Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft
File: tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft (raw, json)
Hash identifier: JXVy/aTJ7eefMKiGEFrpoYCrAHCbW+mNlVUEAY7VaS8=
Subject key identifier: 89:53:56:87:4B:45:AA:CC:11:6E:6D:7D:93:09:25:6D:23:CD:FE:6A
Authority key identifier: B5:94:EB:B6:74:8F:DC:12:12:7C:3F:92:7E:7F:B9:B1:AF:89:26:2C
Certificate issuer: /CN=b594ebb6748fdc12127c3f927e7fb9b1af89262c
Certificate serial: 0199FDD930A471697708BFE4C297D749AEB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZTrtnSP3BISfD-Sfn-5sa-JJiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 19:01:33 +0000
Manifest this update: Sun 19 Oct 2025 19:01:33 +0000
Manifest next update: Mon 20 Oct 2025 19:01:33 +0000
Files and hashes: 1: tZTrtnSP3BISfD-Sfn-5sa-JJiw.crl (hash: gKHehe1dsJV8afcJ6bRORNiz738z458TxMjJjd/+FAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZTrtnSP3BISfD-Sfn-5sa-JJiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:30:a4:71:69:77:08:bf:e4:c2:97:d7:49:ae:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b594ebb6748fdc12127c3f927e7fb9b1af89262c
Validity
Not Before: Oct 19 19:01:33 2025 GMT
Not After : Oct 20 19:01:33 2025 GMT
Subject: CN=895356874b45aacc116e6d7d9309256d23cdfe6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:4b:b6:34:ec:78:c6:c6:e3:55:3d:4d:d9:
cd:07:a8:4c:85:5e:57:a2:62:bd:d4:9e:45:ed:16:
71:d2:b7:f6:e8:3c:1d:9d:24:8a:b8:3a:03:60:22:
42:54:34:27:4a:ec:09:73:26:56:8c:0b:78:c7:67:
46:42:87:5e:50:88:6f:ba:07:f0:9d:89:12:99:9b:
d1:f4:ab:c3:c1:e6:82:e8:10:b8:3c:15:f9:57:a4:
36:94:2a:58:ff:f0:35:8a:b8:e6:38:8c:85:c4:e9:
b5:df:f0:67:4d:29:65:03:0a:99:24:77:0b:82:ec:
ae:ee:c2:c0:25:ed:c8:4a:2d:3d:67:0a:ad:c1:95:
1b:03:96:8f:70:78:06:d0:5c:10:33:fe:16:a9:f1:
f4:df:6e:0a:da:f6:3c:70:fc:4f:d2:64:99:1a:2d:
64:bd:0d:f9:06:9d:9b:25:9e:cd:fe:10:df:fe:e5:
40:91:f3:dc:3d:64:88:40:58:c2:90:f5:85:3e:b3:
6a:bb:82:21:20:2f:2a:96:c4:6c:70:53:03:30:43:
c8:34:35:29:69:09:e7:fc:3a:85:3d:c5:cd:ef:f5:
36:b7:0a:85:6f:c8:d2:89:22:8d:0e:54:a6:6f:5a:
40:2d:60:60:28:a9:11:af:d0:43:f9:92:bd:a5:a8:
a9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:53:56:87:4B:45:AA:CC:11:6E:6D:7D:93:09:25:6D:23:CD:FE:6A
X509v3 Authority Key Identifier:
keyid:B5:94:EB:B6:74:8F:DC:12:12:7C:3F:92:7E:7F:B9:B1:AF:89:26:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZTrtnSP3BISfD-Sfn-5sa-JJiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:76:61:e7:f9:a7:fd:e3:21:2b:23:a1:40:fb:63:cc:25:79:
0f:21:d0:74:0b:c9:a3:fa:75:5e:80:da:b6:a3:31:0d:80:d3:
6b:6e:f3:83:97:85:78:d9:54:fd:ef:e0:0f:9e:42:f1:b2:18:
51:e7:68:0d:b2:97:9b:12:fa:98:26:9a:d8:1d:3d:54:d4:e8:
56:ce:f3:77:0e:4a:07:37:7b:43:41:26:86:2a:8a:e3:24:94:
90:d2:d2:5e:cc:79:d9:73:af:82:27:f7:f5:a5:93:fb:74:68:
8e:b2:92:43:f3:e5:11:3c:92:66:2a:0d:74:0f:87:ab:cd:5f:
9a:c9:67:8a:36:f5:67:4a:0c:2c:27:8a:c5:8d:9d:5c:07:c8:
e3:72:1c:e7:21:73:3c:82:ae:3b:24:da:75:3d:07:0f:25:e7:
6f:cf:6c:0c:d9:af:cc:1a:1f:63:58:ce:44:66:0f:8b:5b:83:
66:3f:e2:89:6c:f9:dd:ae:50:0a:b4:6a:08:37:d4:3c:d8:48:
59:2f:5a:19:b9:65:24:24:ed:47:b9:f6:40:36:a3:fb:e5:83:
14:b7:13:11:7a:bd:11:80:de:4c:bb:a3:ec:fd:63:67:6d:73:
ff:40:45:6a:6c:41:df:ef:27:e2:a5:04:49:a3:9b:ea:c0:19:
4f:6a:25:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92TCkcWl3CL/kwpfXSa62MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1OTRlYmI2NzQ4ZmRjMTIxMjdjM2Y5MjdlN2ZiOWIxYWY4
OTI2MmMwHhcNMjUxMDE5MTkwMTMzWhcNMjUxMDIwMTkwMTMzWjAzMTEwLwYDVQQD
Eyg4OTUzNTY4NzRiNDVhYWNjMTE2ZTZkN2Q5MzA5MjU2ZDIzY2RmZTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN5LtjTseMbG41U9TdnNB6hMhV5X
omK91J5F7RZx0rf26DwdnSSKuDoDYCJCVDQnSuwJcyZWjAt4x2dGQodeUIhvugfw
nYkSmZvR9KvDweaC6BC4PBX5V6Q2lCpY//A1irjmOIyFxOm13/BnTSllAwqZJHcL
guyu7sLAJe3ISi09ZwqtwZUbA5aPcHgG0FwQM/4WqfH0324K2vY8cPxP0mSZGi1k
vQ35Bp2bJZ7N/hDf/uVAkfPcPWSIQFjCkPWFPrNqu4IhIC8qlsRscFMDMEPINDUp
aQnn/DqFPcXN7/U2twqFb8jSiSKNDlSmb1pALWBgKKkRr9BD+ZK9paiptwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlTVodLRarMEW5tfZMJJW0jzf5qMB8GA1UdIwQY
MBaAFLWU67Z0j9wSEnw/kn5/ubGviSYsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFpUcnRuU1AzQklTZkQtU2ZuLTVzYS1KSml3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84YWEwODEtMzk2OS00MzJjLTk4ZDAt
ODIxOTM2YjMxNTE4LzEvdFpUcnRuU1AzQklTZkQtU2ZuLTVzYS1KSml3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84YWEwODEtMzk2OS00MzJjLTk4ZDAtODIxOTM2YjMxNTE4
LzEvdFpUcnRuU1AzQklTZkQtU2ZuLTVzYS1KSml3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHZh5/mn
/eMhKyOhQPtjzCV5DyHQdAvJo/p1XoDatqMxDYDTa27zg5eFeNlU/e/gD55C8bIY
UedoDbKXmxL6mCaa2B09VNToVs7zdw5KBzd7Q0EmhiqK4ySUkNLSXsx52XOvgif3
9aWT+3RojrKSQ/PlETySZioNdA+Hq81fmslnijb1Z0oMLCeKxY2dXAfI43Ic5yFz
PIKuOyTadT0HDyXnb89sDNmvzBofY1jORGYPi1uDZj/iiWz53a5QCrRqCDfUPNhI
WS9aGbllJCTtR7n2QDaj++WDFLcTEXq9EYDeTLuj7P1jZ21z/0BFamxB3+8n4qUE
SaOb6sAZT2olTA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:29:54 2025 by rpki-client