
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier: 1pDVVbo/SwaskaUWIeXPtE4VVGIMsQYC1YWeV9pWBxk=
Subject key identifier: D1:81:CD:52:A5:6B:57:BB:93:3F:B1:FE:07:9A:E1:D7:FF:51:35:5F
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial: 0197692A0E56553859EB48AEAB0E4D47AA1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 12:00:53 +0000
Manifest this update: Fri 13 Jun 2025 12:00:53 +0000
Manifest next update: Sat 14 Jun 2025 12:00:53 +0000
Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: 1sZcmue+jVSGppzJV60nQBJ6eSoXIujHmEBL2XA0eyc=)
2: UqGmWpGtflaEJvCw0bHQvmEnA74.roa (hash: EKIY9C4V0PmpfSkXvjVMr8vcUWFSLcsQTMlkDeIRJyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:2a:0e:56:55:38:59:eb:48:ae:ab:0e:4d:47:aa:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Validity
Not Before: Jun 13 12:00:53 2025 GMT
Not After : Jun 14 12:00:53 2025 GMT
Subject: CN=d181cd52a56b57bb933fb1fe079ae1d7ff51355f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:e8:1f:b4:8a:9d:71:06:9d:cd:5b:5d:04:
5d:d9:1f:7d:04:c5:14:f5:c8:78:c7:50:a2:c1:70:
15:f3:ab:29:c6:12:c0:24:24:33:31:bc:67:89:f9:
4f:01:11:31:85:7c:96:01:46:04:3e:91:b5:cf:a5:
04:4c:bc:7a:64:2b:0d:4a:56:a1:e2:bc:97:96:2e:
dd:15:d5:e2:2f:79:f3:3a:99:4d:24:9b:5f:ac:e8:
d3:cf:3e:bf:ca:f1:5c:c1:65:fb:fb:83:3e:9e:67:
28:3e:c4:74:50:f4:9a:e2:25:f3:55:bb:89:84:17:
88:e2:50:94:5c:8c:61:0e:d7:05:8b:6b:5f:85:71:
ae:b9:80:3f:bc:54:80:5b:4f:24:22:ab:03:ff:88:
be:71:57:d7:a0:eb:ee:27:4c:fa:f2:7d:85:a1:fc:
d7:c0:73:45:66:11:9c:0a:1a:cb:8d:d3:71:c2:9d:
e1:aa:45:04:02:af:4f:17:68:12:ef:82:7b:6e:73:
58:31:6d:7f:3f:67:15:39:88:cd:01:61:79:d9:fc:
fb:3a:9c:0d:23:39:f4:4c:17:89:81:75:84:ae:f3:
88:9d:9f:00:49:6e:fa:59:d6:32:86:e1:f7:fe:61:
fa:94:43:4c:94:68:6a:2e:da:41:0d:49:78:f4:53:
e4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:81:CD:52:A5:6B:57:BB:93:3F:B1:FE:07:9A:E1:D7:FF:51:35:5F
X509v3 Authority Key Identifier:
keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e3:0c:f4:11:72:c2:f1:7d:3b:c2:46:d6:54:6b:d0:05:03:
32:62:de:fd:3c:66:89:05:28:5e:5f:fd:86:01:a5:42:a0:7a:
fc:13:b3:e9:f6:f3:2c:bc:8d:ee:fe:24:b8:3a:4c:6c:2f:3b:
3d:8a:14:e4:f3:8b:7e:5f:81:48:32:31:4d:52:07:31:4d:b2:
8d:a3:88:f0:70:1f:fa:b4:1c:a1:a7:a5:47:6d:b3:70:aa:2b:
8d:fd:ac:b4:95:54:f9:5d:7f:bd:bc:43:92:f0:4b:aa:37:b9:
86:56:65:b5:58:b8:0e:ec:6f:ee:2f:17:88:7d:ae:aa:14:1d:
87:a8:48:6c:94:9d:31:37:31:2a:90:20:5a:0e:38:de:f0:ad:
af:f4:6a:d1:6e:7f:08:cd:cc:b2:e1:d7:ed:0b:9a:29:f7:2c:
ee:5b:4c:36:bb:31:d5:16:7a:89:64:d5:9a:a7:fd:08:85:20:
d9:ec:ad:f7:48:c5:bc:41:c3:30:6c:0c:ec:73:e9:3d:41:8a:
80:f3:a7:d4:fc:8b:b3:29:14:00:ea:da:cf:40:45:3a:37:23:
38:61:ff:c5:a9:34:0f:a7:98:2c:f5:e7:9a:a5:c6:16:90:b5:
1c:45:64:57:ce:50:44:bb:69:1d:f7:b7:6d:ca:7b:d6:dc:4e:
d0:3d:fc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:19:57 2025 by rpki-client