Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
File: TzvVbotU5tonu-ZiLaxny_Aqgeo.mft (raw, json)
Hash identifier: +9Q0OHoo0XYFs2S4kZgz+QL1zCIztuT6tvWERFzo48E=
Subject key identifier: 00:A1:14:32:50:47:A7:FB:12:D8:4A:1E:E1:F1:BA:2D:05:25:B0:D0
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Certificate issuer: /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial: 0197B7B32653638C768F38CF8A1B1A89D28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 18:01:00 +0000
Manifest this update: Sat 28 Jun 2025 18:01:00 +0000
Manifest next update: Sun 29 Jun 2025 18:01:00 +0000
Files and hashes: 1: 6aBtyL1HCBLQz8Fcxx2-wbI-JSY.roa (hash: s+Yjky9WV0WGtiJ2UXV97kZc6gRv1napm2o37+mL6NI=)
2: R0B0S-Vvq6PSGq8IAqKsdnjdNUo.roa (hash: jZBNXVMhAxnq4wWzeXUVcxAP1mha5zeShrdHGeYvBL4=)
3: TzvVbotU5tonu-ZiLaxny_Aqgeo.crl (hash: R9UjxLIpe39Zs/jWnbk3xW0MMZ0XDuNsxTstnZkRRfQ=)
4: snxuxsWrIVBOH4PJX-798Ws3-_I.roa (hash: eUyKfNa1R42Kf80mOcHHq43jou6WV27ocUUMJBjr/10=)
5: wnKhG27ddvv9DbopEcZ0e8BfSyE.roa (hash: 5bhpzUqfkiYr3WyfWoYZHsfUt3MVDy9FbR7pi02+AvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:26:53:63:8c:76:8f:38:cf:8a:1b:1a:89:d2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Validity
Not Before: Jun 28 18:01:00 2025 GMT
Not After : Jun 29 18:01:00 2025 GMT
Subject: CN=00a114325047a7fb12d84a1ee1f1ba2d0525b0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:53:4e:41:17:aa:77:42:36:b1:a1:7c:f6:
07:62:c5:ee:d6:be:77:86:fd:95:46:b8:7b:be:c4:
8d:a0:f5:f3:6a:9f:ec:a0:4b:7d:9c:27:b1:28:c9:
71:14:0c:90:14:14:7e:6e:b8:5a:d6:97:b3:58:e3:
ec:6a:47:b4:96:11:bd:bf:d3:12:1d:7d:e7:d4:7a:
94:6f:8f:c2:1d:7d:e6:f3:36:4b:8e:11:5f:58:0c:
c1:7a:e3:49:15:40:ee:19:40:d5:41:83:10:7c:61:
30:a9:84:67:d7:5e:82:fd:1f:53:bb:a8:6d:c6:c2:
a7:b7:2d:a6:af:31:c9:11:8f:a6:4d:ab:a8:64:62:
c5:51:b0:bc:87:13:b9:87:af:f8:24:b3:14:ca:8d:
93:b2:ab:4d:ca:1b:8f:2f:06:e3:07:83:dc:6c:e8:
64:ad:f2:d0:e7:30:ee:2d:d3:d4:b0:fe:8f:f3:0d:
7f:08:8b:d2:fe:86:09:7a:d5:71:20:7c:04:be:b9:
df:27:ba:a2:63:4f:30:f9:e6:1f:b5:fb:fd:5e:87:
f1:b2:13:49:30:b7:ea:71:1a:c4:c9:f3:34:ea:0d:
7e:8d:62:49:4f:e1:3d:2c:a4:5e:70:96:15:0c:e4:
3a:38:12:5d:d8:be:a2:ae:4c:fd:40:ba:10:0d:37:
12:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A1:14:32:50:47:A7:FB:12:D8:4A:1E:E1:F1:BA:2D:05:25:B0:D0
X509v3 Authority Key Identifier:
keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e3:68:49:c9:bb:f3:30:d6:be:5a:a1:88:b0:1f:5f:d3:eb:
7e:eb:45:2c:62:1a:b7:aa:c3:8c:6a:22:35:38:0b:d7:c4:8e:
8c:e8:0d:fd:22:ec:50:d2:69:2f:db:d9:44:d2:ad:22:fd:d7:
bd:88:4e:df:12:1b:c5:01:b0:e0:93:43:33:ab:ca:7a:f4:1d:
f1:cc:f0:55:41:92:22:cb:93:f6:4d:30:dc:2f:91:e7:e0:df:
94:2b:96:37:2a:2d:ce:87:0d:ac:56:43:20:f1:f8:e5:c9:63:
8e:a1:f2:50:66:cf:0f:44:02:55:d6:e8:ce:b3:55:dc:af:8d:
e4:30:1f:46:c3:47:5f:5e:ce:c2:1f:6e:84:2b:7c:b8:00:fb:
67:9c:14:8d:1e:a2:fc:1e:17:7f:d4:a1:a7:0a:83:b9:3d:58:
5e:c9:64:a0:d9:35:97:c0:a2:61:2c:7c:8f:66:f5:4c:81:b6:
eb:3c:06:b7:5a:55:b9:b8:a5:83:06:9e:c4:47:81:7d:98:9e:
9c:9a:15:93:78:00:13:18:3c:83:14:01:ac:f5:cd:51:b3:5e:
4a:5a:9f:0b:9c:56:c2:d5:95:a6:cc:49:cf:d5:61:a9:b3:65:
e1:5a:9c:a4:45:9d:4a:96:ea:bf:db:63:a1:b0:a8:00:4d:da:
ea:20:25:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3syZTY4x2jzjPihsaidKOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmM2JkNTZlOGI1NGU2ZGEyN2JiZTY2MjJkYWM2N2NiZjAy
YTgxZWEwHhcNMjUwNjI4MTgwMTAwWhcNMjUwNjI5MTgwMTAwWjAzMTEwLwYDVQQD
EygwMGExMTQzMjUwNDdhN2ZiMTJkODRhMWVlMWYxYmEyZDA1MjViMGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcdTTkEXqndCNrGhfPYHYsXu1r53
hv2VRrh7vsSNoPXzap/soEt9nCexKMlxFAyQFBR+brha1pezWOPsake0lhG9v9MS
HX3n1HqUb4/CHX3m8zZLjhFfWAzBeuNJFUDuGUDVQYMQfGEwqYRn116C/R9Tu6ht
xsKnty2mrzHJEY+mTauoZGLFUbC8hxO5h6/4JLMUyo2TsqtNyhuPLwbjB4PcbOhk
rfLQ5zDuLdPUsP6P8w1/CIvS/oYJetVxIHwEvrnfJ7qiY08w+eYftfv9XofxshNJ
MLfqcRrEyfM06g1+jWJJT+E9LKRecJYVDOQ6OBJd2L6irkz9QLoQDTcSEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAChFDJQR6f7EthKHuHxui0FJbDQMB8GA1UdIwQY
MBaAFE871W6LVObaJ7vmYi2sZ8vwKoHqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUt
N2RjNWJkZGY5MWI1LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUtN2RjNWJkZGY5MWI1
LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqeNoScm7
8zDWvlqhiLAfX9PrfutFLGIat6rDjGoiNTgL18SOjOgN/SLsUNJpL9vZRNKtIv3X
vYhO3xIbxQGw4JNDM6vKevQd8czwVUGSIsuT9k0w3C+R5+DflCuWNyotzocNrFZD
IPH45cljjqHyUGbPD0QCVdbozrNV3K+N5DAfRsNHX17Owh9uhCt8uAD7Z5wUjR6i
/B4Xf9ShpwqDuT1YXslkoNk1l8CiYSx8j2b1TIG26zwGt1pVubilgwaexEeBfZie
nJoVk3gAExg8gxQBrPXNUbNeSlqfC5xWwtWVpsxJz9VhqbNl4VqcpEWdSpbqv9tj
obCoAE3a6iAlbA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:50 2025 by rpki-client