Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier: Hlaw7ZIlw7xqwfg9GNueP0KUdziSGZ/0UXrueStABmQ=
Subject key identifier: 29:7B:00:05:FA:C4:5D:49:21:B9:2A:87:6F:62:20:71:E5:91:69:44
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial: 019894B84E9E7992730CAFE2D2A28A80CA44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 16:02:43 +0000
Manifest this update: Sun 10 Aug 2025 16:02:43 +0000
Manifest next update: Mon 11 Aug 2025 16:02:43 +0000
Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: ujJmyIPCSq79ieM6c8THbb08Dti2AbZ4aiKeDdzlpic=)
2: UqGmWpGtflaEJvCw0bHQvmEnA74.roa (hash: EKIY9C4V0PmpfSkXvjVMr8vcUWFSLcsQTMlkDeIRJyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b8:4e:9e:79:92:73:0c:af:e2:d2:a2:8a:80:ca:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Validity
Not Before: Aug 10 16:02:43 2025 GMT
Not After : Aug 11 16:02:43 2025 GMT
Subject: CN=297b0005fac45d4921b92a876f622071e5916944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:39:50:fd:6e:e9:76:95:34:00:e6:0d:60:
bf:95:f9:11:1d:7f:87:a1:a9:da:01:39:a6:87:70:
32:ee:0d:a1:bc:0b:d3:c9:90:f7:0b:18:83:90:89:
c4:92:8c:9d:15:32:f0:a2:37:a2:a5:c8:ce:e7:4c:
15:24:bb:44:e5:33:45:08:23:0e:89:aa:85:b7:06:
fd:aa:e6:16:ee:b8:3b:26:6c:66:96:a2:97:c3:3c:
62:36:c3:a8:b3:c4:09:e8:da:e7:26:85:70:36:85:
bf:d5:cc:9e:80:50:f6:a6:47:ac:05:44:cf:6b:6d:
b7:c3:f8:9e:cb:6c:6f:57:69:09:12:55:51:29:ac:
f5:f1:4c:2f:79:16:3c:55:23:5f:da:93:02:c6:40:
d7:87:e2:13:0b:b6:95:0c:f9:b1:eb:4e:0e:f8:8a:
7c:17:92:a3:96:0a:e0:95:53:c5:aa:5d:dd:de:52:
ac:cf:8a:3b:80:36:c9:93:39:23:41:6d:7d:79:f3:
9e:e8:6b:2b:84:ec:26:15:c8:ab:6a:a7:77:00:ed:
6f:a8:28:cd:53:a8:20:42:b9:6e:95:c9:d8:1e:4b:
15:c1:57:d8:85:87:53:28:34:b1:f5:6c:5c:71:1c:
0a:55:dc:20:b9:de:1f:a7:7d:9a:d7:d4:87:5e:35:
ac:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7B:00:05:FA:C4:5D:49:21:B9:2A:87:6F:62:20:71:E5:91:69:44
X509v3 Authority Key Identifier:
keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:16:d2:2f:5f:eb:08:8b:09:16:0e:1e:a0:ff:c4:60:7d:8e:
2d:d8:6b:a2:8e:6b:bd:30:74:86:14:39:33:ef:ac:e9:74:66:
be:a3:e8:96:dc:b9:ad:81:7a:8c:ab:51:72:56:2f:c2:eb:74:
52:ff:eb:c4:59:8b:0d:a5:bf:bb:df:5e:14:38:e2:eb:13:cc:
35:4b:9d:77:01:db:d6:94:df:7d:bd:bc:ad:e2:a5:56:fc:b1:
98:dd:94:10:7f:02:a3:6c:c3:2c:a6:a0:42:91:69:15:ac:02:
af:ef:1d:20:5f:65:cb:10:3f:3a:0c:e0:04:c1:6c:ce:70:58:
36:ed:cd:b5:04:da:bf:d9:de:07:6b:42:40:0d:12:99:80:dc:
f3:d2:f4:00:5d:d6:fe:eb:e9:6d:5f:94:81:31:58:bf:d1:b6:
a2:21:9f:40:ab:6b:71:a0:57:aa:29:68:99:00:c5:59:33:6e:
87:dd:5e:28:f5:0f:6a:93:0f:fd:8c:c3:38:f9:d9:95:18:12:
e2:22:08:4d:14:1e:3c:36:17:8c:9e:a5:5c:ea:d8:66:23:e7:
90:68:ad:79:27:36:7b:2b:c4:87:ec:d0:e5:cd:27:7e:b3:56:
eb:cf:3c:fb:66:1e:5e:70:2c:d8:9d:19:c1:14:56:e3:c6:5a:
cb:d2:8e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:47:41 2025 by rpki-client