Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
File: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json)
Hash identifier: LY3Ncg2ww0bjtGKzaoaFsNhip91LDizsXFEOumj2UuE=
Subject key identifier: 8E:7F:A9:47:D5:AE:63:89:0B:CE:78:AD:29:B1:6E:F1:28:85:9D:B1
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Certificate issuer: /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial: 019A52D2A71E7738ADE1FB74794B2874BEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 07:02:08 +0000
Manifest this update: Wed 05 Nov 2025 07:02:08 +0000
Manifest next update: Thu 06 Nov 2025 07:02:08 +0000
Files and hashes: 1: EyfFy2NH9aJCITkH8OY0aqXp60U.roa (hash: g2tjwAhWJaxtQGBOt8pN1pr0p20riiq5xD7kk7B2kOI=)
2: JpQoMr07IMCnzpUf3J5IOOFupZQ.roa (hash: 0/xTgfGRIN2+JskAIstMX9/OEPtDKUPLwgbvCnLM6hA=)
3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: CHOWXGCb3MkUykMO6jiwLCvD4cbcJduXcZUYDy5w6vY=)
4: uuK2CvjDB1elMTvaPuzNpmsW9KY.roa (hash: S75QfkrkhNbGGxbOdQrVjlRuXr4OJ2AaZXwkQhwwcQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:a7:1e:77:38:ad:e1:fb:74:79:4b:28:74:be:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Validity
Not Before: Nov 5 07:02:08 2025 GMT
Not After : Nov 6 07:02:08 2025 GMT
Subject: CN=8e7fa947d5ae63890bce78ad29b16ef128859db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:05:b7:d5:2e:e4:14:08:65:9f:ca:fe:a9:
94:81:d7:f0:5b:df:f8:5b:47:ba:58:17:a2:24:a1:
6e:92:d5:a1:86:92:64:0a:32:44:9f:bd:63:47:7e:
2a:82:b7:87:b3:27:50:cc:90:be:eb:e4:a5:d0:89:
b1:fb:fd:cc:a7:33:ce:e3:86:08:d1:d4:c6:39:14:
92:ad:2d:b4:ae:ed:4c:fc:87:c8:7e:e0:b0:4c:e1:
1c:65:71:e8:4b:c8:e3:b9:34:cb:a6:c3:c6:5f:3f:
5b:45:c0:0c:e3:4e:ef:7b:91:34:44:6e:a4:6c:9f:
77:c0:30:75:be:fb:62:ab:66:86:29:08:44:c4:e8:
d9:c8:50:91:67:e1:ff:8e:57:8c:16:ec:48:85:8b:
cf:08:39:20:39:ee:3f:24:a0:c6:66:6f:37:ee:d0:
f6:59:44:35:61:11:d4:f9:22:0b:c7:d9:1c:fa:e4:
8e:e6:1f:89:ef:97:dd:b8:32:3b:49:a0:ff:8b:25:
08:94:ac:04:71:dc:11:a5:68:83:9c:2c:cf:eb:5e:
c4:d1:ff:a5:d7:8e:9f:77:1a:92:99:a5:79:a8:bf:
cb:72:da:3b:16:05:10:8b:8f:4f:15:e0:c3:9d:73:
92:02:a2:9e:cf:91:b5:ae:68:fc:25:d5:8f:00:f5:
43:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7F:A9:47:D5:AE:63:89:0B:CE:78:AD:29:B1:6E:F1:28:85:9D:B1
X509v3 Authority Key Identifier:
keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f1:bf:86:89:7a:cf:8c:50:d3:06:58:a8:f1:a8:98:41:4e:
a4:62:af:bf:d9:86:97:0f:24:a8:cb:96:94:f4:c9:ad:ca:bd:
77:27:2f:fd:61:98:33:b7:cb:f3:fd:02:15:c2:39:6f:01:c2:
c1:60:8b:40:54:36:91:8c:eb:09:aa:10:f6:ab:81:72:33:3a:
c6:12:3f:0d:7d:d2:73:b7:bd:d2:74:51:8a:35:7c:8c:9c:23:
8c:9b:2a:cd:19:e2:1a:c5:86:9b:b4:c1:74:87:a5:a2:7f:44:
ca:65:f9:8c:a7:c4:1c:94:37:53:06:e3:a5:c6:fd:67:06:6d:
b9:74:94:e8:2a:a5:95:09:27:d3:25:4c:3c:81:20:f4:e7:0b:
78:ce:af:7f:8e:7c:e9:f7:e7:c2:1f:81:66:0d:01:a0:c6:80:
30:0f:23:74:c8:83:a3:e2:bb:b4:af:5c:e6:74:6e:1d:c3:b7:
4b:48:7a:f8:d8:dc:12:d6:4f:d4:60:98:32:8d:d2:5b:76:8d:
b5:cd:23:84:30:35:01:3b:fe:6a:bd:f9:e0:ad:ba:cc:b9:50:
8a:6d:0c:4a:24:0e:25:da:5f:1f:af:41:75:36:76:fe:b4:ec:
b7:f8:39:73:3c:05:7a:5a:3b:5d:4b:b5:87:fe:72:fc:fe:6d:
32:e9:09:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:16:18 2025 by rpki-client