Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
File: tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json)
Hash identifier: eZ9Wua8U4YoIsOt1XIqsrAhVd+sdohig7JRyHDvfcTI=
Subject key identifier: B9:74:17:B1:97:97:7E:7A:08:A3:F5:52:DE:D9:2A:9F:61:7C:58:06
Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
Certificate issuer: /CN=b573d2dda93e420409163da59e7414ee91a2eef2
Certificate serial: 019A011100B9722EFF3C7A4FECC5B0ABEA02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
Manifest number: 0182
Signing time: Mon 20 Oct 2025 10:01:22 +0000
Manifest this update: Mon 20 Oct 2025 10:01:22 +0000
Manifest next update: Tue 21 Oct 2025 10:01:22 +0000
Files and hashes: 1: r2p_nfti9wP7acQGEaKHM_xZ5Y4.roa (hash: 8x452bR9h9FZkxCtz0Hac6JBkLr+TCy/u9myFaRh5zg=)
2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: gMyis1yoGz2wqnPBGg1x89GdoVys3Bbt/T7h3LgxAcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:00:b9:72:2e:ff:3c:7a:4f:ec:c5:b0:ab:ea:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2
Validity
Not Before: Oct 20 10:01:22 2025 GMT
Not After : Oct 21 10:01:22 2025 GMT
Subject: CN=b97417b197977e7a08a3f552ded92a9f617c5806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:5c:74:21:65:95:a0:24:2e:0b:48:75:c4:
0a:f2:38:5f:e6:f6:b5:f3:1a:ae:bc:2d:f6:f2:9f:
83:44:6d:c1:ff:50:85:86:e0:7d:67:01:66:ac:50:
db:77:77:39:c9:f7:91:99:ae:f0:05:3c:96:d3:cf:
42:44:1c:a5:a0:c4:80:1a:a5:6c:ef:97:12:3b:ee:
28:bb:b6:ff:bb:87:a5:c7:e7:aa:ee:22:b2:d0:b2:
91:0c:49:e2:39:fe:0d:df:07:3a:06:e1:03:ab:55:
cf:2f:90:37:fb:2c:c6:0f:0b:f3:cf:dc:d1:23:ed:
bd:73:22:62:dc:b0:5a:1c:f6:eb:2a:8a:fc:88:71:
3c:56:b6:6e:ba:d6:98:ce:6e:01:ef:30:d8:ab:40:
43:76:c8:58:60:06:94:04:99:ba:c1:ee:ef:ef:dc:
fb:25:73:84:4d:4a:c0:9c:e7:ec:6b:e1:b2:0a:3a:
58:f8:35:4e:4d:6e:44:07:99:79:85:16:97:97:b8:
27:e4:53:e3:2c:bd:6f:c1:f2:51:07:1d:74:b4:9b:
06:ac:5f:2b:fb:99:9e:a0:52:00:91:fd:79:ac:7d:
63:70:7e:41:21:12:59:32:97:f8:e6:49:99:f8:82:
58:6e:b6:46:9e:cd:e1:2d:2d:44:41:d6:ed:0a:67:
5b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:74:17:B1:97:97:7E:7A:08:A3:F5:52:DE:D9:2A:9F:61:7C:58:06
X509v3 Authority Key Identifier:
keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:fa:9c:3d:a2:30:5a:50:71:13:dd:f2:ad:ec:4c:40:17:19:
d7:ae:a6:d6:13:03:dd:11:11:b0:0e:bb:6f:79:b1:89:37:e3:
e1:8b:15:56:2e:3f:19:a2:71:18:7c:28:eb:ee:39:42:e9:7f:
75:7d:a9:54:f0:54:fa:4c:af:03:5b:ed:2d:0e:8b:7f:40:ff:
f6:0c:92:45:57:8a:1a:96:5b:4c:7a:eb:e9:e8:26:e6:70:71:
a6:d1:92:d6:f0:af:4f:d8:6c:13:47:5d:72:47:7f:9c:a3:90:
45:78:bc:4f:a0:8d:eb:23:fb:05:74:39:b4:26:77:44:58:9a:
8b:18:87:fa:ae:bb:30:4a:2c:6c:7f:3c:0e:ce:17:35:9c:65:
32:5a:94:35:63:a8:17:b7:ed:5b:5e:78:39:74:dc:3b:e8:42:
9a:a4:8e:10:e6:88:b4:b9:54:0d:90:73:b7:eb:96:9d:79:08:
ab:17:52:a0:f9:a1:8d:59:3e:10:5d:8c:92:25:76:54:5c:b9:
36:5c:e8:8b:02:13:7b:00:dc:6a:04:39:4f:7b:40:6b:3f:5b:
fa:5a:3f:f3:d4:4a:b5:41:3f:99:dc:d3:88:fa:ab:46:34:64:
db:b8:43:58:00:96:fb:fb:c7:50:22:ef:e1:6d:27:20:9d:74:
89:5a:0f:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBEQC5ci7/PHpP7MWwq+oCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NzNkMmRkYTkzZTQyMDQwOTE2M2RhNTllNzQxNGVlOTFh
MmVlZjIwHhcNMjUxMDIwMTAwMTIyWhcNMjUxMDIxMTAwMTIyWjAzMTEwLwYDVQQD
EyhiOTc0MTdiMTk3OTc3ZTdhMDhhM2Y1NTJkZWQ5MmE5ZjYxN2M1ODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfRcdCFllaAkLgtIdcQK8jhf5va1
8xquvC328p+DRG3B/1CFhuB9ZwFmrFDbd3c5yfeRma7wBTyW089CRByloMSAGqVs
75cSO+4ou7b/u4elx+eq7iKy0LKRDEniOf4N3wc6BuEDq1XPL5A3+yzGDwvzz9zR
I+29cyJi3LBaHPbrKor8iHE8VrZuutaYzm4B7zDYq0BDdshYYAaUBJm6we7v79z7
JXOETUrAnOfsa+GyCjpY+DVOTW5EB5l5hRaXl7gn5FPjLL1vwfJRBx10tJsGrF8r
+5meoFIAkf15rH1jcH5BIRJZMpf45kmZ+IJYbrZGns3hLS1EQdbtCmdbIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLl0F7GXl356CKP1Ut7ZKp9hfFgGMB8GA1UdIwQY
MBaAFLVz0t2pPkIECRY9pZ50FO6Rou7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFhQUzNhay1RZ1FKRmoybG5uUVU3cEdpN3ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yZjY3MmItMjM2Yy00MGZiLWFhZjYt
MDhkMGY0YmQyYzI4LzEvdFhQUzNhay1RZ1FKRmoybG5uUVU3cEdpN3ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yZjY3MmItMjM2Yy00MGZiLWFhZjYtMDhkMGY0YmQyYzI4
LzEvdFhQUzNhay1RZ1FKRmoybG5uUVU3cEdpN3ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvqcPaIw
WlBxE93yrexMQBcZ166m1hMD3RERsA67b3mxiTfj4YsVVi4/GaJxGHwo6+45Qul/
dX2pVPBU+kyvA1vtLQ6Lf0D/9gySRVeKGpZbTHrr6egm5nBxptGS1vCvT9hsE0dd
ckd/nKOQRXi8T6CN6yP7BXQ5tCZ3RFiaixiH+q67MEosbH88Ds4XNZxlMlqUNWOo
F7ftW154OXTcO+hCmqSOEOaItLlUDZBzt+uWnXkIqxdSoPmhjVk+EF2MkiV2VFy5
NlzoiwITewDcagQ5T3tAaz9b+lo/89RKtUE/mdzTiPqrRjRk27hDWACW+/vHUCLv
4W0nIJ10iVoPOA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:01:59 2025 by rpki-client