Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
File: tLuK74sObZxv9jIIB_WpAHWY7rA.mft (raw, json)
Hash identifier: 6C+NrYSvhHxW9gJ6fjP79eZTktLd7dgnnN+9IDb5d5M=
Subject key identifier: D1:B8:63:89:B3:33:F0:2C:CF:63:C2:3B:A1:7A:F9:7D:85:44:99:C6
Authority key identifier: B4:BB:8A:EF:8B:0E:6D:9C:6F:F6:32:08:07:F5:A9:00:75:98:EE:B0
Certificate issuer: /CN=b4bb8aef8b0e6d9c6ff6320807f5a9007598eeb0
Certificate serial: 0199FEEC27733866D3DD024A76636E741424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
Manifest number: 0976
Signing time: Mon 20 Oct 2025 00:01:53 +0000
Manifest this update: Mon 20 Oct 2025 00:01:53 +0000
Manifest next update: Tue 21 Oct 2025 00:01:53 +0000
Files and hashes: 1: 8ntjSMus2ECR1PU4tfABg9_MTk0.roa (hash: NThyxZZCDawOVk5/yNg7I3X8M08Hqe7vBd2lZGQPe1c=)
2: tLuK74sObZxv9jIIB_WpAHWY7rA.crl (hash: 2cKFMThotE07OQ5ix+t29fc0sfQ0uCjQg3U7KmL38bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:27:73:38:66:d3:dd:02:4a:76:63:6e:74:14:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bb8aef8b0e6d9c6ff6320807f5a9007598eeb0
Validity
Not Before: Oct 20 00:01:53 2025 GMT
Not After : Oct 21 00:01:53 2025 GMT
Subject: CN=d1b86389b333f02ccf63c23ba17af97d854499c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:53:69:01:6f:94:f6:6e:8f:84:af:33:07:00:
b2:a0:d6:5c:9c:b0:1a:c4:2e:12:c4:15:92:07:9a:
32:43:a9:70:ce:d0:97:5f:a6:47:47:56:cc:5e:52:
b5:c4:95:b3:b4:a4:1c:b0:3e:03:5f:3d:0f:ff:67:
b4:b9:ee:e7:0b:92:0b:ce:5e:07:a4:f2:13:b4:b2:
63:96:df:2c:00:c9:ce:83:cb:45:9b:a4:b6:dd:d9:
52:cd:25:27:4d:68:f6:f3:45:7d:ec:83:81:0e:4d:
a7:19:80:d7:35:8e:70:d5:27:b5:ec:62:a7:05:91:
8f:62:c8:ec:01:08:c0:07:5a:a1:87:bc:a3:3b:c9:
94:a7:02:54:a3:84:dc:85:4c:61:47:b9:37:b0:b4:
58:06:68:f1:2d:64:43:6c:2b:eb:4c:aa:0d:da:f4:
25:f4:4f:c3:c8:c4:f2:05:6e:ed:b2:62:ac:9e:31:
f5:f9:c3:31:b9:65:e8:f9:26:9d:4c:18:2b:04:4f:
80:62:2b:45:1c:fa:97:98:12:e6:f1:23:30:48:e4:
63:d9:61:1f:c0:95:77:bf:8a:cc:f7:61:70:2d:94:
eb:7a:2b:78:8e:fa:9e:71:11:31:5f:f7:14:61:ef:
ea:6d:f2:e6:29:d2:f4:85:81:05:d0:03:5e:b9:90:
ff:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B8:63:89:B3:33:F0:2C:CF:63:C2:3B:A1:7A:F9:7D:85:44:99:C6
X509v3 Authority Key Identifier:
keyid:B4:BB:8A:EF:8B:0E:6D:9C:6F:F6:32:08:07:F5:A9:00:75:98:EE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:49:c7:97:85:d9:53:68:37:da:50:3c:08:0f:10:35:66:af:
d3:11:84:4f:9e:49:ea:97:72:da:17:32:7a:9d:e4:b5:03:ce:
a1:b1:01:17:b0:a9:eb:e1:c0:1e:fe:9f:60:06:0b:ee:19:69:
9e:1c:d1:90:06:f2:bc:eb:0f:7b:08:18:fa:f1:6a:67:33:60:
29:cd:cb:0b:b6:42:b0:63:0a:ff:a0:70:0a:74:40:35:65:bd:
78:40:4d:b2:12:f6:66:d9:c3:d3:1a:ed:0f:ce:df:61:e5:63:
9e:55:b7:1c:c2:05:0b:d5:94:b2:c4:d5:99:cf:89:40:d3:34:
46:59:22:bc:e6:a7:84:5d:37:9d:3f:4d:7c:86:a7:ba:83:21:
af:06:b7:56:d9:b6:bc:4e:07:e8:d0:ab:41:cb:1e:e5:e4:00:
ea:c8:92:2a:d5:6d:f2:21:a1:fa:82:66:65:f3:57:08:90:76:
e9:11:53:7c:33:8e:fe:7e:cc:91:9e:bd:54:fd:c4:80:34:c2:
6b:3d:d5:f1:af:f4:88:3d:84:74:94:9a:73:94:1e:32:bf:dd:
8d:86:57:1c:81:d8:a7:3d:c1:ed:77:9b:1d:dd:19:45:a4:71:
ef:ea:d9:6a:b6:cd:32:0d:88:06:5c:5a:f0:ab:88:c9:ee:9c:
96:3d:53:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+7CdzOGbT3QJKdmNudBQkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YmI4YWVmOGIwZTZkOWM2ZmY2MzIwODA3ZjVhOTAwNzU5
OGVlYjAwHhcNMjUxMDIwMDAwMTUzWhcNMjUxMDIxMDAwMTUzWjAzMTEwLwYDVQQD
EyhkMWI4NjM4OWIzMzNmMDJjY2Y2M2MyM2JhMTdhZjk3ZDg1NDQ5OWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFNpAW+U9m6PhK8zBwCyoNZcnLAa
xC4SxBWSB5oyQ6lwztCXX6ZHR1bMXlK1xJWztKQcsD4DXz0P/2e0ue7nC5ILzl4H
pPITtLJjlt8sAMnOg8tFm6S23dlSzSUnTWj280V97IOBDk2nGYDXNY5w1Se17GKn
BZGPYsjsAQjAB1qhh7yjO8mUpwJUo4TchUxhR7k3sLRYBmjxLWRDbCvrTKoN2vQl
9E/DyMTyBW7tsmKsnjH1+cMxuWXo+SadTBgrBE+AYitFHPqXmBLm8SMwSORj2WEf
wJV3v4rM92FwLZTreit4jvqecRExX/cUYe/qbfLmKdL0hYEF0ANeuZD/PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNG4Y4mzM/Asz2PCO6F6+X2FRJnGMB8GA1UdIwQY
MBaAFLS7iu+LDm2cb/YyCAf1qQB1mO6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEx1Szc0c09iWnh2OWpJSUJfV3BBSFdZN3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mOWE4OTEtYjgxOC00OTlhLTk3MWMt
YmM1NDU2OTYyZjJkLzEvdEx1Szc0c09iWnh2OWpJSUJfV3BBSFdZN3JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9mOWE4OTEtYjgxOC00OTlhLTk3MWMtYmM1NDU2OTYyZjJk
LzEvdEx1Szc0c09iWnh2OWpJSUJfV3BBSFdZN3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs0nHl4XZ
U2g32lA8CA8QNWav0xGET55J6pdy2hcyep3ktQPOobEBF7Cp6+HAHv6fYAYL7hlp
nhzRkAbyvOsPewgY+vFqZzNgKc3LC7ZCsGMK/6BwCnRANWW9eEBNshL2ZtnD0xrt
D87fYeVjnlW3HMIFC9WUssTVmc+JQNM0RlkivOanhF03nT9NfIanuoMhrwa3Vtm2
vE4H6NCrQcse5eQA6siSKtVt8iGh+oJmZfNXCJB26RFTfDOO/n7MkZ69VP3EgDTC
az3V8a/0iD2EdJSac5QeMr/djYZXHIHYpz3B7XebHd0ZRaRx7+rZarbNMg2IBlxa
8KuIye6clj1TPA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:38:03 2025 by rpki-client