Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
File: tznE4_6GnZeDui2t9mDczQ-lNwc.mft (raw, json)
Hash identifier: gwp/V4zZdvzscvj+PFG1zcXXIzut6UnvKC1UpHOtsqU=
Subject key identifier: 83:50:46:56:C9:CE:FD:46:60:F9:C5:6C:10:87:84:D4:2F:65:33:F5
Authority key identifier: B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07
Certificate issuer: /CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707
Certificate serial: 0199FD6B28E00CD113171674F453CCCC40DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
Manifest number: 112E
Signing time: Sun 19 Oct 2025 17:01:22 +0000
Manifest this update: Sun 19 Oct 2025 17:01:22 +0000
Manifest next update: Mon 20 Oct 2025 17:01:22 +0000
Files and hashes: 1: XSeQzzLzaRiIssAEaH8bFHtmW3c.roa (hash: 5lhi1fFGQ5t288ymZ18SpahB86WMGs7YGo9rolcKH9c=)
2: tznE4_6GnZeDui2t9mDczQ-lNwc.crl (hash: 5xYo1qtIKKCqBD8bY1ae51M4uNT+lDC+75IGva+hVnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:28:e0:0c:d1:13:17:16:74:f4:53:cc:cc:40:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707
Validity
Not Before: Oct 19 17:01:22 2025 GMT
Not After : Oct 20 17:01:22 2025 GMT
Subject: CN=83504656c9cefd4660f9c56c108784d42f6533f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:54:2b:a6:4e:17:e7:d4:47:46:32:33:62:aa:
9b:ef:49:7c:4b:65:03:65:38:4d:f1:d0:4e:5f:96:
3e:c1:06:f6:93:7b:76:c7:aa:98:77:de:66:b0:4f:
f3:1a:6b:cf:46:4e:c6:0a:41:25:6f:17:94:4b:2e:
46:c7:47:79:bb:4b:a4:ed:55:26:49:09:c7:1a:f2:
4b:63:91:f6:d2:40:8d:0b:7c:a0:d9:82:c8:4e:65:
c6:24:a5:82:d7:55:d2:07:47:ca:02:20:5c:69:c4:
3b:27:d3:39:14:dc:f6:be:c7:39:bb:fa:7b:a2:e6:
12:c3:e8:be:58:e3:ac:de:be:92:d4:4c:2d:3a:92:
3d:52:52:d0:cf:76:3a:09:3b:1d:62:7b:4a:da:f1:
80:65:f2:03:83:b4:06:ae:0d:d8:20:9b:b0:db:e8:
3a:60:9b:0d:a8:47:d6:e2:57:77:8e:2e:cf:6a:24:
9a:2a:8f:02:b5:07:7a:f8:35:da:1e:80:5d:17:21:
dd:b6:14:37:e0:b3:d5:a1:e2:d5:c0:56:12:f6:10:
9a:93:4c:71:0e:5c:aa:55:d8:af:27:43:35:d8:28:
c5:0a:5f:5c:b3:73:a4:8a:05:0f:39:a8:1e:48:f3:
44:da:b1:1b:fe:7f:29:bb:62:68:55:81:c5:cd:a2:
75:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:50:46:56:C9:CE:FD:46:60:F9:C5:6C:10:87:84:D4:2F:65:33:F5
X509v3 Authority Key Identifier:
keyid:B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e0:88:ec:ca:92:a0:d8:5c:27:c3:0d:88:cd:6d:41:95:67:
f6:c9:02:db:b6:d2:9b:26:94:5a:30:db:42:fb:3f:9f:99:10:
03:dd:1d:65:fa:35:0d:c1:af:62:7b:7c:ff:be:05:0e:d9:1e:
d4:be:cb:70:09:a5:9f:ea:66:26:87:87:7a:22:18:bd:d2:c7:
97:fa:24:bf:ef:93:f3:52:fb:6c:82:80:73:a9:f8:a9:29:df:
33:29:c4:8f:e4:f6:08:5d:ee:1f:58:27:9d:8b:91:4e:cc:d5:
c6:6c:90:2e:ea:ed:3b:e2:4e:b7:ad:70:9a:f7:ec:34:44:b5:
21:db:82:78:af:aa:9e:76:a8:e0:0b:c0:7a:5f:ea:31:12:5f:
ca:24:5e:14:7c:5e:eb:df:3b:6b:63:df:e4:45:af:d0:be:df:
8a:48:cd:66:57:07:46:e8:52:46:c7:fb:89:b1:7b:ea:72:96:
39:22:10:76:7f:a2:e8:b8:c4:a3:dd:e1:83:6e:90:7a:29:60:
7e:a1:da:fd:98:08:66:2c:19:76:77:b4:39:e1:32:18:1a:f3:
9a:42:5a:2b:18:b1:85:c3:ab:91:2f:a3:17:c8:5e:46:24:5b:
dc:35:ba:2d:54:85:77:4f:b7:33:e6:25:e1:e1:ac:0b:d4:c8:
e3:cf:53:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9ayjgDNETFxZ09FPMzEDcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MzljNGUzZmU4NjlkOTc4M2JhMmRhZGY2NjBkY2NkMGZh
NTM3MDcwHhcNMjUxMDE5MTcwMTIyWhcNMjUxMDIwMTcwMTIyWjAzMTEwLwYDVQQD
Eyg4MzUwNDY1NmM5Y2VmZDQ2NjBmOWM1NmMxMDg3ODRkNDJmNjUzM2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlQrpk4X59RHRjIzYqqb70l8S2UD
ZThN8dBOX5Y+wQb2k3t2x6qYd95msE/zGmvPRk7GCkElbxeUSy5Gx0d5u0uk7VUm
SQnHGvJLY5H20kCNC3yg2YLITmXGJKWC11XSB0fKAiBcacQ7J9M5FNz2vsc5u/p7
ouYSw+i+WOOs3r6S1EwtOpI9UlLQz3Y6CTsdYntK2vGAZfIDg7QGrg3YIJuw2+g6
YJsNqEfW4ld3ji7PaiSaKo8CtQd6+DXaHoBdFyHdthQ34LPVoeLVwFYS9hCak0xx
DlyqVdivJ0M12CjFCl9cs3OkigUPOageSPNE2rEb/n8pu2JoVYHFzaJ1dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINQRlbJzv1GYPnFbBCHhNQvZTP1MB8GA1UdIwQY
MBaAFLc5xOP+hp2Xg7otrfZg3M0PpTcHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHpuRTRfNkduWmVEdWkydDltRGN6US1sTndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yMWI1NTgtN2U4OS00MWEyLTgyNWQt
MDcyMjYyZTMwZmM1LzEvdHpuRTRfNkduWmVEdWkydDltRGN6US1sTndjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8yMWI1NTgtN2U4OS00MWEyLTgyNWQtMDcyMjYyZTMwZmM1
LzEvdHpuRTRfNkduWmVEdWkydDltRGN6US1sTndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeuCI7MqS
oNhcJ8MNiM1tQZVn9skC27bSmyaUWjDbQvs/n5kQA90dZfo1DcGvYnt8/74FDtke
1L7LcAmln+pmJoeHeiIYvdLHl/okv++T81L7bIKAc6n4qSnfMynEj+T2CF3uH1gn
nYuRTszVxmyQLurtO+JOt61wmvfsNES1IduCeK+qnnao4AvAel/qMRJfyiReFHxe
6987a2Pf5EWv0L7fikjNZlcHRuhSRsf7ibF76nKWOSIQdn+i6LjEo93hg26Qeilg
fqHa/ZgIZiwZdne0OeEyGBrzmkJaKxixhcOrkS+jF8heRiRb3DW6LVSFd0+3M+Yl
4eGsC9TI489TNA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:42 2025 by rpki-client