Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
File: TzVzzX1WHNN-DzMfbKON6SAgQrI.mft (raw, json)
Hash identifier: 3bmAMI6sE6UBGEFYBWlENfKkbiQJQGVQ8qUf1Q4kVHM=
Subject key identifier: 77:B7:20:98:4A:59:3A:BA:CF:54:70:E8:70:A2:58:72:DA:A8:4D:A8
Authority key identifier: 4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
Certificate issuer: /CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Certificate serial: 019887320D03F82C014C3CF071DB3A723A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
Manifest number: 0B37
Signing time: Fri 08 Aug 2025 01:01:00 +0000
Manifest this update: Fri 08 Aug 2025 01:01:00 +0000
Manifest next update: Sat 09 Aug 2025 01:01:00 +0000
Files and hashes: 1: TzVzzX1WHNN-DzMfbKON6SAgQrI.crl (hash: 5J2bCi2d5krOePXAalhYPhSWz2XmsqvJmWmqs+BL/Jc=)
2: gNvVla9QTcgfrH76gu8sofAf_w0.roa (hash: OGSKcOJHQa1w9k6JZ39A0hFW39yZH1IaBP1pJ+a1YHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:32:0d:03:f8:2c:01:4c:3c:f0:71:db:3a:72:3a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Validity
Not Before: Aug 8 01:01:00 2025 GMT
Not After : Aug 9 01:01:00 2025 GMT
Subject: CN=77b720984a593abacf5470e870a25872daa84da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e4:ff:b2:df:81:83:5b:38:43:b2:16:96:94:
33:52:ee:6a:8c:1f:04:0e:05:aa:d3:66:5d:fb:43:
94:f6:ce:90:9e:15:98:1d:5c:25:65:f0:4c:e8:40:
e8:c3:94:49:35:2b:1f:9c:3a:a1:ca:71:72:bc:34:
bd:66:8d:79:cd:4b:cc:c0:a6:9d:57:ee:71:fe:ff:
bf:64:83:fa:c8:43:75:ff:8d:83:89:2d:fd:13:d5:
a9:a9:eb:80:04:fc:52:d4:05:c7:28:e3:61:b0:a6:
11:66:e9:32:ad:6a:61:9e:2c:de:59:b9:0c:55:7c:
93:17:d0:42:e7:e6:b8:5c:07:fe:bf:b0:b0:cb:d2:
e4:dd:b7:c7:ff:fd:ae:64:aa:4a:3c:52:1c:d2:87:
c4:9b:af:c7:04:05:41:4a:4a:1e:2d:a9:04:d0:41:
de:1b:92:57:14:2b:9d:e4:9b:17:0f:12:5f:b3:61:
85:e2:63:e1:a8:96:3a:8a:5f:66:83:5f:5f:d7:93:
2b:64:52:13:47:a8:52:c3:61:d7:0d:82:d6:99:dd:
4d:a6:7a:4a:66:fd:58:6d:9c:21:8e:5f:b2:b1:a1:
3d:0e:04:89:67:fd:45:5e:d9:31:e8:6e:cb:c3:e7:
bb:40:13:f3:3f:0d:0a:f3:6d:3c:ea:c5:48:0e:14:
3d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B7:20:98:4A:59:3A:BA:CF:54:70:E8:70:A2:58:72:DA:A8:4D:A8
X509v3 Authority Key Identifier:
keyid:4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:35:a9:89:38:0a:bd:ad:be:21:75:d7:30:fb:63:1b:ce:63:
b4:ef:33:c6:2b:18:3d:e5:9c:d7:b1:50:c5:a0:cd:da:51:7a:
7c:66:b1:f5:ad:95:65:8e:79:8f:88:3e:69:73:5d:96:9c:08:
23:4f:49:94:f3:90:2d:b1:76:ae:77:bb:c3:61:d1:b2:f6:12:
c2:fd:2b:f4:a8:00:c0:81:2e:8f:a1:65:f8:60:b6:6b:33:f3:
d1:76:07:02:37:a0:e5:6e:67:02:25:5e:db:c2:0c:8d:02:bb:
f8:f7:5d:b8:ad:0f:55:e5:2b:71:92:df:c4:f1:80:14:7c:74:
ba:a7:8a:b8:97:ec:5d:88:ec:e0:76:03:45:13:53:8f:ed:94:
43:65:06:f5:c8:da:10:dd:a0:86:2a:cf:73:0e:3c:49:5f:5b:
bc:7d:42:be:0f:e1:04:bd:6e:c2:05:95:2d:fd:b9:2c:ea:b6:
94:74:33:cb:75:96:77:56:40:95:b6:93:7f:8c:61:c0:2c:15:
88:41:09:d3:a6:08:e6:c4:1c:01:9a:1f:87:6a:18:04:6c:55:
31:22:cf:2d:eb:cf:a7:db:5d:d9:dd:b6:d3:e6:8e:2d:75:8e:
9f:fa:8f:47:19:3d:8e:b2:27:3f:15:45:24:eb:62:d7:92:da:
2c:ae:a5:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiHMg0D+CwBTDzwcds6cjpkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMzU3M2NkN2Q1NjFjZDM3ZTBmMzMxZjZjYTM4ZGU5MjAy
MDQyYjIwHhcNMjUwODA4MDEwMTAwWhcNMjUwODA5MDEwMTAwWjAzMTEwLwYDVQQD
Eyg3N2I3MjA5ODRhNTkzYWJhY2Y1NDcwZTg3MGEyNTg3MmRhYTg0ZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOT/st+Bg1s4Q7IWlpQzUu5qjB8E
DgWq02Zd+0OU9s6QnhWYHVwlZfBM6EDow5RJNSsfnDqhynFyvDS9Zo15zUvMwKad
V+5x/v+/ZIP6yEN1/42DiS39E9WpqeuABPxS1AXHKONhsKYRZukyrWphnizeWbkM
VXyTF9BC5+a4XAf+v7Cwy9Lk3bfH//2uZKpKPFIc0ofEm6/HBAVBSkoeLakE0EHe
G5JXFCud5JsXDxJfs2GF4mPhqJY6il9mg19f15MrZFITR6hSw2HXDYLWmd1NpnpK
Zv1YbZwhjl+ysaE9DgSJZ/1FXtkx6G7Lw+e7QBPzPw0K82086sVIDhQ9eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHe3IJhKWTq6z1Rw6HCiWHLaqE2oMB8GA1UdIwQY
MBaAFE81c819VhzTfg8zH2yjjekgIEKyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jY2YzYTUtMDMwZC00YjU0LTgwNzkt
OGE1ZjE2OWE1YWU3LzEvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jY2YzYTUtMDMwZC00YjU0LTgwNzktOGE1ZjE2OWE1YWU3
LzEvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzWpiTgK
va2+IXXXMPtjG85jtO8zxisYPeWc17FQxaDN2lF6fGax9a2VZY55j4g+aXNdlpwI
I09JlPOQLbF2rne7w2HRsvYSwv0r9KgAwIEuj6Fl+GC2azPz0XYHAjeg5W5nAiVe
28IMjQK7+PdduK0PVeUrcZLfxPGAFHx0uqeKuJfsXYjs4HYDRRNTj+2UQ2UG9cja
EN2ghirPcw48SV9bvH1Cvg/hBL1uwgWVLf25LOq2lHQzy3WWd1ZAlbaTf4xhwCwV
iEEJ06YI5sQcAZofh2oYBGxVMSLPLevPp9td2d220+aOLXWOn/qPRxk9jrInPxVF
JOti15LaLK6lxA==
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:13:16 2025 by rpki-client