Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
File: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json)
Hash identifier: w/MOpKaG443JydrzAyjqsQBCVhEhrKPhqp9C/ump1KA=
Subject key identifier: A0:F5:0A:18:43:48:9B:D6:93:31:76:62:7E:DE:E7:5F:06:B5:C8:AF
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Certificate issuer: /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial: 019A50E2BDCD41979778CEF2CB3C694A86B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 22:00:28 +0000
Manifest this update: Tue 04 Nov 2025 22:00:28 +0000
Manifest next update: Wed 05 Nov 2025 22:00:28 +0000
Files and hashes: 1: EyfFy2NH9aJCITkH8OY0aqXp60U.roa (hash: g2tjwAhWJaxtQGBOt8pN1pr0p20riiq5xD7kk7B2kOI=)
2: JpQoMr07IMCnzpUf3J5IOOFupZQ.roa (hash: 0/xTgfGRIN2+JskAIstMX9/OEPtDKUPLwgbvCnLM6hA=)
3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: KhOabQbo66Xp0d7l5IHr91lJbU8vSEsI4ZWEpyHqocY=)
4: uuK2CvjDB1elMTvaPuzNpmsW9KY.roa (hash: S75QfkrkhNbGGxbOdQrVjlRuXr4OJ2AaZXwkQhwwcQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:bd:cd:41:97:97:78:ce:f2:cb:3c:69:4a:86:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Validity
Not Before: Nov 4 22:00:28 2025 GMT
Not After : Nov 5 22:00:28 2025 GMT
Subject: CN=a0f50a1843489bd6933176627edee75f06b5c8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d3:0d:68:f4:33:61:89:cf:10:5c:bf:d8:36:
0c:92:52:56:42:60:2d:89:e7:2e:2a:e5:03:52:43:
81:1c:41:66:7a:4c:44:d3:ad:72:87:1a:cf:6b:5f:
b3:4e:80:94:db:ad:2b:ae:5d:36:c6:c4:c3:64:c0:
07:6b:80:70:bc:87:04:59:47:85:c3:0e:75:31:cd:
f5:16:14:74:22:d1:be:1f:63:f2:4d:80:4b:38:ac:
24:8b:ed:64:fe:84:a5:c6:ed:85:7f:4b:28:b5:12:
5c:66:c3:b1:66:00:7b:01:e6:91:82:99:d0:da:4a:
e5:3c:66:cc:0d:a9:4a:b3:d9:d9:7f:75:db:6d:2b:
85:24:15:8b:50:4d:6e:33:a7:24:0e:b7:5b:86:dd:
7e:52:37:45:25:6b:15:ce:22:c6:e4:2b:50:b7:f5:
d7:3e:60:99:4f:1c:c5:04:de:9a:1e:bd:8c:0f:d2:
b4:a9:c9:f3:a8:0f:a2:57:78:13:f1:f4:e7:29:46:
df:26:5a:79:6b:50:a9:f4:6d:65:64:6e:ce:94:4e:
9b:07:5f:16:15:b3:da:f2:63:53:49:7f:d8:40:31:
65:4b:0b:88:b7:ed:bb:f7:0d:d9:6f:7e:27:4f:82:
a9:13:e3:ab:e7:8f:b9:03:8d:cc:f9:4f:b6:51:32:
78:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F5:0A:18:43:48:9B:D6:93:31:76:62:7E:DE:E7:5F:06:B5:C8:AF
X509v3 Authority Key Identifier:
keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fe:0d:8a:11:04:18:0e:68:43:10:69:96:c9:96:4f:80:65:
69:df:3c:8f:f3:31:47:90:ab:53:32:2c:a6:7a:a7:03:80:b7:
6a:bc:89:46:b3:6b:b2:25:17:9f:89:eb:97:35:4e:59:91:4f:
0d:23:74:bf:43:66:5e:85:65:55:8e:cc:ac:41:83:8e:98:cc:
62:b1:bc:6b:b0:00:b9:94:13:70:82:74:b5:e3:e4:1d:12:ef:
68:5d:10:49:4a:a6:35:37:56:e6:7a:51:02:21:1e:8d:fc:7a:
73:1f:d2:fc:1f:a0:83:b3:31:ea:bf:99:73:0c:d5:c0:60:52:
4d:44:3f:53:80:14:83:2b:c7:b1:ac:5e:f3:94:c7:d4:07:c2:
73:f3:3f:b4:42:f9:f9:c8:d2:33:e6:97:53:f9:ac:80:ec:fd:
b4:d2:c4:a4:48:45:56:d8:ba:2a:6d:11:b3:17:1b:b7:ba:21:
71:de:3b:15:c8:d8:86:3e:05:1a:9a:cc:53:b2:94:1c:e2:7d:
27:66:78:6d:7d:5f:f7:74:e0:69:5e:39:8a:41:73:94:17:d8:
c1:59:15:f1:fd:98:92:0d:b2:4c:5a:1c:67:99:12:7d:e1:15:
b5:ea:07:f3:54:8f:13:0d:da:d8:d6:3f:35:3f:02:9d:93:c8:
30:44:7b:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4r3NQZeXeM7yyzxpSoa2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMzJiOWVmZjlmMDJjN2NhYmUxOTk1YTJkYjUwOWQ4MjU4
ZDM1ZmMwHhcNMjUxMTA0MjIwMDI4WhcNMjUxMTA1MjIwMDI4WjAzMTEwLwYDVQQD
EyhhMGY1MGExODQzNDg5YmQ2OTMzMTc2NjI3ZWRlZTc1ZjA2YjVjOGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNMNaPQzYYnPEFy/2DYMklJWQmAt
iecuKuUDUkOBHEFmekxE061yhxrPa1+zToCU260rrl02xsTDZMAHa4BwvIcEWUeF
ww51Mc31FhR0ItG+H2PyTYBLOKwki+1k/oSlxu2Ff0sotRJcZsOxZgB7AeaRgpnQ
2krlPGbMDalKs9nZf3XbbSuFJBWLUE1uM6ckDrdbht1+UjdFJWsVziLG5CtQt/XX
PmCZTxzFBN6aHr2MD9K0qcnzqA+iV3gT8fTnKUbfJlp5a1Cp9G1lZG7OlE6bB18W
FbPa8mNTSX/YQDFlSwuIt+279w3Zb34nT4KpE+Or54+5A43M+U+2UTJ4sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKD1ChhDSJvWkzF2Yn7e518GtcivMB8GA1UdIwQY
MBaAFE8yue/58Cx8q+GZWi21CdgljTX8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNzJjNGUtNmY1ZC00NzVlLTliZTkt
YzQwNzNjMTNmZjdjLzEvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xNzJjNGUtNmY1ZC00NzVlLTliZTktYzQwNzNjMTNmZjdj
LzEvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnv4NihEE
GA5oQxBplsmWT4Blad88j/MxR5CrUzIspnqnA4C3aryJRrNrsiUXn4nrlzVOWZFP
DSN0v0NmXoVlVY7MrEGDjpjMYrG8a7AAuZQTcIJ0tePkHRLvaF0QSUqmNTdW5npR
AiEejfx6cx/S/B+gg7Mx6r+ZcwzVwGBSTUQ/U4AUgyvHsaxe85TH1AfCc/M/tEL5
+cjSM+aXU/msgOz9tNLEpEhFVti6Km0Rsxcbt7ohcd47FcjYhj4FGprMU7KUHOJ9
J2Z4bX1f93TgaV45ikFzlBfYwVkV8f2Ykg2yTFocZ5kSfeEVteoH81SPEw3a2NY/
NT8CnZPIMER7QA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:21:52 2025 by rpki-client