Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
File: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft (raw, json)
Hash identifier: 11k9osS6cVzgB9NfGIi9OkWLOC521OvMxEQtSEpH8oY=
Subject key identifier: 3A:76:23:B3:A1:81:26:7D:8A:81:A2:EE:68:A9:18:14:4F:E0:BB:5F
Authority key identifier: 2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4
Certificate issuer: /CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
Certificate serial: 0199FC8FA20B2C1E3F12BDE334E17E2CDDDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
Manifest number: 0790
Signing time: Sun 19 Oct 2025 13:01:35 +0000
Manifest this update: Sun 19 Oct 2025 13:01:35 +0000
Manifest next update: Mon 20 Oct 2025 13:01:35 +0000
Files and hashes: 1: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl (hash: p9S38iFx++0BfEQynnaeHIO+4C51JPHr9TSaJ866YVc=)
2: upvfUH_YjoaPJNTn3nKwVUkJlqc.roa (hash: GMdb4SO6ufP1WGhwXYRzniR/Z7eY9kD3nmj07BQxDnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a2:0b:2c:1e:3f:12:bd:e3:34:e1:7e:2c:dd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
Validity
Not Before: Oct 19 13:01:35 2025 GMT
Not After : Oct 20 13:01:35 2025 GMT
Subject: CN=3a7623b3a181267d8a81a2ee68a918144fe0bb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:30:28:de:52:fd:f8:90:6d:4f:73:89:21:
5d:7f:2a:2e:fa:45:77:fd:d6:5e:66:c8:e4:44:99:
6d:25:5d:5d:28:52:b0:17:27:59:3c:2b:dd:4d:0c:
c1:ac:c5:7b:6e:cb:69:fa:b3:da:52:5d:8b:9b:e4:
b4:1c:13:ee:13:45:a1:1f:61:31:1c:a6:f0:30:a8:
da:41:f7:78:5a:ab:fe:f9:4b:d8:ec:1c:d2:c8:81:
ca:f3:d6:0c:f6:97:b0:a5:8f:fb:86:37:a3:7e:9c:
46:43:45:ee:2c:eb:a7:74:dd:0f:34:d1:d7:de:2a:
3e:2a:ff:f2:48:81:47:46:03:ee:9a:cd:cd:3e:c4:
66:d6:8f:f0:89:fa:1b:63:59:b3:1b:bf:69:4d:fa:
98:cf:f6:4d:c9:97:28:35:0f:23:62:28:49:db:38:
61:14:f2:1a:97:4e:14:f8:e8:4c:de:d7:c0:ca:59:
a9:5d:d4:80:9c:b5:5b:e3:f5:a5:4a:87:71:25:9c:
b2:da:5b:88:36:cb:47:70:d7:5c:20:c0:1b:2d:e8:
00:9c:25:22:7c:87:4e:f8:39:5b:0b:e9:b1:e1:17:
fe:28:44:c0:ea:58:a4:c5:b6:01:42:51:8d:c0:8e:
ac:f7:36:fb:89:46:3a:ac:c0:bc:9c:71:cc:46:9a:
05:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:76:23:B3:A1:81:26:7D:8A:81:A2:EE:68:A9:18:14:4F:E0:BB:5F
X509v3 Authority Key Identifier:
keyid:2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d4:9b:77:e6:fa:41:59:e8:22:76:d1:96:2d:64:39:86:cc:
9d:f4:1b:a8:e9:33:39:9c:e7:1a:a7:5f:4c:da:79:34:4a:f5:
5d:be:0c:7d:25:5c:51:c0:e1:81:b8:39:33:e9:f9:d7:76:84:
11:d4:63:8f:ca:19:c8:89:01:13:c0:47:46:e5:d4:14:47:38:
c1:23:d7:5b:b0:68:6e:72:56:e8:7b:b4:e3:cd:00:3c:61:de:
c8:0d:fd:30:ef:06:da:83:e0:87:ed:21:fb:2a:a0:8b:e1:b4:
29:a6:f4:ad:40:34:3f:4c:17:f1:79:fd:bd:0f:03:86:63:9c:
92:e9:6e:d7:ff:da:fa:ab:51:3b:14:66:d6:f4:3f:f1:a5:57:
1e:d9:f9:da:6a:aa:3a:43:85:b5:46:37:34:bb:c0:da:40:50:
01:1b:e5:01:da:bf:15:b1:7f:b9:b0:d5:5c:bc:98:08:1f:e5:
d5:22:2b:80:a2:98:2b:a9:01:37:bf:00:a7:bf:6b:41:5c:de:
8b:ff:9e:d9:bb:bc:cd:96:84:ae:d7:28:d5:81:5e:75:6c:eb:
17:3b:d2:95:1f:b7:5f:b9:16:29:5d:35:52:7e:4b:45:89:38:
a2:09:bd:70:f6:bb:51:6e:61:e7:e0:fd:02:d7:65:64:aa:24:
ae:1f:cd:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j6ILLB4/Er3jNOF+LN3fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZmI2NDFkM2NhMmVjMTE1N2Y0NzczMjE3ODljZWMwY2M1
ZjI5YTQwHhcNMjUxMDE5MTMwMTM1WhcNMjUxMDIwMTMwMTM1WjAzMTEwLwYDVQQD
EygzYTc2MjNiM2ExODEyNjdkOGE4MWEyZWU2OGE5MTgxNDRmZTBiYjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc0wKN5S/fiQbU9ziSFdfyou+kV3
/dZeZsjkRJltJV1dKFKwFydZPCvdTQzBrMV7bstp+rPaUl2Lm+S0HBPuE0WhH2Ex
HKbwMKjaQfd4Wqv++UvY7BzSyIHK89YM9pewpY/7hjejfpxGQ0XuLOundN0PNNHX
3io+Kv/ySIFHRgPums3NPsRm1o/wifobY1mzG79pTfqYz/ZNyZcoNQ8jYihJ2zhh
FPIal04U+OhM3tfAylmpXdSAnLVb4/WlSodxJZyy2luINstHcNdcIMAbLegAnCUi
fIdO+DlbC+mx4Rf+KETA6likxbYBQlGNwI6s9zb7iUY6rMC8nHHMRpoFXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDp2I7OhgSZ9ioGi7mipGBRP4LtfMB8GA1UdIwQY
MBaAFC/7ZB08ouwRV/R3MheJzsDMXymkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iMDZmZTAtMzY5MC00MzdkLTg5MjQt
MDcxZGFhMDVkYWJmLzEvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iMDZmZTAtMzY5MC00MzdkLTg5MjQtMDcxZGFhMDVkYWJm
LzEvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNSbd+b6
QVnoInbRli1kOYbMnfQbqOkzOZznGqdfTNp5NEr1Xb4MfSVcUcDhgbg5M+n513aE
EdRjj8oZyIkBE8BHRuXUFEc4wSPXW7BobnJW6Hu0480APGHeyA39MO8G2oPgh+0h
+yqgi+G0Kab0rUA0P0wX8Xn9vQ8DhmOckulu1//a+qtROxRm1vQ/8aVXHtn52mqq
OkOFtUY3NLvA2kBQARvlAdq/FbF/ubDVXLyYCB/l1SIrgKKYK6kBN78Ap79rQVze
i/+e2bu8zZaErtco1YFedWzrFzvSlR+3X7kWKV01Un5LRYk4ogm9cPa7UW5h5+D9
AtdlZKokrh/NvA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:29 2025 by rpki-client