Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
File: TnzINx7SS6z2esqLkCzucGr8Yks.mft (raw, json)
Hash identifier: DIbdv5Dtmy1jeWr3Uv/aLyqJtr7sMzyGqmK+AM0tJqA=
Subject key identifier: 6E:19:5C:1D:B5:95:E1:98:C6:C9:73:E1:6C:02:7F:4D:2F:3C:41:DE
Authority key identifier: 4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
Certificate issuer: /CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
Certificate serial: 019879E446143F5E1C11BECE968928F6F4A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 11:00:59 +0000
Manifest this update: Tue 05 Aug 2025 11:00:59 +0000
Manifest next update: Wed 06 Aug 2025 11:00:59 +0000
Files and hashes: 1: AFXKRWkq4CEJ7e_q_TT8oCKNDgs.roa (hash: vvcSpEWzby7j1iGxx2OT88XWdiMYKYH4weh98eM4dfY=)
2: TnzINx7SS6z2esqLkCzucGr8Yks.crl (hash: o1oxq3aU9p7kSZQl/rRcCImAXuj+plATudZxBLDR4u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:e4:46:14:3f:5e:1c:11:be:ce:96:89:28:f6:f4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
Validity
Not Before: Aug 5 11:00:59 2025 GMT
Not After : Aug 6 11:00:59 2025 GMT
Subject: CN=6e195c1db595e198c6c973e16c027f4d2f3c41de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d6:60:73:06:2f:dd:0f:7f:9e:5b:3b:4d:88:
21:70:1d:24:ad:ff:db:54:71:55:51:ff:08:ae:a1:
cb:6f:44:2a:06:48:47:ee:df:c0:fb:d9:c6:12:3e:
85:ca:3f:bb:33:c5:ac:85:44:78:e2:5d:4b:31:8e:
35:e2:30:58:e7:db:3c:6e:f5:7e:b3:56:da:f7:55:
a8:e1:59:d1:ce:40:d4:a9:1e:f5:6f:b8:fa:03:e5:
9b:b4:ce:c9:5d:1d:fa:26:30:c2:2f:71:0e:90:23:
9e:97:8c:d8:b3:69:13:b2:04:4c:0d:76:f4:83:a0:
ba:f0:22:90:20:16:a6:4b:b1:46:a7:6a:39:a7:85:
20:21:d2:cc:24:54:7e:69:39:62:08:85:40:50:b0:
5b:43:85:3d:f7:ca:b5:2d:d1:a9:75:3c:a9:d5:6c:
52:66:04:27:15:c7:e5:d9:84:c9:50:07:c6:52:b1:
b4:a0:89:37:e0:d2:96:29:c8:ef:dc:f9:7a:ac:67:
32:cc:36:ca:ed:86:98:1e:32:37:95:b3:7e:10:96:
e1:ef:4a:d3:fa:cf:01:77:55:b5:13:58:83:7f:ac:
a4:4a:2a:60:8f:0e:09:38:c5:83:31:56:eb:ac:18:
bd:05:57:a7:cf:57:6d:8f:cc:fb:73:84:19:c5:10:
c2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:19:5C:1D:B5:95:E1:98:C6:C9:73:E1:6C:02:7F:4D:2F:3C:41:DE
X509v3 Authority Key Identifier:
keyid:4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2a:f7:ef:3f:4c:14:58:3f:03:2f:58:1b:a1:80:27:70:13:
70:a9:82:04:d2:1c:6a:a8:2f:0e:70:9f:e9:58:42:4b:30:77:
71:d1:56:98:21:03:f6:01:69:a8:75:d3:2d:0d:f5:71:02:bc:
54:e5:77:fa:c1:74:be:62:40:ff:07:4d:8d:a7:bd:4c:49:09:
ac:93:d4:76:d5:d0:15:90:b9:33:33:7b:da:44:0a:e5:34:36:
33:e4:2c:19:d8:e0:69:30:8d:8f:de:dc:99:ec:e5:87:e8:44:
11:f9:60:87:29:ae:a4:98:b7:d1:54:04:e6:1f:48:07:ee:a1:
cd:c1:5c:c5:56:f9:e1:b3:f2:52:6c:d0:af:17:35:16:92:0a:
8c:5f:33:1e:78:98:98:47:93:65:c4:05:72:35:b6:39:d5:63:
b3:20:a5:24:0f:a1:ab:f6:af:88:b3:6b:9b:fd:f7:37:1a:83:
29:21:4f:9c:0c:55:7a:7d:45:a2:4f:87:09:38:8b:4e:d2:c0:
38:09:a1:34:12:9e:16:45:ed:45:f7:ae:df:b1:94:cc:90:81:
e0:41:d2:d1:e3:98:39:3c:15:f4:f4:92:a1:59:7e:ed:db:af:
48:64:55:bd:5e:39:7d:6f:8a:29:b1:bf:df:a0:bb:7f:ed:f1:
1b:de:b3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:17:29 2025 by rpki-client