Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
File: TzVzzX1WHNN-DzMfbKON6SAgQrI.mft (raw, json)
Hash identifier: xydq5jS2wnboDlhHzsdZlR8r6h6mciWrJfzJ0sS3aRE=
Subject key identifier: B5:63:D7:A6:C8:A9:F3:62:E7:FD:19:AF:95:96:10:5D:95:3C:21:19
Authority key identifier: 4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
Certificate issuer: /CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Certificate serial: 0198D4740F3FC232D78C54CEC9FA255A8B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
Manifest number: 0B5F
Signing time: Sat 23 Aug 2025 01:03:52 +0000
Manifest this update: Sat 23 Aug 2025 01:03:52 +0000
Manifest next update: Sun 24 Aug 2025 01:03:52 +0000
Files and hashes: 1: TzVzzX1WHNN-DzMfbKON6SAgQrI.crl (hash: VUKQcTIhHBnpZcvHQ3Nl/ournh9oDTMPWzGPeXShFbk=)
2: gNvVla9QTcgfrH76gu8sofAf_w0.roa (hash: OGSKcOJHQa1w9k6JZ39A0hFW39yZH1IaBP1pJ+a1YHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:0f:3f:c2:32:d7:8c:54:ce:c9:fa:25:5a:8b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Validity
Not Before: Aug 23 01:03:52 2025 GMT
Not After : Aug 24 01:03:52 2025 GMT
Subject: CN=b563d7a6c8a9f362e7fd19af9596105d953c2119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:5b:61:9b:ee:a8:be:76:5d:8d:2a:4a:10:
c6:50:51:ce:f8:68:ff:61:1f:b0:05:b6:13:14:91:
d3:d6:01:42:4e:1c:c7:5a:30:1f:f8:05:0a:18:f3:
94:af:71:67:39:78:84:10:f7:4b:e2:68:32:e8:e9:
e5:86:5f:7e:16:c1:56:57:d3:b1:84:50:42:ee:12:
22:99:a0:51:f2:ab:60:9e:39:ec:eb:f5:c7:9c:49:
f0:af:6f:c1:68:cd:37:61:24:07:0c:03:dc:68:39:
21:19:fd:24:3d:b5:3d:a2:93:c7:04:cd:07:ca:b8:
5d:a5:21:e9:09:b6:52:1b:ff:28:e4:87:f2:53:52:
e8:1c:2d:89:60:ce:bf:76:63:38:34:4b:d1:a9:7b:
29:0b:5c:c5:b7:05:c2:48:47:c6:94:6d:9c:97:9a:
07:c1:45:6a:05:d1:48:fc:c0:4a:43:07:fd:62:ad:
a3:67:9a:8c:6e:9c:8c:26:cc:a8:b4:8c:73:d0:f7:
33:f9:4d:2e:c3:f0:49:7b:70:de:39:cf:29:32:e1:
2a:c6:69:ff:54:c2:1c:3c:47:53:fb:57:32:ff:1a:
66:83:11:a4:b3:32:89:6a:07:cb:6e:a0:6e:00:d0:
b6:05:a0:24:77:c2:d3:aa:2c:e8:f8:24:dc:44:54:
17:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:63:D7:A6:C8:A9:F3:62:E7:FD:19:AF:95:96:10:5D:95:3C:21:19
X509v3 Authority Key Identifier:
keyid:4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ff:56:9b:f6:e3:00:7c:1d:b0:af:60:72:b8:dd:ce:b2:45:
0e:ed:ea:f2:b4:68:77:56:ed:83:d2:1c:39:4e:4c:a2:40:a2:
63:d4:01:7b:2c:58:51:18:6f:25:2c:1a:bf:31:a5:02:08:23:
50:9c:f2:78:f6:03:f9:de:c5:7e:94:87:2d:dd:c2:10:63:16:
54:3b:57:48:18:69:1d:4b:bb:57:67:64:1f:75:73:a0:54:73:
36:74:ec:81:ce:44:86:d9:30:93:15:5d:21:1f:ea:76:e7:e1:
18:87:18:cb:6d:0b:fe:e1:74:cd:48:3b:45:08:7c:aa:9b:5d:
a0:1f:5b:59:73:d0:f7:8a:ae:00:88:f3:02:33:bc:c5:02:63:
d0:ec:a6:2b:c5:db:3a:1c:9f:0f:2f:b5:2d:e8:06:d0:02:f7:
bf:6f:b7:0e:f6:04:6a:e9:f8:2b:7f:28:83:f3:de:3f:74:06:
d7:3b:e7:e6:97:c4:d8:fe:66:dd:b8:e0:c3:30:26:48:42:da:
5b:a0:db:4d:d3:eb:35:1c:a6:63:15:51:41:1e:bf:6b:2c:fa:
2d:79:63:7f:c9:79:7b:05:43:b8:8b:fb:15:e7:bb:a4:9e:17:
f6:ae:0e:55:5a:47:e6:71:61:64:a0:07:a4:31:f2:38:a2:d0:
f1:e0:d4:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdA8/wjLXjFTOyfolWotbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMzU3M2NkN2Q1NjFjZDM3ZTBmMzMxZjZjYTM4ZGU5MjAy
MDQyYjIwHhcNMjUwODIzMDEwMzUyWhcNMjUwODI0MDEwMzUyWjAzMTEwLwYDVQQD
EyhiNTYzZDdhNmM4YTlmMzYyZTdmZDE5YWY5NTk2MTA1ZDk1M2MyMTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdlbYZvuqL52XY0qShDGUFHO+Gj/
YR+wBbYTFJHT1gFCThzHWjAf+AUKGPOUr3FnOXiEEPdL4mgy6Onlhl9+FsFWV9Ox
hFBC7hIimaBR8qtgnjns6/XHnEnwr2/BaM03YSQHDAPcaDkhGf0kPbU9opPHBM0H
yrhdpSHpCbZSG/8o5IfyU1LoHC2JYM6/dmM4NEvRqXspC1zFtwXCSEfGlG2cl5oH
wUVqBdFI/MBKQwf9Yq2jZ5qMbpyMJsyotIxz0Pcz+U0uw/BJe3DeOc8pMuEqxmn/
VMIcPEdT+1cy/xpmgxGkszKJagfLbqBuANC2BaAkd8LTqizo+CTcRFQXjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVj16bIqfNi5/0Zr5WWEF2VPCEZMB8GA1UdIwQY
MBaAFE81c819VhzTfg8zH2yjjekgIEKyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jY2YzYTUtMDMwZC00YjU0LTgwNzkt
OGE1ZjE2OWE1YWU3LzEvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jY2YzYTUtMDMwZC00YjU0LTgwNzktOGE1ZjE2OWE1YWU3
LzEvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADP9Wm/bj
AHwdsK9gcrjdzrJFDu3q8rRod1btg9IcOU5MokCiY9QBeyxYURhvJSwavzGlAggj
UJzyePYD+d7FfpSHLd3CEGMWVDtXSBhpHUu7V2dkH3VzoFRzNnTsgc5EhtkwkxVd
IR/qdufhGIcYy20L/uF0zUg7RQh8qptdoB9bWXPQ94quAIjzAjO8xQJj0OymK8Xb
OhyfDy+1LegG0AL3v2+3DvYEaun4K38og/PeP3QG1zvn5pfE2P5m3bjgwzAmSELa
W6DbTdPrNRymYxVRQR6/ayz6LXljf8l5ewVDuIv7Fee7pJ4X9q4OVVpH5nFhZKAH
pDHyOKLQ8eDUDQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:43 2025 by rpki-client