Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
File: TzvVbotU5tonu-ZiLaxny_Aqgeo.mft (raw, json)
Hash identifier: vUhgdjXX8bgg8lGAWWon5ZNTJKkBbt7QU5S3MLhCtYM=
Subject key identifier: 26:24:D4:27:D4:34:31:91:72:66:1E:DF:9D:A7:00:1C:D8:46:33:42
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Certificate issuer: /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial: 0199FEEB9C5BFBA5724F60E774998CEA5021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 00:01:17 +0000
Manifest this update: Mon 20 Oct 2025 00:01:17 +0000
Manifest next update: Tue 21 Oct 2025 00:01:17 +0000
Files and hashes: 1: 6aBtyL1HCBLQz8Fcxx2-wbI-JSY.roa (hash: s+Yjky9WV0WGtiJ2UXV97kZc6gRv1napm2o37+mL6NI=)
2: R0B0S-Vvq6PSGq8IAqKsdnjdNUo.roa (hash: jZBNXVMhAxnq4wWzeXUVcxAP1mha5zeShrdHGeYvBL4=)
3: TzvVbotU5tonu-ZiLaxny_Aqgeo.crl (hash: 99VYkTJi48Wd2BRaUPQDw5cuqWMmlJAhp6xnh9SA1P8=)
4: snxuxsWrIVBOH4PJX-798Ws3-_I.roa (hash: eUyKfNa1R42Kf80mOcHHq43jou6WV27ocUUMJBjr/10=)
5: wnKhG27ddvv9DbopEcZ0e8BfSyE.roa (hash: 5bhpzUqfkiYr3WyfWoYZHsfUt3MVDy9FbR7pi02+AvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:9c:5b:fb:a5:72:4f:60:e7:74:99:8c:ea:50:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Validity
Not Before: Oct 20 00:01:17 2025 GMT
Not After : Oct 21 00:01:17 2025 GMT
Subject: CN=2624d427d434319172661edf9da7001cd8463342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c4:4d:cc:9c:ed:0d:f1:07:21:2a:69:3e:db:
95:a2:c5:34:21:58:eb:0f:6a:25:ad:c4:87:e5:85:
ba:87:0b:f9:eb:fc:35:3a:11:96:14:c2:f8:a4:45:
de:5e:1a:04:a8:f6:c6:dd:06:f1:9c:4f:ab:cf:69:
c4:04:7f:6c:ee:40:08:da:0e:5e:d5:0a:e8:16:7f:
61:5e:24:c6:e3:d8:3d:45:aa:5a:67:c8:79:d6:7f:
39:4e:8a:a6:b7:90:72:e0:de:68:f9:ca:3b:7c:ee:
f3:05:6f:24:b5:ef:11:0d:15:fa:07:81:d8:ac:f3:
11:fb:ac:df:3e:bd:33:fc:f5:6d:65:5f:79:1b:19:
8b:44:d1:15:5d:29:b5:2e:1b:92:ba:36:4e:ce:ff:
c5:30:b4:ce:fd:8a:df:0f:74:34:85:47:a3:41:f4:
b1:a0:e4:08:94:23:1a:0c:6a:9d:74:24:7e:82:5d:
4a:21:0c:42:df:4a:49:dc:12:81:7b:6c:e5:40:40:
a1:04:b9:c2:18:a4:e6:6d:08:ea:d1:85:70:3c:f7:
31:d1:3b:9f:e2:c0:45:28:85:cb:59:ee:18:34:3b:
8e:e4:ee:01:99:7d:3e:d8:f8:4b:5c:71:4a:cf:c1:
01:c0:e1:4a:56:62:d8:a3:f5:d7:b5:89:3e:98:82:
df:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:24:D4:27:D4:34:31:91:72:66:1E:DF:9D:A7:00:1C:D8:46:33:42
X509v3 Authority Key Identifier:
keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e5:d7:76:25:77:62:71:73:d5:63:8e:b2:7f:20:a1:9c:26:
39:ea:52:af:21:52:cb:fb:ae:04:70:be:84:e3:31:3c:0d:ff:
d4:dc:9f:51:31:f7:2e:72:9e:d9:24:e6:e2:8f:05:5d:e7:41:
e7:e3:ed:0c:4c:19:77:9b:2a:94:90:25:bc:f4:10:64:ca:d4:
4b:fd:ad:01:36:a4:be:07:65:bf:26:73:97:33:2e:9d:e7:df:
1d:c0:91:58:12:90:22:be:07:c7:09:df:20:17:cc:c8:9a:f9:
02:c2:5c:ee:45:94:fb:8d:0f:73:c3:8e:96:5c:4c:2c:1a:7f:
f0:bd:be:1e:85:b5:67:2f:d1:42:f2:e2:f1:b4:e4:c4:c5:b9:
7a:f4:31:d9:2b:71:b5:f7:42:45:45:62:51:dd:9d:70:21:35:
3a:7a:64:b8:eb:8a:57:4b:06:df:62:44:f4:5b:f9:0b:6e:10:
29:bb:3b:69:ee:d5:59:b2:12:10:a8:08:37:eb:bc:b9:98:7b:
27:21:4c:36:7e:61:51:f5:0e:ff:d5:39:18:54:84:0a:09:d3:
b3:c3:83:a4:27:66:91:d0:0b:b0:b1:e6:a4:23:60:e5:c9:ff:
0d:eb:8b:be:67:2a:9e:20:cc:3d:cc:2b:7e:e6:ef:df:ed:a5:
2b:32:c4:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+65xb+6VyT2DndJmM6lAhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmM2JkNTZlOGI1NGU2ZGEyN2JiZTY2MjJkYWM2N2NiZjAy
YTgxZWEwHhcNMjUxMDIwMDAwMTE3WhcNMjUxMDIxMDAwMTE3WjAzMTEwLwYDVQQD
EygyNjI0ZDQyN2Q0MzQzMTkxNzI2NjFlZGY5ZGE3MDAxY2Q4NDYzMzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsRNzJztDfEHISppPtuVosU0IVjr
D2olrcSH5YW6hwv56/w1OhGWFML4pEXeXhoEqPbG3QbxnE+rz2nEBH9s7kAI2g5e
1QroFn9hXiTG49g9RapaZ8h51n85Toqmt5By4N5o+co7fO7zBW8kte8RDRX6B4HY
rPMR+6zfPr0z/PVtZV95GxmLRNEVXSm1LhuSujZOzv/FMLTO/YrfD3Q0hUejQfSx
oOQIlCMaDGqddCR+gl1KIQxC30pJ3BKBe2zlQEChBLnCGKTmbQjq0YVwPPcx0Tuf
4sBFKIXLWe4YNDuO5O4BmX0+2PhLXHFKz8EBwOFKVmLYo/XXtYk+mILfLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYk1CfUNDGRcmYe352nABzYRjNCMB8GA1UdIwQY
MBaAFE871W6LVObaJ7vmYi2sZ8vwKoHqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUt
N2RjNWJkZGY5MWI1LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUtN2RjNWJkZGY5MWI1
LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsuXXdiV3
YnFz1WOOsn8goZwmOepSryFSy/uuBHC+hOMxPA3/1NyfUTH3LnKe2STm4o8FXedB
5+PtDEwZd5sqlJAlvPQQZMrUS/2tATakvgdlvyZzlzMuneffHcCRWBKQIr4Hxwnf
IBfMyJr5AsJc7kWU+40Pc8OOllxMLBp/8L2+HoW1Zy/RQvLi8bTkxMW5evQx2Stx
tfdCRUViUd2dcCE1OnpkuOuKV0sG32JE9Fv5C24QKbs7ae7VWbISEKgIN+u8uZh7
JyFMNn5hUfUO/9U5GFSECgnTs8ODpCdmkdALsLHmpCNg5cn/DeuLvmcqniDMPcwr
fubv3+2lKzLEKg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:48:25 2025 by rpki-client