Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
File: TzVzzX1WHNN-DzMfbKON6SAgQrI.mft (raw, json)
Hash identifier: SGPk+IOLvm+FYcx7cYqW1DfUZMmpTgsM+Ob0Kz3WQJc=
Subject key identifier: 25:57:19:2F:6D:0F:FE:6A:89:09:CB:AD:75:67:24:F8:A1:FE:16:03
Authority key identifier: 4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
Certificate issuer: /CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Certificate serial: 019778D4F76F0BEAD2677CB6694DF9ADA8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
Manifest number: 0AAB
Signing time: Mon 16 Jun 2025 13:01:52 +0000
Manifest this update: Mon 16 Jun 2025 13:01:52 +0000
Manifest next update: Tue 17 Jun 2025 13:01:52 +0000
Files and hashes: 1: TzVzzX1WHNN-DzMfbKON6SAgQrI.crl (hash: 5DxprT7rY4A52K/nziW6g1zkui8oBfpMeLnPPsjC9rs=)
2: gNvVla9QTcgfrH76gu8sofAf_w0.roa (hash: OGSKcOJHQa1w9k6JZ39A0hFW39yZH1IaBP1pJ+a1YHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d4:f7:6f:0b:ea:d2:67:7c:b6:69:4d:f9:ad:a8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Validity
Not Before: Jun 16 13:01:52 2025 GMT
Not After : Jun 17 13:01:52 2025 GMT
Subject: CN=2557192f6d0ffe6a8909cbad756724f8a1fe1603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:57:9a:92:69:33:50:39:05:fd:96:72:1b:ec:
0c:da:08:0d:43:97:2c:cd:fa:cd:f8:fa:6c:18:09:
a3:02:d2:cb:1a:f9:ba:a9:78:02:db:c3:46:2d:cc:
2b:b1:38:3b:a5:ff:3f:a6:4b:c9:d7:b6:50:6c:23:
3e:c9:6c:ba:02:64:96:4b:c6:9a:3a:4f:4b:6c:53:
7f:36:41:48:70:c4:aa:b3:85:e8:4e:67:97:86:c1:
84:92:d3:1e:94:cf:64:98:08:b4:c2:97:ee:36:dd:
d1:f0:2f:37:83:34:fb:c3:22:d3:4f:52:e1:2b:df:
cf:44:a7:1e:7a:7a:93:3f:fa:a6:d2:14:4e:6f:f6:
e8:79:c4:08:2e:23:69:8c:a1:fa:bb:b9:f5:82:69:
e8:65:72:00:06:58:6d:fb:ab:df:64:c7:12:f2:26:
ac:13:04:a6:43:0b:e6:fe:d7:84:a8:b8:fc:f6:43:
1c:b5:7c:b8:ad:de:74:97:c4:67:0e:4f:e5:36:77:
9b:88:25:a8:9d:f2:80:52:ad:27:de:47:ce:50:5e:
f7:8c:61:63:5c:f5:ad:7a:f2:35:71:70:a2:39:57:
56:55:0b:17:1a:ae:d7:d1:e3:2e:10:43:af:18:22:
65:98:74:36:82:d2:05:80:bc:b1:6c:01:c2:ff:b6:
0e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:57:19:2F:6D:0F:FE:6A:89:09:CB:AD:75:67:24:F8:A1:FE:16:03
X509v3 Authority Key Identifier:
keyid:4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:33:9d:fd:31:94:23:20:ce:fd:9a:83:4c:97:63:ef:9a:62:
cc:41:63:1f:f9:86:12:b9:60:58:04:7c:52:a3:b6:01:0b:8f:
19:fa:d3:e5:df:c5:47:4c:52:f3:fd:7d:81:c5:f3:bb:4c:11:
54:c0:b1:f3:55:fe:3e:68:d6:53:8f:75:81:dd:13:a0:cc:23:
30:8d:ed:3a:cf:4d:8d:0e:31:7f:68:4d:6b:11:30:57:06:2a:
71:72:15:29:e3:b2:59:3c:7c:52:9b:12:ff:21:7d:ce:4d:13:
e2:0c:e1:0e:61:1d:b9:fa:c4:7c:11:e7:b3:78:35:5a:a3:87:
c5:ed:55:a9:c7:e3:67:3f:3d:c6:87:ee:24:0e:75:07:13:9c:
d1:7d:e0:db:f3:41:12:24:ea:00:e1:e3:e9:ce:b9:ac:2d:4d:
2b:d7:18:a0:03:10:87:54:42:c4:31:ef:2f:5d:16:b6:2c:c4:
f1:14:88:d5:e9:40:f6:fc:71:8f:fa:cd:be:f8:09:2e:ce:54:
2a:4a:f8:ac:ba:9d:0c:59:4a:42:47:06:b3:d3:60:ed:13:bc:
29:14:90:bc:1d:a3:fa:9f:2a:24:c3:41:1f:26:eb:d4:95:bd:
7d:cb:f3:ee:71:d1:9e:31:18:39:ac:08:88:0f:24:99:77:47:
d1:71:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:10:12 2025 by rpki-client