Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
File: tpJFTBZpZIbPBx7Rjnl240BJCfs.mft (raw, json)
Hash identifier: 98eENKyDjE26FCemw39E5nqFBh7YoHnoBcD41wyi7Fg=
Subject key identifier: 2B:E9:3D:A4:32:79:33:2E:A7:0F:34:DE:6D:1D:A1:A9:E5:28:5D:D4
Authority key identifier: B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
Certificate issuer: /CN=b692454c16696486cf071ed18e7976e3404909fb
Certificate serial: 0199FB45DDBAF239C7621398BA94B5FF6E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
Manifest number: 0B30
Signing time: Sun 19 Oct 2025 07:01:23 +0000
Manifest this update: Sun 19 Oct 2025 07:01:23 +0000
Manifest next update: Mon 20 Oct 2025 07:01:23 +0000
Files and hashes: 1: 5czF8Od9k1lGzWbwlN6JD9EQv3o.roa (hash: xQiXSp/PKEr54Bt774G49z92F24A1eFshYT3vR6Fw2c=)
2: tpJFTBZpZIbPBx7Rjnl240BJCfs.crl (hash: e1maTexnPb6mWmo+8M+Wpvc/jYGtFzv6QjTGFFbGgBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:dd:ba:f2:39:c7:62:13:98:ba:94:b5:ff:6e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b692454c16696486cf071ed18e7976e3404909fb
Validity
Not Before: Oct 19 07:01:23 2025 GMT
Not After : Oct 20 07:01:23 2025 GMT
Subject: CN=2be93da43279332ea70f34de6d1da1a9e5285dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:bd:4b:c7:ee:31:ac:1c:ef:42:a0:c9:ba:
cf:5f:5a:cd:e9:2a:73:67:62:73:34:37:22:1d:72:
ce:f3:ea:b8:ce:19:03:9f:9c:45:0e:ac:cc:5f:52:
6b:85:98:c7:7b:3f:25:1e:7a:65:c1:81:a7:16:ac:
65:70:24:71:a5:14:e6:f7:84:22:65:b3:b6:fe:cf:
05:05:df:96:7e:36:18:20:d5:af:2d:6c:de:6f:fb:
14:bd:f9:cb:0d:bd:9c:b1:74:c8:b5:45:23:2f:d5:
3e:47:f6:42:36:79:5e:45:65:34:3a:72:47:6c:cf:
08:02:d4:56:2c:a1:6e:bb:53:6c:c3:ea:6b:90:ce:
ef:fe:fb:1a:0e:53:be:44:8e:46:c5:59:8f:2a:2a:
4d:39:25:3c:67:42:44:a9:63:62:eb:fa:05:50:42:
77:63:cb:99:8a:eb:c1:92:d8:cc:7d:d2:6d:bc:7e:
9e:2b:32:81:c5:76:9c:79:49:d9:94:bf:0c:0a:76:
c4:a8:44:a9:dd:f0:1e:8b:be:0c:e9:0a:7b:25:63:
f3:84:ea:b0:2b:d5:1c:4f:69:98:52:1b:01:e8:52:
7b:ae:a0:15:ff:8c:e6:29:bc:e6:24:bd:f2:24:a8:
b1:12:ea:1b:22:25:2e:f2:f2:13:86:0e:2f:98:01:
22:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E9:3D:A4:32:79:33:2E:A7:0F:34:DE:6D:1D:A1:A9:E5:28:5D:D4
X509v3 Authority Key Identifier:
keyid:B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:48:67:75:72:c6:32:2e:71:bc:fd:3b:a9:6c:ff:90:7c:dc:
fb:75:20:5c:a2:51:0e:da:d7:ac:96:07:d1:a2:86:67:c0:e9:
ee:49:fc:78:9a:5f:82:37:5c:a1:d5:85:37:bc:41:d8:50:bd:
96:9b:69:9c:ca:94:61:5f:a5:75:e9:ed:ff:a5:f0:8b:f0:fb:
81:2e:24:18:df:a2:14:f3:3a:c3:e8:4d:c3:25:26:de:5d:f1:
ca:85:17:2e:61:59:98:53:b9:42:b0:43:f3:33:b9:29:ec:e3:
11:22:cc:e8:0a:c0:57:ee:68:4d:17:33:40:d9:9f:2d:17:31:
2b:dc:9d:69:29:8c:6b:54:77:b9:77:ca:86:b0:fc:a8:a0:59:
50:19:a3:7c:fd:b3:62:67:93:44:0b:f5:8a:f9:9f:b6:e2:31:
f3:30:61:f4:73:d7:1a:bc:ce:01:f7:a2:dd:0f:19:f6:99:b5:
d2:23:7c:d9:08:23:e5:94:9f:4b:ef:a3:c5:0f:47:4e:91:87:
ed:18:06:93:e8:86:3f:91:2f:d3:80:e5:fe:c6:50:ce:8b:ca:
3f:f4:bb:08:96:52:87:81:62:a6:b9:16:9c:cf:14:b4:96:b5:
39:87:17:93:98:74:46:25:27:69:45:2a:7c:82:d0:33:f7:74:
6f:d1:66:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Rd268jnHYhOYupS1/24VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OTI0NTRjMTY2OTY0ODZjZjA3MWVkMThlNzk3NmUzNDA0
OTA5ZmIwHhcNMjUxMDE5MDcwMTIzWhcNMjUxMDIwMDcwMTIzWjAzMTEwLwYDVQQD
EygyYmU5M2RhNDMyNzkzMzJlYTcwZjM0ZGU2ZDFkYTFhOWU1Mjg1ZGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvay9S8fuMawc70KgybrPX1rN6Spz
Z2JzNDciHXLO8+q4zhkDn5xFDqzMX1JrhZjHez8lHnplwYGnFqxlcCRxpRTm94Qi
ZbO2/s8FBd+WfjYYINWvLWzeb/sUvfnLDb2csXTItUUjL9U+R/ZCNnleRWU0OnJH
bM8IAtRWLKFuu1Nsw+prkM7v/vsaDlO+RI5GxVmPKipNOSU8Z0JEqWNi6/oFUEJ3
Y8uZiuvBktjMfdJtvH6eKzKBxXaceUnZlL8MCnbEqESp3fAei74M6Qp7JWPzhOqw
K9UcT2mYUhsB6FJ7rqAV/4zmKbzmJL3yJKixEuobIiUu8vIThg4vmAEiOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvpPaQyeTMupw803m0doanlKF3UMB8GA1UdIwQY
MBaAFLaSRUwWaWSGzwce0Y55duNASQn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHBKRlRCWnBaSWJQQng3UmpubDI0MEJKQ2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9iZDE3M2QtNmNmNS00MjUwLWFhMjYt
NGE2ZjcxN2M3NTY0LzEvdHBKRlRCWnBaSWJQQng3UmpubDI0MEJKQ2ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9iZDE3M2QtNmNmNS00MjUwLWFhMjYtNGE2ZjcxN2M3NTY0
LzEvdHBKRlRCWnBaSWJQQng3UmpubDI0MEJKQ2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0hndXLG
Mi5xvP07qWz/kHzc+3UgXKJRDtrXrJYH0aKGZ8Dp7kn8eJpfgjdcodWFN7xB2FC9
lptpnMqUYV+ldent/6Xwi/D7gS4kGN+iFPM6w+hNwyUm3l3xyoUXLmFZmFO5QrBD
8zO5KezjESLM6ArAV+5oTRczQNmfLRcxK9ydaSmMa1R3uXfKhrD8qKBZUBmjfP2z
YmeTRAv1ivmftuIx8zBh9HPXGrzOAfei3Q8Z9pm10iN82Qgj5ZSfS++jxQ9HTpGH
7RgGk+iGP5Ev04Dl/sZQzovKP/S7CJZSh4FiprkWnM8UtJa1OYcXk5h0RiUnaUUq
fILQM/d0b9FmOA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:28 2025 by rpki-client