Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier: e42QGssr0j6dWmqNx8Zg9bKtNeGoCwT6+a4VyJoSkg0=
Subject key identifier: 87:D7:79:46:B7:CE:01:E0:A2:F9:C1:C2:D0:ED:1D:AF:B0:AE:AA:43
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial: 01976B1825DAA2DB83914433A036D8E9C481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 21:00:33 +0000
Manifest this update: Fri 13 Jun 2025 21:00:33 +0000
Manifest next update: Sat 14 Jun 2025 21:00:33 +0000
Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: nJ9ufJcN31jE+XTq3S5hYbR0UQyXknXVRg69RrzF678=)
2: UqGmWpGtflaEJvCw0bHQvmEnA74.roa (hash: EKIY9C4V0PmpfSkXvjVMr8vcUWFSLcsQTMlkDeIRJyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 18:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:18:25:da:a2:db:83:91:44:33:a0:36:d8:e9:c4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Validity
Not Before: Jun 13 21:00:33 2025 GMT
Not After : Jun 14 21:00:33 2025 GMT
Subject: CN=87d77946b7ce01e0a2f9c1c2d0ed1dafb0aeaa43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8c:8b:fa:16:05:e8:5d:1f:18:8c:7d:6d:64:
9d:cd:98:32:ef:a4:2d:83:19:97:e1:b6:a2:59:45:
e9:99:f8:49:15:37:6a:5f:46:c3:0e:ce:9a:0f:6d:
a7:ef:83:7b:52:e2:8a:fe:70:41:1e:92:33:7a:c7:
30:fd:ca:e0:b6:cd:d2:82:98:f5:21:25:33:bb:4b:
c5:53:58:97:f0:36:b7:75:7f:3a:57:a0:b1:92:d4:
45:e5:84:c4:ab:e7:9f:f8:42:d2:5d:c6:6e:e1:5c:
5b:27:cd:5e:a2:f2:5f:56:46:bc:7e:65:45:f9:f6:
3c:40:c6:50:2e:ea:84:46:e2:9a:48:cf:bf:8c:95:
05:c9:3f:26:f4:b0:18:2c:31:41:27:ec:d7:5d:b9:
ce:ae:b5:29:0a:a0:66:8c:21:09:42:d9:97:a9:2e:
9d:ef:da:b1:a1:01:9c:e3:a3:8c:76:29:08:15:83:
69:48:b2:26:f6:c4:bf:26:0b:20:3d:4b:6b:4d:39:
5d:3d:61:b0:db:85:71:de:89:a1:eb:c3:c0:44:48:
e2:d8:67:b3:2a:31:32:cb:d0:64:6b:3f:e8:2c:b4:
4f:fc:95:76:f6:ca:8b:3d:68:f7:72:c5:40:67:aa:
2e:fb:aa:0a:a4:dd:c8:25:0c:7d:3b:1c:3c:b9:a0:
50:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D7:79:46:B7:CE:01:E0:A2:F9:C1:C2:D0:ED:1D:AF:B0:AE:AA:43
X509v3 Authority Key Identifier:
keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ab:cb:2a:98:08:90:a4:7f:6f:3c:4d:d3:6d:21:ae:ce:c5:
73:18:5d:ec:4e:03:69:30:f2:61:a7:a0:56:33:f7:f8:f9:3a:
36:b2:6e:5c:82:df:18:ba:29:e8:14:5f:17:6f:eb:ca:b7:7b:
22:63:b9:62:78:dc:30:f1:f1:d2:11:1c:38:27:cf:38:65:ff:
dd:30:b0:03:15:ad:e4:c8:c4:96:e6:e0:a8:43:3b:dd:7a:dc:
b5:4d:27:51:c0:32:00:a2:53:36:f0:d0:bc:67:13:96:02:b1:
f4:aa:75:c2:29:32:25:41:66:f4:4e:8c:0d:b2:b3:be:9a:a0:
21:bd:a9:76:f5:ee:6e:8b:a4:c1:34:8e:a2:55:0c:7d:08:f6:
c6:ff:fe:e4:bd:03:4b:85:54:77:d6:fd:b6:cd:86:14:a7:6f:
0b:a4:9f:42:df:4a:1d:0e:1e:34:5a:ec:2c:76:7f:39:ab:46:
ce:96:79:d2:10:eb:a7:a5:0f:72:6a:4d:dd:14:2b:35:03:9f:
04:aa:13:7c:8f:67:ed:47:85:a8:e7:0e:a5:24:60:38:fb:47:
e2:10:38:c1:08:1e:ab:95:eb:b0:7e:27:d9:21:43:d5:25:68:
cf:e0:68:03:27:43:b3:1e:07:0d:79:c4:b1:c4:cb:8c:90:ec:
e9:2c:03:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrGCXaotuDkUQzoDbY6cSBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmM2JmN2FjMjhlODMwNjU2Y2Y2ZTk5OWM0OTkzYmE3NmNi
MWE5OGEwHhcNMjUwNjEzMjEwMDMzWhcNMjUwNjE0MjEwMDMzWjAzMTEwLwYDVQQD
Eyg4N2Q3Nzk0NmI3Y2UwMWUwYTJmOWMxYzJkMGVkMWRhZmIwYWVhYTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIyL+hYF6F0fGIx9bWSdzZgy76Qt
gxmX4baiWUXpmfhJFTdqX0bDDs6aD22n74N7UuKK/nBBHpIzescw/crgts3Sgpj1
ISUzu0vFU1iX8Da3dX86V6CxktRF5YTEq+ef+ELSXcZu4VxbJ81eovJfVka8fmVF
+fY8QMZQLuqERuKaSM+/jJUFyT8m9LAYLDFBJ+zXXbnOrrUpCqBmjCEJQtmXqS6d
79qxoQGc46OMdikIFYNpSLIm9sS/JgsgPUtrTTldPWGw24Vx3omh68PAREji2Gez
KjEyy9Bkaz/oLLRP/JV29sqLPWj3csVAZ6ou+6oKpN3IJQx9Oxw8uaBQaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfXeUa3zgHgovnBwtDtHa+wrqpDMB8GA1UdIwQY
MBaAFE8796wo6DBlbPbpmcSZO6dssamKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iYmQ2NGItZWJiOC00NmQ4LWI0ZTMt
NjJlYWZlZDU5MjJlLzEvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9iYmQ2NGItZWJiOC00NmQ4LWI0ZTMtNjJlYWZlZDU5MjJl
LzEvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6vLKpgI
kKR/bzxN020hrs7Fcxhd7E4DaTDyYaegVjP3+Pk6NrJuXILfGLop6BRfF2/ryrd7
ImO5YnjcMPHx0hEcOCfPOGX/3TCwAxWt5MjElubgqEM73XrctU0nUcAyAKJTNvDQ
vGcTlgKx9Kp1wikyJUFm9E6MDbKzvpqgIb2pdvXuboukwTSOolUMfQj2xv/+5L0D
S4VUd9b9ts2GFKdvC6SfQt9KHQ4eNFrsLHZ/OatGzpZ50hDrp6UPcmpN3RQrNQOf
BKoTfI9n7UeFqOcOpSRgOPtH4hA4wQgeq5XrsH4n2SFD1SVoz+BoAydDsx4HDXnE
scTLjJDs6SwD4w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 03:58:25 2025 by rpki-client