Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
File: tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft (raw, json)
Hash identifier: sb6AWsYoWiMcjTsa2QjCMDR0V+kRzwjS1AT9f2fKU4Q=
Subject key identifier: 4A:9B:BB:1A:E0:1A:A5:E3:B2:A5:44:43:AA:35:4E:F0:93:2A:AE:1B
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Certificate issuer: /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial: 0198D5158AE472B1403444B61EAFEE044301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
Manifest number: 13CC
Signing time: Sat 23 Aug 2025 04:00:15 +0000
Manifest this update: Sat 23 Aug 2025 04:00:15 +0000
Manifest next update: Sun 24 Aug 2025 04:00:15 +0000
Files and hashes: 1: HqctvWxlrIEslD4ELNpmV-XhZkU.roa (hash: CGfhQ4fck7gcAxsslFd0Q8T9jYmDIbHyBLNxPR9Qais=)
2: bKSpPE5-kXmlbnT7r_1atj4jQSY.roa (hash: L3QXcpXiam9j36oZrcZebMrghkDu87SD2DJXHj63ivw=)
3: tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl (hash: VX+Y6YL+8zJDDsRFm9picj5b9E9kRnOeicjLFGM3H7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:8a:e4:72:b1:40:34:44:b6:1e:af:ee:04:43:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Validity
Not Before: Aug 23 04:00:15 2025 GMT
Not After : Aug 24 04:00:15 2025 GMT
Subject: CN=4a9bbb1ae01aa5e3b2a54443aa354ef0932aae1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:e8:aa:12:64:af:3c:9b:ef:cc:61:cb:95:
6a:06:ea:b6:c5:02:a8:7b:ce:90:17:8d:1d:1d:ac:
17:66:83:57:c2:11:64:6c:99:21:7d:2b:a9:37:89:
d2:1c:08:30:e5:7a:9f:2b:b2:45:49:02:23:8e:80:
2e:cc:ca:28:fe:c6:15:b1:71:85:36:6b:25:79:ef:
a5:0c:fd:0c:86:5f:8b:79:e9:1f:6a:b0:d9:54:79:
91:66:0b:59:ec:4c:26:e5:a3:da:ca:7a:03:f5:8e:
c2:66:51:b7:eb:ab:fa:66:28:ae:9c:0f:61:ac:8a:
e8:61:dc:86:b7:7d:03:a8:37:00:b9:df:22:62:2d:
76:79:cc:be:92:d3:9f:79:b4:a0:f9:67:4e:b9:c9:
2a:f2:0a:73:35:0f:e3:14:62:ac:cd:f4:ca:e0:ff:
ef:42:a5:d1:d7:cf:19:15:e8:ca:ed:81:65:63:ca:
f5:68:66:07:44:44:7f:af:6f:02:30:50:d8:8f:0f:
ab:26:eb:4b:f9:2d:2c:84:4d:f6:04:5b:3a:2e:df:
d9:f7:bf:0f:db:33:58:93:6c:23:e9:94:63:bb:01:
ec:e0:86:c4:33:78:f2:f7:89:86:44:24:43:eb:bb:
74:de:06:f2:74:79:21:0d:9c:87:d6:d1:5b:3f:e3:
0e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9B:BB:1A:E0:1A:A5:E3:B2:A5:44:43:AA:35:4E:F0:93:2A:AE:1B
X509v3 Authority Key Identifier:
keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ec:b9:44:d8:5b:1d:52:30:46:2e:44:1c:96:58:61:6a:b8:
bf:c0:78:39:0c:bb:83:da:f2:03:9e:38:c0:98:06:2f:18:e0:
d6:4c:c1:89:79:f3:51:ce:dc:e6:ae:04:9b:b3:c5:db:37:a3:
3a:9e:d4:7e:9d:c5:49:17:f6:21:da:9d:18:e5:d3:ed:e5:ca:
51:2a:7c:b3:7d:dc:6d:b8:dc:bf:f8:28:54:25:58:03:1d:94:
ba:46:e8:c7:38:c5:7f:d2:21:06:e2:ba:71:52:48:d3:47:10:
d6:6b:d2:82:aa:23:7f:4b:01:5d:e8:eb:cc:07:4f:6b:ab:11:
89:04:7e:a9:6b:a1:9d:d7:6e:93:9d:2e:f8:b4:82:86:d0:bd:
f7:4e:7b:7b:af:c8:a8:ab:9f:44:df:94:2e:d3:1a:2e:52:32:
57:63:09:9c:94:bb:1f:ea:98:90:87:ad:5a:50:5a:62:60:cf:
1a:89:73:15:52:93:15:e5:95:c0:31:76:b4:cf:a7:81:6e:99:
64:3e:d2:bf:f0:e8:a0:48:20:fd:6a:de:61:67:50:84:3d:70:
0b:32:62:c4:9f:df:e5:6b:89:43:ee:c4:16:79:bd:a9:65:42:
a4:fc:23:53:53:99:0a:df:73:f4:21:87:5c:6d:e3:64:cc:42:
7d:4f:06:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFYrkcrFANES2Hq/uBEMBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ZjU3ZTQ5ZWJmMDk4YmM1M2U4ZGIzODg4ODFjOTIzNjlk
OWJmOGMwHhcNMjUwODIzMDQwMDE1WhcNMjUwODI0MDQwMDE1WjAzMTEwLwYDVQQD
Eyg0YTliYmIxYWUwMWFhNWUzYjJhNTQ0NDNhYTM1NGVmMDkzMmFhZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKboqhJkrzyb78xhy5VqBuq2xQKo
e86QF40dHawXZoNXwhFkbJkhfSupN4nSHAgw5XqfK7JFSQIjjoAuzMoo/sYVsXGF
Nmslee+lDP0Mhl+LeekfarDZVHmRZgtZ7Ewm5aPaynoD9Y7CZlG366v6ZiiunA9h
rIroYdyGt30DqDcAud8iYi12ecy+ktOfebSg+WdOuckq8gpzNQ/jFGKszfTK4P/v
QqXR188ZFejK7YFlY8r1aGYHRER/r28CMFDYjw+rJutL+S0shE32BFs6Lt/Z978P
2zNYk2wj6ZRjuwHs4IbEM3jy94mGRCRD67t03gbydHkhDZyH1tFbP+MOTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqbuxrgGqXjsqVEQ6o1TvCTKq4bMB8GA1UdIwQY
MBaAFLX1fknr8Ji8U+jbOIiBySNp2b+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGZWLVNldndtTHhUNk5zNGlJSEpJMm5adjR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85ZTkxMjItYmJmZi00OGQ5LTk4YzYt
MGE0Mjg2ZjNjZmJlLzEvdGZWLVNldndtTHhUNk5zNGlJSEpJMm5adjR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS85ZTkxMjItYmJmZi00OGQ5LTk4YzYtMGE0Mjg2ZjNjZmJl
LzEvdGZWLVNldndtTHhUNk5zNGlJSEpJMm5adjR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuy5RNhb
HVIwRi5EHJZYYWq4v8B4OQy7g9ryA544wJgGLxjg1kzBiXnzUc7c5q4Em7PF2zej
Op7Ufp3FSRf2IdqdGOXT7eXKUSp8s33cbbjcv/goVCVYAx2UukboxzjFf9IhBuK6
cVJI00cQ1mvSgqojf0sBXejrzAdPa6sRiQR+qWuhndduk50u+LSChtC99057e6/I
qKufRN+ULtMaLlIyV2MJnJS7H+qYkIetWlBaYmDPGolzFVKTFeWVwDF2tM+ngW6Z
ZD7Sv/DooEgg/WreYWdQhD1wCzJixJ/f5WuJQ+7EFnm9qWVCpPwjU1OZCt9z9CGH
XG3jZMxCfU8G7Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:53:05 2025 by rpki-client