Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
File: i-tlpxrwKVknKswA1cTBlYOF3pQ.mft (raw, json)
Hash identifier: 4tLzehU6VkoItyv01Xfz0RwJoOVgo2bY9l09ow8AsFA=
Subject key identifier: CF:84:89:B2:4B:EC:5E:6E:D5:C3:02:44:E7:D9:63:92:69:41:73:D3
Authority key identifier: 8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94
Certificate issuer: /CN=8beb65a71af02959272acc00d5c4c1958385de94
Certificate serial: 019A71EE7AB64639B1BFDCB6C5C4E23E78B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 08:00:45 +0000
Manifest this update: Tue 11 Nov 2025 08:00:45 +0000
Manifest next update: Wed 12 Nov 2025 08:00:45 +0000
Files and hashes: 1: 8U8kKdz2fVZxTqZwqIjaA_g2nWA.roa (hash: VPZpp0pYKoi2I1Ak52XiESxXc7FZdh4MhOiiuF6UR+U=)
2: i-tlpxrwKVknKswA1cTBlYOF3pQ.crl (hash: AelFDUA54KnAosRL12Kcl9qBIAKJ1Q4BzYPd0YNfaN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:7a:b6:46:39:b1:bf:dc:b6:c5:c4:e2:3e:78:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8beb65a71af02959272acc00d5c4c1958385de94
Validity
Not Before: Nov 11 08:00:45 2025 GMT
Not After : Nov 12 08:00:45 2025 GMT
Subject: CN=cf8489b24bec5e6ed5c30244e7d96392694173d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:28:a0:10:83:ce:7d:39:a1:2b:55:ec:47:
61:ca:9b:28:44:c4:88:e6:22:a1:c0:ff:e8:4d:a5:
d2:b1:41:28:9a:97:a1:15:5d:2d:77:0b:c8:2e:07:
80:b5:00:14:69:97:0d:6c:de:cf:f1:ae:99:14:e4:
1e:84:33:63:db:da:be:2a:aa:22:0d:c4:09:e8:28:
55:b3:87:8e:d1:67:de:d3:07:e3:71:17:58:cc:ac:
26:b6:35:8c:ed:76:1e:19:73:65:17:53:63:fa:35:
1a:14:69:20:c5:2c:a1:e8:77:89:93:77:90:18:d7:
a1:c7:bf:72:1a:ae:ef:96:61:0c:ee:ce:bd:bd:bc:
f6:4e:a9:b6:65:71:49:87:b8:8b:3c:04:58:f6:e5:
b1:2c:4e:b7:93:16:7d:5a:df:93:cb:37:b2:17:9d:
a7:b5:97:58:5b:b7:49:6f:17:ec:cd:60:a3:77:e0:
6a:0d:e0:0c:d9:3c:2c:01:56:6b:20:5d:70:99:30:
4c:d8:6f:cf:c9:72:13:7e:78:7d:b4:fb:e2:da:fc:
5a:18:6b:02:ed:e7:f8:54:69:0e:c1:a0:e0:d9:46:
0f:53:39:1a:67:49:43:97:ca:a3:ac:c0:3d:30:4a:
a9:20:1f:bb:c8:9f:f0:96:85:e4:5a:65:b7:74:0b:
3b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:84:89:B2:4B:EC:5E:6E:D5:C3:02:44:E7:D9:63:92:69:41:73:D3
X509v3 Authority Key Identifier:
keyid:8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ea:6a:80:36:e3:14:60:46:2e:10:03:fc:bc:cc:27:3c:b2:
eb:c8:c6:c6:8d:ce:ac:36:21:b8:0e:0e:84:87:b1:fb:42:7c:
0e:9b:a7:bb:16:da:af:3d:ef:28:75:07:8c:ce:fd:8b:bd:eb:
b6:85:2d:dd:3a:29:b6:cf:4c:76:c2:b9:c2:77:0e:2c:0c:f4:
81:ba:33:02:64:63:29:6c:0b:e0:ef:42:1a:47:86:89:1b:e4:
85:6b:ee:48:20:0c:57:e9:aa:55:59:b6:f9:c6:d6:52:e4:5a:
60:18:60:11:80:c8:c2:1a:ed:a9:20:ec:5b:08:97:1a:ce:6d:
60:1f:ae:f1:d7:4f:28:3a:f9:e6:09:b5:36:46:6e:52:e9:7c:
31:a4:5d:78:c4:8d:f9:0a:0d:50:2f:90:98:c7:6a:5b:eb:99:
4e:d9:3b:8f:05:4f:e3:1a:1c:9a:7d:f7:82:52:73:6a:e2:dd:
84:04:93:97:ba:fc:0e:32:6b:6b:72:91:11:31:71:dc:fd:c5:
af:28:4c:f6:30:40:f5:25:11:14:7b:68:2e:d0:15:fe:a9:e8:
95:6b:b1:1f:b8:00:17:83:38:74:cb:55:bf:bb:07:6c:1d:9d:
b9:ee:e5:76:31:a2:8e:e8:97:a4:b8:fd:09:33:db:1c:14:1e:
72:34:2a:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7nq2Rjmxv9y2xcTiPni2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZWI2NWE3MWFmMDI5NTkyNzJhY2MwMGQ1YzRjMTk1ODM4
NWRlOTQwHhcNMjUxMTExMDgwMDQ1WhcNMjUxMTEyMDgwMDQ1WjAzMTEwLwYDVQQD
EyhjZjg0ODliMjRiZWM1ZTZlZDVjMzAyNDRlN2Q5NjM5MjY5NDE3M2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu4ooBCDzn05oStV7EdhypsoRMSI
5iKhwP/oTaXSsUEompehFV0tdwvILgeAtQAUaZcNbN7P8a6ZFOQehDNj29q+Kqoi
DcQJ6ChVs4eO0Wfe0wfjcRdYzKwmtjWM7XYeGXNlF1Nj+jUaFGkgxSyh6HeJk3eQ
GNehx79yGq7vlmEM7s69vbz2Tqm2ZXFJh7iLPARY9uWxLE63kxZ9Wt+TyzeyF52n
tZdYW7dJbxfszWCjd+BqDeAM2TwsAVZrIF1wmTBM2G/PyXITfnh9tPvi2vxaGGsC
7ef4VGkOwaDg2UYPUzkaZ0lDl8qjrMA9MEqpIB+7yJ/wloXkWmW3dAs7yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+EibJL7F5u1cMCROfZY5JpQXPTMB8GA1UdIwQY
MBaAFIvrZaca8ClZJyrMANXEwZWDhd6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZTk5NTctYzdjYy00OTk3LWEyMmIt
MTY1YTg0NmQ0ODFkLzEvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kZTk5NTctYzdjYy00OTk3LWEyMmItMTY1YTg0NmQ0ODFk
LzEvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOpqgDbj
FGBGLhAD/LzMJzyy68jGxo3OrDYhuA4OhIex+0J8Dpunuxbarz3vKHUHjM79i73r
toUt3Topts9MdsK5wncOLAz0gbozAmRjKWwL4O9CGkeGiRvkhWvuSCAMV+mqVVm2
+cbWUuRaYBhgEYDIwhrtqSDsWwiXGs5tYB+u8ddPKDr55gm1NkZuUul8MaRdeMSN
+QoNUC+QmMdqW+uZTtk7jwVP4xocmn33glJzauLdhASTl7r8DjJra3KRETFx3P3F
ryhM9jBA9SURFHtoLtAV/qnolWuxH7gAF4M4dMtVv7sHbB2due7ldjGijuiXpLj9
CTPbHBQecjQqwg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:48 2025 by rpki-client