Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
File: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json)
Hash identifier: LsYpiBswwlfeVMI612p70tIMJZhaTgq3qBsSz8gay2c=
Subject key identifier: FD:2F:B3:48:D4:9C:AA:F6:40:02:9A:5E:60:84:55:EF:E5:16:A8:09
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Certificate issuer: /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial: 019A4D06F5BAB63312FE858E5FC7B2E62AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 04:01:33 +0000
Manifest this update: Tue 04 Nov 2025 04:01:33 +0000
Manifest next update: Wed 05 Nov 2025 04:01:33 +0000
Files and hashes: 1: EyfFy2NH9aJCITkH8OY0aqXp60U.roa (hash: g2tjwAhWJaxtQGBOt8pN1pr0p20riiq5xD7kk7B2kOI=)
2: JpQoMr07IMCnzpUf3J5IOOFupZQ.roa (hash: 0/xTgfGRIN2+JskAIstMX9/OEPtDKUPLwgbvCnLM6hA=)
3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: m9ccbv8KjWNJpi2841BzEq2OUHPK2B6wy1bSzV5pgo8=)
4: uuK2CvjDB1elMTvaPuzNpmsW9KY.roa (hash: S75QfkrkhNbGGxbOdQrVjlRuXr4OJ2AaZXwkQhwwcQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:f5:ba:b6:33:12:fe:85:8e:5f:c7:b2:e6:2a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Validity
Not Before: Nov 4 04:01:33 2025 GMT
Not After : Nov 5 04:01:33 2025 GMT
Subject: CN=fd2fb348d49caaf640029a5e608455efe516a809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:c2:e3:a8:58:08:5c:be:d2:f9:87:a2:0a:
7f:29:d2:cb:c5:1b:a7:bc:c7:76:79:88:58:38:40:
30:8b:48:38:ad:0d:84:0a:59:d8:5e:7d:cd:0b:a9:
64:df:42:50:01:7e:0e:33:51:ee:4f:58:54:76:c5:
c1:be:be:00:28:41:17:30:11:53:25:6b:d1:e2:c2:
ee:2c:82:0d:c3:64:29:36:ac:b9:97:ff:42:fb:a1:
82:91:bd:f0:26:a0:c8:c6:1b:14:e7:6a:d2:da:5e:
fe:c7:37:fa:e1:bc:eb:d1:4b:10:5f:99:46:51:8f:
ed:25:27:2a:9a:b0:67:6c:bb:35:3d:17:52:10:31:
c0:f8:4a:34:3a:27:d4:85:30:b2:91:c9:51:83:d5:
81:30:14:a6:7d:aa:c4:22:cf:86:09:c1:9a:5e:40:
f7:1a:60:16:ad:16:a8:3a:39:49:a7:8c:54:23:44:
f2:71:a5:a5:42:85:42:5e:83:6a:41:c8:fc:84:75:
67:c3:2e:90:be:58:49:9f:0c:52:b8:be:e7:32:1f:
47:3a:72:66:87:8c:77:4c:b3:2a:5b:48:66:3d:71:
57:e9:d6:6c:7d:9c:1a:21:fa:d5:7d:bb:5f:52:ed:
94:40:c5:d6:a2:42:67:79:41:7e:26:70:e6:b7:a9:
20:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2F:B3:48:D4:9C:AA:F6:40:02:9A:5E:60:84:55:EF:E5:16:A8:09
X509v3 Authority Key Identifier:
keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5c:eb:76:44:24:a4:4d:1a:3b:46:d2:cc:a3:12:9c:28:32:
d9:54:ee:dd:43:80:bb:8d:9a:29:07:f7:66:4d:ac:11:8f:78:
63:5f:05:5d:09:c2:27:df:c2:d1:f4:bb:a4:b4:c5:5e:e1:98:
f1:31:dd:42:ad:2a:4c:c3:d4:01:b7:40:bd:52:83:b3:29:61:
52:de:72:eb:02:c5:10:2a:ee:8b:e1:2f:89:c6:f3:24:79:a3:
59:c7:20:65:d2:38:b6:d3:01:46:3f:e0:c3:94:82:e3:ea:af:
56:21:5b:3d:32:fc:7c:b9:83:c2:6d:8c:47:7f:a7:6f:45:c0:
38:9c:47:ec:91:7f:af:0f:f2:74:bc:61:50:2e:52:94:c4:a0:
5f:78:c7:b7:ac:31:93:4d:46:47:85:d8:f7:88:ff:25:8c:9c:
f7:c4:76:e2:7f:a9:b3:ca:52:45:ed:24:51:4c:3b:49:42:9e:
c2:a8:17:43:d6:63:07:5c:fc:c6:7a:28:52:63:45:2a:73:0b:
95:31:cc:cc:54:8c:44:a0:7c:51:36:a8:2f:6b:9a:e9:a0:c1:
d8:31:50:fe:51:55:1e:ff:f2:64:c9:e8:2e:4c:05:6e:a9:db:
7e:80:17:4d:64:38:e1:67:6a:62:33:3a:c2:a2:12:e5:03:12:
e8:3a:e1:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBvW6tjMS/oWOX8ey5irpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMzJiOWVmZjlmMDJjN2NhYmUxOTk1YTJkYjUwOWQ4MjU4
ZDM1ZmMwHhcNMjUxMTA0MDQwMTMzWhcNMjUxMTA1MDQwMTMzWjAzMTEwLwYDVQQD
EyhmZDJmYjM0OGQ0OWNhYWY2NDAwMjlhNWU2MDg0NTVlZmU1MTZhODA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIvC46hYCFy+0vmHogp/KdLLxRun
vMd2eYhYOEAwi0g4rQ2EClnYXn3NC6lk30JQAX4OM1HuT1hUdsXBvr4AKEEXMBFT
JWvR4sLuLIINw2QpNqy5l/9C+6GCkb3wJqDIxhsU52rS2l7+xzf64bzr0UsQX5lG
UY/tJScqmrBnbLs1PRdSEDHA+Eo0OifUhTCykclRg9WBMBSmfarEIs+GCcGaXkD3
GmAWrRaoOjlJp4xUI0TycaWlQoVCXoNqQcj8hHVnwy6QvlhJnwxSuL7nMh9HOnJm
h4x3TLMqW0hmPXFX6dZsfZwaIfrVfbtfUu2UQMXWokJneUF+JnDmt6kgSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0vs0jUnKr2QAKaXmCEVe/lFqgJMB8GA1UdIwQY
MBaAFE8yue/58Cx8q+GZWi21CdgljTX8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNzJjNGUtNmY1ZC00NzVlLTliZTkt
YzQwNzNjMTNmZjdjLzEvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xNzJjNGUtNmY1ZC00NzVlLTliZTktYzQwNzNjMTNmZjdj
LzEvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFzrdkQk
pE0aO0bSzKMSnCgy2VTu3UOAu42aKQf3Zk2sEY94Y18FXQnCJ9/C0fS7pLTFXuGY
8THdQq0qTMPUAbdAvVKDsylhUt5y6wLFECrui+EvicbzJHmjWccgZdI4ttMBRj/g
w5SC4+qvViFbPTL8fLmDwm2MR3+nb0XAOJxH7JF/rw/ydLxhUC5SlMSgX3jHt6wx
k01GR4XY94j/JYyc98R24n+ps8pSRe0kUUw7SUKewqgXQ9ZjB1z8xnooUmNFKnML
lTHMzFSMRKB8UTaoL2ua6aDB2DFQ/lFVHv/yZMnoLkwFbqnbfoAXTWQ44WdqYjM6
wqIS5QMS6DrhMg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 09:43:27 2025 by rpki-client