Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File: TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier: zXWXaj3GAxlYn4Uo+7L16pGq3GcP9TOkfHzpByt4Qo8=
Subject key identifier: 36:BE:40:F5:A1:6C:22:23:BB:DF:C4:AD:B7:A6:3E:B0:49:A0:05:29
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 019A4E4FA7DD407907FBFABC1825D6963E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number: 16FA
Signing time: Tue 04 Nov 2025 10:00:34 +0000
Manifest this update: Tue 04 Nov 2025 10:00:34 +0000
Manifest next update: Wed 05 Nov 2025 10:00:34 +0000
Files and hashes: 1: 8Wt50oYgSIhV5-nromefXM1xUHs.roa (hash: nonj7X6EJpkPkTZ26/d/JTxCuBr7E4OqIEl5kLX7Uvc=)
2: 8_cQRjzqzZHtBUadp-m1RHbfYtA.roa (hash: UqDtwYBpkHo94AcNyXlmGDGQI5vQH42VfJTVEsv7Dqg=)
3: KNr8dCxZSv2tLdivt-ye5q6LflE.roa (hash: OddKT0B3adcsA3ke/HzglyeCPb/vcMLtq5FBhRNFDKs=)
4: LlXFwn2Cp-oz5_wkoV4hnOjpZhc.roa (hash: b+9t4WdjfYrQBYgVT5TU7qZAYZFFGjvTZY/AWbdEORo=)
5: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: uzfTNIFnqdAGMqL/eyHkxsFJ/c9LP6pfEKwICAfoD1I=)
6: qzzHZUBjcSRGFasL_IeeyUOUJ98.roa (hash: Lhbg0pCg1KfB+dSdb+vO645LuzkQlZQdXs3opMNsPwc=)
7: uFl9Jbyr6wsOz0RTyXyU1uLpiuQ.roa (hash: IIGP5wcOQKkgCwi0o8TwNvlGqyYDZZaNOwMVkOIQtWw=)
8: ugnRmlrkR8TJKKb_eVy88x5cRBU.roa (hash: wA1+l0+3DAminFs23I5vSPrzOSbWOqFz2PTbS6VlnsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:a7:dd:40:79:07:fb:fa:bc:18:25:d6:96:3e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Nov 4 10:00:34 2025 GMT
Not After : Nov 5 10:00:34 2025 GMT
Subject: CN=36be40f5a16c2223bbdfc4adb7a63eb049a00529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:7f:8a:cf:28:09:fb:41:dd:d7:1e:cc:1c:
4e:18:2b:7e:3a:85:82:47:00:1f:55:7b:50:de:e9:
f6:92:1a:c5:f0:72:a8:71:65:fc:e0:cc:f8:da:bb:
c3:ab:92:72:8f:f0:ba:12:d2:da:fe:f7:3d:00:c0:
5c:9b:be:cc:bb:2b:e6:df:80:eb:99:3f:14:e9:10:
00:00:04:ba:06:17:fe:9f:ab:a7:b4:59:48:5a:83:
6b:df:43:0d:50:63:af:d5:f4:eb:e9:9f:ad:f7:74:
36:08:c0:a8:6d:05:9e:9e:9d:08:1b:2b:ec:d7:95:
99:8b:25:93:53:ec:0e:91:09:30:37:bd:6d:0a:6e:
2c:c8:8d:da:a7:68:1d:5e:e4:e0:ab:53:fb:43:c1:
af:58:b5:ff:7d:a3:59:e4:88:04:4d:39:70:e7:19:
8b:ee:27:c7:a7:e0:bc:76:09:df:5c:f8:85:91:9a:
a0:8d:d7:74:7e:06:77:b7:4d:40:54:75:b4:85:84:
72:7d:55:c9:77:8b:f6:44:04:9f:45:d1:44:f7:4b:
18:e4:ce:e6:cb:ac:e1:74:a0:3b:ef:6c:3b:8e:da:
e8:a7:8e:23:77:26:f5:07:ab:fa:98:c8:16:ae:4a:
5d:9b:35:46:7d:0f:49:4b:a5:75:d9:69:f5:77:0a:
5c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BE:40:F5:A1:6C:22:23:BB:DF:C4:AD:B7:A6:3E:B0:49:A0:05:29
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:79:31:c0:9d:0b:f9:79:b5:a7:12:5d:24:67:6d:e6:85:4d:
91:9b:71:c8:76:42:d8:5d:d3:41:6c:ba:90:98:46:5e:aa:14:
62:d9:9c:c4:ce:71:b6:39:5a:03:17:75:33:88:f2:e3:b1:f4:
28:77:5b:66:6f:55:cc:0a:60:63:74:78:e4:ce:f9:30:cb:e2:
e0:05:4f:0c:66:44:8d:6d:d6:14:3b:78:1b:8c:46:2a:fd:87:
b9:3b:de:64:d9:12:72:7d:4f:46:7d:99:a8:14:12:a1:9b:a3:
c6:3d:bd:8f:e5:3a:bc:89:cc:2a:3d:96:bf:d2:7d:b3:de:5b:
c0:98:95:ea:b3:8a:62:29:fb:99:57:f5:d9:4c:34:5d:ae:5e:
c2:9c:b5:20:eb:f9:91:ff:73:16:eb:41:07:fe:42:a9:67:28:
c6:52:e9:34:9b:da:65:a3:ac:26:c8:5c:49:41:76:6d:2d:d9:
db:44:c7:7a:25:2c:62:e1:d8:d8:17:28:0e:a1:c2:cf:f1:77:
0f:64:ac:a1:ac:99:42:f1:e8:a5:32:b9:9e:74:0a:62:d1:c1:
a8:77:8b:b7:3c:f7:69:dd:20:25:fe:a8:ad:93:85:c5:10:07:
30:7a:4f:bb:c7:c7:91:94:97:66:27:1c:b1:20:a1:cc:ca:70:
03:f4:f7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:49 2025 by rpki-client