Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier: ZB8rnfh2/Y6PfqCfFGH4CSwOoOD3aEinC0+nypd5joA=
Subject key identifier: 6E:29:99:CD:A7:69:5E:EA:8F:20:BB:D6:2C:8F:C3:B7:A9:6D:BC:3D
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial: 019790004475AB3DC07657500D74DFFAD5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number: 15A1
Signing time: Sat 21 Jun 2025 01:00:25 +0000
Manifest this update: Sat 21 Jun 2025 01:00:25 +0000
Manifest next update: Sun 22 Jun 2025 01:00:25 +0000
Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: daTh9v7JqVoT999NVsQzf8FwE6qUISb9wNvBLbsfqQQ=)
2: UqGmWpGtflaEJvCw0bHQvmEnA74.roa (hash: EKIY9C4V0PmpfSkXvjVMr8vcUWFSLcsQTMlkDeIRJyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Jun 2025 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:90:00:44:75:ab:3d:c0:76:57:50:0d:74:df:fa:d5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Validity
Not Before: Jun 21 01:00:25 2025 GMT
Not After : Jun 22 01:00:25 2025 GMT
Subject: CN=6e2999cda7695eea8f20bbd62c8fc3b7a96dbc3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:7e:85:18:d5:64:d3:50:88:88:7e:28:f7:
b2:54:1a:98:c2:e1:af:56:c3:53:17:3c:f9:2f:ea:
8c:7d:06:65:4f:59:51:46:09:87:d8:b4:a0:38:a1:
aa:fc:88:89:68:62:c7:9f:ca:93:ae:c0:c3:85:15:
50:b2:7f:0f:bb:d4:d0:fe:20:fd:fb:60:7d:00:02:
f3:d2:68:1e:6c:42:c6:b6:e5:ab:47:70:cc:c1:e7:
b3:eb:e9:9e:0d:be:db:d1:5b:5b:e7:5e:b3:65:0a:
ed:22:1c:6a:d7:ab:ce:fa:44:7b:0d:db:88:1f:f4:
27:0d:de:e3:54:fa:aa:03:1e:3b:1f:0e:62:cd:69:
8f:ef:0d:8a:e3:97:46:6e:b2:2a:66:1c:f9:43:99:
50:c3:45:e4:b0:14:8c:3e:92:5d:87:52:00:37:b8:
31:44:b0:1d:ea:43:94:81:dc:28:a4:2d:1c:d3:78:
ce:56:28:a2:83:96:df:8f:d2:d1:d5:45:e7:fc:1c:
29:47:f9:0d:ce:8a:0a:ff:67:b8:64:f9:36:5b:de:
c4:4d:6e:46:d3:06:d9:e5:31:e3:a3:2a:2d:69:e7:
a1:a1:55:f3:f2:bf:b0:94:f5:ac:f5:8a:67:a6:19:
0e:8e:71:81:ac:13:59:20:a0:4a:c4:e8:f9:0c:17:
0f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:29:99:CD:A7:69:5E:EA:8F:20:BB:D6:2C:8F:C3:B7:A9:6D:BC:3D
X509v3 Authority Key Identifier:
keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e4:12:d2:05:a5:f1:9f:e8:46:8b:ed:5b:bb:ad:aa:44:42:
5c:03:b4:b3:2b:0b:05:7a:6d:93:ad:22:86:49:42:09:22:bb:
c8:6c:4a:a3:7a:b0:0d:0f:20:e2:2d:22:07:09:10:04:18:05:
5c:27:89:b4:4e:eb:d7:e1:29:b3:fb:c2:72:42:8c:7d:9e:73:
de:d4:55:53:36:60:91:d0:fc:b2:67:19:e9:93:93:a8:97:7f:
8f:68:d2:62:5d:48:bf:0f:a3:3d:43:1d:20:64:3e:2d:4a:7d:
c7:c2:e6:94:0e:29:73:d1:e0:da:26:d2:a3:87:c8:6d:38:02:
85:11:a9:49:e8:82:5f:a2:98:be:9b:28:7f:2f:fa:0c:3e:fc:
9d:36:1b:50:3e:a8:d8:73:ab:45:45:6f:33:fe:50:06:ef:16:
18:b3:5e:80:84:d1:e9:6b:32:f3:8c:ec:de:57:0c:ba:8c:a0:
72:33:5d:ab:43:68:e0:7a:52:e9:03:bd:85:44:be:c3:df:6d:
c2:47:ae:2b:60:22:48:33:56:e0:3e:ae:b8:4c:f7:f2:ad:58:
6c:ae:56:f7:e4:f4:9c:cb:86:94:70:73:dd:3a:77:57:d2:a6:
81:24:5c:77:06:78:f4:82:11:26:0e:d2:9d:2a:16:25:47:f6:
84:78:57:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 09:27:45 2025 by rpki-client