQAufm2GOoij78pN75B4B3aFQiGdHuLPWojx3daLB1pIU0hvIrz
/WwlMHxklAB+zie06XRZngFGnX+PiWPKrPlYOH60CVbzKBdD4MLaqDDLgw+gL8aw
IB11+cv6b4CP7b1gs8m4bx3nbdOSq4SppOO0Yk0wJ693E9Iy2NEu+jQKGKotvK7A
zhXR0wO5D67WPkCize2gEUjJF+eW1Mv/IoRB7Dt2o720J5fx27H4LQx9BfoEsfJO
CUQdZgqRwT4N4fVus7jGegmzD/5rx7yR10NGn2Hq97N1EN5J/2E8upCIxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPI8BQFrQSmoFW6AnRK4f003pKubMB8GA1UdIwQY
MBaAFIvrZaca8ClZJyrMANXEwZWDhd6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZTk5NTctYzdjYy00OTk3LWEyMmIt
MTY1YTg0NmQ0ODFkLzEvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kZTk5NTctYzdjYy00OTk3LWEyMmItMTY1YTg0NmQ0ODFk
LzEvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPI+KLTLx
SZZmE255yXq5BNUXAtR2xf7SbXDUAYgLHuppjusRbRuvWyeK8dwXOu02bGFumxch
Q5Eu6IOz6XBOqqv2TT2e2+zSFDQcqu4XRsSH07hSSuM6HZixyCvLv48+C8siyU0f
4Ikod8mmuhzz6s3TyyZZA11XxzNKXg5ghF1Dy0DQL2acYNzIgDona7tA+Limdofj
iaGUETKPY/M8Q7wMOiNtLPFhf/VCWE6EKZXYoJmDgUBNCrPuON/n3En73yGHne0I
HYbM4oz79MJ7pNzszgxh5NXtmE65KMntzOsqQN+mm7+gsSAxTEG1uUL2ODOnP/oa
iDefHxEGsVHfFA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:05 2025 by rpki-client