Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
File: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft (raw, json)
Hash identifier: aRcIqQiYidZPn9tfDp7/QyKHjhFXnSAvqHocbBi9BAk=
Subject key identifier: F7:60:9B:C7:CC:B8:62:8D:63:46:46:17:0D:4B:EF:68:D3:CC:C0:E9
Authority key identifier: 4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
Certificate issuer: /CN=4d92be02509643bc7a2f862871639d08e276c636
Certificate serial: 019A73A788DA654FCA1FB54E6B27E31D4DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
Manifest number: 1081
Signing time: Tue 11 Nov 2025 16:02:30 +0000
Manifest this update: Tue 11 Nov 2025 16:02:30 +0000
Manifest next update: Wed 12 Nov 2025 16:02:30 +0000
Files and hashes: 1: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl (hash: K8dR0qblbaoWgr7QaGNilkTViKB2nQ/saS9NrxG3gEg=)
2: odyRy2FLHB1ia0-B0wtN-GrVmpY.roa (hash: kVTUOVywoB+P4bkpPocvLbzGPCGuaGOyFmq1BUYllIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a7:88:da:65:4f:ca:1f:b5:4e:6b:27:e3:1d:4d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d92be02509643bc7a2f862871639d08e276c636
Validity
Not Before: Nov 11 16:02:30 2025 GMT
Not After : Nov 12 16:02:30 2025 GMT
Subject: CN=f7609bc7ccb8628d634646170d4bef68d3ccc0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:67:39:44:5d:3a:c4:28:b9:72:3c:82:5b:
a9:cf:12:df:da:61:d8:59:ac:ae:d5:e8:1a:7a:82:
75:23:8e:a1:71:b3:87:fa:37:15:fb:64:90:2f:54:
15:39:fe:1a:6b:8f:f5:ea:71:54:aa:11:f5:63:5a:
57:a4:bc:76:ae:b9:5d:15:0d:63:27:24:5e:c7:43:
96:cb:0e:ea:3f:35:d9:56:fd:15:79:70:12:52:25:
02:35:de:c9:45:af:e1:36:3d:7c:99:7a:07:82:b0:
7d:69:39:34:f6:fc:78:0a:d2:58:a0:6c:b0:83:3b:
90:13:e5:95:da:26:3b:a3:33:49:97:73:84:2d:53:
f3:86:91:ac:4b:21:ad:f0:c2:03:2b:6b:98:f0:5a:
8a:af:f2:be:ad:4f:63:ad:30:f7:6b:3a:19:41:47:
74:10:8f:b8:71:24:43:d8:28:62:3d:be:34:26:15:
d0:ee:e0:c0:88:ea:c8:5b:0a:d2:04:f9:16:bb:b9:
16:ae:7a:ec:36:5a:94:22:d2:6e:bc:b8:9d:34:1b:
30:2b:94:6e:8e:4c:7d:3c:78:22:03:cb:ef:73:be:
de:78:87:e4:84:58:86:6c:41:80:6e:54:14:75:be:
c5:f2:2a:b0:eb:5a:32:46:0b:48:d0:cf:5c:da:6c:
d4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:60:9B:C7:CC:B8:62:8D:63:46:46:17:0D:4B:EF:68:D3:CC:C0:E9
X509v3 Authority Key Identifier:
keyid:4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:be:40:b3:1c:56:4f:5d:9d:2e:7e:1e:0d:a8:ee:ca:e1:28:
d4:d2:cd:9b:d5:d8:b8:65:cc:b1:fb:a0:1d:5f:be:9b:3f:14:
a6:ce:77:43:7e:7a:53:d1:71:6b:93:62:db:c1:52:30:69:b7:
20:f1:c8:f6:9c:9b:7d:d9:a0:4e:eb:f7:dc:46:6d:24:b5:56:
fc:da:81:64:33:fa:ed:41:44:82:ce:42:a4:1e:b0:84:12:bf:
0b:04:33:13:d8:0f:26:4c:00:0b:6d:cc:ea:58:2d:76:6a:fb:
df:00:b1:ea:24:79:16:0a:81:a5:f4:72:3a:53:55:ec:48:2f:
36:aa:46:7e:80:7f:f4:3b:af:06:06:44:7c:b1:44:7f:38:d5:
b8:43:b0:cc:78:d9:0a:84:4c:de:09:3a:f9:14:c5:4a:57:41:
d8:45:c6:08:03:03:2f:94:ea:37:8e:80:39:d3:46:62:9e:1e:
29:8d:b0:82:ef:4f:45:e6:aa:8b:96:68:da:85:39:0f:fc:08:
1c:28:28:8d:d6:04:8a:9f:75:fe:a8:e3:dc:17:7e:9a:b6:1b:
38:b9:3c:08:d8:14:11:97:90:1b:55:ed:e4:7d:6b:5d:cf:ee:
a2:34:39:6b:35:07:c0:79:93:84:6e:a1:8e:6d:a8:3d:fd:5c:
84:cc:64:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzp4jaZU/KH7VOayfjHU2iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkOTJiZTAyNTA5NjQzYmM3YTJmODYyODcxNjM5ZDA4ZTI3
NmM2MzYwHhcNMjUxMTExMTYwMjMwWhcNMjUxMTEyMTYwMjMwWjAzMTEwLwYDVQQD
EyhmNzYwOWJjN2NjYjg2MjhkNjM0NjQ2MTcwZDRiZWY2OGQzY2NjMGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4lnOURdOsQouXI8glupzxLf2mHY
Wayu1egaeoJ1I46hcbOH+jcV+2SQL1QVOf4aa4/16nFUqhH1Y1pXpLx2rrldFQ1j
JyRex0OWyw7qPzXZVv0VeXASUiUCNd7JRa/hNj18mXoHgrB9aTk09vx4CtJYoGyw
gzuQE+WV2iY7ozNJl3OELVPzhpGsSyGt8MIDK2uY8FqKr/K+rU9jrTD3azoZQUd0
EI+4cSRD2ChiPb40JhXQ7uDAiOrIWwrSBPkWu7kWrnrsNlqUItJuvLidNBswK5Ru
jkx9PHgiA8vvc77eeIfkhFiGbEGAblQUdb7F8iqw61oyRgtI0M9c2mzUzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdgm8fMuGKNY0ZGFw1L72jTzMDpMB8GA1UdIwQY
MBaAFE2SvgJQlkO8ei+GKHFjnQjidsY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFpLLUFsQ1dRN3g2TDRZb2NXT2RDT0oyeGpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yNDY0MGUtZjI1Yy00MmU3LWIzN2Mt
YjczMTJhYjIwMjczLzEvVFpLLUFsQ1dRN3g2TDRZb2NXT2RDT0oyeGpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8yNDY0MGUtZjI1Yy00MmU3LWIzN2MtYjczMTJhYjIwMjcz
LzEvVFpLLUFsQ1dRN3g2TDRZb2NXT2RDT0oyeGpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxL5AsxxW
T12dLn4eDajuyuEo1NLNm9XYuGXMsfugHV++mz8Ups53Q356U9Fxa5Ni28FSMGm3
IPHI9pybfdmgTuv33EZtJLVW/NqBZDP67UFEgs5CpB6whBK/CwQzE9gPJkwAC23M
6lgtdmr73wCx6iR5FgqBpfRyOlNV7EgvNqpGfoB/9DuvBgZEfLFEfzjVuEOwzHjZ
CoRM3gk6+RTFSldB2EXGCAMDL5TqN46AOdNGYp4eKY2wgu9PReaqi5Zo2oU5D/wI
HCgojdYEip91/qjj3Bd+mrYbOLk8CNgUEZeQG1Xt5H1rXc/uojQ5azUHwHmThG6h
jm2oPf1chMxkCw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:42 2025 by rpki-client