Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
File: TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft (raw, json)
Hash identifier: TFyJG0pizhbVLdHpDkzJBVcsrvvx+AcwO/QOyZnIsC0=
Subject key identifier: B3:89:B5:CA:2C:6F:BB:E5:2C:4E:71:2E:B2:3B:91:26:2F:51:73:C1
Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
Certificate issuer: /CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Certificate serial: 0198D4E05F541C7BE9304DFA53F890F59188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
Manifest number: 1658
Signing time: Sat 23 Aug 2025 03:02:10 +0000
Manifest this update: Sat 23 Aug 2025 03:02:10 +0000
Manifest next update: Sun 24 Aug 2025 03:02:10 +0000
Files and hashes: 1: IF7POYmH2s6_XyYc1YSgmRclBfU.roa (hash: vkWkPszh+VD/raa/NYL5vb45rCVCasfYYp1M1TBPCxY=)
2: JEYd_tTpdWRz3pFCNxB3FFwgT6Y.roa (hash: Cf4mCXc4k2uDXgbB44mtC61vJtEhAxi4CrnAuvkGzGk=)
3: TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl (hash: FVAFqdAU+KdFmft4x/Bu0gG0M626KgDYa4wzYO2Z8QI=)
4: aC7DUlOCYd4ZrOlGrZ-OMdQYyBE.roa (hash: gIed90T8oX8NcIFpqOYwduIUaAgChpM53a4QzPH0Bg8=)
5: e0P4zqHajvo1XtAyySozyOucDY0.roa (hash: uBYNOSzSg+Z80PXiuAGXfKeocd8WYWEry+iBGwq/1mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:5f:54:1c:7b:e9:30:4d:fa:53:f8:90:f5:91:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Validity
Not Before: Aug 23 03:02:10 2025 GMT
Not After : Aug 24 03:02:10 2025 GMT
Subject: CN=b389b5ca2c6fbbe52c4e712eb23b91262f5173c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c2:69:da:8c:7f:6f:41:9d:e6:9d:71:0d:49:
08:41:12:7f:44:95:d7:3d:10:8e:a3:d9:10:2a:cc:
90:c7:48:5c:13:64:09:73:f4:c7:13:35:c3:08:2c:
21:aa:40:e5:cc:56:89:1a:4d:9e:d0:c3:02:ad:f7:
5b:e8:b9:1b:85:dc:15:da:c2:63:fb:35:37:1a:8a:
4c:00:fe:0a:cd:26:09:3d:2d:a6:83:e0:ec:1d:64:
07:96:73:96:25:dd:5f:59:1a:0d:24:2a:13:f6:ff:
69:9c:cd:58:99:cf:0c:c2:02:29:c3:f9:cb:0a:d5:
a6:c9:ab:71:ba:1b:bb:d3:bd:0f:91:cf:fb:2e:be:
1b:eb:55:81:46:ac:c6:f3:b2:40:c0:ec:d3:84:84:
f6:92:f2:b1:59:87:05:34:99:28:57:6c:e0:ae:22:
e2:c8:90:54:9c:a5:6d:0e:b3:4f:13:fd:d0:bb:ed:
23:32:0d:7d:43:eb:48:55:11:49:f6:ec:1e:a3:e3:
52:6c:0d:91:8e:65:3a:f3:74:f3:0e:ae:9d:7d:68:
8a:ca:e3:82:32:f5:07:83:f6:5b:5f:79:ed:78:0f:
9d:cc:e5:d7:68:2b:45:a7:e5:b0:a0:81:8f:08:e2:
1f:a4:11:89:d5:6b:4d:cf:95:5a:32:02:0b:13:95:
bd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:89:B5:CA:2C:6F:BB:E5:2C:4E:71:2E:B2:3B:91:26:2F:51:73:C1
X509v3 Authority Key Identifier:
keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:62:f5:51:9d:7d:42:bc:d9:6e:91:7d:95:94:77:65:20:32:
29:dd:28:54:b8:a0:b3:1a:4f:d9:dd:c4:9f:71:93:3c:a6:8f:
66:64:47:46:89:fd:a8:4b:b9:41:ad:1f:f3:79:d5:61:7f:46:
bd:ba:fb:b8:7e:83:a2:11:19:c2:ef:12:aa:45:99:72:6c:da:
56:3f:2f:44:e4:ff:07:0f:1f:c3:d0:28:94:73:f2:2d:f3:ae:
49:93:52:b7:38:c5:66:94:f1:28:ce:85:c6:91:3f:fa:e0:5a:
ea:27:78:b4:e0:fa:52:11:e2:97:8c:f3:a1:c6:f4:0d:bb:b2:
67:d0:4c:f7:5c:69:20:27:c9:bc:97:42:a6:e4:4a:48:64:24:
27:34:32:27:0f:30:69:bd:34:f2:d6:6f:79:d2:fd:66:e4:34:
27:f4:61:ca:d5:d9:4c:c3:d1:ba:74:33:60:e8:bb:78:8c:cd:
63:b9:6a:50:1c:74:08:8d:5c:59:bd:99:03:87:ce:c4:b1:85:
6e:14:43:ec:26:65:9b:4b:77:24:de:c5:7d:5e:8f:57:1b:a9:
97:93:6d:b7:65:ba:2d:76:b5:19:4a:6f:5e:33:35:0f:0a:43:
ef:f3:39:04:ab:f2:87:9c:75:41:98:6a:22:89:3f:ff:47:cd:
c8:6b:de:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4F9UHHvpME36U/iQ9ZGIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYmZkM2U3MmQ0YTAzOTZmOTUzNDczMzZiNDI2NzhmNjhj
MjY0MzAwHhcNMjUwODIzMDMwMjEwWhcNMjUwODI0MDMwMjEwWjAzMTEwLwYDVQQD
EyhiMzg5YjVjYTJjNmZiYmU1MmM0ZTcxMmViMjNiOTEyNjJmNTE3M2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MJp2ox/b0Gd5p1xDUkIQRJ/RJXX
PRCOo9kQKsyQx0hcE2QJc/THEzXDCCwhqkDlzFaJGk2e0MMCrfdb6LkbhdwV2sJj
+zU3GopMAP4KzSYJPS2mg+DsHWQHlnOWJd1fWRoNJCoT9v9pnM1Ymc8MwgIpw/nL
CtWmyatxuhu7070Pkc/7Lr4b61WBRqzG87JAwOzThIT2kvKxWYcFNJkoV2zgriLi
yJBUnKVtDrNPE/3Qu+0jMg19Q+tIVRFJ9uweo+NSbA2RjmU683TzDq6dfWiKyuOC
MvUHg/ZbX3nteA+dzOXXaCtFp+WwoIGPCOIfpBGJ1WtNz5VaMgILE5W9rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOJtcosb7vlLE5xLrI7kSYvUXPBMB8GA1UdIwQY
MBaAFEy/0+ctSgOW+VNHM2tCZ49owmQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iNTczM2ItMzg5MS00NDliLTk5NTAt
ZmY2MGUyMThlZDQxLzEvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iNTczM2ItMzg5MS00NDliLTk5NTAtZmY2MGUyMThlZDQx
LzEvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWL1UZ19
QrzZbpF9lZR3ZSAyKd0oVLigsxpP2d3En3GTPKaPZmRHRon9qEu5Qa0f83nVYX9G
vbr7uH6DohEZwu8SqkWZcmzaVj8vROT/Bw8fw9AolHPyLfOuSZNStzjFZpTxKM6F
xpE/+uBa6id4tOD6UhHil4zzocb0DbuyZ9BM91xpICfJvJdCpuRKSGQkJzQyJw8w
ab008tZvedL9ZuQ0J/RhytXZTMPRunQzYOi7eIzNY7lqUBx0CI1cWb2ZA4fOxLGF
bhRD7CZlm0t3JN7FfV6PVxupl5Ntt2W6LXa1GUpvXjM1DwpD7/M5BKvyh5x1QZhq
Iok//0fNyGveaw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:50 2025 by rpki-client