Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier: sltRAqXxPRXxiQi4401ykW5NJt90TCK4Cjc7q4JzDhg=
Subject key identifier: AD:E6:98:9F:14:55:3A:99:57:35:D5:1C:95:59:64:C5:68:57:6E:73
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial: 019921B14F217F7A64D2C1F09C3EC012A6A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 01:01:32 +0000
Manifest this update: Sun 07 Sep 2025 01:01:32 +0000
Manifest next update: Mon 08 Sep 2025 01:01:32 +0000
Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: zgAX0bMjl7uets+S9h3CwsCidGcfGCi4XKVbxaS5/iU=)
2: UqGmWpGtflaEJvCw0bHQvmEnA74.roa (hash: EKIY9C4V0PmpfSkXvjVMr8vcUWFSLcsQTMlkDeIRJyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:4f:21:7f:7a:64:d2:c1:f0:9c:3e:c0:12:a6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Validity
Not Before: Sep 7 01:01:32 2025 GMT
Not After : Sep 8 01:01:32 2025 GMT
Subject: CN=ade6989f14553a995735d51c955964c568576e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:06:d2:03:6f:f1:d4:3f:9b:46:f2:9d:55:
39:22:75:82:6d:0e:19:26:ff:ad:21:c2:1e:b7:b8:
88:dd:2e:8c:09:d1:d9:0f:38:1a:79:61:f0:57:89:
2d:ea:4c:ab:8a:14:39:24:7b:b8:7c:c8:25:18:05:
9d:bc:83:55:9a:d3:b3:c4:1f:9e:48:f7:e4:03:51:
78:92:93:88:75:c3:55:c7:e6:8c:84:4c:f7:10:32:
37:13:ef:db:d2:09:f7:6d:3f:dd:6b:90:80:7d:fe:
21:ca:c7:32:2a:cb:ae:83:2a:01:d7:13:85:be:7a:
06:07:54:ca:a3:c0:d3:f8:ec:26:3d:04:ca:46:ef:
e0:9c:c2:32:8c:c7:eb:4d:ea:bc:6b:99:7f:06:35:
ff:92:eb:08:6c:68:d9:1f:d9:44:34:45:2f:cd:d4:
df:58:a6:64:ba:4c:14:19:2c:ab:02:d4:45:41:49:
77:d5:11:d5:bd:3c:84:7d:4f:aa:14:c7:64:f3:83:
00:b1:12:7b:98:d9:44:d1:d1:1b:b2:29:56:ff:96:
32:b7:43:c8:f7:f3:a5:9f:04:31:47:a8:fe:ca:a6:
fe:3c:b5:f6:fa:85:0d:f5:34:ae:10:9a:0b:8d:da:
9f:e7:7a:5a:2d:0b:cc:19:c6:d9:3c:1c:12:ec:86:
1c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E6:98:9F:14:55:3A:99:57:35:D5:1C:95:59:64:C5:68:57:6E:73
X509v3 Authority Key Identifier:
keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:db:54:61:45:e0:b5:06:85:22:b9:99:a7:f8:e8:08:1b:9e:
47:87:54:d8:df:e4:e7:fc:98:64:29:bf:3d:e8:b2:76:b1:4d:
55:fd:37:95:6d:4c:99:f6:14:d4:78:c6:31:e2:8b:30:77:53:
69:09:c3:5d:03:42:b4:9d:1c:30:ea:0f:54:ba:0b:9a:41:be:
82:50:25:e4:1c:7c:91:86:bb:14:dc:db:e1:4a:9b:94:7e:63:
fb:20:54:03:04:fb:da:ff:d0:4d:53:d4:81:11:86:c6:0d:a5:
cb:d3:86:97:e8:0b:0e:94:2d:6a:e4:0c:4d:d0:c9:aa:8e:4d:
18:77:5a:74:18:02:58:ab:d4:ab:44:c7:bd:4c:34:2d:04:87:
16:84:37:1f:ca:7f:cb:dc:72:ad:e8:69:5e:0c:e8:6e:99:ed:
99:50:ab:ce:3c:d0:5c:aa:cc:4c:0c:f9:f6:e8:04:65:b8:c3:
91:09:87:cb:13:46:d3:20:a9:02:b8:b0:fa:20:18:ad:73:7b:
fd:3d:1a:3d:0f:57:55:ec:cb:58:31:7a:d9:87:1e:51:70:8c:
22:41:a9:4e:67:0a:7c:21:bd:45:35:16:6d:f7:fc:c4:1d:43:
c7:27:02:27:96:70:76:ce:b6:50:54:5a:25:53:a2:2f:92:e0:
5d:67:1f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:31 2025 by rpki-client