Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
File: TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft (raw, json)
Hash identifier: vkxbyd2ONmCrbS7ktJ2Atzej5ud48FI42Ka0y7m2Xwg=
Subject key identifier: D2:49:34:BF:89:87:31:2E:75:D5:F5:F7:A2:76:F6:59:CD:83:23:04
Authority key identifier: 4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
Certificate issuer: /CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Certificate serial: 019A71EED7AAD6225265873015A7309ACC0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
Manifest number: 045D
Signing time: Tue 11 Nov 2025 08:01:09 +0000
Manifest this update: Tue 11 Nov 2025 08:01:09 +0000
Manifest next update: Wed 12 Nov 2025 08:01:09 +0000
Files and hashes: 1: TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl (hash: fxx0tWazB90xeAdYW4QBFhfI6KtJDBWjP6cXrkxmwj8=)
2: U_0Qm9bmlfNCn0QcnMuKjqVhpok.roa (hash: rS2TodhOY6krb9NSbdEkyp8dkG2jF6/EwmhOAvSbJFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d7:aa:d6:22:52:65:87:30:15:a7:30:9a:cc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Validity
Not Before: Nov 11 08:01:09 2025 GMT
Not After : Nov 12 08:01:09 2025 GMT
Subject: CN=d24934bf8987312e75d5f5f7a276f659cd832304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:47:df:39:7d:d4:d5:c8:1a:0a:03:32:14:
16:8a:ee:e5:ca:6d:ab:c2:90:14:0a:5f:e4:03:b2:
e5:77:aa:c1:0b:8f:6a:fd:9d:c0:02:51:7b:a2:d6:
7c:47:e6:45:df:43:12:b9:b3:99:d5:9a:a8:39:6f:
8d:83:bc:63:a1:f3:f3:d3:d7:10:e3:74:17:db:88:
e9:e6:cf:bc:26:cd:04:d3:98:d8:ea:4f:71:19:79:
c1:6f:34:86:79:13:52:64:53:ec:10:45:46:c2:3c:
1f:55:31:c1:65:aa:1d:4f:5e:d1:c9:4b:7b:4f:be:
c3:54:5a:ac:77:4b:c9:6a:d1:95:b5:83:db:77:8c:
ec:80:18:ee:b5:8c:46:bb:0c:60:02:55:d7:09:66:
40:f6:b4:51:fa:27:a1:37:73:07:83:5e:b6:20:f9:
be:ad:6d:07:96:10:f0:f0:3e:b6:e4:df:cc:ae:da:
e9:0d:12:a8:e8:70:5e:f1:20:4e:33:dd:df:d1:c6:
7c:e3:8b:34:4a:1a:5b:f8:ac:e2:4b:f3:f0:b4:5e:
9e:6d:15:7d:53:11:56:b7:61:0d:e8:32:1e:15:6b:
0f:1d:87:f5:58:7f:bb:77:8a:99:cc:13:10:07:bc:
03:c0:50:a2:24:4a:88:00:9c:0c:d6:b5:2e:1f:ba:
65:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:49:34:BF:89:87:31:2E:75:D5:F5:F7:A2:76:F6:59:CD:83:23:04
X509v3 Authority Key Identifier:
keyid:4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:24:1c:d3:51:be:76:9a:f4:60:e4:9b:02:fd:d1:2b:6b:b5:
1a:00:aa:10:9c:b6:02:5b:45:af:be:0b:b0:cc:9e:cd:37:48:
db:67:13:9b:b1:4b:3a:e8:73:0b:da:b3:f9:fe:31:0d:56:ac:
ee:3a:a4:57:af:cb:0a:cb:bc:71:11:4d:78:b9:37:34:3e:49:
23:5d:b5:17:56:80:64:d3:58:92:18:9c:cd:a9:d2:0a:f0:9d:
ee:f1:a9:c9:12:04:be:21:bf:e0:b0:d9:62:a9:47:ef:fb:e6:
68:50:33:c0:aa:f8:28:96:17:ef:a0:de:64:a2:0c:56:4e:d1:
73:79:23:0d:e1:c4:ce:53:ca:46:4a:97:97:c3:48:3b:64:b9:
86:5a:35:28:7f:c8:e0:58:ad:1a:6b:45:19:48:2e:6a:2c:e3:
e7:71:b4:35:7b:19:df:8c:9c:0b:6f:a8:42:66:0a:f2:22:bb:
19:4e:d0:e0:ef:4f:f8:e7:14:aa:71:93:80:e0:25:83:cd:87:
c2:5a:4c:c6:d1:2c:a6:60:b2:2d:95:e4:0c:4e:d4:d5:0a:e1:
32:4d:76:4d:d3:fa:bc:fa:9d:cd:0a:82:5e:35:ec:d6:64:7a:
71:e6:8f:79:24:20:ee:af:15:99:be:47:61:f4:55:cc:91:0c:
f4:23:d8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:51 2025 by rpki-client