Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
File: TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft (raw, json)
Hash identifier: Zc/x5Byie/ePc/pZTbwOqBEHWQpba39qUiIENqVTl+8=
Subject key identifier: F6:CF:24:00:16:A4:40:75:8C:73:B9:C0:E5:9D:C3:F9:7E:91:77:F4
Authority key identifier: 4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
Certificate issuer: /CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Certificate serial: 019A5307C5CFBB8CE817D24699414734977E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
Manifest number: 044D
Signing time: Wed 05 Nov 2025 08:00:09 +0000
Manifest this update: Wed 05 Nov 2025 08:00:09 +0000
Manifest next update: Thu 06 Nov 2025 08:00:09 +0000
Files and hashes: 1: TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl (hash: vW9mB7Lb2w20ak9wNHrpd73ANOPufYb0dcQao3oD+Yc=)
2: U_0Qm9bmlfNCn0QcnMuKjqVhpok.roa (hash: rS2TodhOY6krb9NSbdEkyp8dkG2jF6/EwmhOAvSbJFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:c5:cf:bb:8c:e8:17:d2:46:99:41:47:34:97:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Validity
Not Before: Nov 5 08:00:09 2025 GMT
Not After : Nov 6 08:00:09 2025 GMT
Subject: CN=f6cf240016a440758c73b9c0e59dc3f97e9177f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8b:be:60:2f:43:ff:55:39:39:a6:6f:41:7e:
67:85:be:c2:a7:79:ec:b6:d2:c3:7b:18:e1:f3:1b:
20:ee:3a:b7:a2:f1:33:23:e0:ae:86:c9:ae:b8:b2:
22:79:d0:3f:03:d7:f3:19:8f:0b:f2:d3:63:cf:b7:
75:62:da:d4:98:1e:85:bf:40:88:13:80:64:60:ff:
06:64:29:c2:a1:ce:50:6c:00:5b:fc:a5:18:36:13:
45:0f:b5:bc:63:5c:b6:12:42:89:a0:ed:3f:04:2f:
ca:01:13:ff:c8:9d:71:49:77:a0:20:22:6d:6f:7f:
d3:0c:3b:e0:7f:d5:f7:94:c6:fa:77:52:31:67:45:
5d:9c:14:bb:80:9a:f2:7b:02:a6:e6:f3:50:5c:f0:
fc:f0:b8:08:26:b1:b2:42:b8:73:07:75:be:6d:11:
46:41:73:91:f5:c4:a5:16:75:a5:6d:c8:de:ab:9f:
aa:7e:29:3f:eb:75:56:e8:e7:e0:ec:04:70:49:0a:
46:d2:d9:00:87:2d:d9:c9:55:bf:c5:31:57:6f:be:
ae:39:6e:da:81:0e:80:17:0a:84:0a:c3:08:d2:e4:
1c:d7:13:be:1d:0b:05:43:fd:64:56:8f:87:cc:84:
d2:dc:54:c2:0f:0a:37:46:81:d8:7f:5f:0a:b1:06:
2c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CF:24:00:16:A4:40:75:8C:73:B9:C0:E5:9D:C3:F9:7E:91:77:F4
X509v3 Authority Key Identifier:
keyid:4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:8b:dc:f2:af:f6:11:0c:1c:3e:f2:4c:ed:f4:65:9f:0f:48:
0b:25:cc:33:b4:bf:40:cc:5e:2d:9a:72:0f:95:0a:f4:ee:49:
a7:61:53:3c:03:7a:23:07:a8:d4:53:26:a2:d5:ef:d8:f8:47:
39:21:7c:5b:fc:b8:6b:33:a1:91:e7:c3:56:00:93:52:74:ae:
1d:9d:b5:f0:67:22:8b:fb:de:6b:cd:33:18:83:0d:5e:3d:39:
6f:a1:c3:66:dd:50:fa:ef:f1:19:e4:92:ff:ea:72:cc:14:74:
15:15:45:1c:35:0b:d0:62:2c:15:5d:4f:ea:c0:f5:a6:52:48:
34:fe:b6:75:80:40:fa:00:f1:1b:36:6c:e9:86:61:69:25:86:
75:3b:0a:68:18:79:f0:e9:63:d2:f8:99:8b:5c:59:b7:ee:ea:
08:de:9c:40:cc:f7:54:4d:65:25:e7:c1:d5:cb:a9:ba:02:0c:
01:82:02:e9:47:a0:b9:c4:17:97:cf:73:63:20:3e:f2:3c:ac:
8b:f5:4b:4f:6a:57:51:df:a2:66:6f:6a:67:46:34:51:73:8d:
48:dc:c2:2d:1c:38:25:af:c7:00:4c:6c:3c:8b:77:59:51:15:
17:ed:19:32:e2:16:65:65:1c:fd:b8:06:fa:bb:ee:c2:e4:2d:
14:45:69:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:06:48 2025 by rpki-client