Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
File: S_TZ-mawCKCMO47YLDgmfh0hJVA.mft (raw, json)
Hash identifier: RZ5iA2erw270v8/1jMP29B73RHQ/vnMIbtM036B8qic=
Subject key identifier: 75:46:D0:36:ED:89:8E:6E:4B:E0:92:38:7C:47:79:FC:9D:48:24:E4
Authority key identifier: 4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
Certificate issuer: /CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Certificate serial: 019A4EF50649E7FCA3EC8E38BCA7EB0915DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:11 +0000
Manifest this update: Tue 04 Nov 2025 13:01:11 +0000
Manifest next update: Wed 05 Nov 2025 13:01:11 +0000
Files and hashes: 1: S_TZ-mawCKCMO47YLDgmfh0hJVA.crl (hash: zC13NSxKwrTvuMvAL+ShO68u/S3/Ttx4JMep5w8E9Kc=)
2: VHi9vxpSG4tYfENJTcecEKHCVRo.roa (hash: ZPBYgaWs41C7d8q4Zb2hDOx2GjzVI3YJSGRCZKGJpWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:06:49:e7:fc:a3:ec:8e:38:bc:a7:eb:09:15:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Validity
Not Before: Nov 4 13:01:11 2025 GMT
Not After : Nov 5 13:01:11 2025 GMT
Subject: CN=7546d036ed898e6e4be092387c4779fc9d4824e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ad:d5:d3:15:36:6c:22:91:65:36:49:78:5c:
75:77:29:41:a1:eb:be:79:10:02:11:83:13:fc:51:
22:91:98:df:0d:c6:26:74:90:01:ee:b1:07:91:61:
09:49:23:be:c9:ba:2d:fb:fe:fb:e5:98:20:24:fb:
73:75:42:a0:7e:85:53:c5:3f:08:d2:88:ef:73:64:
80:77:e9:54:30:af:a6:73:0b:b2:81:e8:40:fb:4a:
1a:61:12:0a:09:95:80:eb:48:75:1e:6b:99:9d:35:
45:f4:e8:f5:13:b4:30:f0:f1:45:87:7e:4f:1e:2b:
db:c3:43:d8:ba:fc:90:7d:0e:1a:89:5b:0c:92:f3:
43:7d:22:e3:de:24:c2:29:3d:01:7a:dd:1e:c5:8b:
95:1e:cb:8d:74:41:9f:86:3e:25:e7:ad:4d:6b:c7:
1d:7d:3a:ae:7d:11:1a:a0:16:2c:1a:ab:21:ff:5a:
89:d5:42:2b:b4:13:dd:d9:92:a8:80:b5:ea:d4:67:
aa:b4:56:d4:61:4d:d8:6d:73:5e:49:aa:59:fb:82:
9f:c4:7d:e8:e5:06:34:30:66:ed:e7:8a:a9:86:39:
b8:b5:4f:9f:3a:b2:d6:36:b9:fe:8a:1b:3e:2c:d6:
39:4f:09:f9:fb:66:a3:fb:93:cc:a1:46:d6:09:c5:
25:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:46:D0:36:ED:89:8E:6E:4B:E0:92:38:7C:47:79:FC:9D:48:24:E4
X509v3 Authority Key Identifier:
keyid:4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f6:63:f8:69:04:cb:1f:b3:ac:2f:48:25:dc:db:ec:35:0a:
e3:5c:89:c8:c4:c4:be:3e:64:9a:35:c1:b3:b8:7b:76:d4:0d:
b3:73:58:7a:c7:5d:12:8a:57:e4:bd:3b:40:0b:94:1f:f3:ef:
a5:7d:ca:8f:9d:f5:ef:fd:5c:39:a7:48:71:23:b6:90:4c:a6:
33:0f:80:c1:61:c9:71:8f:3e:8b:2c:7e:ee:5a:7a:69:27:d8:
52:8c:6c:03:09:6c:0c:b2:45:97:d8:52:b1:ca:9a:45:6f:12:
9f:80:96:75:6b:d2:99:40:47:95:89:15:03:b3:1c:28:fc:10:
b5:12:19:10:a8:d2:7b:f1:e2:c8:b1:bc:9c:68:50:84:8d:e5:
4d:6e:0f:14:17:78:cf:24:01:07:1c:15:ab:2b:65:dd:82:1f:
ee:17:aa:3a:21:ed:cd:47:6c:a6:11:29:64:8b:c8:73:36:66:
87:78:47:12:f3:3d:1b:6c:6a:ff:e2:5c:6f:44:64:76:84:73:
05:87:ca:ee:41:28:d3:70:31:9f:b5:6f:d9:51:b1:e8:21:f3:
9e:71:05:18:35:82:1c:49:f1:1b:25:93:cb:8e:6f:f0:65:3d:
a0:48:a4:fe:67:4c:5e:5e:fa:f9:4f:7b:0f:23:91:f1:5f:35:
f9:3c:33:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:40 2025 by rpki-client