Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
File: T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft (raw, json)
Hash identifier: 9+L5v0u5D/QwxAtfvscw8g+L7owLuhap5vzmHRa19oE=
Subject key identifier: A7:A7:0B:38:81:9A:AC:31:C4:F9:58:C7:B7:DB:57:C2:09:90:25:1B
Authority key identifier: 4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
Certificate issuer: /CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Certificate serial: 0199FBEAD66597E33D68C169F4983E02A203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:01:35 +0000
Manifest this update: Sun 19 Oct 2025 10:01:35 +0000
Manifest next update: Mon 20 Oct 2025 10:01:35 +0000
Files and hashes: 1: T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl (hash: 4f04A/rpz2cmJGW644Jo9l5EpI586ChSqOeZD542Avk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d6:65:97:e3:3d:68:c1:69:f4:98:3e:02:a2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Validity
Not Before: Oct 19 10:01:35 2025 GMT
Not After : Oct 20 10:01:35 2025 GMT
Subject: CN=a7a70b38819aac31c4f958c7b7db57c20990251b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d5:05:fc:da:a7:23:54:ce:30:c4:02:e1:16:
e0:21:1b:20:69:20:6b:26:85:ad:b1:aa:18:fa:19:
16:6e:8e:f5:14:bd:e2:f3:df:c5:d0:f9:50:be:47:
da:a4:17:a4:d9:f2:a7:42:9a:11:ac:42:37:35:cd:
7a:76:cc:d4:08:d0:5f:ca:b3:c7:b1:9e:ac:10:6b:
2d:60:15:74:f0:d5:33:11:ac:6c:a7:7d:bb:ac:6b:
96:39:fa:24:11:1e:69:1d:64:91:c5:5f:1d:70:43:
4a:c4:bd:17:3a:05:a5:2c:af:d0:2b:ac:ab:75:ec:
67:ca:a0:5f:e9:f6:0c:47:92:ee:a0:8a:d8:44:38:
a4:f0:4c:4f:2e:a1:69:2d:83:0b:9b:eb:cc:d4:80:
79:5f:2b:0c:88:6b:6b:4a:d0:e0:0c:70:e9:57:10:
c0:07:d7:50:7e:67:cf:76:b1:b0:34:d2:26:51:25:
e7:02:49:a8:d1:17:3f:6b:a1:b3:46:d4:15:f6:80:
c4:f1:af:3b:e6:17:cb:7f:d6:29:c8:ca:97:92:96:
b0:f5:d5:0e:d2:6c:43:9d:f4:99:45:6c:a3:db:1d:
0f:6c:91:77:7e:75:ab:48:e8:9b:7c:b2:a2:a1:94:
0b:13:35:0f:be:43:b6:7d:9a:ba:cd:87:c0:52:38:
70:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A7:0B:38:81:9A:AC:31:C4:F9:58:C7:B7:DB:57:C2:09:90:25:1B
X509v3 Authority Key Identifier:
keyid:4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:89:fe:e8:b1:c3:d4:fe:da:62:b5:f4:ad:7a:6f:1a:b4:ba:
a9:1d:03:a9:1c:09:c2:c6:56:cf:5f:0c:b5:fb:83:17:4a:12:
4f:d6:11:47:10:d8:34:36:df:5d:18:50:0e:74:e1:3a:cb:17:
45:27:77:97:2c:06:6f:8a:eb:3a:51:e8:d7:70:8c:60:57:f0:
7b:ea:7b:2e:4f:15:0a:bc:3e:9f:e7:4f:f6:8b:4f:2a:51:33:
70:ad:58:b9:21:87:89:08:b0:94:a6:0d:a5:f1:67:c6:a2:e7:
17:81:5e:d2:1f:d1:2a:c0:82:91:0a:e9:02:97:5c:ef:92:2c:
b9:4b:22:9b:c5:97:db:2d:b0:2a:42:77:ea:a1:0b:c5:56:0e:
35:6e:82:8a:80:4b:9e:f6:f2:dc:5a:cd:8f:87:70:10:57:6b:
bc:53:5f:2a:0b:37:e0:de:c5:b3:86:ad:54:b1:d5:e7:61:08:
77:e3:71:cc:95:92:54:cb:33:d8:34:3f:a8:2e:75:e5:82:99:
88:02:0b:65:ca:35:b6:d2:95:76:f3:20:ca:fc:eb:b0:86:1a:
22:64:e3:8f:6d:5d:f8:bd:7e:1d:24:45:00:54:c0:1f:d6:44:
cd:25:6b:8c:34:87:3d:0a:2e:f7:be:8d:72:51:82:4e:fc:35:
89:50:7a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:08 2025 by rpki-client