Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
File: TzVzzX1WHNN-DzMfbKON6SAgQrI.mft (raw, json)
Hash identifier: nWIjIr7kduMG62S94MUHXEFU83/JJLJD8aPu0QVa6pQ=
Subject key identifier: E2:83:F5:C9:BB:E9:02:14:CB:0D:B2:18:6F:A1:37:6D:B9:D5:6B:EE
Authority key identifier: 4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
Certificate issuer: /CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Certificate serial: 0197B6A0EE71CE675C24E9C71F9EFCDE1592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
Manifest number: 0ACB
Signing time: Sat 28 Jun 2025 13:01:29 +0000
Manifest this update: Sat 28 Jun 2025 13:01:29 +0000
Manifest next update: Sun 29 Jun 2025 13:01:29 +0000
Files and hashes: 1: TzVzzX1WHNN-DzMfbKON6SAgQrI.crl (hash: NnjbhkumgrTN0g0OtSlbRaDzjHhApio3opg1VbM1gV0=)
2: gNvVla9QTcgfrH76gu8sofAf_w0.roa (hash: OGSKcOJHQa1w9k6JZ39A0hFW39yZH1IaBP1pJ+a1YHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ee:71:ce:67:5c:24:e9:c7:1f:9e:fc:de:15:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Validity
Not Before: Jun 28 13:01:29 2025 GMT
Not After : Jun 29 13:01:29 2025 GMT
Subject: CN=e283f5c9bbe90214cb0db2186fa1376db9d56bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:7c:90:81:f2:c5:1e:3e:02:5e:cc:10:8e:
dc:5d:91:a2:9a:36:f8:53:ce:67:b9:63:ee:ba:9b:
72:df:18:cc:20:33:04:0c:bf:9f:4f:8e:82:d3:06:
df:fb:c6:3d:ab:ef:3b:ea:8f:6b:57:b5:d4:8d:bb:
f5:a3:e2:9f:da:ca:69:1d:0d:78:d3:08:74:6f:2a:
a6:51:c4:d2:bf:99:55:86:02:c8:a8:9d:bc:7e:83:
b5:21:e8:ed:c9:39:e1:5f:1c:ee:c9:a0:42:9e:22:
a4:ae:7e:87:19:80:1f:38:93:2a:14:7b:01:36:24:
71:56:f6:bc:6c:30:74:0d:77:27:fe:89:ee:fb:a5:
d8:28:00:75:ea:c1:7e:1d:02:83:14:35:2b:45:07:
ee:58:64:0b:a6:1b:51:fb:25:6d:61:dc:2f:9a:7e:
7e:db:8f:bb:88:b6:9d:e4:3e:60:d1:16:a0:36:b7:
98:50:25:5c:c9:c0:17:2b:b0:48:bf:57:7d:3f:b2:
86:cb:fc:a5:40:ca:61:3e:61:7f:3e:c7:1d:3a:ec:
0f:47:ee:ac:ac:c1:87:1c:7a:26:0c:fc:5c:e6:3c:
41:5d:af:e2:19:09:1a:3e:99:ee:fc:86:49:80:ff:
5d:26:44:8e:f4:17:49:31:d0:cc:a5:1d:83:ca:b8:
d3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:83:F5:C9:BB:E9:02:14:CB:0D:B2:18:6F:A1:37:6D:B9:D5:6B:EE
X509v3 Authority Key Identifier:
keyid:4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:11:9d:24:97:c5:80:91:42:17:bd:4b:a6:64:0b:00:b9:12:
de:83:12:e1:94:77:03:5c:52:27:66:1e:ac:95:0b:84:c2:26:
8d:d1:2d:4a:be:0b:67:7a:d2:ee:44:a9:0c:73:84:87:32:43:
06:d6:c0:09:dc:b5:86:b7:44:3d:0e:4a:d2:98:7d:cd:8f:77:
7c:0c:25:49:db:aa:cc:71:97:75:9a:e0:6d:b5:f7:51:8e:1f:
9f:c9:dc:8d:6b:6c:94:70:85:e6:68:90:d4:95:5c:9f:a5:17:
2b:51:bd:e8:34:38:c4:c3:2e:7c:79:07:81:dd:25:3a:96:b9:
77:a9:3a:07:66:97:37:be:92:de:a0:59:cc:63:d0:50:51:25:
4e:30:b7:fe:30:97:e7:a0:89:70:10:ac:29:bc:09:9d:e6:0f:
b6:61:1e:d0:c0:a5:af:3e:e6:70:7c:c5:52:d7:0f:8b:69:9c:
da:fb:7c:13:55:a3:f6:49:10:04:52:16:de:81:6d:02:f0:fe:
46:03:ca:43:5f:de:47:66:f6:1c:8f:5a:2d:66:09:2f:df:ba:
d8:e4:c2:f0:e1:41:38:56:49:d6:13:51:8d:8d:4b:92:f1:49:
db:d1:36:0d:c1:1e:f8:c1:2e:c6:2b:41:28:22:06:cc:01:28:
5c:3e:e4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:38 2025 by rpki-client