Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
File: tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft (raw, json)
Hash identifier: HCr/jijRsrCIcwH81DeVi9IfAp+rCNc4rPFr5OMDU2w=
Subject key identifier: F1:28:E4:04:2B:F4:23:81:FF:19:26:A6:97:07:EE:8C:2F:C8:78:30
Authority key identifier: B7:3D:88:D7:46:8A:F6:01:AF:14:C5:E1:ED:90:3C:4F:36:CA:F5:FA
Certificate issuer: /CN=b73d88d7468af601af14c5e1ed903c4f36caf5fa
Certificate serial: 0199239F2DF47D817BE2F03AD09EBA539C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 10:00:58 +0000
Manifest this update: Sun 07 Sep 2025 10:00:58 +0000
Manifest next update: Mon 08 Sep 2025 10:00:58 +0000
Files and hashes: 1: tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl (hash: 76Ai/AohZLFtc2WAy6BYY5s8iJzhrb6zRDIJbcT8zZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:2d:f4:7d:81:7b:e2:f0:3a:d0:9e:ba:53:9c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b73d88d7468af601af14c5e1ed903c4f36caf5fa
Validity
Not Before: Sep 7 10:00:58 2025 GMT
Not After : Sep 8 10:00:58 2025 GMT
Subject: CN=f128e4042bf42381ff1926a69707ee8c2fc87830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:25:e5:a1:2d:82:51:56:4e:79:44:a8:3b:f0:
4a:04:4a:a0:cb:56:a5:dc:b6:f7:fd:37:c9:7d:f2:
0a:8c:c1:79:f8:17:93:45:a8:32:d5:5f:6a:b6:45:
cd:b4:c7:07:61:27:89:f9:ef:53:23:99:01:7c:fb:
7e:94:8e:51:68:2b:25:51:46:de:00:7f:bf:50:86:
bd:7c:81:dd:40:28:7d:63:35:1a:b2:af:3c:88:34:
b2:ac:65:db:bc:7b:b2:65:dd:d0:9f:a6:d1:1d:f8:
1c:35:41:b6:b8:51:fe:70:62:52:30:aa:33:51:ce:
69:94:ca:fe:8c:1b:59:cd:03:28:44:1e:b7:16:a0:
94:99:1a:f6:27:6d:32:61:2f:dd:30:19:bd:e3:4c:
70:ef:6d:fa:12:7b:e8:2e:f7:2a:2e:1f:bf:df:a1:
69:02:9e:ea:94:2c:04:f6:82:84:45:70:cc:32:47:
c5:cf:cd:46:94:57:52:ca:2b:26:5e:49:cd:ec:4d:
1d:71:d3:78:a1:f1:31:7a:13:c1:ff:84:18:ea:18:
f4:84:c7:23:94:af:f2:e1:b1:d8:d2:f1:c7:37:27:
f1:f9:dd:74:54:66:ef:c2:5f:49:a5:21:bd:79:ce:
ca:5e:19:68:fc:de:e6:0e:f5:25:90:9f:53:00:10:
11:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:28:E4:04:2B:F4:23:81:FF:19:26:A6:97:07:EE:8C:2F:C8:78:30
X509v3 Authority Key Identifier:
keyid:B7:3D:88:D7:46:8A:F6:01:AF:14:C5:E1:ED:90:3C:4F:36:CA:F5:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c1:84:a7:31:d3:a6:37:7e:1c:9f:be:45:49:97:b9:bd:96:
71:79:20:5a:f7:a5:4e:20:56:9b:63:a3:e0:0c:ef:65:8c:75:
66:b9:3b:0b:dc:ca:05:cf:62:05:2a:8e:9c:ce:e1:1a:34:a3:
a7:b2:f9:30:bc:bd:97:48:83:75:83:ff:b2:af:09:77:ed:2a:
7a:ff:a0:f3:2f:70:45:71:a3:62:d4:cf:a9:41:09:52:f9:b2:
93:ef:f4:18:54:94:1f:78:52:8b:f7:20:94:2a:b2:44:d2:6d:
fe:ad:43:1c:39:6b:37:00:72:50:be:f9:06:ed:2e:c2:84:05:
d6:fd:be:b0:35:f0:6f:4a:d3:ee:70:83:ac:dd:0d:8f:80:58:
e2:54:13:ef:67:ab:37:d8:dd:60:1b:21:e0:ba:24:df:46:53:
ca:da:b0:1a:88:80:c4:ec:73:8f:bd:41:1e:f8:d8:69:ab:57:
5a:c3:4e:e1:fa:b7:fb:b5:e7:03:ca:18:bf:ab:a0:8c:a9:0c:
56:d1:bf:7f:a2:e3:e2:de:8c:20:64:ce:fe:24:4c:61:49:20:
86:18:a0:09:5b:dc:96:88:34:e3:31:3f:b0:c5:05:3f:df:91:
fc:9b:72:84:77:f2:b8:2d:40:de:c2:46:a2:05:9f:1d:2a:42:
02:a3:a4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:48 2025 by rpki-client