Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
File: TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft (raw, json)
Hash identifier: 8pC+uUYubOcgmtYp9fLFE4g/ExXncBfAfa6yL/DsDno=
Subject key identifier: 22:5F:C0:D7:7B:FB:D0:23:FE:57:B9:3C:B0:59:12:B4:27:AD:BB:C4
Authority key identifier: 4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
Certificate issuer: /CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Certificate serial: 0199FE7E27FDA2F7772D194759B97E5EA818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 22:01:44 +0000
Manifest this update: Sun 19 Oct 2025 22:01:44 +0000
Manifest next update: Mon 20 Oct 2025 22:01:44 +0000
Files and hashes: 1: TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl (hash: zybAyhHj8RAQA5b/sB80xkLX+9zIT44st4MwS/BMXlw=)
2: duQK_L6CU_XoLOUwAAqGbBQ_c-w.roa (hash: c1e0IDxT38pGihwSE7PrZG6hwT/3gvgX+OwTOhT9gWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:27:fd:a2:f7:77:2d:19:47:59:b9:7e:5e:a8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Validity
Not Before: Oct 19 22:01:44 2025 GMT
Not After : Oct 20 22:01:44 2025 GMT
Subject: CN=225fc0d77bfbd023fe57b93cb05912b427adbbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:41:67:80:a1:10:82:0b:4f:75:87:2e:6d:d7:
26:4f:9b:1f:f8:ab:c1:90:67:1e:73:8a:a9:58:9f:
2c:40:9d:c1:c0:3b:35:e2:ec:48:79:bf:c0:6a:3d:
6a:1e:90:96:60:31:83:ef:fe:c2:79:6c:a4:84:ff:
6a:3f:c6:0a:70:14:b3:95:a3:2c:7f:fe:ad:8f:95:
62:02:f5:2b:c7:44:9a:80:aa:43:bc:1e:ef:9e:b6:
3d:05:84:cf:3a:29:14:b8:56:f3:7e:bb:49:72:c7:
0f:5b:82:a3:ea:21:55:47:db:2a:8b:22:d0:66:11:
c2:3e:b0:e4:78:e6:5c:0e:cd:42:32:80:cc:a5:a2:
42:e2:bb:0a:00:b9:e7:ab:83:14:12:a1:da:24:86:
84:58:f1:af:e6:c8:2a:2b:9a:c7:93:d6:14:b5:6c:
c4:ad:ae:1e:a5:5f:31:72:20:38:e4:0e:d4:60:b3:
4f:a8:aa:ba:22:30:b8:eb:58:20:ac:78:fb:23:d9:
8e:39:d3:42:12:47:ee:74:e5:b6:32:bc:01:91:ac:
7a:8e:90:5a:88:bd:c4:3f:09:82:63:65:0d:d7:0e:
cc:5f:c3:3f:e1:31:53:8a:f8:30:de:4f:a5:cc:ed:
fa:51:6a:a6:77:47:80:a2:e5:1e:b4:a3:1c:94:03:
0f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5F:C0:D7:7B:FB:D0:23:FE:57:B9:3C:B0:59:12:B4:27:AD:BB:C4
X509v3 Authority Key Identifier:
keyid:4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a3:8b:0f:ac:7e:31:23:fa:21:f6:4c:bd:79:17:d3:04:e1:
5c:dc:4d:bf:8b:90:54:66:09:1e:f1:6f:dc:51:3d:0e:48:ee:
69:75:66:61:76:99:1e:bc:95:bb:c8:29:b9:04:2d:47:57:df:
03:59:e9:10:be:fc:20:51:3a:c7:a9:75:de:17:83:14:3e:fe:
ea:89:86:e7:be:1f:65:cf:0f:ae:ed:d9:ee:6a:b7:d7:d1:6e:
89:17:0c:b7:d8:81:1a:5a:0e:cf:c5:bf:50:2b:95:53:0b:c0:
ef:3b:4b:bc:8f:39:da:8a:0f:18:0d:1b:50:e9:ee:fe:f2:06:
e1:e3:6a:3f:4e:5a:53:22:0e:d8:40:16:fa:73:21:69:97:60:
b8:ed:88:9d:60:4b:c1:62:1d:8d:3c:04:94:7c:eb:82:01:24:
e8:57:21:31:67:dd:e0:54:fd:84:56:ec:a5:68:16:65:44:41:
6c:ac:db:f7:71:e3:c2:ea:a2:7a:0d:d1:a2:ac:0c:0f:39:fa:
38:22:2d:22:52:b9:99:ed:95:7d:2c:32:36:b2:f5:67:0a:5e:
84:e4:53:19:f7:09:fd:f7:85:7b:ce:59:8c:c2:4d:34:f7:1b:
b0:80:50:ac:de:39:d4:ec:3f:c1:65:7e:fe:75:32:f2:fa:f5:
3a:7c:60:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:11:35 2025 by rpki-client