Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier: gUoENvopwDHjLZ8P+0nU6rU8rLeUS+VDfZ9q3cpeSaw=
Subject key identifier: 16:62:40:98:3C:94:BC:9C:23:65:11:25:17:94:5C:94:E3:35:8F:81
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial: 019A1ACFE2CA79DA9D7DC7A8CB56CBB282D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number: 16F2
Signing time: Sat 25 Oct 2025 10:00:22 +0000
Manifest this update: Sat 25 Oct 2025 10:00:22 +0000
Manifest next update: Sun 26 Oct 2025 10:00:22 +0000
Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: R1GzIeSd5p2hhTE7Thaf6zl1VnpT+p1NxtqALzsIyOs=)
2: UqGmWpGtflaEJvCw0bHQvmEnA74.roa (hash: EKIY9C4V0PmpfSkXvjVMr8vcUWFSLcsQTMlkDeIRJyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:cf:e2:ca:79:da:9d:7d:c7:a8:cb:56:cb:b2:82:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Validity
Not Before: Oct 25 10:00:22 2025 GMT
Not After : Oct 26 10:00:22 2025 GMT
Subject: CN=166240983c94bc9c2365112517945c94e3358f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8f:1b:b0:85:c8:dc:77:1d:2b:16:4b:f4:55:
3b:c6:cf:3b:ae:f0:3b:c6:1e:c7:af:57:fc:2f:b2:
af:fe:7c:2d:fd:9a:2a:7d:09:35:1b:d9:47:7b:38:
aa:2d:5a:50:65:85:e9:41:31:47:22:c9:5e:31:24:
0f:00:9e:31:65:d3:53:be:c5:24:b2:4e:d7:5e:d9:
2e:fa:e0:c1:30:72:fa:bb:32:f3:57:b0:b5:35:20:
3b:cd:fd:0e:7f:c2:2b:42:45:2f:be:f1:6f:76:3c:
c7:fb:fd:8f:21:34:8c:8d:3f:06:25:81:03:44:d8:
45:79:03:2c:95:74:37:9e:3d:17:2c:0d:c9:96:89:
a4:46:db:39:27:de:cd:30:13:ac:0a:87:b9:7f:cd:
75:6f:7c:ff:81:03:bd:57:3a:84:34:51:2d:02:d6:
99:ea:4b:54:1f:a0:90:2d:87:5e:de:bc:38:4d:b7:
93:60:b7:c6:f3:1e:14:14:04:40:08:15:5e:ca:e9:
1c:5a:1b:c0:0e:99:bb:00:31:93:90:18:0f:dd:2b:
47:85:6c:fc:0c:dd:50:fd:48:7e:a6:fc:3c:c2:85:
1e:03:6a:c0:76:9f:32:9c:a7:d3:81:cc:98:19:02:
79:d7:fe:af:e7:15:d4:1d:68:0d:a7:10:62:34:a8:
41:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:62:40:98:3C:94:BC:9C:23:65:11:25:17:94:5C:94:E3:35:8F:81
X509v3 Authority Key Identifier:
keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:85:12:f5:2c:22:0f:e1:06:a6:8a:05:59:64:e4:b6:e8:37:
93:76:f9:35:27:69:7c:1a:a7:7a:eb:8a:c5:60:e0:cf:92:6c:
28:b7:81:b5:d2:6e:d3:ce:ce:9c:f1:4d:40:fe:98:4e:c5:ce:
9f:d2:41:cc:b2:42:99:4a:1e:24:5c:f6:0c:b9:df:54:6d:68:
32:42:71:83:3d:38:ba:55:89:cc:5e:75:16:58:0e:83:13:5b:
23:d2:7b:08:76:33:20:fc:27:03:e4:bd:3d:c5:fc:5c:ea:14:
01:ee:53:86:cd:1d:8f:01:c0:76:06:fe:34:dd:78:c5:94:e3:
78:dd:f9:8a:e5:c0:78:f0:59:64:4f:a3:a0:26:c3:dd:dd:67:
88:50:44:fc:c3:f7:c4:04:9b:bf:ff:25:1a:00:b7:bb:5f:ee:
fd:47:eb:88:14:0a:3e:67:2c:d9:93:93:86:71:6e:76:0f:a6:
19:0a:bf:71:e9:b5:88:3b:88:2b:a4:3c:36:d0:c9:ba:38:bd:
6b:b1:e8:f6:b4:f3:b6:98:cb:64:34:e0:31:1d:53:b1:2e:d9:
cb:9f:99:3d:3a:42:4c:18:8c:eb:84:b5:7b:02:96:7b:27:48:
bd:f1:6e:31:2a:de:5b:58:57:0d:9e:39:5c:56:87:56:6a:cc:
9d:63:45:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:21:54 2025 by rpki-client