Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
File: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft (raw, json)
Hash identifier: UDZ7T/HgmR1/8bFOExirLBYjIzJtD2tRxOdM/ZcDPAk=
Subject key identifier: AD:33:4B:33:B5:F4:42:A5:A0:F0:B9:F9:65:81:51:59:3A:EB:7C:7C
Authority key identifier: 4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
Certificate issuer: /CN=4d92be02509643bc7a2f862871639d08e276c636
Certificate serial: 0198D65F0A2A00841D5B01A035673CDA7F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
Manifest number: 0FAB
Signing time: Sat 23 Aug 2025 10:00:09 +0000
Manifest this update: Sat 23 Aug 2025 10:00:09 +0000
Manifest next update: Sun 24 Aug 2025 10:00:09 +0000
Files and hashes: 1: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl (hash: zUbkHbOEC8SFJHVHl3r1tcrb8nOj9gw0Q9tB+UgImyo=)
2: odyRy2FLHB1ia0-B0wtN-GrVmpY.roa (hash: kVTUOVywoB+P4bkpPocvLbzGPCGuaGOyFmq1BUYllIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:0a:2a:00:84:1d:5b:01:a0:35:67:3c:da:7f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d92be02509643bc7a2f862871639d08e276c636
Validity
Not Before: Aug 23 10:00:09 2025 GMT
Not After : Aug 24 10:00:09 2025 GMT
Subject: CN=ad334b33b5f442a5a0f0b9f9658151593aeb7c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4f:f4:37:9d:de:f5:82:d9:41:69:b2:52:1a:
19:3a:41:0a:f9:98:ed:69:2c:df:29:0c:1f:ba:4b:
1e:8f:44:31:0d:cf:0a:b3:27:4c:fd:24:4e:75:08:
df:bb:09:a3:7d:e6:b8:be:1a:8d:f8:d9:ff:36:6b:
11:29:20:a1:3b:52:98:82:0b:08:e5:ec:47:e8:57:
d4:bb:bb:5d:5b:ad:b5:5f:4f:4d:20:2c:96:58:7f:
97:28:ab:02:85:1a:15:d5:f8:db:01:73:2d:24:dc:
a4:25:cd:2b:79:95:8b:77:6e:5d:a7:e8:d1:cd:cb:
3c:f6:5c:26:c2:7a:bf:c8:d3:da:f1:7a:52:db:18:
7c:74:ee:2c:a2:96:be:f2:1d:0c:d0:b4:c1:15:fb:
df:29:11:02:02:78:97:13:b6:e1:d2:ae:9c:1c:88:
a4:03:ae:9e:1a:9f:d7:3a:fd:40:aa:ee:cf:6f:ae:
1f:b4:7b:db:14:a0:6f:b8:b3:78:49:36:76:e5:98:
be:0c:95:6a:f5:8d:9c:c0:77:1b:4c:36:5e:01:ef:
d1:f0:22:be:ff:4e:20:27:61:c8:84:bc:78:32:04:
e0:ea:7c:b4:4b:97:ac:bc:43:2e:4f:e5:b5:cb:66:
d3:d6:e7:1d:4a:9d:51:a4:d5:c5:8a:13:ab:74:03:
f7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:33:4B:33:B5:F4:42:A5:A0:F0:B9:F9:65:81:51:59:3A:EB:7C:7C
X509v3 Authority Key Identifier:
keyid:4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:54:79:ac:ce:ae:8f:98:4e:cf:11:08:f5:e4:62:6f:b3:f3:
4a:23:fe:ec:f6:be:4f:d7:85:84:47:3e:d5:20:06:2a:32:31:
1c:b5:8b:d5:85:96:f4:37:63:7c:da:22:6b:f8:cd:d2:1e:0b:
c0:8d:9c:6a:dd:ba:f9:9b:ed:66:df:7b:9c:d7:58:9f:4b:f4:
b2:7d:16:28:51:e6:26:ef:74:f1:82:9a:16:72:7d:4f:dc:0f:
13:ce:62:fc:dc:c5:96:d6:69:d9:68:b9:25:3f:05:bf:8b:ec:
86:35:03:7e:30:eb:72:c3:6a:b8:b1:cb:51:0c:70:ca:92:fe:
3e:68:f4:25:49:20:98:69:c8:b3:71:8e:40:2f:74:6e:f5:79:
c2:99:7a:8f:92:12:1e:44:ac:2d:27:e4:bb:7d:14:e3:a4:08:
41:cc:ff:d8:a6:f7:b6:38:cb:24:c0:a3:67:56:98:b1:17:39:
74:8e:70:4c:04:05:04:ea:7f:21:ed:78:27:d0:75:3a:1c:2d:
a1:05:27:58:fd:0c:c6:89:ab:bb:21:ff:8c:83:45:d7:f0:56:
f2:ef:25:a4:94:70:2d:51:37:28:44:71:b8:ce:22:86:18:ee:
82:2f:fc:b0:ab:cd:1b:56:d1:e0:34:4b:77:1b:53:ef:eb:55:
eb:9c:31:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:28:11 2025 by rpki-client