Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
File: i-tlpxrwKVknKswA1cTBlYOF3pQ.mft (raw, json)
Hash identifier: RJuenfvNQtdYPv9v5bM2ZHWLpuXLUcwkn2hM3OXT754=
Subject key identifier: 02:39:E4:2B:8A:E8:BD:E9:B3:C2:D9:47:E6:0F:17:43:81:B7:F5:A1
Authority key identifier: 8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94
Certificate issuer: /CN=8beb65a71af02959272acc00d5c4c1958385de94
Certificate serial: 0197B8C5FBF0CEF268DF25BB75B774F2BC46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 23:01:12 +0000
Manifest this update: Sat 28 Jun 2025 23:01:12 +0000
Manifest next update: Sun 29 Jun 2025 23:01:12 +0000
Files and hashes: 1: 8U8kKdz2fVZxTqZwqIjaA_g2nWA.roa (hash: VPZpp0pYKoi2I1Ak52XiESxXc7FZdh4MhOiiuF6UR+U=)
2: i-tlpxrwKVknKswA1cTBlYOF3pQ.crl (hash: ctQxpYMsLpPGDqMN/x0ra5fgx3u3n2cCxPjavXcvJ7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:fb:f0:ce:f2:68:df:25:bb:75:b7:74:f2:bc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8beb65a71af02959272acc00d5c4c1958385de94
Validity
Not Before: Jun 28 23:01:12 2025 GMT
Not After : Jun 29 23:01:12 2025 GMT
Subject: CN=0239e42b8ae8bde9b3c2d947e60f174381b7f5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:fc:5f:9a:cb:f5:72:58:a9:1e:79:b4:3b:
31:13:96:d5:40:a4:cd:b8:d4:4c:09:47:36:5d:c0:
2a:1b:f5:a6:d0:83:1f:fa:43:84:6d:b6:a8:1d:19:
9f:ea:0a:60:17:4b:dc:72:7f:bb:5c:fd:f4:e4:c5:
a3:02:71:65:f9:a4:c5:d3:e7:aa:3a:61:60:3e:e6:
e8:47:86:e7:b9:ac:e3:a4:f1:68:b1:e7:1b:df:13:
d6:cd:64:9f:f6:1f:c9:39:d6:54:2e:12:05:8c:84:
71:13:dc:5f:51:f0:d2:52:db:04:24:8e:ba:78:28:
85:cc:82:1c:61:28:d5:ac:d9:f0:40:00:ef:fd:2c:
ef:b5:3f:58:8d:8a:ae:4f:bd:b3:93:65:f5:fe:c8:
9d:50:3f:db:e8:d5:2b:9a:3a:3d:12:c0:69:f1:c3:
97:15:bb:6c:dc:63:e8:96:53:05:35:7e:2f:42:c7:
57:98:38:dd:e7:c3:7a:46:5a:95:c1:c9:cc:e5:1a:
9a:f5:c3:3e:06:be:53:0b:5b:5b:7f:18:02:f6:30:
42:37:d7:10:67:3c:3e:60:0c:cf:59:34:e9:c0:ba:
af:74:59:aa:7b:6e:00:28:d5:5e:29:68:45:fa:db:
1f:73:ce:eb:ea:14:a8:18:88:4b:25:ba:6a:a7:e0:
a4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:39:E4:2B:8A:E8:BD:E9:B3:C2:D9:47:E6:0F:17:43:81:B7:F5:A1
X509v3 Authority Key Identifier:
keyid:8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:38:96:ec:47:56:d1:3e:c9:65:e5:ff:13:e5:d6:61:d0:a5:
7a:90:22:f9:c4:6b:2b:ee:a2:e6:3a:9e:49:23:1a:36:3b:25:
cf:7a:ce:5a:74:07:b4:7b:51:a8:72:05:53:d4:4c:a9:09:18:
a8:53:fc:25:41:2f:ef:25:a2:9b:f9:4d:43:dd:69:f4:33:1a:
de:c9:ab:7f:fc:a0:6b:7a:33:d7:d5:8f:81:c6:c5:0c:5f:b0:
28:ee:5e:e2:9e:5f:0a:7a:46:cd:02:4a:96:34:6c:f6:0f:a8:
c4:c3:71:a4:e6:22:a7:8e:b7:c5:f1:a9:54:10:65:3f:4e:23:
c7:c3:19:23:a9:84:d7:23:1a:87:27:53:e8:55:74:5a:ea:1d:
e5:9c:ea:a3:7b:ce:50:72:ec:09:13:72:05:76:69:a7:7f:0a:
58:4a:6f:13:2f:e4:0f:5d:fa:2e:7a:09:9e:bb:54:05:5b:2d:
60:b5:b3:07:c1:59:8f:41:14:eb:e3:e5:d9:7a:e8:80:e0:6b:
35:e0:23:c0:fd:bc:b0:46:d6:42:e8:4f:32:b4:e6:7b:ac:29:
48:30:3a:a8:55:0d:9b:76:0b:93:f3:f8:fd:a1:54:7d:69:79:
49:9c:a7:32:31:15:25:b1:6d:49:9b:1a:38:3c:e3:06:c4:55:
5d:e4:7f:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4xfvwzvJo3yW7dbd08rxGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZWI2NWE3MWFmMDI5NTkyNzJhY2MwMGQ1YzRjMTk1ODM4
NWRlOTQwHhcNMjUwNjI4MjMwMTEyWhcNMjUwNjI5MjMwMTEyWjAzMTEwLwYDVQQD
EygwMjM5ZTQyYjhhZThiZGU5YjNjMmQ5NDdlNjBmMTc0MzgxYjdmNWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDb8X5rL9XJYqR55tDsxE5bVQKTN
uNRMCUc2XcAqG/Wm0IMf+kOEbbaoHRmf6gpgF0vccn+7XP305MWjAnFl+aTF0+eq
OmFgPuboR4bnuazjpPFosecb3xPWzWSf9h/JOdZULhIFjIRxE9xfUfDSUtsEJI66
eCiFzIIcYSjVrNnwQADv/SzvtT9YjYquT72zk2X1/sidUD/b6NUrmjo9EsBp8cOX
Fbts3GPollMFNX4vQsdXmDjd58N6RlqVwcnM5Rqa9cM+Br5TC1tbfxgC9jBCN9cQ
Zzw+YAzPWTTpwLqvdFmqe24AKNVeKWhF+tsfc87r6hSoGIhLJbpqp+CkhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAI55CuK6L3ps8LZR+YPF0OBt/WhMB8GA1UdIwQY
MBaAFIvrZaca8ClZJyrMANXEwZWDhd6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZTk5NTctYzdjYy00OTk3LWEyMmIt
MTY1YTg0NmQ0ODFkLzEvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kZTk5NTctYzdjYy00OTk3LWEyMmItMTY1YTg0NmQ0ODFk
LzEvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYziW7EdW
0T7JZeX/E+XWYdClepAi+cRrK+6i5jqeSSMaNjslz3rOWnQHtHtRqHIFU9RMqQkY
qFP8JUEv7yWim/lNQ91p9DMa3smrf/yga3oz19WPgcbFDF+wKO5e4p5fCnpGzQJK
ljRs9g+oxMNxpOYip463xfGpVBBlP04jx8MZI6mE1yMahydT6FV0Wuod5Zzqo3vO
UHLsCRNyBXZpp38KWEpvEy/kD136LnoJnrtUBVstYLWzB8FZj0EU6+Pl2XrogOBr
NeAjwP28sEbWQuhPMrTme6wpSDA6qFUNm3YLk/P4/aFUfWl5SZynMjEVJbFtSZsa
ODzjBsRVXeR/xw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:33:57 2025 by rpki-client