Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
File: i-tlpxrwKVknKswA1cTBlYOF3pQ.mft (raw, json)
Hash identifier: trMWAiPkHlGrt8q945tSgQeCV+tfhXmd6ib9E/tq0Ek=
Subject key identifier: 3B:1C:5D:44:D9:B1:09:02:6F:F1:06:B7:67:D4:CC:67:73:82:F8:72
Authority key identifier: 8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94
Certificate issuer: /CN=8beb65a71af02959272acc00d5c4c1958385de94
Certificate serial: 019A4F2B062B6F673DFC7B5D419A7A9BE7D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 14:00:10 +0000
Manifest this update: Tue 04 Nov 2025 14:00:10 +0000
Manifest next update: Wed 05 Nov 2025 14:00:10 +0000
Files and hashes: 1: 8U8kKdz2fVZxTqZwqIjaA_g2nWA.roa (hash: VPZpp0pYKoi2I1Ak52XiESxXc7FZdh4MhOiiuF6UR+U=)
2: i-tlpxrwKVknKswA1cTBlYOF3pQ.crl (hash: CJuo4m2EcEL8Y2cIdFH7l8RGl4rvh/ZEp4olPVL915w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:06:2b:6f:67:3d:fc:7b:5d:41:9a:7a:9b:e7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8beb65a71af02959272acc00d5c4c1958385de94
Validity
Not Before: Nov 4 14:00:10 2025 GMT
Not After : Nov 5 14:00:10 2025 GMT
Subject: CN=3b1c5d44d9b109026ff106b767d4cc677382f872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:8d:12:d9:f7:af:df:bd:1c:ce:aa:13:59:
3f:11:c8:3c:5e:32:68:4d:22:64:9f:5e:73:55:c1:
45:a8:a0:cb:1f:66:59:4b:d6:7d:e8:ca:90:ae:90:
07:0a:01:dd:2e:0f:89:b9:9d:86:1e:83:8e:6d:ae:
9a:46:ff:b6:66:f1:95:7e:94:3f:d9:26:7b:f6:e1:
d1:09:96:d5:1f:09:97:8b:03:c1:85:2b:1d:9e:59:
40:42:32:7d:7f:b7:bc:76:25:58:73:4d:86:ba:6a:
dd:82:a9:08:db:2d:92:dd:a0:c0:4e:00:56:91:33:
5b:91:f5:13:4a:97:98:d5:5e:be:03:01:3c:59:c6:
4e:77:c6:1f:91:6b:1c:85:52:84:41:56:5e:b9:b7:
a6:bb:35:67:8b:9f:2c:88:bc:35:eb:cb:58:4f:42:
1b:07:1a:c5:16:67:79:03:22:32:84:99:8b:d1:e9:
41:c2:a4:05:14:92:d0:04:fd:a5:77:e5:a2:eb:87:
46:b7:3a:3d:0c:23:20:90:f7:21:34:da:89:8f:d3:
76:b4:95:50:d9:b3:c8:65:2a:1a:64:20:32:ee:c2:
45:83:a6:c2:e3:4e:be:66:58:16:20:b1:db:10:a6:
42:d7:33:a4:4d:5f:91:da:c8:32:d0:1e:aa:85:49:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1C:5D:44:D9:B1:09:02:6F:F1:06:B7:67:D4:CC:67:73:82:F8:72
X509v3 Authority Key Identifier:
keyid:8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ca:16:07:07:4d:0d:e8:22:08:75:55:fa:81:db:f8:db:75:
c0:94:0d:7e:4f:ed:ec:3b:31:58:59:b4:bd:19:e0:c4:f7:c3:
0e:be:0f:cf:51:2d:9b:25:83:3a:37:1f:b0:18:09:47:1c:00:
d7:a5:95:4a:0d:2e:f7:48:56:72:bd:3c:9f:f5:fd:b1:14:2e:
4e:67:73:f2:28:c2:da:cf:e8:cb:77:ba:45:ff:11:e6:33:f5:
3c:6c:79:b6:81:ff:30:6b:8c:3f:7b:a3:fb:1d:ec:47:aa:f3:
ab:7f:e1:22:7b:44:ea:02:4d:1d:f2:16:3e:80:84:c8:e8:03:
8b:6e:27:a2:d3:54:ac:55:41:b5:c3:4b:48:1f:d7:b1:39:56:
f5:03:98:7d:76:91:69:f3:9a:6b:f9:c1:27:a3:bc:1d:6a:63:
a0:71:37:24:6a:bf:00:cc:c1:cc:54:94:6e:5b:42:01:fb:fe:
3f:cc:41:35:87:d3:5e:85:8a:a7:ba:b6:7d:6e:e5:2e:de:ae:
b4:39:d2:bf:d6:d1:55:79:c7:9a:db:d8:47:d4:1c:82:9f:e7:
71:63:d1:b7:3c:55:10:3f:41:27:c1:67:5a:7e:bc:6f:18:f5:
30:88:c0:4e:93:28:77:41:29:14:c2:df:81:3f:4a:db:b3:dc:
57:ea:7d:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKwYrb2c9/HtdQZp6m+fZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZWI2NWE3MWFmMDI5NTkyNzJhY2MwMGQ1YzRjMTk1ODM4
NWRlOTQwHhcNMjUxMTA0MTQwMDEwWhcNMjUxMTA1MTQwMDEwWjAzMTEwLwYDVQQD
EygzYjFjNWQ0NGQ5YjEwOTAyNmZmMTA2Yjc2N2Q0Y2M2NzczODJmODcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSSNEtn3r9+9HM6qE1k/Ecg8XjJo
TSJkn15zVcFFqKDLH2ZZS9Z96MqQrpAHCgHdLg+JuZ2GHoOOba6aRv+2ZvGVfpQ/
2SZ79uHRCZbVHwmXiwPBhSsdnllAQjJ9f7e8diVYc02GumrdgqkI2y2S3aDATgBW
kTNbkfUTSpeY1V6+AwE8WcZOd8YfkWschVKEQVZeubemuzVni58siLw168tYT0Ib
BxrFFmd5AyIyhJmL0elBwqQFFJLQBP2ld+Wi64dGtzo9DCMgkPchNNqJj9N2tJVQ
2bPIZSoaZCAy7sJFg6bC406+ZlgWILHbEKZC1zOkTV+R2sgy0B6qhUlwTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDscXUTZsQkCb/EGt2fUzGdzgvhyMB8GA1UdIwQY
MBaAFIvrZaca8ClZJyrMANXEwZWDhd6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZTk5NTctYzdjYy00OTk3LWEyMmIt
MTY1YTg0NmQ0ODFkLzEvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kZTk5NTctYzdjYy00OTk3LWEyMmItMTY1YTg0NmQ0ODFk
LzEvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMoWBwdN
DegiCHVV+oHb+Nt1wJQNfk/t7DsxWFm0vRngxPfDDr4Pz1EtmyWDOjcfsBgJRxwA
16WVSg0u90hWcr08n/X9sRQuTmdz8ijC2s/oy3e6Rf8R5jP1PGx5toH/MGuMP3uj
+x3sR6rzq3/hIntE6gJNHfIWPoCEyOgDi24notNUrFVBtcNLSB/XsTlW9QOYfXaR
afOaa/nBJ6O8HWpjoHE3JGq/AMzBzFSUbltCAfv+P8xBNYfTXoWKp7q2fW7lLt6u
tDnSv9bRVXnHmtvYR9Qcgp/ncWPRtzxVED9BJ8FnWn68bxj1MIjATpMod0EpFMLf
gT9K27PcV+p9Rg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:27 2025 by rpki-client