Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
File: 1-tzmN--ygZRxWsKnISniBXG5g68.mft (raw, json)
Hash identifier: 4iSAz4Fd4+0UmLIxY1HJFzfR6Bef2OFyIwi9cxiL9qE=
Subject key identifier: B4:7E:78:DC:98:B1:39:CE:41:3E:F2:0E:D6:53:25:CC:F9:15:32:21
Authority key identifier: FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
Certificate issuer: /CN=fadce637efb28194715ac2a72129e20571b983af
Certificate serial: 0198A129018D3F44E6A56E41F2BF8FAD67ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
Manifest number: 162D
Signing time: Wed 13 Aug 2025 02:01:15 +0000
Manifest this update: Wed 13 Aug 2025 02:01:15 +0000
Manifest next update: Thu 14 Aug 2025 02:01:15 +0000
Files and hashes: 1: 1-tzmN--ygZRxWsKnISniBXG5g68.crl (hash: jHIldhBpQfyYXurdikiVmtVMLjaJuGyglQiPI6x3vnI=)
2: 5E1ZOs6jBFxTFh2Cf5ZnFlkIOxc.roa (hash: pA+HTgzqmsnmbM9IncUhyb9kGpbMUOBHi5UiEoEtsy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:29:01:8d:3f:44:e6:a5:6e:41:f2:bf:8f:ad:67:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fadce637efb28194715ac2a72129e20571b983af
Validity
Not Before: Aug 13 02:01:15 2025 GMT
Not After : Aug 14 02:01:15 2025 GMT
Subject: CN=b47e78dc98b139ce413ef20ed65325ccf9153221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e1:e0:52:92:9a:ac:a3:d4:87:45:f8:bb:60:
63:e1:c2:88:ce:33:ae:d9:64:3d:69:6d:3e:ca:cc:
e5:dd:bd:1a:8f:79:eb:04:ee:85:b6:f4:be:34:a8:
7e:08:13:34:77:48:30:37:10:e1:9a:98:d6:f3:e4:
7e:8c:72:f7:b5:f2:3e:b4:88:55:b5:70:e0:ab:ca:
7a:fd:30:da:25:9b:7d:ad:9c:f0:6c:bb:b3:84:ed:
32:c8:b4:90:ca:27:3b:4b:19:fc:f2:25:fe:85:19:
bc:93:ec:9f:50:65:39:9e:ab:83:6a:42:03:78:84:
31:0f:06:ec:da:b8:b1:10:60:f8:f6:64:92:9e:6d:
a8:65:2e:30:37:77:56:af:3e:82:49:2d:89:f6:c3:
1b:6e:25:d1:8f:d7:f9:fe:09:0b:c3:1c:b2:59:81:
70:33:0f:ab:33:54:d4:89:3d:9a:9f:22:dc:e3:bc:
f4:6e:85:6a:dd:3a:5f:48:ec:a5:2e:47:29:34:67:
b6:8c:e9:2a:46:4c:d1:31:7d:fe:f6:54:a7:25:ef:
9e:08:d1:49:de:15:b3:09:33:29:a1:8d:b1:a1:3c:
11:57:21:b9:cd:35:47:18:94:60:2f:30:50:60:c8:
83:2c:85:7e:e9:2a:c7:db:bd:88:9f:29:78:92:b7:
59:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7E:78:DC:98:B1:39:CE:41:3E:F2:0E:D6:53:25:CC:F9:15:32:21
X509v3 Authority Key Identifier:
keyid:FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:5c:0e:c0:5f:68:72:74:36:de:0e:a9:ec:6f:bd:f5:a5:3b:
8b:08:2f:fb:72:57:6a:37:d5:a9:79:a6:59:b3:af:9f:b1:41:
6e:61:eb:20:dd:4e:4b:b6:18:60:ef:79:a6:92:6d:d9:5e:e9:
59:ed:48:47:99:86:3f:f5:4b:c9:f2:0e:4c:d2:91:91:88:03:
28:13:db:27:89:13:96:92:8e:10:17:a9:bf:bc:27:f5:34:05:
f2:c0:4e:2b:8c:da:fc:db:2c:e3:1c:53:71:59:0e:29:43:24:
5d:40:19:94:73:b4:18:e2:73:37:f7:16:8b:5d:d8:97:bd:10:
d1:0d:9d:68:af:87:7d:9b:0a:ce:5f:53:91:08:f5:90:8d:02:
5e:75:aa:76:b1:2f:f1:f9:47:56:03:dc:03:cc:04:b2:22:46:
0a:6a:7a:2b:f6:c4:da:00:d2:ad:5e:80:f1:b1:14:ca:37:7f:
1c:2f:65:1e:51:b4:9d:cf:1a:f2:b4:46:2f:b2:43:a3:0b:28:
d1:52:f8:39:15:60:46:bc:25:4c:ec:13:0f:b5:d2:1c:2e:96:
7e:8a:1b:03:bb:c0:fe:58:66:07:b4:1f:64:ff:2f:29:73:2f:
22:f2:42:1b:26:58:3f:b4:e9:ab:9b:84:bd:82:48:7f:54:c8:
44:50:8d:64
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZihKQGNP0TmpW5B8r+PrWftMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZGNlNjM3ZWZiMjgxOTQ3MTVhYzJhNzIxMjllMjA1NzFi
OTgzYWYwHhcNMjUwODEzMDIwMTE1WhcNMjUwODE0MDIwMTE1WjAzMTEwLwYDVQQD
EyhiNDdlNzhkYzk4YjEzOWNlNDEzZWYyMGVkNjUzMjVjY2Y5MTUzMjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeHgUpKarKPUh0X4u2Bj4cKIzjOu
2WQ9aW0+yszl3b0aj3nrBO6FtvS+NKh+CBM0d0gwNxDhmpjW8+R+jHL3tfI+tIhV
tXDgq8p6/TDaJZt9rZzwbLuzhO0yyLSQyic7Sxn88iX+hRm8k+yfUGU5nquDakID
eIQxDwbs2rixEGD49mSSnm2oZS4wN3dWrz6CSS2J9sMbbiXRj9f5/gkLwxyyWYFw
Mw+rM1TUiT2anyLc47z0boVq3TpfSOylLkcpNGe2jOkqRkzRMX3+9lSnJe+eCNFJ
3hWzCTMpoY2xoTwRVyG5zTVHGJRgLzBQYMiDLIV+6SrH272Inyl4krdZNQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLR+eNyYsTnOQT7yDtZTJcz5FTIhMB8GA1UdIwQY
MBaAFPrc5jfvsoGUcVrCpyEp4gVxuYOvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10em1OLS15Z1pSeFdzS25JU25pQlhHNWc2OC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvNTVmYmM1LWIyZGMtNDYzOS05YTNh
LTY0MTE3ZGIyYzRlMS8xLzEtdHptTi0teWdaUnhXc0tuSVNuaUJYRzVnNjgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M0LzU1ZmJjNS1iMmRjLTQ2MzktOWEzYS02NDExN2RiMmM0
ZTEvMS8xLXR6bU4tLXlnWlJ4V3NLbklTbmlCWEc1ZzY4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzFwO
wF9ocnQ23g6p7G+99aU7iwgv+3JXajfVqXmmWbOvn7FBbmHrIN1OS7YYYO95ppJt
2V7pWe1IR5mGP/VLyfIOTNKRkYgDKBPbJ4kTlpKOEBepv7wn9TQF8sBOK4za/Nss
4xxTcVkOKUMkXUAZlHO0GOJzN/cWi13Yl70Q0Q2daK+HfZsKzl9TkQj1kI0CXnWq
drEv8flHVgPcA8wEsiJGCmp6K/bE2gDSrV6A8bEUyjd/HC9lHlG0nc8a8rRGL7JD
owso0VL4ORVgRrwlTOwTD7XSHC6WfoobA7vA/lhmB7QfZP8vKXMvIvJCGyZYP7Tp
q5uEvYJIf1TIRFCNZA==
-----END CERTIFICATE-----
Generated at Wed Aug 13 07:37:01 2025 by rpki-client