Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier: KM4CBpjMyhMp9Z8IRqNIuWayDH04/uJDxwCDtxx/5Xs=
Subject key identifier: D8:F2:52:89:75:C8:EC:4B:39:4D:90:BB:72:9A:A6:51:9C:4C:B2:21
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial: 01975BA4D28291105EBD5A863F62C511E11B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number: 1586
Signing time: Tue 10 Jun 2025 21:00:17 +0000
Manifest this update: Tue 10 Jun 2025 21:00:17 +0000
Manifest next update: Wed 11 Jun 2025 21:00:17 +0000
Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: XHgV+xksTjau5yCESaX1kcF5n9KTrYJ1s8mGIuoOHz4=)
2: UqGmWpGtflaEJvCw0bHQvmEnA74.roa (hash: EKIY9C4V0PmpfSkXvjVMr8vcUWFSLcsQTMlkDeIRJyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:a4:d2:82:91:10:5e:bd:5a:86:3f:62:c5:11:e1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Validity
Not Before: Jun 10 21:00:17 2025 GMT
Not After : Jun 11 21:00:17 2025 GMT
Subject: CN=d8f2528975c8ec4b394d90bb729aa6519c4cb221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:03:7f:e0:3d:a1:8f:99:46:00:ad:9a:db:68:
55:8b:a4:9c:a5:5f:d3:f2:9e:8b:77:f2:f2:36:4f:
f8:19:97:1e:26:18:25:dd:f4:ad:22:54:52:51:aa:
5f:33:44:c2:a6:af:8a:dc:43:04:fb:fc:9a:65:55:
90:1e:eb:5e:26:8a:b7:80:d8:62:89:77:01:f6:8b:
41:5c:31:66:a7:59:78:1e:b6:81:bf:72:d1:48:e0:
2b:4e:85:c9:e6:5e:4a:27:4f:dd:bb:eb:5a:38:6e:
f1:3a:4a:95:a8:23:2b:4f:9e:7e:27:7a:5f:e9:cf:
a3:80:aa:46:c1:6a:0f:c4:1f:82:42:b4:5e:86:81:
77:e5:c0:e4:01:e0:ac:31:25:66:b0:f0:a2:ce:df:
d3:76:b4:db:ba:af:ad:ef:44:0c:52:81:ab:68:a0:
9a:b9:04:73:87:fd:93:da:88:9c:f1:1a:13:c1:eb:
a6:7f:68:3e:ef:e8:00:9d:86:63:94:41:b8:ed:50:
44:0f:31:87:f3:e7:6c:6f:b4:0a:ca:65:b4:1b:ea:
a7:cb:c1:c6:a0:a6:fc:d1:ca:a8:61:5b:c0:b2:44:
c0:26:c7:69:31:27:b5:c8:da:e4:d6:ba:9b:30:78:
c9:30:aa:9e:a0:95:b0:d0:bd:96:a9:aa:41:3a:a6:
25:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F2:52:89:75:C8:EC:4B:39:4D:90:BB:72:9A:A6:51:9C:4C:B2:21
X509v3 Authority Key Identifier:
keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e7:75:29:c3:a2:ac:d2:58:02:a6:19:bd:6d:65:e5:f8:30:
d8:3c:34:d2:7a:d6:fa:72:7f:60:35:18:3a:29:d4:5d:bc:9a:
08:70:8c:c7:0d:c4:68:83:5f:09:38:bc:78:a4:2b:b9:63:30:
67:f6:d2:6a:83:76:98:18:ba:6b:79:77:d2:c2:a0:73:e4:ae:
2d:90:11:58:5f:e9:00:19:a7:c2:32:46:c3:cd:d7:78:bb:50:
5e:9b:ea:10:53:45:09:69:4a:e3:e3:ee:7f:98:81:ab:26:ec:
49:49:5c:7b:18:e0:f6:4c:7f:3a:30:5e:f1:7f:50:3e:27:32:
e7:c2:61:38:82:34:33:8f:c4:dd:f3:5d:3f:4a:ac:12:22:bd:
2f:63:9b:d1:60:dd:f9:08:6b:b4:41:58:55:31:be:81:c0:c5:
59:f9:5b:66:74:5c:b3:c3:e2:6f:1f:2b:c2:a2:79:6f:4a:25:
88:14:00:f4:5a:65:5f:45:74:e4:ab:82:79:e5:07:a2:b3:54:
69:49:8b:96:14:ce:70:3a:c4:2d:8f:50:30:e7:bc:ca:8d:a7:
19:fe:ae:9b:d3:bc:15:54:95:77:05:7a:0a:1f:5b:08:4c:a6:
0e:92:30:9b:0b:4b:ee:c0:73:b6:49:fe:68:9e:07:f1:cd:e2:
45:b8:ec:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:49:34 2025 by rpki-client