Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
File: TnzINx7SS6z2esqLkCzucGr8Yks.mft (raw, json)
Hash identifier: lG+MolbLvqlP6rZweGw5UUixXtitIjjieUFDPxIA4hg=
Subject key identifier: DC:AA:E4:90:03:94:CE:D6:EC:53:43:41:4D:C2:87:75:95:29:66:A4
Authority key identifier: 4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
Certificate issuer: /CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
Certificate serial: 019847AD87E02C0F084B630C8A2354D2065A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 17:00:11 +0000
Manifest this update: Sat 26 Jul 2025 17:00:11 +0000
Manifest next update: Sun 27 Jul 2025 17:00:11 +0000
Files and hashes: 1: AFXKRWkq4CEJ7e_q_TT8oCKNDgs.roa (hash: vvcSpEWzby7j1iGxx2OT88XWdiMYKYH4weh98eM4dfY=)
2: TnzINx7SS6z2esqLkCzucGr8Yks.crl (hash: 5QZTO4c8A2gqZ/J1ku0qa2F77HU1fSFIxtZ1FgK6VMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:87:e0:2c:0f:08:4b:63:0c:8a:23:54:d2:06:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
Validity
Not Before: Jul 26 17:00:11 2025 GMT
Not After : Jul 27 17:00:11 2025 GMT
Subject: CN=dcaae4900394ced6ec5343414dc28775952966a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:12:65:b6:68:16:56:55:06:38:e3:9a:f3:69:
00:08:10:e1:3a:2d:e7:d1:f1:fa:21:72:81:2a:86:
b0:6b:e5:a5:d8:84:cb:cc:d5:13:e3:4e:c7:f0:b1:
f6:2e:bb:29:54:51:0f:e5:e1:e2:65:b6:b0:ab:57:
17:a5:b9:3e:0a:6e:ed:5c:3a:5c:67:0b:94:f9:51:
ad:fc:1b:0e:cf:2c:1b:af:80:8e:f8:83:d8:c8:4e:
40:23:e5:57:60:34:69:df:de:35:b7:af:d6:3d:b4:
51:79:12:ad:2a:09:0e:fa:d0:98:e1:0d:22:b9:c1:
45:dd:48:8e:47:f8:f2:1c:12:03:3e:dd:d7:5c:96:
46:9e:26:98:31:9c:76:f3:b3:db:55:40:4e:43:93:
71:b0:da:ec:c3:11:56:6c:86:34:2b:77:25:07:43:
ea:55:4f:5a:6f:5e:8d:68:04:ad:b3:18:f6:2a:14:
9e:ba:f1:2a:56:96:92:14:ed:46:c9:57:ec:0e:9a:
3e:3e:0e:f7:07:4b:50:60:db:2c:3c:d3:eb:0e:ed:
99:38:b0:45:20:50:e8:c0:6b:e3:85:7a:fe:b6:70:
e3:cf:16:64:53:01:f7:83:57:3f:be:0d:82:7a:f6:
f3:9a:f9:11:0e:58:bc:a4:52:42:2d:94:c7:1a:1e:
ff:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AA:E4:90:03:94:CE:D6:EC:53:43:41:4D:C2:87:75:95:29:66:A4
X509v3 Authority Key Identifier:
keyid:4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7e:dc:c1:44:a0:79:c3:36:c8:03:65:1b:57:28:71:de:dc:
1e:97:58:a1:81:d3:de:2e:36:f8:88:a1:f3:52:04:2f:b2:06:
1b:43:4b:bd:68:66:3a:ae:08:66:b3:3c:3e:3c:75:a9:c6:1d:
d3:f2:96:0f:06:31:21:20:cc:18:98:0a:03:19:60:a5:2e:3b:
f8:49:cd:2a:49:92:b6:2d:2a:2b:2d:b7:96:b1:1e:23:18:8c:
ff:74:95:d6:8e:80:44:0a:8e:af:21:f3:6f:7d:d4:c8:22:3b:
27:cd:13:6d:08:0b:6c:3e:51:47:da:64:c3:21:0b:b2:a7:d6:
4d:ad:4b:9d:98:83:a4:7a:20:55:34:89:cf:ab:9b:81:c5:32:
a1:72:dd:00:27:d5:ed:e2:f4:51:03:b8:2b:2e:1e:42:fd:27:
13:64:a6:af:b9:9c:c8:f3:48:45:64:8d:bf:56:3d:e5:56:8a:
78:fb:89:13:6d:2e:88:05:17:7b:e3:16:ff:cc:7d:3d:2e:a5:
a9:76:da:d7:22:e9:68:f5:ed:ee:b5:85:72:29:70:f8:7d:32:
1a:07:05:af:67:d6:bc:c5:6a:69:96:d7:7b:13:e2:60:a5:2d:
dd:5b:11:c3:37:01:be:a4:37:7b:fb:79:cc:3b:59:7d:f5:24:
0c:bc:b9:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHrYfgLA8IS2MMiiNU0gZaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlN2NjODM3MWVkMjRiYWNmNjdhY2E4YjkwMmNlZTcwNmFm
YzYyNGIwHhcNMjUwNzI2MTcwMDExWhcNMjUwNzI3MTcwMDExWjAzMTEwLwYDVQQD
EyhkY2FhZTQ5MDAzOTRjZWQ2ZWM1MzQzNDE0ZGMyODc3NTk1Mjk2NmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhJltmgWVlUGOOOa82kACBDhOi3n
0fH6IXKBKoawa+Wl2ITLzNUT407H8LH2LrspVFEP5eHiZbawq1cXpbk+Cm7tXDpc
ZwuU+VGt/BsOzywbr4CO+IPYyE5AI+VXYDRp3941t6/WPbRReRKtKgkO+tCY4Q0i
ucFF3UiOR/jyHBIDPt3XXJZGniaYMZx287PbVUBOQ5NxsNrswxFWbIY0K3clB0Pq
VU9ab16NaAStsxj2KhSeuvEqVpaSFO1GyVfsDpo+Pg73B0tQYNssPNPrDu2ZOLBF
IFDowGvjhXr+tnDjzxZkUwH3g1c/vg2CevbzmvkRDli8pFJCLZTHGh7/ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyq5JADlM7W7FNDQU3Ch3WVKWakMB8GA1UdIwQY
MBaAFE58yDce0kus9nrKi5As7nBq/GJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG56SU54N1NTNnoyZXNxTGtDenVjR3I4WWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8wYjRjZGYtYjQ4Ni00YTU4LTgwMGQt
OGVkNWE3OWRlODM1LzEvVG56SU54N1NTNnoyZXNxTGtDenVjR3I4WWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8wYjRjZGYtYjQ4Ni00YTU4LTgwMGQtOGVkNWE3OWRlODM1
LzEvVG56SU54N1NTNnoyZXNxTGtDenVjR3I4WWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeX7cwUSg
ecM2yANlG1cocd7cHpdYoYHT3i42+Iih81IEL7IGG0NLvWhmOq4IZrM8Pjx1qcYd
0/KWDwYxISDMGJgKAxlgpS47+EnNKkmSti0qKy23lrEeIxiM/3SV1o6ARAqOryHz
b33UyCI7J80TbQgLbD5RR9pkwyELsqfWTa1LnZiDpHogVTSJz6ubgcUyoXLdACfV
7eL0UQO4Ky4eQv0nE2Smr7mcyPNIRWSNv1Y95VaKePuJE20uiAUXe+MW/8x9PS6l
qXba1yLpaPXt7rWFcilw+H0yGgcFr2fWvMVqaZbXexPiYKUt3VsRwzcBvqQ3e/t5
zDtZffUkDLy5Eg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:55:12 2025 by rpki-client