Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
File: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft (raw, json)
Hash identifier: BRt8jQjEraZ4WR4ZSrwYYiktHSE0/FIIxpfZ1XL6HDE=
Subject key identifier: 39:F3:29:1C:E6:1B:0B:8A:3A:08:C3:97:29:44:56:EC:1D:7D:96:92
Authority key identifier: 2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4
Certificate issuer: /CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
Certificate serial: 0199225576FD12CC24B7A1E56F08F5A101CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
Manifest number: 071F
Signing time: Sun 07 Sep 2025 04:00:50 +0000
Manifest this update: Sun 07 Sep 2025 04:00:50 +0000
Manifest next update: Mon 08 Sep 2025 04:00:50 +0000
Files and hashes: 1: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl (hash: 7XJTi/Eby3XFnidDbr3z6fFrwLQBwqyuCxevIxvvWts=)
2: upvfUH_YjoaPJNTn3nKwVUkJlqc.roa (hash: GMdb4SO6ufP1WGhwXYRzniR/Z7eY9kD3nmj07BQxDnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:76:fd:12:cc:24:b7:a1:e5:6f:08:f5:a1:01:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
Validity
Not Before: Sep 7 04:00:50 2025 GMT
Not After : Sep 8 04:00:50 2025 GMT
Subject: CN=39f3291ce61b0b8a3a08c397294456ec1d7d9692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:cc:01:3d:3f:47:fa:33:55:14:4d:f8:a2:
07:55:b7:d1:f4:e6:56:dc:7e:11:0b:66:0c:26:40:
ba:f5:5f:e3:60:02:54:74:dc:97:27:df:a2:39:32:
d0:e9:54:64:ed:aa:90:a7:72:a8:5e:fa:87:f6:18:
15:04:d4:44:1d:90:5f:67:53:54:23:e4:55:2c:aa:
33:df:54:7a:11:72:4d:24:2a:bc:03:59:c6:6d:cb:
d0:1b:bf:33:9e:4e:f1:bb:9d:7f:0a:fa:1a:8d:e2:
a6:bf:d8:9e:d7:d2:b6:b5:5e:a8:d4:ef:e1:cf:ed:
3f:e5:f2:76:f0:3f:dd:0d:25:f6:74:a3:7b:67:6e:
e0:bf:91:0f:a5:54:b3:e3:1c:3c:69:1d:e2:3a:b9:
48:70:88:5b:ad:82:c5:91:40:8c:91:e6:e3:9b:f0:
58:26:2c:d6:02:58:17:4d:47:11:45:c8:6e:8f:2e:
c7:3a:51:7c:94:11:74:14:96:a0:3a:f1:8e:8e:7b:
ef:ce:6e:53:00:03:0f:89:2f:58:89:4e:bd:7c:d4:
e9:69:a1:1e:c8:0b:f7:e2:ab:56:85:5f:ab:ec:c5:
92:a4:33:a7:d9:46:b6:78:fe:ee:64:a3:fc:4d:d2:
ec:df:a5:c8:4a:06:5b:1c:db:f2:c6:56:74:22:e0:
ff:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F3:29:1C:E6:1B:0B:8A:3A:08:C3:97:29:44:56:EC:1D:7D:96:92
X509v3 Authority Key Identifier:
keyid:2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ec:07:c5:78:d4:c3:3e:87:23:17:10:13:56:c2:2a:07:d9:
da:6e:0b:76:fd:1d:26:17:0c:b0:01:72:9b:13:68:55:55:73:
6a:d1:dd:1e:9e:65:ab:c3:f3:4b:00:a2:d6:d5:b7:da:67:2c:
f1:21:bf:1e:fc:55:7c:99:b1:bd:f1:6a:52:1c:6d:88:95:5c:
17:ad:b8:0e:b1:78:ab:21:e6:83:0e:51:a7:34:e0:fc:98:49:
3d:c9:b8:d6:a8:07:53:19:b0:8b:fd:2d:21:b9:a6:7b:99:19:
8e:05:08:08:b1:ee:f8:1e:9b:8d:29:c2:d1:29:09:2e:60:79:
a0:fa:a4:16:ed:51:e8:dd:e4:f3:bd:31:23:9e:76:a8:5a:3b:
13:f0:cc:ee:6a:b3:36:d1:e3:2e:a1:18:68:c7:9d:f4:74:47:
59:52:95:dc:0f:dc:b0:2b:3d:e6:5d:a8:35:5f:a6:f9:df:31:
3c:9e:e3:4d:97:08:77:26:fc:f4:54:c9:bc:06:5c:3c:83:d2:
91:0a:49:53:3b:e8:86:40:de:bd:0b:da:0d:42:7b:26:51:42:
01:38:cd:32:ee:22:f5:a3:ad:39:cf:5f:cb:cc:8c:75:a0:ba:
36:18:f1:ab:cd:0e:db:f7:7d:b8:58:84:b5:32:8d:47:10:aa:
40:cf:ff:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVXb9Eswkt6Hlbwj1oQHLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZmI2NDFkM2NhMmVjMTE1N2Y0NzczMjE3ODljZWMwY2M1
ZjI5YTQwHhcNMjUwOTA3MDQwMDUwWhcNMjUwOTA4MDQwMDUwWjAzMTEwLwYDVQQD
EygzOWYzMjkxY2U2MWIwYjhhM2EwOGMzOTcyOTQ0NTZlYzFkN2Q5NjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvILMAT0/R/ozVRRN+KIHVbfR9OZW
3H4RC2YMJkC69V/jYAJUdNyXJ9+iOTLQ6VRk7aqQp3KoXvqH9hgVBNREHZBfZ1NU
I+RVLKoz31R6EXJNJCq8A1nGbcvQG78znk7xu51/CvoajeKmv9ie19K2tV6o1O/h
z+0/5fJ28D/dDSX2dKN7Z27gv5EPpVSz4xw8aR3iOrlIcIhbrYLFkUCMkebjm/BY
JizWAlgXTUcRRchujy7HOlF8lBF0FJagOvGOjnvvzm5TAAMPiS9YiU69fNTpaaEe
yAv34qtWhV+r7MWSpDOn2Ua2eP7uZKP8TdLs36XISgZbHNvyxlZ0IuD/rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnzKRzmGwuKOgjDlylEVuwdfZaSMB8GA1UdIwQY
MBaAFC/7ZB08ouwRV/R3MheJzsDMXymkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iMDZmZTAtMzY5MC00MzdkLTg5MjQt
MDcxZGFhMDVkYWJmLzEvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iMDZmZTAtMzY5MC00MzdkLTg5MjQtMDcxZGFhMDVkYWJm
LzEvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOwHxXjU
wz6HIxcQE1bCKgfZ2m4Ldv0dJhcMsAFymxNoVVVzatHdHp5lq8PzSwCi1tW32mcs
8SG/HvxVfJmxvfFqUhxtiJVcF624DrF4qyHmgw5RpzTg/JhJPcm41qgHUxmwi/0t
Ibmme5kZjgUICLHu+B6bjSnC0SkJLmB5oPqkFu1R6N3k870xI552qFo7E/DM7mqz
NtHjLqEYaMed9HRHWVKV3A/csCs95l2oNV+m+d8xPJ7jTZcIdyb89FTJvAZcPIPS
kQpJUzvohkDevQvaDUJ7JlFCATjNMu4i9aOtOc9fy8yMdaC6Nhjxq80O2/d9uFiE
tTKNRxCqQM//Tg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:10:26 2025 by rpki-client