Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
File: S_TZ-mawCKCMO47YLDgmfh0hJVA.mft (raw, json)
Hash identifier: Brp5qHlw7uu2zPvnxt6U4Atrrrm0io3jJTrsYZwyRzc=
Subject key identifier: 6A:45:C3:B0:FE:53:D5:A7:B7:FE:AE:DF:06:12:5D:D7:05:D5:4F:88
Authority key identifier: 4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
Certificate issuer: /CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Certificate serial: 0199FDD922EEA026463FFA56A20F89A9E67F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:01:29 +0000
Manifest this update: Sun 19 Oct 2025 19:01:29 +0000
Manifest next update: Mon 20 Oct 2025 19:01:29 +0000
Files and hashes: 1: S_TZ-mawCKCMO47YLDgmfh0hJVA.crl (hash: TuLswb85T/xrc3A1Ac6OGrV5abC/Jjdb3mCMcxFtr4M=)
2: VHi9vxpSG4tYfENJTcecEKHCVRo.roa (hash: ZPBYgaWs41C7d8q4Zb2hDOx2GjzVI3YJSGRCZKGJpWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:22:ee:a0:26:46:3f:fa:56:a2:0f:89:a9:e6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Validity
Not Before: Oct 19 19:01:29 2025 GMT
Not After : Oct 20 19:01:29 2025 GMT
Subject: CN=6a45c3b0fe53d5a7b7feaedf06125dd705d54f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c2:59:f1:5e:d8:ce:30:ee:8d:1b:06:35:a3:
9f:f9:36:ed:5a:25:45:3e:e8:c2:70:f4:93:d4:01:
e0:a6:da:a5:6e:8a:b6:a1:b0:d0:8d:be:95:82:1f:
1b:c8:51:8f:5d:cb:39:83:3b:c2:22:c0:13:63:95:
a1:ee:c3:58:e2:b5:1c:ed:ac:93:88:bb:d1:93:36:
9c:00:f5:af:a7:32:34:5b:48:8f:34:6e:3a:b8:57:
de:8d:49:62:f3:fd:04:30:18:9f:3e:58:80:56:61:
88:66:de:af:aa:94:87:2e:e5:ec:12:4e:22:60:ba:
6e:5f:3e:67:52:d6:0d:6b:a0:b7:ba:88:36:c4:08:
de:0f:55:46:3d:17:d8:98:6b:01:15:2d:93:4e:e4:
87:d4:b0:b8:fd:c0:2c:16:f7:f5:71:cb:50:81:7f:
90:e1:d0:ca:76:38:a4:49:20:e6:1e:bb:e9:48:bf:
06:59:2c:cf:8f:62:52:a7:01:1c:68:eb:c1:17:fe:
55:3b:81:43:94:1b:b5:72:bd:16:2d:81:92:80:4a:
18:27:97:80:81:5e:1d:58:71:61:f3:2d:7b:39:29:
5a:00:0a:d5:f1:68:d1:92:f8:73:dc:e3:63:56:ef:
6e:a1:6c:d7:42:3d:67:e6:46:0d:21:46:e9:73:cd:
f2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:45:C3:B0:FE:53:D5:A7:B7:FE:AE:DF:06:12:5D:D7:05:D5:4F:88
X509v3 Authority Key Identifier:
keyid:4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:81:35:ec:ff:86:2c:1c:f0:85:2f:2b:c4:4f:01:8a:d0:3d:
c9:bc:fd:f8:86:f5:ae:09:09:29:68:7e:17:3f:41:aa:39:6d:
27:58:f2:bc:a4:e0:e2:ef:70:57:bf:37:9f:f4:73:09:3c:c0:
db:6e:7f:44:d1:69:eb:41:04:be:3e:b8:f7:de:46:80:d4:ee:
e9:cf:e9:8d:86:9a:b7:d1:64:91:c2:56:46:d2:a0:91:d7:82:
37:03:47:20:70:ff:66:dd:3f:b0:05:98:90:2b:bb:05:19:0f:
af:8d:49:87:f5:dc:60:c8:bb:2d:b0:da:e6:0c:0e:35:26:f2:
77:4f:27:b0:40:08:fe:24:ec:93:c2:47:01:45:4e:88:e2:69:
af:fd:2a:1b:e4:e8:c9:cc:01:a7:e5:db:f4:e2:15:1f:ee:28:
24:f9:2e:80:0d:b4:ec:ef:6e:00:34:1f:85:55:fe:36:8a:d5:
d3:09:df:ee:cd:6a:f9:7d:90:96:07:27:f7:fd:66:ce:f2:da:
bd:33:30:45:6c:51:c8:74:0c:ac:bc:91:16:d9:2b:6f:40:d5:
fa:0e:da:8a:ba:9c:30:46:4d:30:dc:11:78:2d:1f:c0:7a:a8:
24:92:b1:ee:f1:e7:92:3d:65:0f:f5:6a:13:25:de:04:12:71:
e8:75:15:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92SLuoCZGP/pWog+JqeZ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZjRkOWZhNjZiMDA4YTA4YzNiOGVkODJjMzgyNjdlMWQy
MTI1NTAwHhcNMjUxMDE5MTkwMTI5WhcNMjUxMDIwMTkwMTI5WjAzMTEwLwYDVQQD
Eyg2YTQ1YzNiMGZlNTNkNWE3YjdmZWFlZGYwNjEyNWRkNzA1ZDU0Zjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMJZ8V7YzjDujRsGNaOf+TbtWiVF
PujCcPST1AHgptqlboq2obDQjb6Vgh8byFGPXcs5gzvCIsATY5Wh7sNY4rUc7ayT
iLvRkzacAPWvpzI0W0iPNG46uFfejUli8/0EMBifPliAVmGIZt6vqpSHLuXsEk4i
YLpuXz5nUtYNa6C3uog2xAjeD1VGPRfYmGsBFS2TTuSH1LC4/cAsFvf1cctQgX+Q
4dDKdjikSSDmHrvpSL8GWSzPj2JSpwEcaOvBF/5VO4FDlBu1cr0WLYGSgEoYJ5eA
gV4dWHFh8y17OSlaAArV8WjRkvhz3ONjVu9uoWzXQj1n5kYNIUbpc83yawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpFw7D+U9Wnt/6u3wYSXdcF1U+IMB8GA1UdIwQY
MBaAFEv02fpmsAigjDuO2Cw4Jn4dISVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lODEwY2QtNjQ5Ny00ZDhhLTkxYTUt
YmY1NzM4NzY2MmEwLzEvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lODEwY2QtNjQ5Ny00ZDhhLTkxYTUtYmY1NzM4NzY2MmEw
LzEvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyYE17P+G
LBzwhS8rxE8BitA9ybz9+Ib1rgkJKWh+Fz9BqjltJ1jyvKTg4u9wV783n/RzCTzA
225/RNFp60EEvj64995GgNTu6c/pjYaat9FkkcJWRtKgkdeCNwNHIHD/Zt0/sAWY
kCu7BRkPr41Jh/XcYMi7LbDa5gwONSbyd08nsEAI/iTsk8JHAUVOiOJpr/0qG+To
ycwBp+Xb9OIVH+4oJPkugA207O9uADQfhVX+NorV0wnf7s1q+X2Qlgcn9/1mzvLa
vTMwRWxRyHQMrLyRFtkrb0DV+g7airqcMEZNMNwReC0fwHqoJJKx7vHnkj1lD/Vq
EyXeBBJx6HUVTQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:25:32 2025 by rpki-client