Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
File: T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft (raw, json)
Hash identifier: sU+RUMon6slMZPSI8eZ8MgpMOWgNg/SzD6Rj5c9Bf+U=
Subject key identifier: 5C:56:54:DD:0E:F8:20:CD:5B:70:32:F7:1F:EC:45:57:FA:C3:59:71
Authority key identifier: 4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
Certificate issuer: /CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Certificate serial: 0198530D2B566AE6D6957895AAB3F3853988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
Manifest number: 1605
Signing time: Mon 28 Jul 2025 22:00:28 +0000
Manifest this update: Mon 28 Jul 2025 22:00:28 +0000
Manifest next update: Tue 29 Jul 2025 22:00:28 +0000
Files and hashes: 1: T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl (hash: U/H1u6EiuQsBA7Mr0nfHTD/W4hlDFgCaLff8vl1mvTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:2b:56:6a:e6:d6:95:78:95:aa:b3:f3:85:39:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Validity
Not Before: Jul 28 22:00:28 2025 GMT
Not After : Jul 29 22:00:28 2025 GMT
Subject: CN=5c5654dd0ef820cd5b7032f71fec4557fac35971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:f6:77:a6:4e:ad:81:fc:45:f7:fa:82:5b:
ff:63:f7:84:64:e1:7e:3e:b8:20:ed:32:6d:84:ea:
28:75:a0:89:8e:8d:23:69:76:17:06:b3:72:93:81:
03:d7:c3:c9:7e:0a:02:9e:0c:aa:de:a0:22:9d:e3:
b0:45:ce:eb:13:8b:11:a9:28:39:77:a8:66:32:31:
6d:e5:97:f7:13:5e:31:56:de:b3:d3:e1:1c:c1:14:
9e:f8:4b:c6:2c:d1:39:eb:33:58:5a:e4:9a:62:92:
4d:9f:7c:ac:87:39:4f:ac:b5:a9:93:52:89:31:2d:
a2:3c:b7:74:22:b2:60:37:af:1b:47:ff:23:b9:98:
ab:09:96:40:aa:cc:01:df:35:dc:1c:3c:eb:4b:73:
7f:dc:9e:fa:40:55:e8:89:68:47:75:14:1d:1f:95:
38:ba:20:51:0f:bc:7c:85:27:f6:db:f5:6a:d3:99:
b7:88:41:dd:a3:75:c1:cc:5d:9b:d3:62:42:04:37:
f1:0d:dd:af:8d:95:56:17:9a:d3:1d:30:f7:b6:0f:
8d:42:f1:95:73:06:ac:fe:c3:d3:d4:97:c2:64:5d:
12:02:07:ee:e2:30:96:91:67:e9:63:bf:6b:45:db:
aa:0a:d4:a9:25:74:42:59:c1:8c:e6:7f:5b:77:de:
f1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:56:54:DD:0E:F8:20:CD:5B:70:32:F7:1F:EC:45:57:FA:C3:59:71
X509v3 Authority Key Identifier:
keyid:4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4d:7f:cc:6e:40:ec:6e:9f:9c:9f:a3:c0:32:45:c9:03:e1:
c6:36:db:62:0c:4a:8a:6a:68:c4:15:d7:0a:92:ff:fc:f6:94:
7b:40:81:40:0f:ef:bc:6b:db:d5:fa:d9:b9:8c:c6:27:10:24:
cf:2e:39:d4:79:17:3d:5c:fd:cd:6a:10:5c:9d:86:8b:3b:48:
67:f4:d2:7f:8a:98:24:4c:3b:cd:5f:4a:7d:04:00:75:33:73:
05:1c:06:8f:be:c8:59:c7:26:f2:0c:4d:4c:cb:8d:51:a6:c9:
63:8d:6c:22:b5:ae:07:3b:1e:4f:51:b6:19:54:c3:c4:de:16:
2b:57:9c:31:ec:45:0b:86:10:e1:40:5d:75:61:a9:57:ed:7b:
ec:3f:c7:62:2a:1f:b5:ff:64:52:38:c3:8f:3e:ec:b0:da:a2:
2f:24:76:62:87:c6:c5:52:12:9e:68:ca:ba:9c:7c:4a:1b:07:
75:97:17:07:86:06:28:53:3d:6e:c9:d0:a5:ee:8c:7f:9a:d9:
b6:3f:75:5a:72:f8:62:0d:2b:e1:92:b4:fc:39:1e:31:36:05:
f7:cd:e8:ff:d4:1f:a6:3a:1a:ba:76:e9:1e:35:88:12:7a:ad:
23:4e:11:dd:87:e5:fc:90:25:1e:cc:00:27:4c:20:81:3d:1c:
d1:83:8e:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDStWaubWlXiVqrPzhTmIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZTMxOWQzZjRlYzlhNzYwZGY3NzRmMDFjZmI3MTU0N2Ux
NjNmM2MwHhcNMjUwNzI4MjIwMDI4WhcNMjUwNzI5MjIwMDI4WjAzMTEwLwYDVQQD
Eyg1YzU2NTRkZDBlZjgyMGNkNWI3MDMyZjcxZmVjNDU1N2ZhYzM1OTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwL2d6ZOrYH8Rff6glv/Y/eEZOF+
Prgg7TJthOoodaCJjo0jaXYXBrNyk4ED18PJfgoCngyq3qAineOwRc7rE4sRqSg5
d6hmMjFt5Zf3E14xVt6z0+EcwRSe+EvGLNE56zNYWuSaYpJNn3yshzlPrLWpk1KJ
MS2iPLd0IrJgN68bR/8juZirCZZAqswB3zXcHDzrS3N/3J76QFXoiWhHdRQdH5U4
uiBRD7x8hSf22/Vq05m3iEHdo3XBzF2b02JCBDfxDd2vjZVWF5rTHTD3tg+NQvGV
cwas/sPT1JfCZF0SAgfu4jCWkWfpY79rRduqCtSpJXRCWcGM5n9bd97xTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxWVN0O+CDNW3Ay9x/sRVf6w1lxMB8GA1UdIwQY
MBaAFE/jGdP07Jp2Dfd08Bz7cVR+Fj88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVC1NWjBfVHNtbllOOTNUd0hQdHhWSDRXUHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yMTU1OGItNjY2OS00ZmQ3LTg0N2Ut
MjZkOTJjNDI4YmEyLzEvVC1NWjBfVHNtbllOOTNUd0hQdHhWSDRXUHp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8yMTU1OGItNjY2OS00ZmQ3LTg0N2UtMjZkOTJjNDI4YmEy
LzEvVC1NWjBfVHNtbllOOTNUd0hQdHhWSDRXUHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANk1/zG5A
7G6fnJ+jwDJFyQPhxjbbYgxKimpoxBXXCpL//PaUe0CBQA/vvGvb1frZuYzGJxAk
zy451HkXPVz9zWoQXJ2GiztIZ/TSf4qYJEw7zV9KfQQAdTNzBRwGj77IWccm8gxN
TMuNUabJY41sIrWuBzseT1G2GVTDxN4WK1ecMexFC4YQ4UBddWGpV+177D/HYiof
tf9kUjjDjz7ssNqiLyR2YofGxVISnmjKupx8ShsHdZcXB4YGKFM9bsnQpe6Mf5rZ
tj91WnL4Yg0r4ZK0/DkeMTYF983o/9QfpjoaunbpHjWIEnqtI04R3Yfl/JAlHswA
J0wggT0c0YOOEw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:46:54 2025 by rpki-client