Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
File: TzVzzX1WHNN-DzMfbKON6SAgQrI.mft (raw, json)
Hash identifier: CIXrPUHbizMOi8XxuU5Z9vVw4eKq88sU+BQTf/CSvYc=
Subject key identifier: F7:DC:B4:87:B0:61:EE:C1:D4:35:BC:AE:77:C8:C3:BC:31:56:5C:60
Authority key identifier: 4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
Certificate issuer: /CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Certificate serial: 0198496682FC68A0E61C054933016179F62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
Manifest number: 0B17
Signing time: Sun 27 Jul 2025 01:01:51 +0000
Manifest this update: Sun 27 Jul 2025 01:01:51 +0000
Manifest next update: Mon 28 Jul 2025 01:01:51 +0000
Files and hashes: 1: TzVzzX1WHNN-DzMfbKON6SAgQrI.crl (hash: EWKv/Zf0h9l+35WFusly3pKRW+y6OOUGdoGI+UQcjck=)
2: gNvVla9QTcgfrH76gu8sofAf_w0.roa (hash: OGSKcOJHQa1w9k6JZ39A0hFW39yZH1IaBP1pJ+a1YHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:82:fc:68:a0:e6:1c:05:49:33:01:61:79:f6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Validity
Not Before: Jul 27 01:01:51 2025 GMT
Not After : Jul 28 01:01:51 2025 GMT
Subject: CN=f7dcb487b061eec1d435bcae77c8c3bc31565c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:8b:af:e0:1b:fe:f4:78:d3:d4:8d:c2:4b:
70:fe:ac:d7:80:5e:ad:94:a9:d1:fb:06:f7:3d:3e:
da:7a:c2:f6:2f:71:50:6a:49:1a:e5:d7:1a:66:b1:
03:58:3b:80:1d:66:e5:36:28:d2:61:3e:5b:27:7c:
e9:56:f0:fc:32:33:15:e7:d7:83:4e:1a:64:87:33:
fd:4d:ae:90:e6:c2:8e:bd:2b:58:d8:92:72:e3:a4:
5f:d8:74:00:f5:28:36:16:90:1c:2a:91:0f:b5:3b:
ca:ef:43:f0:9a:11:c9:04:18:69:4d:f2:dd:79:af:
92:46:ad:46:5b:6d:80:98:89:8f:e8:9c:af:7a:ea:
87:91:50:66:89:85:b3:3f:ae:7e:2c:eb:11:f4:cc:
53:9e:55:1f:e9:9d:83:a4:bb:47:20:77:89:38:51:
51:2c:79:71:aa:7e:85:b8:21:b4:22:60:da:9f:8c:
bb:92:47:70:48:06:8c:cd:86:e8:2e:c0:91:31:43:
76:10:e4:4a:43:af:8e:ce:08:69:b4:63:b1:5d:72:
12:78:69:da:e3:f3:f6:41:e1:bb:54:36:7b:bb:24:
df:29:66:87:04:9c:a4:b1:8e:f7:52:f9:d8:71:99:
f1:c3:12:1c:89:e4:1f:4c:df:d4:6c:4a:6b:fc:38:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DC:B4:87:B0:61:EE:C1:D4:35:BC:AE:77:C8:C3:BC:31:56:5C:60
X509v3 Authority Key Identifier:
keyid:4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:fb:da:35:d0:e5:e1:ce:ba:db:b1:78:08:9b:d8:14:d0:4e:
62:5a:d2:c0:3c:db:8e:33:66:d0:60:f2:9d:e7:cc:c7:4f:c4:
cb:8c:fe:90:e3:e8:bb:fd:3e:8d:28:56:be:81:26:ad:7d:f1:
03:3a:27:7c:54:19:d6:e1:9b:47:7f:c6:e0:00:0a:6f:3a:f4:
ff:7c:6d:82:77:cc:49:71:af:36:55:50:76:51:90:ef:a4:4c:
50:c6:93:a7:31:32:06:9d:aa:d7:1a:35:2c:af:3d:54:a7:92:
b4:54:bc:71:51:b1:93:9d:c3:d6:4f:4e:6b:75:1f:8e:d1:4d:
f5:fb:be:44:7c:a0:79:68:58:00:cf:64:9a:1a:0b:3e:70:20:
df:92:50:e1:54:d5:cf:72:94:94:32:49:49:9e:2e:eb:56:62:
d0:59:cb:1b:8c:9b:c1:a5:c7:43:ac:09:a4:3c:f2:b1:a3:e1:
6d:ea:38:2e:ef:2d:44:a7:66:2d:87:85:85:bd:6f:95:d2:ec:
3d:83:cf:39:aa:60:e6:4e:4b:3f:ee:aa:22:7e:e2:bc:cc:bd:
3d:ce:08:5d:ae:87:75:38:7b:74:3f:54:50:59:ee:c8:42:b5:
ee:5b:8f:c5:45:82:37:36:bc:f3:f6:6c:1b:40:6f:bd:5f:48:
93:c5:0e:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZoL8aKDmHAVJMwFhefYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMzU3M2NkN2Q1NjFjZDM3ZTBmMzMxZjZjYTM4ZGU5MjAy
MDQyYjIwHhcNMjUwNzI3MDEwMTUxWhcNMjUwNzI4MDEwMTUxWjAzMTEwLwYDVQQD
EyhmN2RjYjQ4N2IwNjFlZWMxZDQzNWJjYWU3N2M4YzNiYzMxNTY1YzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZeLr+Ab/vR409SNwktw/qzXgF6t
lKnR+wb3PT7aesL2L3FQakka5dcaZrEDWDuAHWblNijSYT5bJ3zpVvD8MjMV59eD
ThpkhzP9Ta6Q5sKOvStY2JJy46Rf2HQA9Sg2FpAcKpEPtTvK70PwmhHJBBhpTfLd
ea+SRq1GW22AmImP6JyveuqHkVBmiYWzP65+LOsR9MxTnlUf6Z2DpLtHIHeJOFFR
LHlxqn6FuCG0ImDan4y7kkdwSAaMzYboLsCRMUN2EORKQ6+OzghptGOxXXISeGna
4/P2QeG7VDZ7uyTfKWaHBJyksY73UvnYcZnxwxIcieQfTN/UbEpr/DhzPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfctIewYe7B1DW8rnfIw7wxVlxgMB8GA1UdIwQY
MBaAFE81c819VhzTfg8zH2yjjekgIEKyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jY2YzYTUtMDMwZC00YjU0LTgwNzkt
OGE1ZjE2OWE1YWU3LzEvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jY2YzYTUtMDMwZC00YjU0LTgwNzktOGE1ZjE2OWE1YWU3
LzEvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfvaNdDl
4c6627F4CJvYFNBOYlrSwDzbjjNm0GDynefMx0/Ey4z+kOPou/0+jShWvoEmrX3x
AzonfFQZ1uGbR3/G4AAKbzr0/3xtgnfMSXGvNlVQdlGQ76RMUMaTpzEyBp2q1xo1
LK89VKeStFS8cVGxk53D1k9Oa3UfjtFN9fu+RHygeWhYAM9kmhoLPnAg35JQ4VTV
z3KUlDJJSZ4u61Zi0FnLG4ybwaXHQ6wJpDzysaPhbeo4Lu8tRKdmLYeFhb1vldLs
PYPPOapg5k5LP+6qIn7ivMy9Pc4IXa6HdTh7dD9UUFnuyEK17luPxUWCNza88/Zs
G0BvvV9Ik8UOQQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:13:49 2025 by rpki-client