Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
File: tznE4_6GnZeDui2t9mDczQ-lNwc.mft (raw, json)
Hash identifier: XBBP7UqkBgwA2jQ4Y94rwr/PyrQoZrRELXPKY8ujEFc=
Subject key identifier: 19:D8:C1:9D:BA:27:5B:53:69:8E:A9:2C:69:EE:D1:C0:03:8E:73:02
Authority key identifier: B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07
Certificate issuer: /CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707
Certificate serial: 0198D404CB77283E373C286CDF8EA7C0CD4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
Manifest number: 1094
Signing time: Fri 22 Aug 2025 23:02:20 +0000
Manifest this update: Fri 22 Aug 2025 23:02:20 +0000
Manifest next update: Sat 23 Aug 2025 23:02:20 +0000
Files and hashes: 1: XSeQzzLzaRiIssAEaH8bFHtmW3c.roa (hash: 5lhi1fFGQ5t288ymZ18SpahB86WMGs7YGo9rolcKH9c=)
2: tznE4_6GnZeDui2t9mDczQ-lNwc.crl (hash: U2DZtwmAb+VV4C3y1G4JUa7u0i591eqIvPqLZOJ19ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:cb:77:28:3e:37:3c:28:6c:df:8e:a7:c0:cd:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707
Validity
Not Before: Aug 22 23:02:20 2025 GMT
Not After : Aug 23 23:02:20 2025 GMT
Subject: CN=19d8c19dba275b53698ea92c69eed1c0038e7302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f4:af:67:12:67:52:35:ef:68:d7:20:7b:4f:
0c:d9:29:85:3c:55:e3:e4:e1:b2:22:d5:1b:4b:2b:
e6:73:8e:a6:c5:40:60:85:7b:94:d3:4f:46:44:ce:
e0:2b:9c:96:1a:ee:e3:32:15:32:6c:9e:a4:e7:3f:
8f:18:cb:00:b9:b1:40:41:ba:76:97:76:41:21:9c:
ce:8b:8e:98:b1:a3:9b:58:b6:9d:49:7a:0f:63:58:
c8:9f:6a:2b:df:f1:11:16:45:3e:80:f7:91:d4:fd:
f5:48:f3:7f:46:44:b8:23:01:ec:b3:63:e0:21:ac:
94:04:98:97:0f:51:97:f9:3e:79:5e:bc:ca:3e:56:
c8:f3:6d:30:90:0e:f5:62:66:e5:42:70:8a:9c:b5:
f4:72:99:7d:63:95:51:56:72:5a:4e:64:23:8f:1d:
43:3b:ee:5c:20:2c:f8:c7:ff:70:e9:f4:fa:0a:41:
2e:73:21:bf:26:18:0c:2e:62:b5:57:09:41:0f:fc:
5c:2c:72:db:8d:a4:23:2a:69:4e:62:0a:2e:b4:eb:
ec:80:62:85:1c:11:84:24:70:c3:92:dc:39:2b:ca:
30:61:84:2a:26:75:b3:e4:f2:e3:3f:2f:64:51:08:
62:e2:f4:1f:70:eb:7b:95:8e:28:a7:41:85:5e:d1:
77:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D8:C1:9D:BA:27:5B:53:69:8E:A9:2C:69:EE:D1:C0:03:8E:73:02
X509v3 Authority Key Identifier:
keyid:B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8a:6c:92:b8:df:ff:ea:e2:14:df:fd:01:af:2a:5b:28:3c:
8f:49:70:9c:69:0b:36:d8:23:72:3b:7a:7f:ae:41:40:4f:63:
11:6e:0e:f1:7b:3f:bc:da:d2:73:1b:1a:82:87:09:6b:4c:0b:
63:46:16:2e:eb:db:7f:61:07:70:7f:d6:23:bf:f0:5f:10:eb:
12:e5:cc:6e:21:86:2e:dc:1a:f9:7f:f2:ed:16:45:80:e0:14:
f0:79:60:ac:cd:50:86:cc:c9:3d:db:df:80:f1:68:bf:92:34:
50:1c:bf:47:29:63:3b:02:2a:82:7e:d8:3d:5f:37:ca:36:e4:
d9:f6:c2:21:15:51:1e:78:25:19:3a:96:6f:46:2f:ee:c0:2d:
39:dc:4b:26:9b:1c:c7:a5:f5:ec:48:6b:fa:5f:72:d4:f0:3d:
cd:9a:ac:56:59:97:df:82:dc:38:fc:37:43:d1:b9:76:5a:19:
2d:60:03:3b:4d:06:3c:4e:ac:93:d0:a4:0b:be:bb:c2:a2:16:
fa:da:a0:89:31:2a:03:45:ce:e0:b7:ca:fa:bf:61:91:1b:59:
4a:30:f4:e4:89:48:51:7f:15:85:10:94:b8:bb:80:b9:02:60:
51:2f:b6:eb:96:52:1a:0c:5e:bb:3a:30:d1:95:94:61:af:4d:
9c:e8:ec:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:43 2025 by rpki-client