Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
File: tNftFLjVGiC67HtmDwioDNz4F78.mft (raw, json)
Hash identifier: Izfh9L4/0OQc0f7fBKW3Qx0GlzAFKPm2sX01w4EGdoQ=
Subject key identifier: 8B:39:50:94:09:40:31:68:94:78:51:11:F6:04:8F:0B:DB:4A:08:64
Authority key identifier: B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
Certificate issuer: /CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Certificate serial: 01984C9D597E1484409235036C3DED01111E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
Manifest number: 1563
Signing time: Sun 27 Jul 2025 16:00:37 +0000
Manifest this update: Sun 27 Jul 2025 16:00:37 +0000
Manifest next update: Mon 28 Jul 2025 16:00:37 +0000
Files and hashes: 1: VhTYh9Iw5PVI--2GM6MQuLQlHfw.roa (hash: 4Hkp0WmvBYBS95p1FHn/M3/EZ2GIH50SPjU4ACziYZE=)
2: YVY9twtvMqgJ8wFpvv3lKZVmEkQ.roa (hash: 17qlPl9D+uyL5rzeTz5pj3TELME7ziHzDZ+/fRR9Vec=)
3: tNftFLjVGiC67HtmDwioDNz4F78.crl (hash: yy7w+4w7A2XZyjap4yrQyHOaA6OHHPG4unu4KhytbXU=)
4: y_HvmHHGVlKjcbTPtfwbbemE9ts.roa (hash: 8SIoZagJaVQOy82S0A9ugj7Iv6sEqZZHPMha1KNQ3uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:9d:59:7e:14:84:40:92:35:03:6c:3d:ed:01:11:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Validity
Not Before: Jul 27 16:00:37 2025 GMT
Not After : Jul 28 16:00:37 2025 GMT
Subject: CN=8b3950940940316894785111f6048f0bdb4a0864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:9f:55:53:0d:26:f0:df:96:3e:0f:fd:9e:
54:5c:4d:04:ed:2a:1a:17:36:dd:a4:dd:8d:81:f7:
08:06:49:84:b1:5d:b7:33:fb:e8:ac:f4:c8:33:b8:
41:21:d6:19:f6:9b:b5:08:75:6b:4a:76:21:b0:30:
de:54:6d:3d:9f:51:2c:8d:ea:8c:36:61:98:dc:f1:
15:3e:a9:b9:ad:f9:05:0c:ac:bb:88:05:fe:2d:90:
3b:d4:ad:3d:c9:d2:2d:8a:00:9c:f6:cb:79:df:dd:
14:ea:23:8e:fd:da:74:20:d2:94:86:49:93:f4:6a:
89:73:fb:87:28:8b:2f:bf:70:d3:ab:9a:21:2e:48:
3d:5a:63:f6:9a:b0:fd:66:8d:c6:35:fe:b6:10:58:
c4:c7:58:3c:5b:29:98:33:a4:a8:bd:1a:80:11:1e:
11:25:17:fc:44:89:89:4e:11:4e:95:fe:54:b4:dc:
e0:9d:46:53:19:51:f5:81:d3:3f:f2:52:34:01:8b:
22:a8:56:9b:15:21:ed:35:65:74:6d:1d:fd:51:11:
38:4e:5d:ad:36:4a:6e:55:02:8f:04:9b:cc:c2:2d:
33:f2:ca:a0:fb:f1:d1:8f:e5:ce:fa:c7:8f:4c:0f:
3e:b2:36:50:51:91:a8:d0:4e:ea:7d:8e:b3:0c:5e:
aa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:39:50:94:09:40:31:68:94:78:51:11:F6:04:8F:0B:DB:4A:08:64
X509v3 Authority Key Identifier:
keyid:B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e6:cc:44:52:f3:9d:ea:44:0a:b5:7f:b9:ca:f7:12:a8:94:
58:8c:14:a4:13:ee:4a:dc:79:64:8f:20:1b:c8:5e:65:3c:4f:
24:4c:1e:d3:d8:10:69:03:cf:70:10:8b:81:c0:17:99:92:87:
fe:a5:1a:8b:cf:7f:08:ba:c6:f9:53:cf:af:f9:ac:5e:fb:aa:
5c:04:5c:b6:a7:3b:f8:09:23:8f:46:fb:68:8a:11:51:6f:57:
5d:51:96:3e:81:bb:b7:55:68:f0:d0:3a:05:a8:ec:ac:82:4d:
52:c1:c9:7d:8e:be:6c:9a:1d:da:9e:d1:3c:4f:63:c9:00:7f:
e0:ef:9e:5c:4d:67:39:c5:cf:73:65:bf:b5:0d:c3:e6:a0:ae:
f6:fd:11:a2:2a:e7:0b:3a:ef:a7:d8:d2:f6:d7:36:16:8a:e8:
92:d3:67:3f:81:49:18:33:12:e9:6e:93:8b:7e:2d:b5:3b:76:
70:e6:cf:a4:3d:1c:72:4c:a4:11:2e:85:52:82:09:8c:e7:c3:
56:fc:9e:ee:dd:e2:75:2b:23:aa:45:77:15:47:4a:2b:1b:51:
83:28:82:55:74:93:ac:6b:95:05:2e:c5:4e:11:27:f8:5d:5e:
51:4a:05:61:22:5f:53:9f:c4:0f:b1:30:50:5d:be:6a:59:eb:
d1:65:d6:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhMnVl+FIRAkjUDbD3tAREeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZDdlZDE0YjhkNTFhMjBiYWVjN2I2NjBmMDhhODBjZGNm
ODE3YmYwHhcNMjUwNzI3MTYwMDM3WhcNMjUwNzI4MTYwMDM3WjAzMTEwLwYDVQQD
Eyg4YjM5NTA5NDA5NDAzMTY4OTQ3ODUxMTFmNjA0OGYwYmRiNGEwODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSyfVVMNJvDflj4P/Z5UXE0E7Soa
FzbdpN2NgfcIBkmEsV23M/vorPTIM7hBIdYZ9pu1CHVrSnYhsDDeVG09n1EsjeqM
NmGY3PEVPqm5rfkFDKy7iAX+LZA71K09ydItigCc9st5390U6iOO/dp0INKUhkmT
9GqJc/uHKIsvv3DTq5ohLkg9WmP2mrD9Zo3GNf62EFjEx1g8WymYM6SovRqAER4R
JRf8RImJThFOlf5UtNzgnUZTGVH1gdM/8lI0AYsiqFabFSHtNWV0bR39URE4Tl2t
NkpuVQKPBJvMwi0z8sqg+/HRj+XO+sePTA8+sjZQUZGo0E7qfY6zDF6qRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIs5UJQJQDFolHhREfYEjwvbSghkMB8GA1UdIwQY
MBaAFLTX7RS41Roguux7Zg8IqAzc+Be/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE5mdEZMalZHaUM2N0h0bUR3aW9ETno0Rjc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8xMzJiYTgtNzY3Ni00OWY2LWFmY2Mt
N2QwNDIzYmRhNzRjLzEvdE5mdEZMalZHaUM2N0h0bUR3aW9ETno0Rjc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8xMzJiYTgtNzY3Ni00OWY2LWFmY2MtN2QwNDIzYmRhNzRj
LzEvdE5mdEZMalZHaUM2N0h0bUR3aW9ETno0Rjc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+bMRFLz
nepECrV/ucr3EqiUWIwUpBPuStx5ZI8gG8heZTxPJEwe09gQaQPPcBCLgcAXmZKH
/qUai89/CLrG+VPPr/msXvuqXARctqc7+Akjj0b7aIoRUW9XXVGWPoG7t1Vo8NA6
BajsrIJNUsHJfY6+bJod2p7RPE9jyQB/4O+eXE1nOcXPc2W/tQ3D5qCu9v0Roirn
Czrvp9jS9tc2ForoktNnP4FJGDMS6W6Ti34ttTt2cObPpD0cckykES6FUoIJjOfD
Vvye7t3idSsjqkV3FUdKKxtRgyiCVXSTrGuVBS7FThEn+F1eUUoFYSJfU5/ED7Ew
UF2+alnr0WXW2Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 22:27:45 2025 by rpki-client