Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
File: tznE4_6GnZeDui2t9mDczQ-lNwc.mft (raw, json)
Hash identifier: 3t8913uoh0D2J8PJEJwhChWQwEWMURSrV5ITAXpt3tA=
Subject key identifier: AD:EA:D7:D0:E1:8D:E3:CD:01:45:3B:5E:3D:3E:52:14:A8:31:8A:ED
Authority key identifier: B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07
Certificate issuer: /CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707
Certificate serial: 01984AE5BC4AF054305A2F324EB4C3E5651D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
Manifest number: 104D
Signing time: Sun 27 Jul 2025 08:00:26 +0000
Manifest this update: Sun 27 Jul 2025 08:00:26 +0000
Manifest next update: Mon 28 Jul 2025 08:00:26 +0000
Files and hashes: 1: XSeQzzLzaRiIssAEaH8bFHtmW3c.roa (hash: 5lhi1fFGQ5t288ymZ18SpahB86WMGs7YGo9rolcKH9c=)
2: tznE4_6GnZeDui2t9mDczQ-lNwc.crl (hash: rVHzj7Zj1U+4cKp2GsxYbkIuCUFaxGFr/zsDdyz7Flk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:bc:4a:f0:54:30:5a:2f:32:4e:b4:c3:e5:65:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707
Validity
Not Before: Jul 27 08:00:26 2025 GMT
Not After : Jul 28 08:00:26 2025 GMT
Subject: CN=adead7d0e18de3cd01453b5e3d3e5214a8318aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f1:6d:d2:9b:09:77:85:50:a1:26:99:cd:12:
a8:b6:a7:73:e5:97:d0:de:26:55:ce:70:90:b7:d1:
d5:9f:c6:16:82:74:24:66:f7:3c:85:16:a1:e6:14:
cf:8f:bf:59:08:eb:37:11:a3:0a:59:fe:50:1c:ed:
ce:cd:98:ad:dd:de:fb:4d:bd:5f:f3:59:a8:5a:dd:
c0:b5:c2:01:0b:28:1c:32:b4:99:a3:1c:a4:98:f3:
50:d1:76:ef:68:f6:23:2d:62:ff:10:63:77:15:c8:
9e:eb:a1:67:dc:71:50:60:68:62:af:bc:75:f0:56:
ea:8f:62:70:95:bc:b4:ea:57:88:6a:11:04:bd:fb:
0d:79:5c:2f:16:4a:3b:54:37:96:61:b2:ed:ca:ac:
fb:b4:ff:5b:26:c1:bd:92:89:bd:a1:f1:c5:e5:88:
aa:0b:04:a0:74:66:fe:09:59:b2:32:9a:dc:e2:0d:
e0:72:02:9f:ad:21:d5:d1:a0:48:43:71:e6:66:7c:
ce:2c:3a:14:7f:5e:18:de:7e:91:3d:cd:62:e6:6f:
45:58:3a:77:75:0f:96:03:72:f0:8e:57:12:dd:e6:
8d:d3:8e:58:84:a6:23:50:3e:ab:cc:b5:2d:41:4d:
40:d4:f2:a0:e6:22:d7:be:5a:4e:73:4b:6b:9f:ff:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EA:D7:D0:E1:8D:E3:CD:01:45:3B:5E:3D:3E:52:14:A8:31:8A:ED
X509v3 Authority Key Identifier:
keyid:B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b5:0c:0d:68:ba:5e:0f:a1:a6:e3:05:65:4e:23:be:26:35:
15:c9:2b:e2:4e:aa:28:76:c9:2c:9e:1e:6d:a9:bd:5e:e3:8d:
a1:83:23:10:a8:30:7a:43:b0:98:85:2e:3c:73:79:61:a6:e6:
4e:c0:04:0a:c5:12:2e:88:13:f6:48:89:bb:de:6a:12:5b:cd:
7d:43:e6:b4:d2:55:9e:b8:7f:28:4f:83:8b:60:12:49:8e:02:
4b:92:45:e7:82:39:3f:26:8f:f4:dc:20:7e:a7:66:60:4c:ad:
b9:20:67:78:a4:76:c7:5d:62:01:c0:83:49:65:76:4c:d5:a7:
75:ec:bb:8b:4a:7b:2a:66:81:3b:1a:ab:68:b5:4d:34:3d:09:
c7:dc:59:95:de:a1:27:44:1b:7a:44:4e:50:d3:d6:c4:30:4e:
18:aa:9e:db:5d:63:3c:94:fb:e6:9c:a4:98:5a:2d:bf:e9:d4:
66:92:43:30:f3:4c:76:85:b5:18:11:c1:13:bb:aa:fa:f9:f7:
64:90:5e:ad:cf:ea:d9:30:43:90:fe:07:ea:7b:24:4e:08:a6:
36:dd:25:3b:9d:f9:b8:ec:98:1c:85:80:96:f0:96:e1:c8:50:
72:e3:12:d8:3a:45:81:12:10:2f:7e:c0:ec:2f:5b:d8:3b:ed:
d1:d9:82:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:19:54 2025 by rpki-client