Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
File: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft (raw, json)
Hash identifier: ZYNiT6ImV0HcJXcJr3FuayoDYEuUsPUgjxZC4Zy7ZRs=
Subject key identifier: FE:E3:C6:2C:1E:DC:97:F4:22:EC:96:D4:D4:C6:3B:D6:6B:F2:90:28
Authority key identifier: 4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
Certificate issuer: /CN=4d92be02509643bc7a2f862871639d08e276c636
Certificate serial: 0199FBEB148B234E44E6C8DB47C143A59AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
Manifest number: 1043
Signing time: Sun 19 Oct 2025 10:01:51 +0000
Manifest this update: Sun 19 Oct 2025 10:01:51 +0000
Manifest next update: Mon 20 Oct 2025 10:01:51 +0000
Files and hashes: 1: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl (hash: iMWuM+3kJVijy60CD6W0fos+Nm2fGQkh2EyeWWIbWXo=)
2: odyRy2FLHB1ia0-B0wtN-GrVmpY.roa (hash: kVTUOVywoB+P4bkpPocvLbzGPCGuaGOyFmq1BUYllIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:14:8b:23:4e:44:e6:c8:db:47:c1:43:a5:9a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d92be02509643bc7a2f862871639d08e276c636
Validity
Not Before: Oct 19 10:01:51 2025 GMT
Not After : Oct 20 10:01:51 2025 GMT
Subject: CN=fee3c62c1edc97f422ec96d4d4c63bd66bf29028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:3a:5d:cd:79:e7:0e:23:2b:ef:c2:ad:0a:
6d:b9:c9:08:ab:b6:42:9e:0e:0c:c8:91:e1:0d:43:
fc:ef:39:f9:e4:3e:a9:20:f5:ac:10:6e:8c:1a:55:
ac:99:01:27:85:3a:68:8a:ac:8b:90:6c:f3:75:80:
e3:97:66:53:b6:18:bb:59:70:69:09:b9:96:21:4a:
41:07:8f:c0:08:23:60:52:66:bc:c3:9d:d7:66:b3:
42:2d:32:36:b0:2d:9b:f8:cb:53:2d:e8:91:41:c7:
7e:2e:b7:ed:bb:b6:80:83:30:06:f6:6a:aa:5a:0e:
7c:9a:5b:5a:d2:41:92:76:19:01:8f:f7:19:18:0e:
09:b5:d9:ee:90:d4:7f:87:ed:bd:40:8d:01:d3:0d:
b2:f6:5a:e4:de:7e:71:49:fc:1a:36:2b:49:a6:ab:
2c:57:eb:28:76:29:49:d9:69:a1:da:9d:ce:f2:f0:
4b:ad:6b:8b:bf:cd:a0:b1:c1:11:c8:ab:51:a4:c6:
10:cf:7d:39:73:9b:9d:50:46:af:16:58:55:4f:bd:
d7:35:6e:43:46:b0:e9:28:75:d8:6f:94:a8:25:73:
30:41:be:18:84:c0:95:08:b1:5a:6a:fc:c5:79:48:
09:52:c9:08:ed:18:92:c3:33:75:5f:1e:fe:9f:77:
12:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E3:C6:2C:1E:DC:97:F4:22:EC:96:D4:D4:C6:3B:D6:6B:F2:90:28
X509v3 Authority Key Identifier:
keyid:4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:70:33:c3:aa:9c:12:1a:fb:a2:f0:13:5b:76:2d:e2:3c:f1:
6d:1d:cf:0c:fa:a6:08:5d:13:07:da:5c:80:7d:3d:d7:82:ee:
33:7c:b5:52:0b:79:85:3b:53:7d:5a:b9:24:56:ba:ee:28:8e:
c3:ea:68:8f:70:36:eb:74:31:62:f7:c9:e4:c4:94:5b:f4:22:
2a:6e:61:e2:a2:30:b4:09:f4:18:17:27:40:0e:3b:37:88:4f:
85:a1:24:d2:fa:79:50:87:38:77:83:be:57:43:d7:14:c3:89:
16:2d:b7:90:29:4f:9e:5c:a5:b6:39:5b:e0:4e:32:f6:5c:75:
97:b4:2b:a1:fa:51:e2:71:1e:29:19:3f:93:66:f4:ee:a0:7c:
6d:55:bc:61:cb:2c:16:25:0b:ac:6a:78:eb:c8:71:06:7c:03:
2e:41:a4:52:a2:67:37:04:65:b9:23:4b:77:bf:14:d8:96:4a:
f5:78:1b:10:cf:2f:db:5e:bc:76:44:e5:7a:84:97:a4:93:e9:
58:f4:d6:5d:64:a0:52:ca:0e:a5:07:4b:1c:b6:da:03:e9:98:
0b:4d:f4:b2:98:93:85:09:8a:7a:a6:07:4d:8d:6f:f0:14:79:
e6:c1:f5:42:0c:bc:9a:55:ff:ec:54:43:88:26:9a:30:4d:28:
13:ba:5e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:39 2025 by rpki-client