Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
File: TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft (raw, json)
Hash identifier: o0EToavH7dI+d8d52QZ9ZNGFQxlpFfdvoxui/zR/3Ws=
Subject key identifier: 5F:DB:7B:E6:D6:54:7F:09:F1:D8:B4:8D:32:4D:7C:5A:6E:02:68:A1
Authority key identifier: 4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
Certificate issuer: /CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Certificate serial: 0199FC21769D2D10EC2E47FA5A93713CE8E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
Manifest number: 0420
Signing time: Sun 19 Oct 2025 11:01:15 +0000
Manifest this update: Sun 19 Oct 2025 11:01:15 +0000
Manifest next update: Mon 20 Oct 2025 11:01:15 +0000
Files and hashes: 1: TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl (hash: WPOS1F6Ve/aXUvHu2hc/3WAKsz2OicVZEutBzrKHBHg=)
2: U_0Qm9bmlfNCn0QcnMuKjqVhpok.roa (hash: rS2TodhOY6krb9NSbdEkyp8dkG2jF6/EwmhOAvSbJFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:76:9d:2d:10:ec:2e:47:fa:5a:93:71:3c:e8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Validity
Not Before: Oct 19 11:01:15 2025 GMT
Not After : Oct 20 11:01:15 2025 GMT
Subject: CN=5fdb7be6d6547f09f1d8b48d324d7c5a6e0268a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d2:1e:e3:25:5c:48:0b:d8:05:33:48:7e:f5:
88:93:54:24:eb:a6:ac:c4:43:73:38:83:45:84:f3:
7a:f1:da:25:97:9b:df:e7:fd:09:fb:12:7d:b5:a3:
5c:0d:4d:63:17:2c:62:27:7c:aa:cc:7f:4b:1b:d0:
50:19:64:96:47:0a:1a:30:73:f3:3c:30:04:d9:9e:
ac:60:1f:0a:c0:4b:46:df:b9:1b:0b:e1:99:d4:78:
98:8a:ec:9b:ec:67:98:67:9c:7d:f8:1b:7f:85:37:
77:70:7b:86:ec:5f:99:02:6b:d9:47:7a:fa:56:dc:
68:4a:c0:3d:be:39:33:97:e5:ef:fd:1b:36:f7:9d:
ad:19:ae:59:24:15:72:ac:70:9a:80:f3:dc:8b:1a:
10:37:d5:41:27:c8:0b:38:82:0b:14:85:e0:a0:ca:
a0:32:f4:5e:d7:da:5e:ac:f5:9e:40:8e:7d:e3:f0:
5f:61:b9:e9:93:b2:b4:f3:b8:9f:0d:fa:2d:74:c9:
62:52:ef:d3:92:df:b5:af:42:c9:5d:dc:60:ba:e9:
7d:16:90:1a:87:03:a0:49:fd:01:28:e3:eb:0c:c2:
04:23:04:0e:1d:f8:1d:12:ff:ed:e9:55:5c:b6:6d:
b2:7e:49:2e:fa:20:d2:61:2e:ed:3f:91:4c:5f:af:
2a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DB:7B:E6:D6:54:7F:09:F1:D8:B4:8D:32:4D:7C:5A:6E:02:68:A1
X509v3 Authority Key Identifier:
keyid:4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:04:82:d5:b5:64:e4:9e:eb:0b:e9:af:19:56:8d:6d:36:dd:
f2:eb:43:7b:5c:13:11:3a:1f:59:63:01:2c:48:71:85:11:30:
05:b4:48:6b:20:aa:1a:58:03:10:b8:98:e9:1e:b0:b3:c4:b2:
d8:98:e5:69:c9:d1:17:1e:90:07:aa:bc:67:8c:c5:0c:75:98:
bb:31:bb:15:e9:ca:8d:8a:42:c8:14:18:dd:6e:ba:c6:4c:28:
17:0f:6c:3c:9d:ef:87:e2:d0:ae:70:c8:3c:8c:1e:3b:2b:77:
42:48:ea:81:0c:c3:28:35:a2:f5:4b:02:5d:62:18:35:e3:8e:
30:b6:e8:7b:0d:c0:59:73:75:dc:ec:bb:3b:f9:b7:72:af:a2:
6d:ac:56:a9:1d:45:c0:49:4d:1e:fc:07:39:83:75:2e:4f:ac:
b5:52:be:5b:6f:65:d6:2c:e8:c3:a4:9d:dc:06:aa:b4:83:59:
71:bd:f6:5b:35:61:94:64:56:e7:dd:3d:64:61:7e:40:6b:ff:
4f:ff:97:6b:b2:a1:03:b5:e8:8d:d6:2d:f4:32:1b:f0:f8:f4:
ad:0d:b0:5b:1b:43:34:06:96:c0:b9:b7:a7:03:c7:b8:ce:52:
f1:91:23:0f:22:b8:66:2c:14:5e:4e:19:85:a8:7d:e5:26:e5:
5c:39:85:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:05 2025 by rpki-client