Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
File: TnzINx7SS6z2esqLkCzucGr8Yks.mft (raw, json)
Hash identifier: JOMUsAZUVYLIYRqn6ExoNb0inojveFC7IGbEfP+ajfA=
Subject key identifier: 67:D2:AA:76:2D:69:AC:A2:2E:C2:10:31:5C:69:9F:30:E2:5F:6F:DC
Authority key identifier: 4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
Certificate issuer: /CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
Certificate serial: 0198D4A79F73F64977D83386ADE26B828FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:11 +0000
Manifest this update: Sat 23 Aug 2025 02:00:11 +0000
Manifest next update: Sun 24 Aug 2025 02:00:11 +0000
Files and hashes: 1: AFXKRWkq4CEJ7e_q_TT8oCKNDgs.roa (hash: vvcSpEWzby7j1iGxx2OT88XWdiMYKYH4weh98eM4dfY=)
2: TnzINx7SS6z2esqLkCzucGr8Yks.crl (hash: zjvCi2CyKExooi+O/r2kKkSmC6MyXz7ua3HS9QQtYPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:9f:73:f6:49:77:d8:33:86:ad:e2:6b:82:8f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
Validity
Not Before: Aug 23 02:00:11 2025 GMT
Not After : Aug 24 02:00:11 2025 GMT
Subject: CN=67d2aa762d69aca22ec210315c699f30e25f6fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:45:9c:81:e1:d2:ef:5d:8c:94:0b:94:20:
d9:f5:a1:dc:69:34:07:a0:b1:e2:47:e8:cb:92:45:
15:7a:25:36:cb:7b:bc:a1:55:94:4b:31:e9:27:7c:
8f:d5:dd:d3:19:c8:5b:cc:09:2c:5b:db:b4:dd:13:
78:55:de:3a:68:86:08:08:ea:44:97:03:37:73:3a:
1a:20:1a:5c:0e:84:73:1e:1f:35:13:a7:61:65:62:
40:1a:35:12:5d:fc:f0:b1:63:d9:d2:c6:4d:4c:df:
39:83:83:bf:d1:92:d6:cd:7d:99:71:3e:02:f9:11:
6b:19:72:37:45:8d:ab:8b:de:17:14:20:92:5f:49:
9b:64:d4:c5:66:11:82:5b:bd:d6:0c:30:74:26:87:
69:50:34:3b:8d:5b:e8:9f:0f:4b:07:5f:10:b9:15:
ae:6d:00:bc:ce:1e:de:69:28:77:98:bb:fe:4d:72:
1b:75:7e:cb:97:5f:f1:9a:b4:49:3f:07:13:5b:87:
99:c7:97:b1:52:4b:4b:80:04:4f:8a:86:41:90:1a:
dc:78:2f:50:7d:c1:e8:6e:fb:0e:83:fc:1a:d8:79:
02:53:1b:57:18:84:fc:a0:76:12:9b:31:5a:16:6d:
b7:b4:72:3c:7d:31:40:9c:ba:98:2b:52:48:a7:33:
db:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D2:AA:76:2D:69:AC:A2:2E:C2:10:31:5C:69:9F:30:E2:5F:6F:DC
X509v3 Authority Key Identifier:
keyid:4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ff:3e:8a:a5:fe:34:a2:13:b4:c0:c2:66:a9:9f:59:32:89:
d4:b2:f1:e5:1b:e6:20:ba:8b:0a:ed:d0:06:20:19:c2:62:e6:
8e:a1:7e:f5:81:b5:32:40:07:9b:d1:a2:17:ea:21:d1:70:b6:
aa:72:f7:71:5b:ba:3b:45:cf:8f:84:dc:ea:f2:ad:75:5e:6a:
66:a7:b0:51:b7:6b:34:fd:c0:b7:9a:c3:75:2d:32:d4:32:72:
f1:18:07:86:82:d4:2b:fa:61:a0:65:8b:8f:70:81:e3:e8:ea:
ee:97:53:d7:dd:66:84:c4:9c:c3:ee:0f:f6:33:96:e5:26:bc:
bd:53:95:40:a7:3b:08:95:63:5a:45:0e:bc:10:db:20:7e:4d:
34:00:74:32:ba:ac:47:e6:23:af:bc:cb:3c:92:ad:11:ff:34:
79:f3:8f:8d:88:96:c7:47:3a:fa:a7:5f:5e:56:cc:b3:fd:38:
37:94:f5:19:5c:89:b9:0a:8a:55:99:89:84:f3:ef:19:2e:7e:
a3:49:57:85:b2:9a:c8:6d:bb:82:6e:16:2f:ae:a9:30:73:4e:
ea:ff:db:bd:45:30:5b:c1:e4:46:f9:fa:99:a9:04:93:8b:c1:
b3:15:ae:c4:0c:3c:c4:42:43:c1:9d:82:22:48:b6:9a:aa:f7:
9b:62:00:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp59z9kl32DOGreJrgo+kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlN2NjODM3MWVkMjRiYWNmNjdhY2E4YjkwMmNlZTcwNmFm
YzYyNGIwHhcNMjUwODIzMDIwMDExWhcNMjUwODI0MDIwMDExWjAzMTEwLwYDVQQD
Eyg2N2QyYWE3NjJkNjlhY2EyMmVjMjEwMzE1YzY5OWYzMGUyNWY2ZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupRFnIHh0u9djJQLlCDZ9aHcaTQH
oLHiR+jLkkUVeiU2y3u8oVWUSzHpJ3yP1d3TGchbzAksW9u03RN4Vd46aIYICOpE
lwM3czoaIBpcDoRzHh81E6dhZWJAGjUSXfzwsWPZ0sZNTN85g4O/0ZLWzX2ZcT4C
+RFrGXI3RY2ri94XFCCSX0mbZNTFZhGCW73WDDB0JodpUDQ7jVvonw9LB18QuRWu
bQC8zh7eaSh3mLv+TXIbdX7Ll1/xmrRJPwcTW4eZx5exUktLgARPioZBkBrceC9Q
fcHobvsOg/wa2HkCUxtXGIT8oHYSmzFaFm23tHI8fTFAnLqYK1JIpzPbGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfSqnYtaayiLsIQMVxpnzDiX2/cMB8GA1UdIwQY
MBaAFE58yDce0kus9nrKi5As7nBq/GJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG56SU54N1NTNnoyZXNxTGtDenVjR3I4WWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8wYjRjZGYtYjQ4Ni00YTU4LTgwMGQt
OGVkNWE3OWRlODM1LzEvVG56SU54N1NTNnoyZXNxTGtDenVjR3I4WWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8wYjRjZGYtYjQ4Ni00YTU4LTgwMGQtOGVkNWE3OWRlODM1
LzEvVG56SU54N1NTNnoyZXNxTGtDenVjR3I4WWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfv8+iqX+
NKITtMDCZqmfWTKJ1LLx5RvmILqLCu3QBiAZwmLmjqF+9YG1MkAHm9GiF+oh0XC2
qnL3cVu6O0XPj4Tc6vKtdV5qZqewUbdrNP3At5rDdS0y1DJy8RgHhoLUK/phoGWL
j3CB4+jq7pdT191mhMScw+4P9jOW5Sa8vVOVQKc7CJVjWkUOvBDbIH5NNAB0Mrqs
R+Yjr7zLPJKtEf80efOPjYiWx0c6+qdfXlbMs/04N5T1GVyJuQqKVZmJhPPvGS5+
o0lXhbKayG27gm4WL66pMHNO6v/bvUUwW8HkRvn6makEk4vBsxWuxAw8xEJDwZ2C
Iki2mqr3m2IASw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:22 2025 by rpki-client