Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
File: TzvVbotU5tonu-ZiLaxny_Aqgeo.mft (raw, json)
Hash identifier: wGUDjoNyjb3xiVZSMAsy/QcW8/5oNcjCJeRDAPWxyZc=
Subject key identifier: 10:6A:AD:D0:63:44:37:15:E8:F7:71:54:22:79:41:81:AB:D5:90:F5
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Certificate issuer: /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial: 0199C4FB9B93F9EE7B4FECEACDC62E9FB9BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
Manifest number: 16C7
Signing time: Wed 08 Oct 2025 18:00:47 +0000
Manifest this update: Wed 08 Oct 2025 18:00:47 +0000
Manifest next update: Thu 09 Oct 2025 18:00:47 +0000
Files and hashes: 1: 6aBtyL1HCBLQz8Fcxx2-wbI-JSY.roa (hash: s+Yjky9WV0WGtiJ2UXV97kZc6gRv1napm2o37+mL6NI=)
2: R0B0S-Vvq6PSGq8IAqKsdnjdNUo.roa (hash: jZBNXVMhAxnq4wWzeXUVcxAP1mha5zeShrdHGeYvBL4=)
3: TzvVbotU5tonu-ZiLaxny_Aqgeo.crl (hash: BdJpvFN7TV/ka9ubUprDm3aQVlP1NPhRVdSu52I7Tv0=)
4: snxuxsWrIVBOH4PJX-798Ws3-_I.roa (hash: eUyKfNa1R42Kf80mOcHHq43jou6WV27ocUUMJBjr/10=)
5: wnKhG27ddvv9DbopEcZ0e8BfSyE.roa (hash: 5bhpzUqfkiYr3WyfWoYZHsfUt3MVDy9FbR7pi02+AvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:fb:9b:93:f9:ee:7b:4f:ec:ea:cd:c6:2e:9f:b9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Validity
Not Before: Oct 8 18:00:47 2025 GMT
Not After : Oct 9 18:00:47 2025 GMT
Subject: CN=106aadd063443715e8f7715422794181abd590f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:d9:f9:8e:31:62:4a:9b:ca:2a:4e:5c:11:
28:fa:13:13:33:56:62:18:09:34:91:24:07:26:57:
94:96:17:10:42:14:f8:40:58:7d:97:59:f6:88:c7:
cd:10:f8:3f:8c:f1:d2:17:48:c8:2e:8b:75:2e:59:
ae:60:ea:1b:24:85:56:df:04:76:69:bf:60:5f:70:
e7:76:cd:8d:ed:af:27:45:0b:ea:4b:be:4e:8b:96:
e7:b5:67:61:01:3b:4d:41:d3:a9:f7:63:e5:1a:22:
bc:d3:30:57:70:b8:77:9e:d9:ef:d5:67:8a:38:a7:
08:bb:37:db:d8:d7:d0:70:16:0b:65:f7:1e:39:f1:
e9:39:00:60:fc:34:17:1b:e3:e5:6a:fd:8e:a4:c3:
1c:b1:99:c1:0a:b1:21:14:c6:29:ce:73:ac:7a:f5:
65:6e:d0:5a:d4:5d:ef:aa:e1:06:a7:1e:ae:1d:15:
cc:37:1f:68:c0:e5:9e:c7:12:bf:75:e8:ad:14:35:
31:78:9a:52:cd:06:2a:1e:2b:28:cf:7e:84:bd:eb:
63:67:52:84:ea:d8:4a:10:02:6c:75:52:ac:07:12:
d7:40:1a:e4:49:bc:97:c6:60:16:61:c3:75:88:ba:
e4:07:f1:16:07:eb:77:6c:3c:76:aa:5a:33:24:7a:
99:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6A:AD:D0:63:44:37:15:E8:F7:71:54:22:79:41:81:AB:D5:90:F5
X509v3 Authority Key Identifier:
keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:da:d5:b8:e0:99:2a:34:dd:e3:c0:7e:97:46:a4:d1:34:ab:
a1:e8:68:ff:3a:54:4e:4a:6d:ac:e9:52:71:12:01:df:d9:aa:
f0:b9:45:54:18:4a:e1:b0:e6:aa:d8:17:a2:d7:2f:43:c0:7b:
26:af:39:d2:39:42:46:93:6b:28:e6:b7:ed:0d:c1:73:4f:b0:
c9:f0:52:7e:46:30:6c:7b:9e:bd:aa:e7:d8:a9:3e:d0:cf:dd:
3a:d3:9c:1a:c6:f5:ab:66:a9:fb:ae:df:b4:82:fa:7b:b3:ec:
3a:b8:5e:31:75:de:25:34:3b:97:78:31:96:50:19:05:8f:1a:
23:c0:b7:8e:a7:d9:21:b7:64:18:26:5e:8b:bb:6c:75:e0:70:
e7:cc:53:2c:44:14:74:66:56:ac:e1:e0:5b:c7:54:a2:4c:79:
c0:b6:01:0b:7b:76:85:db:32:e2:65:31:e2:99:bd:ed:98:2d:
8c:60:22:ff:72:8f:af:ac:2b:4c:2f:a6:62:a4:a9:b8:b0:43:
83:e9:53:ab:c5:72:64:fb:e3:03:50:ca:d6:52:f3:78:d3:c2:
b3:a0:27:09:1c:e0:d2:0c:76:4b:27:07:df:56:4b:e2:77:7e:
7a:4a:5b:11:07:be:b1:26:cc:d8:5f:21:dd:5d:3a:2c:6a:8d:
b1:a4:ea:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:55:10 2025 by rpki-client