Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File: TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier: QPWEFflF83FyB/CxTrZVjy6CLapVRtol7r6LvCHSWgc=
Subject key identifier: 28:C4:3C:59:41:58:71:1E:94:8E:EA:98:02:74:7D:92:42:FE:AF:F3
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 019A21E4ABA0D1A534A2798AE1AFEFF40400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number: 16E3
Signing time: Sun 26 Oct 2025 19:00:25 +0000
Manifest this update: Sun 26 Oct 2025 19:00:25 +0000
Manifest next update: Mon 27 Oct 2025 19:00:25 +0000
Files and hashes: 1: 8Wt50oYgSIhV5-nromefXM1xUHs.roa (hash: nonj7X6EJpkPkTZ26/d/JTxCuBr7E4OqIEl5kLX7Uvc=)
2: 8_cQRjzqzZHtBUadp-m1RHbfYtA.roa (hash: UqDtwYBpkHo94AcNyXlmGDGQI5vQH42VfJTVEsv7Dqg=)
3: KNr8dCxZSv2tLdivt-ye5q6LflE.roa (hash: OddKT0B3adcsA3ke/HzglyeCPb/vcMLtq5FBhRNFDKs=)
4: LlXFwn2Cp-oz5_wkoV4hnOjpZhc.roa (hash: b+9t4WdjfYrQBYgVT5TU7qZAYZFFGjvTZY/AWbdEORo=)
5: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: EDQQLO/8Nrt5e+M+Zz9j6x6r80WPBCSbJK8fQbNUPP8=)
6: qzzHZUBjcSRGFasL_IeeyUOUJ98.roa (hash: Lhbg0pCg1KfB+dSdb+vO645LuzkQlZQdXs3opMNsPwc=)
7: uFl9Jbyr6wsOz0RTyXyU1uLpiuQ.roa (hash: IIGP5wcOQKkgCwi0o8TwNvlGqyYDZZaNOwMVkOIQtWw=)
8: ugnRmlrkR8TJKKb_eVy88x5cRBU.roa (hash: wA1+l0+3DAminFs23I5vSPrzOSbWOqFz2PTbS6VlnsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:ab:a0:d1:a5:34:a2:79:8a:e1:af:ef:f4:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Oct 26 19:00:25 2025 GMT
Not After : Oct 27 19:00:25 2025 GMT
Subject: CN=28c43c594158711e948eea9802747d9242feaff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:1a:55:9d:48:6e:4a:b9:d2:8b:45:7d:87:
f0:28:01:96:09:e4:8b:8f:ca:7f:48:d9:20:1b:6c:
6f:42:0e:ec:2f:c4:5a:10:97:76:48:1b:c1:9c:26:
2e:bc:c9:b7:06:5a:e5:d0:e4:c3:6f:99:9d:b3:54:
aa:5c:0e:4f:86:41:46:26:3a:1e:08:ba:35:74:25:
ce:1c:ea:65:84:71:4d:ad:18:44:b6:7b:25:89:0b:
94:28:92:38:59:af:ad:07:ce:bd:69:13:82:40:0c:
f3:7d:2a:70:8a:db:1d:33:fe:ac:76:c5:a2:d1:ad:
fe:87:ee:71:1f:f6:15:37:fb:6f:2e:01:26:5c:46:
c5:aa:a4:b6:3f:da:ab:9a:d3:bd:8a:fb:71:c2:7c:
d9:0e:86:9e:3f:a6:cc:43:13:82:ff:cc:44:c9:72:
af:f3:cd:d3:c1:70:a7:7f:37:22:a4:06:3e:f9:a0:
6f:f4:69:73:b4:3e:da:23:85:46:3c:05:ee:47:d7:
ec:e2:da:5f:b3:fb:fd:81:9a:3a:03:c7:1a:62:a8:
e4:d4:ae:c6:4b:8a:0f:fd:ae:46:cf:cf:06:00:96:
ca:a5:81:51:f4:46:36:cd:02:02:e6:25:58:f7:c2:
b2:1e:cc:ec:cc:13:ef:0e:1c:67:a2:f6:9e:64:38:
20:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C4:3C:59:41:58:71:1E:94:8E:EA:98:02:74:7D:92:42:FE:AF:F3
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:42:64:f7:0d:4d:cd:87:51:0c:3b:50:a6:e7:e2:eb:04:9d:
2a:bb:a4:67:1c:e2:2b:b3:a8:c2:6a:52:1d:7c:d3:44:ab:89:
f0:f0:22:d3:92:ae:ac:7c:b2:b0:33:0e:5d:c1:3c:37:db:24:
8a:f4:c5:1a:71:c2:51:7b:52:22:ca:31:79:66:6c:b6:0f:82:
d1:d2:80:fa:14:5a:17:4b:a5:c5:82:04:10:6f:25:02:69:22:
aa:c3:a5:6e:67:1c:fe:1b:bb:9d:70:a8:27:4e:55:6a:f8:e7:
85:75:f4:47:73:a4:1c:00:1e:89:8b:1f:bb:a0:15:5a:b1:d6:
c2:33:2b:73:a0:50:0d:e2:ea:11:42:aa:57:55:53:fa:9a:20:
35:b6:fd:a0:b0:ec:d7:2e:aa:1e:dc:82:e3:13:56:cc:b4:6b:
b6:94:31:1d:b8:58:a7:81:26:ec:fe:5a:69:28:7e:a2:5d:92:
87:91:ba:bd:1d:db:62:65:73:75:1d:0e:61:65:23:52:ff:3b:
b1:bc:fa:cd:a9:f1:a9:77:2c:f8:b4:99:df:94:20:4e:98:f6:
fb:34:df:ba:07:47:cc:be:cb:3e:f1:a0:1f:14:e9:07:81:fd:
7b:29:1d:ca:73:b7:bb:fb:ad:f2:81:36:90:2b:02:c9:b5:0e:
93:c8:18:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:39:09 2025 by rpki-client