Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
File: tLB5uhPORqvsf1vD893Ni7hnWQU.mft (raw, json)
Hash identifier: dI2uPVL4gKcWcg8+YY9C8gDUernwwCeQ0JDvxcRvRfw=
Subject key identifier: 36:85:11:C9:17:FA:A3:A2:AE:F3:05:64:BA:90:BE:95:62:11:45:2A
Authority key identifier: B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05
Certificate issuer: /CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905
Certificate serial: 019A4C61578046A9DC2C7C13D524DB25ECB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 01:00:39 +0000
Manifest this update: Tue 04 Nov 2025 01:00:39 +0000
Manifest next update: Wed 05 Nov 2025 01:00:39 +0000
Files and hashes: 1: tLB5uhPORqvsf1vD893Ni7hnWQU.crl (hash: UlIGh5EbJ5eGDcCPXTuSUT65yW5v0y2lc0F8NevM0ic=)
2: u2BcurtkahmzzbpCvF5G__EHmrQ.roa (hash: sXnsJfkykB72mvD9Mf1AHstwJM/7MpBbK+WiRKqEOhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:57:80:46:a9:dc:2c:7c:13:d5:24:db:25:ec:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905
Validity
Not Before: Nov 4 01:00:39 2025 GMT
Not After : Nov 5 01:00:39 2025 GMT
Subject: CN=368511c917faa3a2aef30564ba90be956211452a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f2:13:02:63:ee:ba:4e:cf:3e:52:00:26:43:
60:b0:c2:93:4c:54:d4:ad:78:52:21:db:25:4c:ab:
cf:97:f3:1a:4b:da:59:ff:3c:49:2a:56:52:21:ab:
52:6f:1f:ea:bb:cf:b4:fb:38:ad:9c:1b:72:ce:c4:
39:9e:ee:11:07:dd:2a:bf:bb:4e:b4:59:b3:e3:5c:
2f:ae:30:04:1d:67:26:f2:12:ce:85:6b:4f:a5:d6:
83:34:6a:0a:4e:44:c6:57:bf:44:ea:49:c6:f5:3b:
b3:74:96:ad:b9:c7:03:d3:9d:1a:34:fd:19:9a:e8:
14:e7:1e:45:9d:8a:c5:f8:39:65:8c:9a:f4:85:39:
01:d8:05:46:71:21:f0:43:37:8c:62:8d:43:41:7b:
2c:33:02:a9:49:92:2c:36:ba:be:6d:61:c4:05:8e:
f3:74:14:f5:42:8f:df:d0:ed:37:f9:7f:53:93:e9:
b6:78:20:84:36:62:2c:b7:8a:45:d6:b6:6d:1a:e5:
ae:07:dd:c4:5c:6d:9e:b5:fb:eb:c3:95:8e:eb:6f:
73:53:1f:07:32:64:da:9f:e5:7d:70:df:88:a4:4c:
37:d1:38:8c:a3:9f:1e:ee:d0:ba:40:1d:31:4e:5b:
80:e3:0b:1b:5c:5b:7a:9c:5e:73:cb:81:72:81:37:
f1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:85:11:C9:17:FA:A3:A2:AE:F3:05:64:BA:90:BE:95:62:11:45:2A
X509v3 Authority Key Identifier:
keyid:B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7f:2a:ae:1a:b5:a3:30:c2:fb:5b:92:30:62:a0:fe:4a:1f:
ce:35:a2:98:1e:64:5b:00:fd:36:9b:6c:77:84:d5:90:5f:bb:
7d:4f:3c:b4:1e:b3:8f:2b:1d:70:44:0c:cf:e5:b7:db:3f:39:
93:8f:5f:f8:ee:d3:ce:b8:61:93:13:21:6e:09:f2:e5:92:74:
37:14:66:3e:1e:03:e6:31:52:60:91:ca:cb:06:8f:47:be:b9:
84:53:a3:7c:86:34:5e:ff:a2:a2:e4:17:13:91:a8:1f:80:1b:
5f:99:62:5e:5f:4d:14:6d:a9:ac:39:eb:25:81:1b:eb:54:09:
94:c0:0c:fd:3c:03:38:93:85:d6:8a:95:0b:52:36:45:57:a4:
75:f9:da:6b:31:31:71:83:2b:a8:f9:7b:b2:ee:57:b5:4b:ca:
dd:84:24:6d:18:c5:e5:88:f2:01:a4:c6:0d:fe:c2:62:14:a1:
bb:79:bf:68:c8:3b:22:fb:23:fa:21:f7:86:e4:dc:98:fa:d9:
8f:ac:e0:d3:4f:24:bc:44:69:80:71:58:5b:b5:9e:f7:d5:c7:
2e:a7:af:49:80:04:2b:3a:fc:d2:6c:07:c9:0a:a9:3f:a7:46:
1a:5e:42:9f:84:3f:b1:64:f4:0e:33:5b:16:cd:be:b1:f2:3d:
26:0d:c7:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMYVeARqncLHwT1STbJey1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YjA3OWJhMTNjZTQ2YWJlYzdmNWJjM2YzZGRjZDhiYjg2
NzU5MDUwHhcNMjUxMTA0MDEwMDM5WhcNMjUxMTA1MDEwMDM5WjAzMTEwLwYDVQQD
EygzNjg1MTFjOTE3ZmFhM2EyYWVmMzA1NjRiYTkwYmU5NTYyMTE0NTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/ITAmPuuk7PPlIAJkNgsMKTTFTU
rXhSIdslTKvPl/MaS9pZ/zxJKlZSIatSbx/qu8+0+zitnBtyzsQ5nu4RB90qv7tO
tFmz41wvrjAEHWcm8hLOhWtPpdaDNGoKTkTGV79E6knG9TuzdJatuccD050aNP0Z
mugU5x5FnYrF+DlljJr0hTkB2AVGcSHwQzeMYo1DQXssMwKpSZIsNrq+bWHEBY7z
dBT1Qo/f0O03+X9Tk+m2eCCENmIst4pF1rZtGuWuB93EXG2etfvrw5WO629zUx8H
MmTan+V9cN+IpEw30TiMo58e7tC6QB0xTluA4wsbXFt6nF5zy4FygTfx3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaFEckX+qOirvMFZLqQvpViEUUqMB8GA1UdIwQY
MBaAFLSweboTzkar7H9bw/PdzYu4Z1kFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdExCNXVoUE9ScXZzZjF2RDg5M05pN2huV1FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kNDZhODEtMzczNS00MmM2LTliYmIt
MWQxNzk5YjU5Yzk5LzEvdExCNXVoUE9ScXZzZjF2RDg5M05pN2huV1FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kNDZhODEtMzczNS00MmM2LTliYmItMWQxNzk5YjU5Yzk5
LzEvdExCNXVoUE9ScXZzZjF2RDg5M05pN2huV1FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPX8qrhq1
ozDC+1uSMGKg/kofzjWimB5kWwD9Nptsd4TVkF+7fU88tB6zjysdcEQMz+W32z85
k49f+O7TzrhhkxMhbgny5ZJ0NxRmPh4D5jFSYJHKywaPR765hFOjfIY0Xv+iouQX
E5GoH4AbX5liXl9NFG2prDnrJYEb61QJlMAM/TwDOJOF1oqVC1I2RVekdfnaazEx
cYMrqPl7su5XtUvK3YQkbRjF5YjyAaTGDf7CYhShu3m/aMg7Ivsj+iH3huTcmPrZ
j6zg008kvERpgHFYW7We99XHLqevSYAEKzr80mwHyQqpP6dGGl5Cn4Q/sWT0DjNb
Fs2+sfI9Jg3HVQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:26 2025 by rpki-client