Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
File: TZRvTfIjdJGmjfpAe-QfroS72mY.mft (raw, json)
Hash identifier: erzsZjQcNbDOXKVR7Eiw+AzGF6rhArcGXEAucjznkLE=
Subject key identifier: D7:FC:59:18:25:5A:69:5E:4F:51:E8:55:F3:E1:30:7D:68:70:CD:3B
Authority key identifier: 4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
Certificate issuer: /CN=4d946f4df2237491a68dfa407be41fae84bbda66
Certificate serial: 01987BD2C1AC39D01E2DE8998176EA1316CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
Manifest number: 0F7D
Signing time: Tue 05 Aug 2025 20:01:06 +0000
Manifest this update: Tue 05 Aug 2025 20:01:06 +0000
Manifest next update: Wed 06 Aug 2025 20:01:06 +0000
Files and hashes: 1: C8PR4XXWsjpP8PHYuoN78zoE9nY.roa (hash: uu2Jn3Slz9u+yGZ22j4LqOkp9lCOWyyfMINckydLJ3E=)
2: TZRvTfIjdJGmjfpAe-QfroS72mY.crl (hash: LhjxITDseGsGS0dvSqjSxp8u0RMFSCgBkQDXVXL7bn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:c1:ac:39:d0:1e:2d:e8:99:81:76:ea:13:16:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d946f4df2237491a68dfa407be41fae84bbda66
Validity
Not Before: Aug 5 20:01:06 2025 GMT
Not After : Aug 6 20:01:06 2025 GMT
Subject: CN=d7fc5918255a695e4f51e855f3e1307d6870cd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ed:3f:b9:cc:ed:ff:ee:a4:d4:a6:5a:9a:3b:
c1:01:8b:07:d5:39:47:7d:46:0f:2f:4f:c6:8b:59:
2a:43:61:b7:ba:4e:c3:0a:af:d3:90:27:99:32:c6:
58:e0:0f:2d:31:b7:5f:03:ca:89:6d:5f:51:51:ec:
19:80:f7:38:8f:4c:ad:10:a4:b6:8a:fd:e7:5e:09:
16:01:22:7e:0a:f0:bf:3a:18:43:cc:51:5a:81:57:
0d:bd:76:50:d4:d9:04:f1:a8:d1:d4:7c:87:f6:fa:
50:02:92:74:5a:8f:01:4f:7a:01:d0:56:04:63:4b:
9e:16:93:57:1a:fd:e3:a9:7e:e4:55:dc:f5:4f:1d:
0c:b3:d5:00:da:df:99:ca:64:16:54:03:1a:d6:51:
0b:33:bd:fe:e8:fa:33:3f:71:77:00:38:e6:61:c4:
6b:23:85:3d:2d:a1:c7:13:bb:6d:02:47:0b:00:3b:
0d:89:8d:fd:c1:88:d7:9b:9e:bc:be:99:27:9c:05:
8e:51:3f:e8:2b:2f:c3:0f:38:67:ac:fc:40:83:2b:
97:45:da:ae:c0:9d:04:bf:95:5e:4e:bf:1c:84:02:
ef:69:08:5f:7b:8f:c9:0a:d3:4e:57:4a:8d:b9:e9:
12:dc:df:31:8b:1e:47:62:4a:46:4c:04:94:c2:cc:
5a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FC:59:18:25:5A:69:5E:4F:51:E8:55:F3:E1:30:7D:68:70:CD:3B
X509v3 Authority Key Identifier:
keyid:4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1c:be:01:40:33:94:da:de:90:ef:91:4f:e6:75:a6:3c:8b:
d6:37:77:e7:0a:81:a3:97:7b:cf:ab:90:b7:90:91:1c:e7:94:
12:e3:52:32:ad:6a:e7:02:cd:08:74:9b:90:39:25:bd:3d:c0:
27:b5:2d:b6:9f:9d:0d:57:95:57:64:82:3f:42:cb:87:40:3a:
dc:b6:56:ec:ce:44:bf:83:fc:db:ec:6e:5b:46:fa:23:64:3d:
a6:fc:25:98:1b:0f:65:8e:04:97:2a:3d:d6:be:88:04:e2:e0:
5d:ee:2a:45:f1:b5:fa:38:05:d5:ca:77:05:e5:48:b6:07:1e:
2d:92:fe:39:a4:fc:bc:8b:c8:dc:e7:df:e2:a9:37:c2:c6:04:
5f:4b:fb:40:6e:d0:a0:da:d6:2f:5a:6d:14:e0:e5:cf:82:a5:
e0:c3:d5:f8:b1:89:7e:ec:f1:2d:47:57:e5:e0:3a:dd:96:a9:
bd:87:18:a1:3b:f9:b9:0d:4f:84:50:1b:25:bb:62:1e:2e:24:
d6:d6:46:dc:37:96:d9:10:17:21:b3:e5:57:cd:d9:6e:31:a7:
d8:cd:f9:d2:50:b3:bb:d2:7c:8c:65:68:1c:75:63:c1:66:70:
47:94:a6:ff:09:aa:0c:ab:43:e5:e3:45:ca:15:d8:94:9e:a1:
dc:4f:3a:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh70sGsOdAeLeiZgXbqExbLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkOTQ2ZjRkZjIyMzc0OTFhNjhkZmE0MDdiZTQxZmFlODRi
YmRhNjYwHhcNMjUwODA1MjAwMTA2WhcNMjUwODA2MjAwMTA2WjAzMTEwLwYDVQQD
EyhkN2ZjNTkxODI1NWE2OTVlNGY1MWU4NTVmM2UxMzA3ZDY4NzBjZDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu0/uczt/+6k1KZamjvBAYsH1TlH
fUYPL0/Gi1kqQ2G3uk7DCq/TkCeZMsZY4A8tMbdfA8qJbV9RUewZgPc4j0ytEKS2
iv3nXgkWASJ+CvC/OhhDzFFagVcNvXZQ1NkE8ajR1HyH9vpQApJ0Wo8BT3oB0FYE
Y0ueFpNXGv3jqX7kVdz1Tx0Ms9UA2t+ZymQWVAMa1lELM73+6PozP3F3ADjmYcRr
I4U9LaHHE7ttAkcLADsNiY39wYjXm568vpknnAWOUT/oKy/DDzhnrPxAgyuXRdqu
wJ0Ev5VeTr8chALvaQhfe4/JCtNOV0qNuekS3N8xix5HYkpGTASUwsxamwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNf8WRglWmleT1HoVfPhMH1ocM07MB8GA1UdIwQY
MBaAFE2Ub03yI3SRpo36QHvkH66Eu9pmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFpSdlRmSWpkSkdtamZwQWUtUWZyb1M3Mm1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jYmZkMWUtMTIwMi00MGMxLWJkZjAt
YzI0ZWUwNDk0NTQxLzEvVFpSdlRmSWpkSkdtamZwQWUtUWZyb1M3Mm1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jYmZkMWUtMTIwMi00MGMxLWJkZjAtYzI0ZWUwNDk0NTQx
LzEvVFpSdlRmSWpkSkdtamZwQWUtUWZyb1M3Mm1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRy+AUAz
lNrekO+RT+Z1pjyL1jd35wqBo5d7z6uQt5CRHOeUEuNSMq1q5wLNCHSbkDklvT3A
J7Uttp+dDVeVV2SCP0LLh0A63LZW7M5Ev4P82+xuW0b6I2Q9pvwlmBsPZY4Elyo9
1r6IBOLgXe4qRfG1+jgF1cp3BeVItgceLZL+OaT8vIvI3Off4qk3wsYEX0v7QG7Q
oNrWL1ptFODlz4Kl4MPV+LGJfuzxLUdX5eA63ZapvYcYoTv5uQ1PhFAbJbtiHi4k
1tZG3DeW2RAXIbPlV83ZbjGn2M350lCzu9J8jGVoHHVjwWZwR5Sm/wmqDKtD5eNF
yhXYlJ6h3E86sQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:22:04 2025 by rpki-client