Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier: xQecBoGHkmlZooG2RLUOl5Yo3yx9tF9f+GNrvhZPsaA=
Subject key identifier: FE:E3:35:3D:EA:11:E5:82:64:D2:4E:A8:74:ED:8D:90:7C:47:47:DD
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial: 019A4EF4620BCBB474C870FD65940547AA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:29 +0000
Manifest this update: Tue 04 Nov 2025 13:00:29 +0000
Manifest next update: Wed 05 Nov 2025 13:00:29 +0000
Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: ro0XtRGPgGPSRWGr3UMb9pltLEwrCFVqfNBSw5wjMFA=)
2: UqGmWpGtflaEJvCw0bHQvmEnA74.roa (hash: EKIY9C4V0PmpfSkXvjVMr8vcUWFSLcsQTMlkDeIRJyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:62:0b:cb:b4:74:c8:70:fd:65:94:05:47:aa:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Validity
Not Before: Nov 4 13:00:29 2025 GMT
Not After : Nov 5 13:00:29 2025 GMT
Subject: CN=fee3353dea11e58264d24ea874ed8d907c4747dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9b:78:7d:6f:34:a2:9c:f2:04:7b:b0:2d:37:
c2:19:19:59:bc:3e:c2:32:7f:4e:b5:dc:c8:91:5c:
df:af:cb:d3:97:8c:b8:e5:4e:c2:9b:82:d3:8f:4a:
dd:be:0d:a7:d9:5c:77:24:84:8f:f7:e5:2c:e5:e4:
f2:d6:ea:14:c9:2f:22:9f:5e:94:b0:fa:32:bb:30:
30:93:9c:d5:63:41:e5:15:13:43:ef:de:df:ec:aa:
db:f1:ef:96:ad:6e:b6:a9:59:b6:fa:d3:32:74:bb:
cc:2c:83:a9:f5:c3:78:51:c6:b0:e0:be:d0:89:dd:
fe:fa:7e:12:38:9a:f0:b4:9f:48:46:40:6a:2b:6d:
98:7d:50:9a:5a:bb:11:7c:c7:39:78:55:a7:b6:01:
9f:ff:61:3c:9b:88:5d:3a:f4:67:b8:5e:e1:f6:e3:
3b:67:81:f2:05:1e:2f:34:fe:aa:7c:e1:3e:28:cc:
6a:51:f4:e6:55:7f:44:db:e3:7b:12:34:5c:48:e1:
d2:0a:8a:4b:4d:8d:93:84:4d:89:53:99:68:37:bb:
0f:63:26:cd:28:4b:12:22:8a:31:d8:49:7b:e6:1a:
b5:32:33:cb:09:02:13:6d:09:7e:c3:70:0e:dc:cb:
41:43:78:8a:9e:9a:cb:80:7b:5f:7e:24:84:9e:2e:
35:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E3:35:3D:EA:11:E5:82:64:D2:4E:A8:74:ED:8D:90:7C:47:47:DD
X509v3 Authority Key Identifier:
keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:b8:ec:fb:24:a8:b4:3c:aa:86:9f:59:ba:5d:fe:ea:ac:f5:
2c:2f:0b:e5:45:fe:4e:c0:ce:e8:bf:14:44:a5:14:e3:9d:dc:
5c:b4:2a:58:09:02:55:c9:59:30:7c:f5:d9:82:a3:57:38:9f:
02:ba:53:71:5f:c5:cc:01:55:e5:54:b5:a2:4f:08:90:ef:2c:
e0:a2:ef:ae:a6:b7:30:00:28:35:0b:ad:d6:4f:bb:1d:76:d5:
1c:84:0e:58:b5:0f:31:cf:c1:69:a6:22:5a:de:68:28:d4:b7:
c3:74:62:f5:c0:87:80:ff:84:f3:4d:f9:86:e9:c3:8a:05:1e:
f8:a5:fb:5a:e1:7e:38:51:c2:f7:01:89:4b:ac:fc:c4:e0:0a:
f9:4a:cd:fe:80:fc:87:37:be:3a:a4:8b:43:b9:58:29:f4:5c:
2d:11:26:b8:29:a0:b8:f0:29:87:6c:68:0b:16:d2:95:42:b5:
f5:50:0c:2e:d0:f1:63:fc:63:bf:2a:27:9f:24:58:17:0d:a0:
e0:dd:f7:8b:39:00:34:10:c7:88:3f:00:50:0c:61:52:ea:8b:
fb:4e:a6:20:70:f2:2e:09:65:61:07:69:46:fb:a5:9f:ce:f9:
4e:b5:88:c5:8b:85:c7:5c:88:2c:40:65:00:ca:3f:a9:bd:12:
98:62:ba:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:57 2025 by rpki-client