
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
File: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json)
Hash identifier: GRYho2HHIkTtWk/muvmKKxDsi30CYzZiSzX3H9Szs4M=
Subject key identifier: 92:B7:31:6E:6C:32:C0:26:B0:9B:03:05:69:8D:C1:39:2D:DB:59:D2
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Certificate issuer: /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial: 0199FBEAB1C38B6B39A24E817D93B9A2F019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:01:26 +0000
Manifest this update: Sun 19 Oct 2025 10:01:26 +0000
Manifest next update: Mon 20 Oct 2025 10:01:26 +0000
Files and hashes: 1: EyfFy2NH9aJCITkH8OY0aqXp60U.roa (hash: g2tjwAhWJaxtQGBOt8pN1pr0p20riiq5xD7kk7B2kOI=)
2: JpQoMr07IMCnzpUf3J5IOOFupZQ.roa (hash: 0/xTgfGRIN2+JskAIstMX9/OEPtDKUPLwgbvCnLM6hA=)
3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: MbkZy7L10lJxejr9mT6xe8jO9nEYC52okiZgH+4oLhc=)
4: uuK2CvjDB1elMTvaPuzNpmsW9KY.roa (hash: S75QfkrkhNbGGxbOdQrVjlRuXr4OJ2AaZXwkQhwwcQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b1:c3:8b:6b:39:a2:4e:81:7d:93:b9:a2:f0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Validity
Not Before: Oct 19 10:01:26 2025 GMT
Not After : Oct 20 10:01:26 2025 GMT
Subject: CN=92b7316e6c32c026b09b0305698dc1392ddb59d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2b:06:51:af:ac:30:8b:d9:07:83:0c:18:b6:
6b:2d:48:32:fc:54:32:c7:6c:0e:e6:3c:6d:46:be:
fa:f2:f8:fb:19:ba:66:96:8b:96:1a:a2:e6:45:06:
22:1f:f3:b4:d2:5a:29:f8:c2:e4:09:4f:92:ac:65:
ae:0f:64:71:76:c6:c9:64:14:82:bf:a1:f7:21:bb:
18:7a:b8:0c:ab:50:6f:c3:5c:7b:ff:6a:4e:cb:7e:
91:a1:2a:ef:00:43:2d:e6:e8:a6:d9:9c:6d:a4:b6:
6d:94:03:58:83:f7:6e:99:f2:10:33:73:d9:5a:63:
2e:62:70:7e:55:da:7d:f5:3d:63:ed:1c:8e:5d:67:
ff:e7:c6:f2:23:c3:a1:9e:f6:a7:5f:a7:59:aa:dc:
dc:cb:a4:b5:e1:ad:c8:c2:8d:1b:04:6a:71:d3:19:
7d:b6:2b:13:9d:13:84:cc:fa:cc:65:57:0d:90:70:
7e:6d:06:5d:40:96:81:75:75:fe:94:56:4f:a3:14:
fb:79:eb:38:e2:f4:c6:ef:c3:b6:34:f9:ca:40:04:
d3:14:06:4a:29:3a:a0:c2:f8:b0:26:31:01:96:75:
f0:01:b2:a4:cb:9d:3c:a4:87:98:ce:de:84:12:9c:
5f:ee:a2:b7:f7:a9:65:70:45:c4:59:0c:6d:8a:10:
df:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B7:31:6E:6C:32:C0:26:B0:9B:03:05:69:8D:C1:39:2D:DB:59:D2
X509v3 Authority Key Identifier:
keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:08:71:7a:fc:30:62:bc:53:10:4e:60:f0:ea:28:2d:33:49:
1b:5c:b7:95:73:ec:54:ab:0f:e2:07:9e:3c:1e:06:3b:79:23:
66:45:56:07:b1:28:47:c9:1a:e3:4e:50:28:cd:c7:90:08:58:
e2:e3:d6:2e:30:74:43:be:c9:92:20:6a:46:19:3a:a2:e2:e2:
bb:f2:5d:39:86:e1:39:71:3b:2e:a4:85:5d:5c:d6:fc:cb:d2:
ff:74:7b:8e:85:16:20:46:ea:fa:12:eb:08:58:b9:92:d9:e8:
e3:4a:ef:0c:7a:59:ec:46:91:c7:12:63:71:ca:45:4d:6d:2b:
67:52:c1:c7:2b:1a:76:e0:f2:82:03:83:33:ad:0b:e4:32:7c:
97:05:0a:31:45:79:fd:40:29:f1:4c:03:2c:23:e5:fa:f9:4c:
a1:e7:7c:6b:50:78:de:e5:69:cb:74:30:83:6b:6c:27:b9:06:
3b:8b:c8:ef:61:5d:69:be:ca:5c:e3:a9:f5:43:9f:a3:ff:c2:
24:5f:d3:7c:13:e9:94:3f:4b:20:25:0f:bb:67:f0:3f:ea:2d:
97:0a:b8:ca:2d:75:99:77:35:ec:47:1e:72:6f:fb:2a:83:0f:
97:35:5a:ea:a9:2c:ee:21:19:9c:2f:62:4e:0f:2b:f8:a5:50:
56:f3:09:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:33 2025 by rpki-client