Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
File: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft (raw, json)
Hash identifier: dzxDldJrZ55zzxqxUqtmHcezZZV45ulW3anR7nc9McU=
Subject key identifier: F1:1E:27:EC:21:84:3D:95:F2:29:41:13:39:7D:78:A4:18:99:50:E1
Authority key identifier: 4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
Certificate issuer: /CN=4d92be02509643bc7a2f862871639d08e276c636
Certificate serial: 019A50E38935CAFF3199983C25954B11C2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
Manifest number: 106F
Signing time: Tue 04 Nov 2025 22:01:20 +0000
Manifest this update: Tue 04 Nov 2025 22:01:20 +0000
Manifest next update: Wed 05 Nov 2025 22:01:20 +0000
Files and hashes: 1: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl (hash: DWZkxp8yIFphYdZRbrRH37FtUNaFxkrkG9X6Bg/zeWg=)
2: odyRy2FLHB1ia0-B0wtN-GrVmpY.roa (hash: kVTUOVywoB+P4bkpPocvLbzGPCGuaGOyFmq1BUYllIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:89:35:ca:ff:31:99:98:3c:25:95:4b:11:c2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d92be02509643bc7a2f862871639d08e276c636
Validity
Not Before: Nov 4 22:01:20 2025 GMT
Not After : Nov 5 22:01:20 2025 GMT
Subject: CN=f11e27ec21843d95f2294113397d78a4189950e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:95:92:49:ec:a9:07:5c:f4:7f:87:00:23:f8:
ba:b4:9c:e4:18:ff:ff:31:36:d6:e3:69:a8:0d:af:
5c:af:d1:f7:53:4e:a4:79:f5:d2:de:7c:a6:66:5a:
cf:96:86:12:c1:a1:25:29:19:d0:d9:85:3d:b4:80:
d0:d7:3d:6a:11:df:cc:04:36:42:9e:89:9d:5f:e1:
7e:50:52:f3:de:89:ff:dc:25:4c:4e:77:f3:1e:6e:
9a:af:3e:57:c0:c8:a0:fd:23:f1:f4:7d:e6:f3:69:
53:9a:c7:7f:7e:73:c7:bd:c3:dc:9c:44:31:f4:16:
ad:1d:f7:93:fb:eb:25:48:f7:cc:16:9b:c7:5b:39:
95:0c:60:6f:2c:18:cd:a2:c9:14:46:04:8e:eb:85:
da:d9:65:32:25:e0:9f:a1:a5:9e:38:da:57:13:73:
28:88:00:ab:e8:5b:6f:a5:0a:38:a4:b6:ed:55:74:
52:46:8b:b4:ac:39:5c:1e:ea:da:48:42:e4:25:cf:
e9:41:39:b9:68:5f:75:29:ef:a6:77:70:99:0b:a2:
51:06:85:a2:f6:89:32:5c:d0:98:00:2a:e4:c2:ad:
d8:02:ac:0f:e6:6e:d5:19:e8:32:12:b2:8e:47:b3:
10:36:8d:d3:89:22:ca:00:ee:a1:0b:76:81:46:0b:
24:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1E:27:EC:21:84:3D:95:F2:29:41:13:39:7D:78:A4:18:99:50:E1
X509v3 Authority Key Identifier:
keyid:4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3c:26:5e:5f:5d:ef:cc:25:83:3e:ac:21:ad:cf:65:da:95:
b7:e0:48:c4:e4:48:4e:17:0c:a1:3c:0e:ba:48:a1:5a:83:f9:
5d:ac:b8:7a:df:ed:9a:1a:b1:01:76:fb:7d:50:e2:61:56:1b:
77:de:95:0d:5f:97:9b:b6:70:14:c8:a1:69:82:67:16:0a:46:
2c:f3:72:ff:92:f9:57:68:88:b0:9c:1b:94:6a:a6:95:db:8e:
36:9d:65:10:1e:f1:e5:a9:cc:80:75:a9:8e:07:40:dd:75:34:
f1:80:6b:9a:41:73:4c:70:49:e2:3d:0c:a9:7b:32:ec:28:3e:
31:da:d8:74:e7:95:f1:12:12:6f:48:71:19:96:3b:27:9f:b7:
02:38:24:a0:42:67:60:5e:70:56:fd:00:b6:09:3f:54:b3:b7:
da:3f:96:9c:3e:47:2d:68:b8:c6:9b:e2:81:c4:a6:ba:14:c4:
5b:8f:aa:0f:4f:59:2e:bf:f0:ee:cd:66:d3:c4:af:be:56:cd:
85:96:1b:d2:1a:75:94:55:46:5e:69:3d:ad:b9:1d:e0:fa:ae:
0d:d1:b6:13:8d:0c:da:df:bd:4c:80:34:bd:eb:9e:8f:b1:08:
f8:00:96:ea:2e:a3:96:05:1c:5a:0a:c7:ed:f8:1e:62:04:56:
7d:cf:a0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:48:10 2025 by rpki-client