
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
File: tLC71kRVeO28e6a1v3ypNo0kF78.mft (raw, json)
Hash identifier: WU3hgzeD8RmmBYDvDvogIjqDPRiFzuwGL5iycpPp6Ig=
Subject key identifier: FA:9E:9B:08:7B:12:19:4C:54:A2:8F:4F:EC:51:74:E7:70:FF:43:8D
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial: 0199FB7C9C6DA5EA563DC6AD1C33F47A21B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
Manifest number: 0D45
Signing time: Sun 19 Oct 2025 08:01:11 +0000
Manifest this update: Sun 19 Oct 2025 08:01:11 +0000
Manifest next update: Mon 20 Oct 2025 08:01:11 +0000
Files and hashes: 1: E_gpRXs1wyJj1CMrt4P6GzVFs4U.roa (hash: gqqgWP9QREPzkIwRRirj81r/4D9tgTwnunohsTpcA6w=)
2: HYQhj9GfS2VL1LGH2hoGRnAq_1g.roa (hash: vupLnnm29iaNTZjA+glh+6XHc5HkCkw1Lh/FCGeyQn4=)
3: tLC71kRVeO28e6a1v3ypNo0kF78.crl (hash: kg4fLHh+qZFYNwo7H35n01/DmC6YNw6ih/yOaJo2FpA=)
4: zqLBYDBfWNqychEyI3nXYt2CCRQ.roa (hash: xPd7pskgYW4omSSyK6JduhnPOzmyiWl553qH0EzZiqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9c:6d:a5:ea:56:3d:c6:ad:1c:33:f4:7a:21:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Validity
Not Before: Oct 19 08:01:11 2025 GMT
Not After : Oct 20 08:01:11 2025 GMT
Subject: CN=fa9e9b087b12194c54a28f4fec5174e770ff438d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:29:7d:24:df:26:5f:7e:1b:56:19:51:4a:80:
fe:4f:23:19:01:65:ac:fd:1d:d7:84:a6:ae:9d:97:
be:7f:3d:a2:fa:f9:af:17:9a:43:82:15:b2:1a:de:
f6:34:b2:4d:34:b6:68:d9:03:8d:f0:aa:f9:6b:8c:
b1:21:3d:dc:f7:00:e1:64:48:e0:fb:45:65:df:09:
58:b1:d9:52:c9:2f:46:20:dd:4b:68:65:0c:6c:26:
69:98:49:d4:a8:26:52:e8:65:ad:d4:e3:ce:aa:83:
fd:6c:b4:28:84:93:20:44:93:53:48:32:f8:f8:ea:
04:0e:c9:80:0c:3b:a7:e2:ef:87:6d:d0:d2:ce:5c:
68:c4:9b:b8:73:ad:88:60:28:62:b1:9d:79:1a:97:
bd:67:de:ee:4b:96:7a:2f:c0:c5:f6:06:6a:cc:d3:
b2:53:7c:37:d3:d4:08:52:e3:1c:a8:58:ee:5e:ad:
40:b6:96:70:a7:1b:35:22:6d:41:52:75:45:45:65:
ee:47:40:b4:ea:59:6d:1b:2e:b2:65:44:fe:40:86:
65:34:46:27:9f:13:2c:75:0d:05:e3:4e:80:08:5e:
e5:be:79:30:7c:fe:65:e8:79:70:9f:59:f6:fc:86:
54:b5:df:a1:db:52:dd:cd:3a:de:22:f2:f9:b6:78:
00:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9E:9B:08:7B:12:19:4C:54:A2:8F:4F:EC:51:74:E7:70:FF:43:8D
X509v3 Authority Key Identifier:
keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d4:22:2e:a9:46:66:d9:1e:89:92:fc:46:95:18:01:cc:59:
19:96:d6:d0:75:f8:25:e8:98:bf:e5:9b:8c:77:ff:74:bc:72:
ce:37:87:bb:b9:a3:05:a2:9f:0c:1e:38:c1:45:e2:6a:f0:ef:
09:bc:e2:1d:08:33:c7:d8:5d:28:ef:57:e4:25:6c:21:ce:be:
6e:2a:38:f4:0e:88:0f:01:43:f6:20:31:90:45:2d:90:66:8a:
86:ec:f7:3a:c2:48:cf:33:0b:86:9f:84:7f:a5:6a:07:dc:bd:
5d:3c:e2:38:e5:20:17:e5:db:fd:6e:35:6e:d9:f6:a3:62:86:
a3:49:55:d7:f8:51:6e:d6:2c:08:23:aa:c6:3f:6f:76:99:86:
ca:c1:f8:46:0e:28:9c:08:37:25:76:8b:9a:e9:0d:52:4d:0e:
ab:8a:4b:15:e0:16:58:30:cd:2f:3e:f9:e9:2a:2a:cd:31:9b:
a0:c5:7d:ba:1c:5f:ae:a5:60:d6:c2:20:c0:1b:0f:09:a9:f0:
57:d1:bc:0c:73:0c:14:6b:80:0b:86:07:d6:d4:df:a7:22:74:
e1:b2:64:43:5b:4e:d7:41:02:e1:6c:48:d9:e9:8b:ae:92:65:
0e:e1:cf:46:83:6a:a4:6c:c9:bf:a0:21:b9:c1:dd:5f:b8:c6:
7e:11:53:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fJxtpepWPcatHDP0eiG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YjBiYmQ2NDQ1NTc4ZWRiYzdiYTZiNWJmN2NhOTM2OGQy
NDE3YmYwHhcNMjUxMDE5MDgwMTExWhcNMjUxMDIwMDgwMTExWjAzMTEwLwYDVQQD
EyhmYTllOWIwODdiMTIxOTRjNTRhMjhmNGZlYzUxNzRlNzcwZmY0MzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCl9JN8mX34bVhlRSoD+TyMZAWWs
/R3XhKaunZe+fz2i+vmvF5pDghWyGt72NLJNNLZo2QON8Kr5a4yxIT3c9wDhZEjg
+0Vl3wlYsdlSyS9GIN1LaGUMbCZpmEnUqCZS6GWt1OPOqoP9bLQohJMgRJNTSDL4
+OoEDsmADDun4u+HbdDSzlxoxJu4c62IYChisZ15Gpe9Z97uS5Z6L8DF9gZqzNOy
U3w309QIUuMcqFjuXq1AtpZwpxs1Im1BUnVFRWXuR0C06lltGy6yZUT+QIZlNEYn
nxMsdQ0F406ACF7lvnkwfP5l6Hlwn1n2/IZUtd+h21LdzTreIvL5tngAtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqemwh7EhlMVKKPT+xRdOdw/0ONMB8GA1UdIwQY
MBaAFLSwu9ZEVXjtvHumtb98qTaNJBe/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNTAyZmMtZDlmNy00ZmE4LWJhZjYt
NzdkNTI5YmU1M2Q3LzEvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zNTAyZmMtZDlmNy00ZmE4LWJhZjYtNzdkNTI5YmU1M2Q3
LzEvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdQiLqlG
ZtkeiZL8RpUYAcxZGZbW0HX4JeiYv+WbjHf/dLxyzjeHu7mjBaKfDB44wUXiavDv
CbziHQgzx9hdKO9X5CVsIc6+bio49A6IDwFD9iAxkEUtkGaKhuz3OsJIzzMLhp+E
f6VqB9y9XTziOOUgF+Xb/W41btn2o2KGo0lV1/hRbtYsCCOqxj9vdpmGysH4Rg4o
nAg3JXaLmukNUk0Oq4pLFeAWWDDNLz756SoqzTGboMV9uhxfrqVg1sIgwBsPCanw
V9G8DHMMFGuAC4YH1tTfpyJ04bJkQ1tO10EC4WxI2emLrpJlDuHPRoNqpGzJv6Ah
ucHdX7jGfhFTjg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:49 2025 by rpki-client