Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
File: TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft (raw, json)
Hash identifier: xwBtfaGEQyWUN7eSgnK760EY2KrCt/s1SecyGCkvk8c=
Subject key identifier: 08:52:AB:6C:11:94:6E:10:44:03:60:56:11:36:04:67:2B:47:F1:1A
Authority key identifier: 4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
Certificate issuer: /CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Certificate serial: 01978320724DE5435BF639CF7F9926B47688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
Manifest number: 159B
Signing time: Wed 18 Jun 2025 13:00:30 +0000
Manifest this update: Wed 18 Jun 2025 13:00:30 +0000
Manifest next update: Thu 19 Jun 2025 13:00:30 +0000
Files and hashes: 1: TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl (hash: Az4/xuwIKG1WuTs11wzvLR6/U5rW9P0zUnL4Iy3Mg9s=)
2: sXBtr0RmYgN7EHzS2OAuZuhPnSk.roa (hash: vzTvtT3U+hF4Cf7zWB9jndQ+LVyRdJBiHZIGS8DcnuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:20:72:4d:e5:43:5b:f6:39:cf:7f:99:26:b4:76:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Validity
Not Before: Jun 18 13:00:30 2025 GMT
Not After : Jun 19 13:00:30 2025 GMT
Subject: CN=0852ab6c11946e1044036056113604672b47f11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:d8:5f:be:e1:fa:65:ec:82:94:ab:fb:0e:
8a:58:3f:71:9c:a1:20:16:c0:56:71:68:c6:6a:18:
2e:f9:97:fa:c6:f9:f7:f8:35:d5:a1:f1:6e:f6:97:
7d:c2:24:c1:fb:f4:02:df:aa:0c:85:1e:f4:0a:c0:
a5:2a:03:d9:50:44:4e:e1:cf:60:c2:12:c7:8d:96:
0e:5c:41:a3:c2:29:fb:44:c7:92:57:18:4a:54:e8:
4b:0e:43:46:f6:d5:8c:83:a3:9a:fe:88:18:15:d1:
68:01:55:e9:4d:46:b3:71:bb:0b:ef:94:f0:9c:7d:
6b:45:42:ef:37:63:7c:cf:17:cc:12:0b:a9:0c:27:
0b:bc:04:93:d3:e3:3d:aa:ea:d4:2d:6e:1d:10:29:
aa:77:f5:be:90:55:1f:76:98:a7:a7:01:bc:74:0d:
ac:1a:a2:e9:42:4e:54:ec:43:de:4b:86:a2:bd:3c:
7f:7f:10:24:ea:78:c9:fe:66:90:ee:27:b3:a4:3d:
64:64:b6:b8:2b:54:62:d9:30:51:79:ee:aa:d3:65:
1c:7b:c4:94:4e:19:b0:b3:17:09:f0:f6:20:74:78:
56:84:23:58:4d:ee:a4:19:e2:c4:c4:6d:d9:fa:76:
eb:66:2d:75:a8:00:e5:9e:94:12:62:9b:d4:ba:9e:
89:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:52:AB:6C:11:94:6E:10:44:03:60:56:11:36:04:67:2B:47:F1:1A
X509v3 Authority Key Identifier:
keyid:4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4d:4e:81:26:1a:32:5a:dc:68:68:5f:21:01:b9:78:ee:65:
e9:92:fa:39:bf:ff:ce:0e:cc:67:a1:34:5f:d1:87:ce:96:6c:
69:e3:1b:2a:22:0c:32:d6:c5:5c:6c:ef:6b:4e:36:c0:72:26:
61:ff:24:2e:1c:5f:be:8a:a7:a4:d0:d0:63:92:e1:5d:10:9a:
e5:0c:14:09:82:97:71:46:9d:ec:7a:45:bf:c7:96:14:5e:47:
40:e8:dc:61:43:3a:c2:37:64:30:b4:5d:b6:9b:af:43:77:80:
68:d7:26:27:59:40:cd:b7:3b:ff:aa:06:1a:2a:50:af:fb:c7:
45:29:2c:d0:77:54:b6:e3:c8:d3:dc:71:c4:3b:97:d0:b5:86:
95:6d:7b:3e:95:1e:e0:d3:f8:90:e6:59:94:39:6f:6c:1d:45:
1b:bc:33:bf:5d:95:51:70:44:15:71:22:2d:82:50:f0:ba:cf:
21:62:62:0e:8b:73:f1:00:a6:f4:07:de:d6:39:2f:f1:fe:33:
59:89:c8:66:c5:37:f9:0e:2a:5c:67:44:6d:59:80:cc:f7:6a:
88:81:fa:ea:bd:01:85:d9:7c:63:a9:de:ea:ef:42:b8:e7:6b:
59:a8:8d:d1:74:6c:e1:37:64:f2:58:a4:cf:64:e5:b6:c8:38:
eb:65:be:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeDIHJN5UNb9jnPf5kmtHaIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkOThmZTUwMmFjMTZlOTU3Y2MzM2ViYzJlYzFiZTgzYmJl
ZDdjYzQwHhcNMjUwNjE4MTMwMDMwWhcNMjUwNjE5MTMwMDMwWjAzMTEwLwYDVQQD
EygwODUyYWI2YzExOTQ2ZTEwNDQwMzYwNTYxMTM2MDQ2NzJiNDdmMTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeLYX77h+mXsgpSr+w6KWD9xnKEg
FsBWcWjGahgu+Zf6xvn3+DXVofFu9pd9wiTB+/QC36oMhR70CsClKgPZUERO4c9g
whLHjZYOXEGjwin7RMeSVxhKVOhLDkNG9tWMg6Oa/ogYFdFoAVXpTUazcbsL75Tw
nH1rRULvN2N8zxfMEgupDCcLvAST0+M9qurULW4dECmqd/W+kFUfdpinpwG8dA2s
GqLpQk5U7EPeS4aivTx/fxAk6njJ/maQ7iezpD1kZLa4K1Ri2TBRee6q02Uce8SU
ThmwsxcJ8PYgdHhWhCNYTe6kGeLExG3Z+nbrZi11qADlnpQSYpvUup6JMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhSq2wRlG4QRANgVhE2BGcrR/EaMB8GA1UdIwQY
MBaAFE2Y/lAqwW6VfMM+vC7BvoO77XzEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFpqLVVDckJicFY4d3o2OExzRy1nN3Z0Zk1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wOWRhODctYTJiMi00MjliLWJlOTYt
Y2QwMDliMzAwYTZjLzEvVFpqLVVDckJicFY4d3o2OExzRy1nN3Z0Zk1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wOWRhODctYTJiMi00MjliLWJlOTYtY2QwMDliMzAwYTZj
LzEvVFpqLVVDckJicFY4d3o2OExzRy1nN3Z0Zk1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj01OgSYa
MlrcaGhfIQG5eO5l6ZL6Ob//zg7MZ6E0X9GHzpZsaeMbKiIMMtbFXGzva042wHIm
Yf8kLhxfvoqnpNDQY5LhXRCa5QwUCYKXcUad7HpFv8eWFF5HQOjcYUM6wjdkMLRd
tpuvQ3eAaNcmJ1lAzbc7/6oGGipQr/vHRSks0HdUtuPI09xxxDuX0LWGlW17PpUe
4NP4kOZZlDlvbB1FG7wzv12VUXBEFXEiLYJQ8LrPIWJiDotz8QCm9Afe1jkv8f4z
WYnIZsU3+Q4qXGdEbVmAzPdqiIH66r0Bhdl8Y6ne6u9CuOdrWaiN0XRs4Tdk8lik
z2Tltsg462W+ag==
-----END CERTIFICATE-----
Generated at Wed Jun 18 21:03:34 2025 by rpki-client