Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
File: TzvVbotU5tonu-ZiLaxny_Aqgeo.mft (raw, json)
Hash identifier: 29MO5XWBMlGjO/ABADp+l+I/+IGWc1gkw6mug9XertM=
Subject key identifier: 87:42:9E:6E:B1:F3:3E:AF:90:50:3C:AD:99:5E:24:DB:C5:45:DA:60
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Certificate issuer: /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial: 0198D77331E3FFF93067C7263B53FF6D56FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 15:01:47 +0000
Manifest this update: Sat 23 Aug 2025 15:01:47 +0000
Manifest next update: Sun 24 Aug 2025 15:01:47 +0000
Files and hashes: 1: 6aBtyL1HCBLQz8Fcxx2-wbI-JSY.roa (hash: s+Yjky9WV0WGtiJ2UXV97kZc6gRv1napm2o37+mL6NI=)
2: R0B0S-Vvq6PSGq8IAqKsdnjdNUo.roa (hash: jZBNXVMhAxnq4wWzeXUVcxAP1mha5zeShrdHGeYvBL4=)
3: TzvVbotU5tonu-ZiLaxny_Aqgeo.crl (hash: e8rqgHJJC3lPl7hxd+00sHSXEPs2x6WBlyJQ6HkY8VI=)
4: snxuxsWrIVBOH4PJX-798Ws3-_I.roa (hash: eUyKfNa1R42Kf80mOcHHq43jou6WV27ocUUMJBjr/10=)
5: wnKhG27ddvv9DbopEcZ0e8BfSyE.roa (hash: 5bhpzUqfkiYr3WyfWoYZHsfUt3MVDy9FbR7pi02+AvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:31:e3:ff:f9:30:67:c7:26:3b:53:ff:6d:56:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Validity
Not Before: Aug 23 15:01:47 2025 GMT
Not After : Aug 24 15:01:47 2025 GMT
Subject: CN=87429e6eb1f33eaf90503cad995e24dbc545da60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a4:ce:57:4e:b6:7a:f2:cb:0e:93:6b:b2:a3:
90:05:cc:63:fc:b2:a2:65:9e:c8:02:1b:0a:f2:9e:
e0:45:71:d8:bf:61:0a:bf:67:62:2a:1a:19:fd:69:
ac:5a:69:f4:0e:67:79:cd:25:5c:42:46:54:0d:ed:
f2:c8:5f:ad:af:74:9c:fd:94:fc:36:a9:d5:73:a6:
6a:e2:7b:b9:d0:02:f8:ec:50:d1:3b:e1:62:0f:7b:
9b:8e:4a:56:fb:06:14:f2:30:89:b2:21:ea:aa:11:
42:7d:c0:77:c2:bf:7b:94:c8:ca:70:f5:7d:ba:b7:
c8:08:57:dc:2a:83:40:d3:81:18:ee:b9:4c:fe:e8:
1d:15:d9:bb:bd:dd:d6:78:09:ce:71:c8:54:31:91:
03:e4:6f:66:7e:b0:c7:2e:3d:da:48:d2:78:e5:98:
93:c0:80:7d:d4:e0:40:1e:a7:13:77:9b:3c:d4:dd:
b9:28:f2:f7:1c:94:60:95:c5:07:c8:b5:01:33:75:
ae:f1:3d:9b:c4:7b:14:84:bf:01:ac:41:e5:88:53:
42:fe:27:86:fa:28:4f:77:fa:34:95:32:85:30:ad:
a4:3b:39:dd:eb:fc:63:e8:8e:c0:f5:84:97:a9:cf:
fd:ce:b3:47:f6:99:c1:eb:7f:12:c4:46:6d:83:ec:
ff:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:42:9E:6E:B1:F3:3E:AF:90:50:3C:AD:99:5E:24:DB:C5:45:DA:60
X509v3 Authority Key Identifier:
keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:56:bb:e9:05:4e:c5:60:88:33:5a:d1:b1:da:80:80:1f:6e:
c4:45:e3:2f:18:ce:11:f9:44:52:c4:73:ca:de:3a:b7:31:ee:
73:ed:08:ce:e1:1b:b9:a5:01:c2:cb:06:4f:ae:98:ee:49:71:
40:e8:bd:19:da:ee:b6:c3:22:5c:83:81:03:ac:fc:ad:3e:d9:
89:c4:0d:82:e8:56:13:55:40:40:36:a3:19:61:03:54:ec:0b:
62:f9:4d:7a:a3:dc:e3:96:5c:0a:12:00:65:5c:0a:62:6a:01:
90:8f:20:8b:06:96:52:b5:f1:88:fa:05:5b:2d:2b:1f:1e:89:
00:30:2f:36:bf:09:3d:bf:d6:d3:e6:eb:12:61:59:e0:94:bd:
eb:ae:e5:6b:29:51:8d:a5:ed:4c:9b:53:bc:9f:16:e8:fc:75:
07:b9:25:00:91:13:92:d8:38:64:8a:45:df:fd:29:c4:81:95:
78:af:bb:33:9d:8c:0f:29:6c:14:9c:7d:9a:6f:9e:ad:b0:0a:
b2:ff:99:71:1b:0d:18:a7:1b:8e:fc:5b:da:72:dc:82:39:2e:
63:94:76:45:bb:df:1b:86:66:90:02:41:7f:2e:09:5c:2d:f7:
8a:bc:fb:7d:d4:75:23:ed:d4:dc:be:dc:71:66:f8:80:d0:10:
bd:1c:b8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:04:12 2025 by rpki-client