Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
File: tZvm7lSfM1xyhJennxRBA06FLDU.mft (raw, json)
Hash identifier: 30RMx3qGf5SwiHRhMbu1Yji9u8WNv5VYcrZ1UKVZmgk=
Subject key identifier: 33:F9:81:0B:29:E6:72:B0:37:9D:4B:EA:2B:88:15:95:37:21:1C:93
Authority key identifier: B5:9B:E6:EE:54:9F:33:5C:72:84:97:A7:9F:14:41:03:4E:85:2C:35
Certificate issuer: /CN=b59be6ee549f335c728497a79f1441034e852c35
Certificate serial: 0198496604699152C025EEF90E0C794B0904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
Manifest number: 14CC
Signing time: Sun 27 Jul 2025 01:01:18 +0000
Manifest this update: Sun 27 Jul 2025 01:01:18 +0000
Manifest next update: Mon 28 Jul 2025 01:01:18 +0000
Files and hashes: 1: KDCfBX3ad6A_00hrvSAJKYMpmcs.roa (hash: fNL/A2pz+GNUAG3d72o3KDJ4AJqpHRk0BtaNcUYXr/8=)
2: tZvm7lSfM1xyhJennxRBA06FLDU.crl (hash: sJx2Pmylw3qe4MX9U6PdMWQ+d9JncDbUiGzJPfyNsTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:04:69:91:52:c0:25:ee:f9:0e:0c:79:4b:09:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59be6ee549f335c728497a79f1441034e852c35
Validity
Not Before: Jul 27 01:01:18 2025 GMT
Not After : Jul 28 01:01:18 2025 GMT
Subject: CN=33f9810b29e672b0379d4bea2b88159537211c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:04:21:67:4a:1a:a8:a4:6f:e3:72:23:d4:cf:
7e:cf:bb:48:93:57:bd:85:09:4d:21:25:75:05:2b:
50:34:6c:23:6f:60:69:01:23:0f:a3:ca:97:07:a7:
4b:9a:c0:35:65:b4:5f:c3:be:33:70:1c:18:d6:90:
d4:28:e3:ef:1f:36:c4:9c:f3:5b:b0:50:05:e9:c6:
cf:cd:c5:83:82:86:2d:90:e9:cd:c7:91:10:b5:bc:
d8:2b:6b:f8:be:8f:91:ad:56:0d:f2:ea:2f:70:3a:
d4:ea:f4:de:80:03:a3:0b:16:3e:87:2d:72:3a:72:
13:50:64:e0:55:9c:d1:8e:4d:ac:26:b9:6f:91:c1:
fc:ad:f6:52:40:f8:a9:eb:0c:c0:26:97:65:20:c0:
b9:dc:8d:0f:83:71:96:c8:76:28:40:57:71:0e:12:
58:14:71:33:26:3b:ed:97:de:92:db:00:c6:9c:49:
1c:44:75:76:32:e5:7a:4e:17:ec:cb:e9:3b:a0:20:
4e:5d:a2:4b:61:3d:ce:3e:cd:7e:1b:1d:3f:f0:87:
3e:e1:34:c7:df:f5:8f:fc:21:6f:64:71:ac:44:0d:
26:a1:f2:89:ed:ff:85:02:7b:e0:18:f5:bf:63:37:
09:96:7d:50:74:38:e5:69:c3:b1:2d:a5:fb:de:3a:
82:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F9:81:0B:29:E6:72:B0:37:9D:4B:EA:2B:88:15:95:37:21:1C:93
X509v3 Authority Key Identifier:
keyid:B5:9B:E6:EE:54:9F:33:5C:72:84:97:A7:9F:14:41:03:4E:85:2C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b6:e3:c7:a3:84:d8:d9:59:1c:6e:17:ec:2a:84:27:b1:72:
90:31:8d:40:c7:42:ba:0c:97:2b:23:e0:8b:e1:41:e7:56:d9:
d2:02:ef:c1:24:e5:98:89:a3:55:09:71:06:40:13:da:c0:49:
ac:05:c6:68:0d:52:bc:26:66:07:61:70:34:b1:f5:be:97:0e:
ed:2e:5c:e6:ea:c3:cb:1f:76:9e:79:07:4b:14:95:bc:b1:2e:
24:cd:5f:61:df:ed:66:53:aa:46:8d:d9:ea:15:76:9c:69:32:
e2:8d:c3:43:e5:79:0e:11:d3:53:b4:43:4b:0c:c1:56:0b:6f:
13:bb:35:bd:52:29:ca:4b:de:2d:84:05:b9:6f:8a:a6:24:3c:
95:f1:65:d8:2d:fe:d2:6d:92:19:55:ec:ee:9d:f3:17:81:cd:
94:5c:06:10:4b:cf:00:a0:03:f1:b2:7e:e1:4f:2c:ab:30:66:
d4:95:ec:52:fa:9d:fe:4d:9e:0c:78:24:ed:ad:18:f0:a8:e8:
7b:74:04:49:87:1a:01:6c:7d:56:1c:06:13:3a:60:c0:a9:16:
96:b8:fd:22:8f:46:0d:32:4b:d1:a6:54:5e:50:67:94:67:33:
eb:e1:b3:67:43:2c:a3:1d:f1:ea:06:d4:ed:20:0a:18:1a:18:
94:73:bc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:39 2025 by rpki-client