
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
File: tZvm7lSfM1xyhJennxRBA06FLDU.mft (raw, json)
Hash identifier: c2vx3I3xol1YJ63sfKOTmntFzuIScVUrLvOxP1bqxJc=
Subject key identifier: 47:0A:F2:6D:35:1E:0D:2A:A3:D6:E8:57:7C:28:EF:0F:58:E8:53:90
Authority key identifier: B5:9B:E6:EE:54:9F:33:5C:72:84:97:A7:9F:14:41:03:4E:85:2C:35
Certificate issuer: /CN=b59be6ee549f335c728497a79f1441034e852c35
Certificate serial: 0198D6612E95D0CE3238B42F582FF5090E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
Manifest number: 1515
Signing time: Sat 23 Aug 2025 10:02:29 +0000
Manifest this update: Sat 23 Aug 2025 10:02:29 +0000
Manifest next update: Sun 24 Aug 2025 10:02:29 +0000
Files and hashes: 1: KDCfBX3ad6A_00hrvSAJKYMpmcs.roa (hash: fNL/A2pz+GNUAG3d72o3KDJ4AJqpHRk0BtaNcUYXr/8=)
2: tZvm7lSfM1xyhJennxRBA06FLDU.crl (hash: sFCKQ67z/Tt/vof0sOWEMAU0Adh/3QByMHkOSDAAH0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:2e:95:d0:ce:32:38:b4:2f:58:2f:f5:09:0e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59be6ee549f335c728497a79f1441034e852c35
Validity
Not Before: Aug 23 10:02:29 2025 GMT
Not After : Aug 24 10:02:29 2025 GMT
Subject: CN=470af26d351e0d2aa3d6e8577c28ef0f58e85390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:25:8b:28:83:f9:43:12:79:03:67:03:46:
9a:52:19:a4:f1:1c:db:a9:fc:23:22:cd:89:48:8c:
79:26:5c:81:9d:8f:bb:7e:76:e0:16:b9:28:bf:27:
80:3f:73:4d:33:a0:e1:7e:9d:2f:71:50:04:06:02:
ae:eb:a2:82:d6:a6:da:b3:8e:58:99:71:6a:f9:5d:
99:5a:f0:fd:f6:00:54:97:0a:e4:b2:99:09:74:bc:
3e:cc:d4:cf:d5:72:e6:f9:fc:4d:5c:05:0d:38:29:
6d:0f:c0:13:50:3a:75:95:4d:51:bf:65:86:4d:87:
31:db:b0:50:46:94:24:78:ea:30:c1:b5:c7:51:01:
21:f0:5d:5d:38:00:7a:27:e4:e2:bf:11:9e:23:66:
80:68:d5:8c:0a:f6:06:ce:b3:4c:22:6f:91:60:86:
c1:72:50:10:d9:ac:32:ea:d0:93:d7:4a:14:9e:79:
3e:f8:90:bd:42:e6:3f:88:d8:d9:ac:67:d4:9f:62:
65:fd:32:e5:98:62:16:05:79:10:b7:10:44:0c:cf:
66:ee:81:e3:f2:0c:ab:8c:37:21:cb:30:ad:17:33:
da:b2:c6:2f:83:8d:d8:3b:c8:1f:5d:d1:6e:3c:83:
73:34:41:6a:5f:dc:4e:56:79:78:fd:7b:66:02:c3:
2a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0A:F2:6D:35:1E:0D:2A:A3:D6:E8:57:7C:28:EF:0F:58:E8:53:90
X509v3 Authority Key Identifier:
keyid:B5:9B:E6:EE:54:9F:33:5C:72:84:97:A7:9F:14:41:03:4E:85:2C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:69:8b:ae:9f:61:be:98:eb:42:03:56:9c:47:6f:44:00:5f:
06:a7:12:db:ef:29:51:00:f0:c9:5c:24:bc:76:ac:13:dd:c4:
c3:d1:70:24:0c:1d:31:15:88:d9:81:7a:31:52:b4:0c:04:97:
2a:78:0e:2d:68:d5:cb:66:ec:24:82:d7:97:84:08:24:62:00:
71:b1:4a:be:57:91:a7:f0:e8:85:a6:4c:aa:e5:85:2d:df:1d:
0a:88:96:76:b8:28:2b:3f:5b:02:62:51:36:6f:29:21:cb:51:
2d:a8:a4:e0:26:0e:8d:21:13:89:79:2e:8e:1b:8d:f7:93:77:
d1:7e:a1:da:67:69:46:e5:15:02:7e:ec:61:fd:1e:5a:7b:0d:
2f:e5:8c:5f:57:c6:09:fe:e7:07:19:6b:4d:0d:56:91:2d:17:
9b:87:87:95:24:a1:a1:0e:70:bc:00:1a:64:f2:5e:16:e7:62:
25:47:10:a7:69:af:d6:92:8d:fd:bb:b3:91:ab:5d:e5:c3:c9:
91:1b:e3:34:95:a0:ba:72:48:06:06:1a:7d:0a:54:c3:b8:fe:
36:67:52:48:86:32:d7:9e:66:a5:b2:a4:d3:d0:af:63:50:ba:
e9:09:f8:4f:ca:86:2c:4e:17:0e:1c:8d:e8:71:4a:e7:5d:ad:
b6:6e:51:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYS6V0M4yOLQvWC/1CQ5RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1OWJlNmVlNTQ5ZjMzNWM3Mjg0OTdhNzlmMTQ0MTAzNGU4
NTJjMzUwHhcNMjUwODIzMTAwMjI5WhcNMjUwODI0MTAwMjI5WjAzMTEwLwYDVQQD
Eyg0NzBhZjI2ZDM1MWUwZDJhYTNkNmU4NTc3YzI4ZWYwZjU4ZTg1MzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX8liyiD+UMSeQNnA0aaUhmk8Rzb
qfwjIs2JSIx5JlyBnY+7fnbgFrkovyeAP3NNM6Dhfp0vcVAEBgKu66KC1qbas45Y
mXFq+V2ZWvD99gBUlwrkspkJdLw+zNTP1XLm+fxNXAUNOCltD8ATUDp1lU1Rv2WG
TYcx27BQRpQkeOowwbXHUQEh8F1dOAB6J+TivxGeI2aAaNWMCvYGzrNMIm+RYIbB
clAQ2awy6tCT10oUnnk++JC9QuY/iNjZrGfUn2Jl/TLlmGIWBXkQtxBEDM9m7oHj
8gyrjDchyzCtFzPassYvg43YO8gfXdFuPINzNEFqX9xOVnl4/XtmAsMq+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcK8m01Hg0qo9boV3wo7w9Y6FOQMB8GA1UdIwQY
MBaAFLWb5u5UnzNccoSXp58UQQNOhSw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFp2bTdsU2ZNMXh5aEplbm54UkJBMDZGTERVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jMWQ5YjctMzkzZC00NjI1LWFmZTct
ZjNjODg3MjgxZWJhLzEvdFp2bTdsU2ZNMXh5aEplbm54UkJBMDZGTERVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jMWQ5YjctMzkzZC00NjI1LWFmZTctZjNjODg3MjgxZWJh
LzEvdFp2bTdsU2ZNMXh5aEplbm54UkJBMDZGTERVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxmmLrp9h
vpjrQgNWnEdvRABfBqcS2+8pUQDwyVwkvHasE93Ew9FwJAwdMRWI2YF6MVK0DASX
KngOLWjVy2bsJILXl4QIJGIAcbFKvleRp/DohaZMquWFLd8dCoiWdrgoKz9bAmJR
Nm8pIctRLaik4CYOjSETiXkujhuN95N30X6h2mdpRuUVAn7sYf0eWnsNL+WMX1fG
Cf7nBxlrTQ1WkS0Xm4eHlSShoQ5wvAAaZPJeFudiJUcQp2mv1pKN/buzkatd5cPJ
kRvjNJWgunJIBgYafQpUw7j+NmdSSIYy155mpbKk09CvY1C66Qn4T8qGLE4XDhyN
6HFK512ttm5RrA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:00 2025 by rpki-client