Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier: yj33ZEfONjYXUiWtmwCp8IbKiSK6QAQvLjenOArztrc=
Subject key identifier: A1:66:DB:98:49:70:6B:DE:C4:D4:DC:EE:8A:EE:52:BD:70:09:F4:82
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial: 0199FBEBEE70052E9ADCF44E602AB698E539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:47 +0000
Manifest this update: Sun 19 Oct 2025 10:02:47 +0000
Manifest next update: Mon 20 Oct 2025 10:02:47 +0000
Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: Nrpdj+BFkRgVXYPqhuC0ppImOCECfYhuazqUu7STai8=)
2: UqGmWpGtflaEJvCw0bHQvmEnA74.roa (hash: EKIY9C4V0PmpfSkXvjVMr8vcUWFSLcsQTMlkDeIRJyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ee:70:05:2e:9a:dc:f4:4e:60:2a:b6:98:e5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Validity
Not Before: Oct 19 10:02:47 2025 GMT
Not After : Oct 20 10:02:47 2025 GMT
Subject: CN=a166db9849706bdec4d4dcee8aee52bd7009f482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b5:bb:55:73:3e:8c:bb:1f:4b:07:ca:db:b4:
6a:07:d5:ee:27:18:00:40:32:a5:3c:fc:5a:58:d5:
d0:04:b7:ea:f8:47:eb:70:b6:cc:0a:65:64:e1:41:
65:98:11:e0:1e:61:47:37:a7:47:dc:a9:56:52:88:
ad:4d:08:e9:b8:7e:02:06:6e:4d:11:a2:41:91:5b:
8c:9a:a1:ce:3c:26:af:98:ed:fd:26:45:6e:f1:79:
41:53:af:79:4b:3f:41:da:d2:07:2a:16:19:d9:a0:
03:10:e0:a5:5e:6e:08:8f:7c:3f:b3:b3:b7:23:9e:
ae:fd:0a:70:56:a2:45:ac:a6:9c:e6:55:83:bf:4a:
a9:5d:dd:38:13:24:9e:62:cc:c2:0d:2f:6f:27:00:
aa:d0:22:7a:93:f2:a1:ba:71:9d:82:3d:75:23:8a:
42:2d:cd:1f:b8:de:20:c6:14:67:b9:ca:23:cb:d1:
4d:c9:14:ae:1f:d5:94:ba:42:83:0d:21:ac:dc:5a:
a1:07:58:54:1e:ab:8a:65:60:c1:c5:3c:0d:34:44:
a2:87:24:28:ad:5b:43:78:5e:8a:f6:c0:a2:ce:1e:
4a:5b:d0:c6:89:8f:d9:13:2a:1e:f3:1e:2d:96:52:
ab:99:28:64:24:e7:c4:b8:ed:a1:7e:6b:12:9d:90:
b1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:66:DB:98:49:70:6B:DE:C4:D4:DC:EE:8A:EE:52:BD:70:09:F4:82
X509v3 Authority Key Identifier:
keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:00:13:61:ab:81:45:18:66:d8:a3:11:0a:c7:6e:b4:47:e2:
be:3a:03:4f:6a:f6:66:ed:ef:7e:6c:68:79:8d:2e:95:fd:0d:
84:81:8a:18:4b:17:c2:73:b1:42:cc:a2:e2:77:39:b9:63:22:
a2:e1:03:33:20:aa:ef:19:a4:de:f1:60:bb:d9:99:f2:f9:86:
e5:9e:a2:57:19:70:b5:9f:6d:40:56:9a:9b:6b:b8:d2:b6:fe:
b5:d6:3b:e0:0c:c3:c4:61:77:2f:56:3c:3e:84:3f:7a:59:92:
af:f7:64:08:b9:92:51:82:6e:b6:29:9e:cd:ee:45:d0:fb:05:
39:30:d9:85:15:96:a0:0c:8b:b7:2e:4f:8a:aa:87:b7:fd:2e:
69:0a:0a:76:3e:8c:4c:9a:47:cc:78:19:3b:e0:4e:16:cf:73:
9e:06:2f:69:19:a2:d6:8d:89:d3:54:88:9c:dd:94:8a:ae:ba:
2e:3e:4f:e4:8e:78:cb:c4:1c:d4:20:15:55:5c:64:02:d1:0c:
67:86:3b:de:54:ec:04:d0:0c:9e:a0:08:87:ff:4b:19:09:a9:
6e:fa:2a:21:4d:56:51:ee:fb:ec:5a:a6:dd:4e:4f:87:27:5d:
f0:3c:7c:06:0d:02:cf:c2:d0:10:e0:6e:96:65:6f:32:49:02:
e8:61:0d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:25 2025 by rpki-client