
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
File: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json)
Hash identifier: gS7sEBF003XeQ928z869KVGDB0UYWXpEilcRpWl16YY=
Subject key identifier: E7:22:F9:B1:FB:41:D7:5C:73:EE:E3:B8:4C:DD:81:EF:BB:5F:E7:2B
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Certificate issuer: /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial: 01988167374146A5181581C6153F5A456A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 22:01:21 +0000
Manifest this update: Wed 06 Aug 2025 22:01:21 +0000
Manifest next update: Thu 07 Aug 2025 22:01:21 +0000
Files and hashes: 1: EyfFy2NH9aJCITkH8OY0aqXp60U.roa (hash: g2tjwAhWJaxtQGBOt8pN1pr0p20riiq5xD7kk7B2kOI=)
2: JpQoMr07IMCnzpUf3J5IOOFupZQ.roa (hash: 0/xTgfGRIN2+JskAIstMX9/OEPtDKUPLwgbvCnLM6hA=)
3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: LUcA2ObZFXuoFURyrN2sKs8At3v2N+oY2iCkwIwyR/U=)
4: uuK2CvjDB1elMTvaPuzNpmsW9KY.roa (hash: S75QfkrkhNbGGxbOdQrVjlRuXr4OJ2AaZXwkQhwwcQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:37:41:46:a5:18:15:81:c6:15:3f:5a:45:6a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Validity
Not Before: Aug 6 22:01:21 2025 GMT
Not After : Aug 7 22:01:21 2025 GMT
Subject: CN=e722f9b1fb41d75c73eee3b84cdd81efbb5fe72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2c:7f:ef:25:6a:ee:89:9f:8e:a6:cf:d0:39:
66:82:59:d2:b5:2e:51:e8:9c:c3:bd:81:95:57:46:
0e:41:a4:89:5c:f4:39:36:e9:cc:f7:7b:64:ef:5a:
66:61:3a:e5:5e:18:78:3e:14:a4:97:51:8e:2a:cd:
e6:6b:80:b5:54:5b:75:29:a3:0a:ae:78:b3:cc:6f:
34:13:e7:d1:19:c2:07:ad:9e:c6:54:b1:f4:3a:c9:
e4:f3:e1:ea:ef:6d:2e:ab:07:59:3a:aa:e5:84:81:
79:7f:76:cf:27:42:da:8c:07:08:89:5c:d6:25:26:
06:76:8d:38:6d:43:65:cb:ea:cb:73:ee:b5:48:52:
cf:1b:45:a5:9a:61:81:9e:31:c3:42:9c:8b:96:df:
26:79:c7:9a:47:bf:b1:c6:e4:0f:22:aa:c0:f2:26:
81:38:b2:86:40:95:a5:6b:4d:64:94:f1:a8:41:89:
5c:3f:34:1b:88:a5:a8:f2:1e:9b:4d:d5:3d:6c:a6:
cc:ee:9b:5d:05:ff:2a:9a:00:de:88:e7:e6:73:1a:
3c:79:12:ee:72:4d:10:52:98:9d:b5:2b:20:93:b2:
c9:8d:24:1a:a0:e8:1d:a6:8b:b6:3c:dc:16:92:d2:
fa:b5:53:e7:af:e7:06:bf:10:92:bb:cc:40:05:31:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:22:F9:B1:FB:41:D7:5C:73:EE:E3:B8:4C:DD:81:EF:BB:5F:E7:2B
X509v3 Authority Key Identifier:
keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:7f:5f:93:39:ab:95:93:6c:8c:ba:e2:e4:57:44:b5:ba:16:
a9:3a:87:9c:1e:55:37:54:9a:30:a8:fc:ad:7d:c1:68:04:71:
83:b9:da:52:dd:3c:18:cf:1e:69:36:f2:47:34:b0:a8:64:02:
f8:22:a1:cd:95:f7:37:93:97:57:85:98:d3:27:2e:c9:e9:f2:
69:25:3c:98:e5:3e:16:99:4f:63:af:2a:7d:b5:f0:60:fa:8e:
ce:a5:fd:4b:08:5c:18:a0:f3:c2:2f:50:d5:38:f6:f7:d8:63:
90:05:fd:5f:db:00:97:02:07:28:76:37:7a:b6:14:02:4d:fd:
c0:c5:f3:56:3b:ee:4b:24:55:d8:8c:e9:98:f2:c9:12:87:d8:
88:f7:68:8f:2a:21:98:5b:5d:90:c8:05:2a:c2:28:a3:a6:ac:
70:7a:0a:43:d8:17:38:5a:6b:bd:ab:fc:c3:6b:00:35:b9:41:
3e:39:52:aa:fe:37:86:ed:6c:92:cd:4f:fa:94:35:97:91:f8:
8b:b4:07:b4:fe:54:5f:88:50:5c:35:89:ba:f6:f0:54:6c:69:
36:58:92:c7:91:2c:b1:b4:2f:9a:db:c1:5d:cf:08:81:9c:ee:
e9:16:57:86:ba:e4:81:31:13:6d:56:05:c0:fa:a6:f0:9f:f6:
61:a2:0d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:02:51 2025 by rpki-client