Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
File: i-tlpxrwKVknKswA1cTBlYOF3pQ.mft (raw, json)
Hash identifier: LjutHp+qPrd/8BUyJlyB5I+E45bCY3zBlRa3C3T5y8U=
Subject key identifier: 41:AB:08:A5:45:8C:86:F5:A4:90:E9:8F:FA:1C:00:0D:C2:4C:F1:79
Authority key identifier: 8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94
Certificate issuer: /CN=8beb65a71af02959272acc00d5c4c1958385de94
Certificate serial: 0198499C00A17ED7A9051F7D4D2C5D4EF2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 02:00:17 +0000
Manifest this update: Sun 27 Jul 2025 02:00:17 +0000
Manifest next update: Mon 28 Jul 2025 02:00:17 +0000
Files and hashes: 1: 8U8kKdz2fVZxTqZwqIjaA_g2nWA.roa (hash: VPZpp0pYKoi2I1Ak52XiESxXc7FZdh4MhOiiuF6UR+U=)
2: i-tlpxrwKVknKswA1cTBlYOF3pQ.crl (hash: HP3fX2uLkecnUwodj4J6RJsIOq0/aizg+x8J8fNFk4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:00:a1:7e:d7:a9:05:1f:7d:4d:2c:5d:4e:f2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8beb65a71af02959272acc00d5c4c1958385de94
Validity
Not Before: Jul 27 02:00:17 2025 GMT
Not After : Jul 28 02:00:17 2025 GMT
Subject: CN=41ab08a5458c86f5a490e98ffa1c000dc24cf179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:f2:40:0d:cf:ed:12:f9:90:64:71:06:ef:
78:1c:7c:41:f0:5d:ad:19:bb:e1:d4:6c:45:1a:38:
0c:46:51:14:5f:f2:45:d5:b2:b7:4e:8a:99:fe:63:
de:6f:ea:19:5d:f1:e2:05:7c:a0:21:93:20:c7:ed:
7e:82:44:97:b6:10:fc:98:e2:49:13:3f:05:49:dc:
8d:d6:2a:71:e4:c9:f5:be:a0:cd:28:83:1d:e7:aa:
67:52:cb:9c:70:64:32:93:8a:f3:b4:d7:6a:c8:48:
21:7c:81:8a:0a:13:3f:3f:f4:17:a1:73:0e:50:63:
2e:e5:bf:b4:60:b7:54:75:6e:98:a5:d7:ef:01:40:
6a:a8:14:03:32:c0:30:4f:51:34:13:1b:b7:fe:46:
fc:ba:4b:f8:41:cb:8b:ac:a4:ab:cb:b9:2c:5a:9a:
e9:51:3c:1d:95:82:16:ae:c7:f8:22:ce:3f:60:17:
c7:10:91:c2:e3:61:3a:e7:ac:a3:ad:1b:97:88:80:
f0:50:06:59:ef:30:08:49:94:b7:95:2c:6c:3c:b3:
a4:7e:3d:e0:ce:96:57:fd:a1:02:7a:0b:87:d1:f5:
32:bd:d0:82:62:da:88:aa:8f:f1:ab:02:2d:a4:6b:
8b:fa:bf:5b:d7:d5:dc:61:db:e3:3a:46:0f:d8:d5:
b3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AB:08:A5:45:8C:86:F5:A4:90:E9:8F:FA:1C:00:0D:C2:4C:F1:79
X509v3 Authority Key Identifier:
keyid:8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:02:4a:f5:35:56:c3:8b:c0:9c:e0:c0:8b:51:a8:15:61:57:
b1:0a:e3:a7:bf:59:4f:6c:63:17:a3:cf:16:d4:a5:68:ce:3c:
22:07:6c:af:24:a0:2d:10:0f:ea:da:69:ce:fe:25:01:92:82:
4e:03:54:6c:df:ae:72:df:f8:fb:f6:3a:b8:42:4d:35:04:ff:
62:0a:93:44:59:5b:b3:e9:77:11:4f:1b:a4:01:90:f9:e6:ab:
b6:2e:3b:7c:e9:f5:6a:ff:6e:d7:db:79:67:f1:04:25:ba:3a:
59:7b:1a:06:db:ed:11:2f:e6:bb:dd:ea:ce:3c:a4:9b:11:64:
89:74:1b:51:32:cf:14:ea:59:9b:2d:8a:d5:f6:0c:ac:e7:a0:
aa:ff:f5:04:ca:36:95:28:b3:ed:18:4f:a4:6e:45:cc:d5:19:
cb:00:2c:46:76:f8:e5:b0:d3:db:20:7b:03:25:96:51:7c:25:
a1:62:e0:95:6f:19:91:ed:b0:54:1f:d0:02:ad:48:6c:c9:13:
96:a8:79:8d:c6:64:99:16:61:ef:75:aa:23:5e:d5:4c:69:38:
f5:ce:06:7c:27:09:da:00:34:26:81:42:52:cc:9f:35:40:df:
f5:47:75:78:50:72:25:d7:69:c2:0d:17:14:31:d3:a7:b7:ad:
2c:04:4b:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnAChftepBR99TSxdTvK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZWI2NWE3MWFmMDI5NTkyNzJhY2MwMGQ1YzRjMTk1ODM4
NWRlOTQwHhcNMjUwNzI3MDIwMDE3WhcNMjUwNzI4MDIwMDE3WjAzMTEwLwYDVQQD
Eyg0MWFiMDhhNTQ1OGM4NmY1YTQ5MGU5OGZmYTFjMDAwZGMyNGNmMTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP3yQA3P7RL5kGRxBu94HHxB8F2t
Gbvh1GxFGjgMRlEUX/JF1bK3ToqZ/mPeb+oZXfHiBXygIZMgx+1+gkSXthD8mOJJ
Ez8FSdyN1ipx5Mn1vqDNKIMd56pnUsuccGQyk4rztNdqyEghfIGKChM/P/QXoXMO
UGMu5b+0YLdUdW6YpdfvAUBqqBQDMsAwT1E0Exu3/kb8ukv4QcuLrKSry7ksWprp
UTwdlYIWrsf4Is4/YBfHEJHC42E656yjrRuXiIDwUAZZ7zAISZS3lSxsPLOkfj3g
zpZX/aECeguH0fUyvdCCYtqIqo/xqwItpGuL+r9b19XcYdvjOkYP2NWzYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGrCKVFjIb1pJDpj/ocAA3CTPF5MB8GA1UdIwQY
MBaAFIvrZaca8ClZJyrMANXEwZWDhd6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZTk5NTctYzdjYy00OTk3LWEyMmIt
MTY1YTg0NmQ0ODFkLzEvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kZTk5NTctYzdjYy00OTk3LWEyMmItMTY1YTg0NmQ0ODFk
LzEvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQJK9TVW
w4vAnODAi1GoFWFXsQrjp79ZT2xjF6PPFtSlaM48IgdsrySgLRAP6tppzv4lAZKC
TgNUbN+uct/4+/Y6uEJNNQT/YgqTRFlbs+l3EU8bpAGQ+earti47fOn1av9u19t5
Z/EEJbo6WXsaBtvtES/mu93qzjykmxFkiXQbUTLPFOpZmy2K1fYMrOegqv/1BMo2
lSiz7RhPpG5FzNUZywAsRnb45bDT2yB7AyWWUXwloWLglW8Zke2wVB/QAq1IbMkT
lqh5jcZkmRZh73WqI17VTGk49c4GfCcJ2gA0JoFCUsyfNUDf9Ud1eFByJddpwg0X
FDHTp7etLARLQQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:19:48 2025 by rpki-client