Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
File: TzVzzX1WHNN-DzMfbKON6SAgQrI.mft (raw, json)
Hash identifier: f76vbxMJyXJaCaf5ilcpr8copoK/zlsJkdNVhU2MfWY=
Subject key identifier: 36:DE:44:01:1D:7B:67:EF:58:9C:C9:ED:DA:94:A1:6F:D4:0E:FB:D6
Authority key identifier: 4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
Certificate issuer: /CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Certificate serial: 019A1506398548CBA829EF3924C9110E3509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
Manifest number: 0C05
Signing time: Fri 24 Oct 2025 07:02:00 +0000
Manifest this update: Fri 24 Oct 2025 07:02:00 +0000
Manifest next update: Sat 25 Oct 2025 07:02:00 +0000
Files and hashes: 1: TzVzzX1WHNN-DzMfbKON6SAgQrI.crl (hash: M4/PjSc9K1FAf3Smt5YI9aArFi+Qi9QPt/mSYCDwtBQ=)
2: gNvVla9QTcgfrH76gu8sofAf_w0.roa (hash: OGSKcOJHQa1w9k6JZ39A0hFW39yZH1IaBP1pJ+a1YHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:06:39:85:48:cb:a8:29:ef:39:24:c9:11:0e:35:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Validity
Not Before: Oct 24 07:02:00 2025 GMT
Not After : Oct 25 07:02:00 2025 GMT
Subject: CN=36de44011d7b67ef589cc9edda94a16fd40efbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:10:bb:d5:57:35:89:ef:d3:53:21:02:32:a7:
4a:4a:0a:fe:1a:bc:c5:63:32:7a:cd:5e:30:1c:e4:
4a:39:91:60:c7:30:5a:1a:5a:90:5b:d4:70:94:e6:
5b:96:87:f5:25:e6:a5:82:38:6d:a4:c9:c6:b0:01:
42:1a:72:3d:17:43:59:e4:55:25:39:fe:e9:0d:69:
f3:dd:9f:f7:57:2a:0e:97:37:27:7e:0b:b9:9a:b8:
ca:9e:95:6e:20:31:dd:67:3e:47:9c:23:52:b5:d0:
57:d4:77:04:6f:fa:62:c1:50:19:50:41:2e:82:70:
69:3c:97:b9:8c:a3:8c:61:23:c2:0e:3b:9c:10:a3:
12:3e:46:fe:47:8e:b9:f3:99:ea:f5:65:da:a9:05:
2f:60:3e:4a:13:24:3f:fc:99:8b:2b:5e:55:f2:9d:
31:f3:63:25:88:4e:60:6d:a7:37:83:0d:2c:56:1b:
2c:d0:17:ef:a9:50:19:e8:ff:00:6e:1b:48:f1:bd:
82:5f:fc:f7:a0:0a:33:4c:85:7c:4f:10:13:97:c2:
56:bf:2f:0f:b3:66:3b:4f:96:d6:80:29:91:16:4a:
c9:16:f6:8c:31:77:83:0d:86:6b:93:66:ed:e6:d0:
62:f8:13:6d:07:7d:42:d3:40:51:4d:63:3e:f6:18:
2c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DE:44:01:1D:7B:67:EF:58:9C:C9:ED:DA:94:A1:6F:D4:0E:FB:D6
X509v3 Authority Key Identifier:
keyid:4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:91:fc:5c:fb:43:8e:34:d2:39:30:12:e3:62:26:4f:0b:82:
3c:c8:57:2f:41:4a:33:3a:bc:22:f8:40:52:69:1a:12:cc:9a:
2e:68:03:bc:08:1b:d4:43:af:04:45:77:a1:ba:ac:db:34:16:
dd:2e:05:54:a5:fa:9a:f1:13:91:b3:e5:e5:72:78:30:c0:ad:
a1:8e:21:b8:17:63:b8:8b:ff:87:1c:01:43:8e:4b:88:ca:b0:
8e:5e:c6:fd:65:f6:83:0c:15:d0:5f:6b:5e:1e:87:b4:c3:13:
62:ab:f1:43:0c:55:2e:c5:c6:b3:43:e8:98:fc:2b:da:24:b4:
65:6f:9f:48:27:40:34:0b:96:30:c6:e9:14:9d:74:08:d9:9d:
df:32:e1:0d:99:82:9c:04:68:fc:bd:11:cf:18:66:6a:43:34:
56:5c:94:25:cc:31:6c:28:fd:56:81:c3:f2:c3:02:fb:38:f4:
77:cf:14:9a:16:6e:e1:be:c9:6d:ad:fd:e8:ff:b1:9b:4a:0e:
4b:00:6f:9f:27:ea:ee:2a:45:4f:90:ac:1e:5a:7c:64:e1:d7:
f4:f2:fc:46:83:de:ed:f9:60:ff:62:8c:8f:a1:a3:40:44:3a:
9c:10:a2:8a:99:e1:55:42:78:96:b6:4a:4f:24:6d:9d:59:07:
0f:3c:5c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 16:58:33 2025 by rpki-client