Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
File: TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft (raw, json)
Hash identifier: hfkaEzLDFIhSrj6K8MSTw7+fE/ecytq+PaEBrBQ8bY8=
Subject key identifier: B3:EE:C2:88:EB:36:F4:12:7C:AD:19:73:04:1C:FC:DF:8C:29:C8:DF
Authority key identifier: 4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
Certificate issuer: /CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Certificate serial: 019847ADCF6608E696FCE3DA8960AA8073BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
Manifest number: 033E
Signing time: Sat 26 Jul 2025 17:00:29 +0000
Manifest this update: Sat 26 Jul 2025 17:00:29 +0000
Manifest next update: Sun 27 Jul 2025 17:00:29 +0000
Files and hashes: 1: TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl (hash: 5McQAzLyURHJ+0PvaVSdqt6WmDONOFptB/Qhpy4Pq2M=)
2: U_0Qm9bmlfNCn0QcnMuKjqVhpok.roa (hash: rS2TodhOY6krb9NSbdEkyp8dkG2jF6/EwmhOAvSbJFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:cf:66:08:e6:96:fc:e3:da:89:60:aa:80:73:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Validity
Not Before: Jul 26 17:00:29 2025 GMT
Not After : Jul 27 17:00:29 2025 GMT
Subject: CN=b3eec288eb36f4127cad1973041cfcdf8c29c8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:cc:97:b5:24:d9:2e:d0:32:fc:de:a4:58:
57:ea:15:60:39:0e:ce:b0:1c:a2:3d:53:a2:c3:d2:
6c:4f:65:2b:4a:89:01:8e:dc:0d:9c:a5:90:1f:d1:
b4:c0:8e:af:78:c5:62:04:9c:1c:e4:2e:08:36:d0:
ff:40:d9:19:c3:fc:f1:32:8c:3b:2d:2e:2c:78:cc:
0d:f4:1f:59:02:44:be:46:1d:94:2d:72:b7:b9:d5:
97:18:32:9d:bc:e0:5d:16:9c:99:0d:38:5e:6b:f3:
03:84:dc:25:ad:e9:46:f5:f1:20:a1:01:d4:b5:1b:
f4:cb:44:b0:5f:0c:67:8b:54:a1:c4:73:d5:41:10:
0d:4f:a0:8d:13:03:72:91:18:a9:49:07:ec:86:81:
58:42:87:de:9a:29:55:f3:2b:bf:0b:fd:5b:96:e5:
4c:b4:4b:ca:8a:5f:dd:a6:b4:97:7d:3a:cd:f8:c6:
b9:92:e7:bd:f8:96:db:9d:d7:b3:d3:84:86:60:62:
3a:7c:54:50:1c:d1:5c:81:67:f8:84:dd:81:b2:c0:
ec:99:cd:eb:3d:dd:a2:4d:cc:8f:cf:15:30:8d:77:
ac:86:65:0c:41:6d:bf:5a:39:32:de:a1:f2:41:9f:
03:8f:81:9e:7c:ea:11:ff:b5:69:d4:60:df:f0:83:
c2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EE:C2:88:EB:36:F4:12:7C:AD:19:73:04:1C:FC:DF:8C:29:C8:DF
X509v3 Authority Key Identifier:
keyid:4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:cd:b3:87:42:11:8b:e3:a8:8a:4b:90:25:88:a4:b4:e1:38:
c5:90:67:9d:e5:8d:bc:45:bb:4e:9f:d7:66:3e:2f:b9:a5:65:
e2:dc:f5:39:a7:a1:e3:cb:72:bd:98:e9:43:07:09:c8:0f:eb:
35:b6:c3:3a:c4:16:a9:36:fe:50:56:8a:ae:5a:fd:fa:d2:3e:
07:8c:6e:44:de:ce:61:f6:44:13:50:48:11:df:cb:f9:b5:bd:
73:cc:73:60:b9:16:26:fd:d5:01:2d:2b:b3:86:43:ec:57:04:
e9:44:32:01:cc:b0:39:71:86:b1:9f:ff:ff:51:e5:52:08:43:
3a:14:a9:6f:d3:ac:fe:1f:d6:6d:11:04:53:58:8b:4f:6c:c6:
f9:43:82:40:75:ef:9a:13:0e:fd:e3:b1:c5:1d:2e:ef:5a:ec:
e9:77:e2:19:1f:3d:8e:0d:8c:4f:29:82:57:2a:ca:58:2c:ff:
1b:71:cd:a2:67:03:f3:24:33:54:13:11:96:ab:00:80:73:87:
c2:4f:40:3e:94:a4:de:b7:c7:fc:98:10:1c:0a:ff:6d:e6:e1:
00:46:be:58:15:9b:e0:4d:c4:fe:00:7f:87:73:f3:c3:f7:20:
5a:07:27:62:f2:6d:34:9f:47:8c:a4:37:db:79:7d:43:07:5e:
d5:b8:a5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:54:13 2025 by rpki-client