Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
File: TzVzzX1WHNN-DzMfbKON6SAgQrI.mft (raw, json)
Hash identifier: +d9G6Asf1SEnSsZGuQLdLe95JQKSthlBAEsUNsZVqwg=
Subject key identifier: 29:39:33:A6:F3:DE:39:3D:0E:A1:79:C3:26:3A:5D:C7:EA:20:54:15
Authority key identifier: 4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
Certificate issuer: /CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Certificate serial: 0199FBEBEAFB059B543B93B5DB050DB7CEEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
Manifest number: 0BF8
Signing time: Sun 19 Oct 2025 10:02:46 +0000
Manifest this update: Sun 19 Oct 2025 10:02:46 +0000
Manifest next update: Mon 20 Oct 2025 10:02:46 +0000
Files and hashes: 1: TzVzzX1WHNN-DzMfbKON6SAgQrI.crl (hash: hPHcGEvVmBlETxyy9nS42bXOjhHHCO4zl2HjSgKT29I=)
2: gNvVla9QTcgfrH76gu8sofAf_w0.roa (hash: OGSKcOJHQa1w9k6JZ39A0hFW39yZH1IaBP1pJ+a1YHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ea:fb:05:9b:54:3b:93:b5:db:05:0d:b7:ce:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Validity
Not Before: Oct 19 10:02:46 2025 GMT
Not After : Oct 20 10:02:46 2025 GMT
Subject: CN=293933a6f3de393d0ea179c3263a5dc7ea205415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:23:34:d5:b5:b3:82:f1:1c:0a:ff:fc:65:03:
f5:64:81:67:c1:25:45:f4:7c:0d:90:00:35:0a:aa:
c2:91:35:2b:d2:97:f9:61:e2:1e:e3:e0:da:6f:b1:
ff:ec:01:e9:1e:00:95:c5:19:b7:6b:d5:ca:79:08:
00:ff:08:bf:eb:51:ce:24:67:5f:ed:01:60:e5:71:
86:f6:ed:52:da:16:b4:18:e3:d3:42:f6:13:32:b2:
83:b9:83:58:a4:fe:99:2a:a1:32:7e:e5:d3:76:b8:
77:85:03:aa:55:7c:58:bb:52:ef:7b:6f:28:2c:6d:
65:33:ea:90:1d:9a:3e:80:ee:5c:47:f7:e4:64:9b:
b0:3b:8c:9a:96:6a:ed:c1:ec:f7:d7:c3:eb:04:f7:
0c:8b:dd:00:2f:a6:ae:16:05:58:ed:f3:99:06:17:
84:75:05:de:36:74:0a:d5:3b:ce:44:ba:43:46:0a:
d1:73:3c:f0:e1:0b:68:7d:03:ab:3e:9d:51:f0:e8:
30:16:10:67:74:70:f7:f8:1a:3c:52:a1:1e:03:55:
fb:61:8e:43:65:88:32:33:8e:99:87:a2:f6:92:90:
ed:20:3b:bf:3e:38:32:95:20:70:5d:0c:f9:57:ef:
e2:ff:71:cc:e8:81:f3:62:68:93:13:d0:0e:9f:13:
75:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:39:33:A6:F3:DE:39:3D:0E:A1:79:C3:26:3A:5D:C7:EA:20:54:15
X509v3 Authority Key Identifier:
keyid:4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c1:0b:20:ec:3c:10:1b:92:20:f2:14:36:7f:49:0b:5c:16:
77:12:24:0d:5a:99:34:44:04:86:61:08:d6:ba:13:3a:5b:56:
4a:bd:e4:f5:7c:4e:64:cf:e9:d8:3a:32:00:d7:e7:49:ae:49:
be:5d:a6:d4:e3:16:de:82:38:b0:b3:91:d2:e3:a7:5b:43:03:
8e:1d:f3:b5:5f:fd:6a:9e:15:bf:0f:35:36:ca:b3:29:48:73:
64:dc:b4:8c:59:fa:cc:87:24:88:23:2b:02:ae:38:63:29:59:
1b:82:18:3b:a4:7b:b2:4c:8a:2c:c1:0f:d5:85:b8:19:e0:c5:
64:bb:60:6f:b1:d4:00:b6:9c:9b:3b:11:50:cb:64:ad:5c:bf:
bf:e1:9f:fb:db:b2:26:b2:be:80:b6:78:b1:4a:9a:a8:3e:3f:
e9:f3:5f:b8:92:d3:93:98:54:fb:f7:8c:63:74:ad:33:6a:ca:
19:2f:06:5f:43:e3:99:46:37:92:d4:02:6e:8b:52:00:4e:f5:
1e:4d:c3:0c:cc:40:31:09:51:07:91:12:b8:96:99:2d:c4:82:
06:35:ef:7e:53:5f:66:01:03:be:51:5e:1c:3e:be:ec:b9:16:
70:f7:05:43:0f:05:29:dc:ad:ea:7d:b4:7e:4c:5d:a4:00:61:
fe:44:95:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76+r7BZtUO5O12wUNt87uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMzU3M2NkN2Q1NjFjZDM3ZTBmMzMxZjZjYTM4ZGU5MjAy
MDQyYjIwHhcNMjUxMDE5MTAwMjQ2WhcNMjUxMDIwMTAwMjQ2WjAzMTEwLwYDVQQD
EygyOTM5MzNhNmYzZGUzOTNkMGVhMTc5YzMyNjNhNWRjN2VhMjA1NDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiM01bWzgvEcCv/8ZQP1ZIFnwSVF
9HwNkAA1CqrCkTUr0pf5YeIe4+Dab7H/7AHpHgCVxRm3a9XKeQgA/wi/61HOJGdf
7QFg5XGG9u1S2ha0GOPTQvYTMrKDuYNYpP6ZKqEyfuXTdrh3hQOqVXxYu1Lve28o
LG1lM+qQHZo+gO5cR/fkZJuwO4yalmrtwez318PrBPcMi90AL6auFgVY7fOZBheE
dQXeNnQK1TvORLpDRgrRczzw4QtofQOrPp1R8OgwFhBndHD3+Bo8UqEeA1X7YY5D
ZYgyM46Zh6L2kpDtIDu/PjgylSBwXQz5V+/i/3HM6IHzYmiTE9AOnxN17QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCk5M6bz3jk9DqF5wyY6XcfqIFQVMB8GA1UdIwQY
MBaAFE81c819VhzTfg8zH2yjjekgIEKyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jY2YzYTUtMDMwZC00YjU0LTgwNzkt
OGE1ZjE2OWE1YWU3LzEvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jY2YzYTUtMDMwZC00YjU0LTgwNzktOGE1ZjE2OWE1YWU3
LzEvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssELIOw8
EBuSIPIUNn9JC1wWdxIkDVqZNEQEhmEI1roTOltWSr3k9XxOZM/p2DoyANfnSa5J
vl2m1OMW3oI4sLOR0uOnW0MDjh3ztV/9ap4Vvw81NsqzKUhzZNy0jFn6zIckiCMr
Aq44YylZG4IYO6R7skyKLMEP1YW4GeDFZLtgb7HUALacmzsRUMtkrVy/v+Gf+9uy
JrK+gLZ4sUqaqD4/6fNfuJLTk5hU+/eMY3StM2rKGS8GX0PjmUY3ktQCbotSAE71
Hk3DDMxAMQlRB5ESuJaZLcSCBjXvflNfZgEDvlFeHD6+7LkWcPcFQw8FKdyt6n20
fkxdpABh/kSVwQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:18 2025 by rpki-client