Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier: MwHtt5DdhzWh8CizpfgG8wc/IfyqTBL7/Y0yQR8Fi1c=
Subject key identifier: 0C:75:94:3B:02:02:D4:DF:6E:3D:0B:8F:DD:2D:57:99:84:EC:FB:4E
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial: 0197D58821332AFD6A909B09DDA8169D183F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number: 15C5
Signing time: Fri 04 Jul 2025 13:02:37 +0000
Manifest this update: Fri 04 Jul 2025 13:02:37 +0000
Manifest next update: Sat 05 Jul 2025 13:02:37 +0000
Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: QqdL/yI9J+aaMlYRzSHFA6oNwAsV76H2Lrv/sjrW/9M=)
2: UqGmWpGtflaEJvCw0bHQvmEnA74.roa (hash: EKIY9C4V0PmpfSkXvjVMr8vcUWFSLcsQTMlkDeIRJyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 13:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:88:21:33:2a:fd:6a:90:9b:09:dd:a8:16:9d:18:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Validity
Not Before: Jul 4 13:02:37 2025 GMT
Not After : Jul 5 13:02:37 2025 GMT
Subject: CN=0c75943b0202d4df6e3d0b8fdd2d579984ecfb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2d:a5:c2:d5:44:ea:1e:a2:fd:43:fb:65:27:
d2:6e:66:2d:c2:69:c9:47:bc:16:37:e4:65:b6:5e:
6b:77:4a:0a:61:4d:b8:73:0b:a2:f6:b6:e1:7e:8f:
42:a0:66:9f:24:c5:fc:03:21:20:4c:68:43:f5:a3:
2e:cf:38:c7:8b:49:b8:ea:3c:97:f3:49:a9:81:7c:
2e:de:25:a9:b1:3c:a0:2c:3e:83:1b:97:1e:b8:44:
d7:84:d4:bc:0c:c4:60:a1:65:c1:a4:65:3d:d9:ca:
00:58:03:a8:86:68:9a:0d:db:44:e6:62:4a:82:41:
48:c7:d6:b8:d2:ed:1d:62:2c:43:ec:86:2d:81:2e:
70:c4:d5:21:16:f4:41:57:7a:1a:61:1f:13:0a:70:
9e:f8:50:ac:e5:cd:13:bb:4e:de:c1:18:88:64:ab:
a8:9b:4b:77:63:57:fa:ec:8f:4c:ee:a6:30:2b:db:
e3:44:bf:0d:73:6a:63:9d:c3:11:96:a0:64:c3:99:
c2:82:8b:68:94:c7:05:db:86:27:db:61:ca:2c:6f:
d7:d9:8c:a1:8b:fe:d5:8d:ef:13:76:0f:22:2a:db:
5d:33:db:1c:70:a7:59:49:37:4d:a5:05:42:0d:87:
10:6e:84:f2:cf:61:a6:d9:5c:7a:89:de:03:f8:43:
05:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:75:94:3B:02:02:D4:DF:6E:3D:0B:8F:DD:2D:57:99:84:EC:FB:4E
X509v3 Authority Key Identifier:
keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:95:80:7a:2f:6e:fb:fd:9a:fe:68:0e:d6:2f:02:64:25:27:
b4:93:8d:84:73:f6:c9:dc:85:da:a5:e1:54:90:92:f8:8d:c2:
fa:9f:45:5d:67:6e:13:bd:b3:ed:09:cf:48:47:d3:0f:53:9c:
0c:50:dd:04:25:a0:42:54:88:e8:1b:d9:29:6c:68:c0:e4:14:
e2:49:28:d5:b8:54:aa:09:b0:27:de:89:4c:17:2c:3a:cd:f6:
c9:36:c4:3a:02:1e:83:64:99:c7:0b:9c:06:7e:ca:13:6b:09:
d7:f2:4c:b2:08:46:f8:6a:c9:10:04:21:5d:0f:36:34:c1:67:
47:69:e9:b8:f3:0f:4a:f3:70:c9:b1:5e:5e:dc:83:ae:8c:11:
6e:bd:93:62:2a:2b:b5:93:a3:c8:28:92:a5:4a:d0:71:2e:f3:
dc:50:a6:b2:8f:a5:cb:5c:63:ed:7e:4c:0b:9a:38:7e:0b:d7:
99:13:4a:44:ce:c7:7f:a7:68:71:63:9f:a9:60:57:39:69:c3:
6c:54:17:e6:3b:0b:5c:cb:47:f1:b9:1a:ab:d1:6f:03:16:3f:
19:9f:e7:88:fc:58:23:e7:f8:1b:e3:cb:cb:f1:45:59:5a:a6:
5b:74:19:57:51:0e:9d:0a:23:85:62:ce:fc:b1:b5:66:e6:a3:
37:9d:b4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:40:10 2025 by rpki-client