Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
File: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft (raw, json)
Hash identifier: jehR9y76C5BrKlf9UPgzaGQ+IMcRvVU5ShF1EXSnLbo=
Subject key identifier: 44:F3:E0:DE:1D:60:5D:31:37:A1:D9:D0:0A:A9:B6:B2:7E:4A:01:B2
Authority key identifier: 4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
Certificate issuer: /CN=4d92be02509643bc7a2f862871639d08e276c636
Certificate serial: 0198458891F600BE5E35EC797225BFFB3262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
Manifest number: 0F60
Signing time: Sat 26 Jul 2025 07:00:34 +0000
Manifest this update: Sat 26 Jul 2025 07:00:34 +0000
Manifest next update: Sun 27 Jul 2025 07:00:34 +0000
Files and hashes: 1: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl (hash: AmVAXWNodPfF13c2UD9TbPwj9rENkMpkSDDIqzI76bs=)
2: odyRy2FLHB1ia0-B0wtN-GrVmpY.roa (hash: kVTUOVywoB+P4bkpPocvLbzGPCGuaGOyFmq1BUYllIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:91:f6:00:be:5e:35:ec:79:72:25:bf:fb:32:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d92be02509643bc7a2f862871639d08e276c636
Validity
Not Before: Jul 26 07:00:34 2025 GMT
Not After : Jul 27 07:00:34 2025 GMT
Subject: CN=44f3e0de1d605d3137a1d9d00aa9b6b27e4a01b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:47:69:d3:67:e7:ce:9e:19:07:7f:f5:1c:
93:dc:f0:d6:0a:c3:7f:5d:0b:30:cf:4b:7a:f6:e5:
95:61:2c:fb:58:25:8d:eb:de:b1:72:60:32:ca:d9:
e3:78:a6:47:e0:9f:9f:54:44:87:72:3f:21:71:d6:
57:73:f4:a6:61:14:fc:24:e1:3f:41:a8:dd:5f:1f:
73:85:06:a4:79:23:e5:b0:54:88:ff:f8:2e:25:5b:
52:26:06:ca:40:b5:60:2f:80:6e:9c:e8:ec:0e:65:
4f:fa:b2:16:53:ca:36:49:41:be:15:ad:53:70:05:
c0:6c:8d:52:36:9d:f9:ea:2d:7c:ea:d5:d5:30:d2:
a5:d1:a8:fa:b0:d5:ce:16:a5:16:9a:56:1c:af:51:
fd:dd:58:17:fa:20:47:44:93:6f:30:15:ee:66:c8:
f0:ee:40:a1:6b:0a:6e:50:e1:a6:89:25:01:dd:d0:
ce:ec:4a:9c:fb:7f:2a:49:d3:16:33:39:c0:aa:90:
96:40:b9:b4:85:7f:c7:c5:eb:a0:48:e9:f5:08:49:
da:db:9b:f1:ed:8e:f1:be:ad:af:30:6f:07:c4:b5:
94:90:37:65:c6:94:09:7f:10:21:a8:4a:61:f0:78:
a0:b4:6c:4e:37:4c:81:ba:47:4a:27:d7:41:25:c2:
b1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F3:E0:DE:1D:60:5D:31:37:A1:D9:D0:0A:A9:B6:B2:7E:4A:01:B2
X509v3 Authority Key Identifier:
keyid:4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d5:e5:70:8b:c0:d1:06:6f:ef:e2:74:7a:a8:d3:fc:8c:12:
88:f8:8e:68:3f:d8:6e:7e:c4:39:2e:4a:5e:e4:66:01:f1:6c:
93:7e:66:a0:6c:47:76:32:c4:c7:6c:23:ee:af:21:8e:0a:d4:
b4:2f:c0:2d:3b:5d:6d:23:de:aa:7b:de:66:8c:c6:63:df:7a:
80:b2:6b:b5:16:15:02:98:e2:41:23:1a:2a:16:2a:11:48:cf:
05:f8:21:46:ef:b9:4b:55:d4:f2:ec:f6:ae:19:39:df:81:dc:
1d:e8:a1:f1:e7:b4:bf:56:33:6b:08:df:ba:ec:14:19:6f:83:
dc:c0:8f:1c:0d:7f:5f:aa:be:52:8d:97:00:2a:a2:7e:0f:79:
f1:c4:83:5a:6b:9a:eb:83:52:45:b8:52:40:37:00:63:72:1c:
3c:4c:41:46:37:dd:99:68:e3:0a:bf:96:03:93:b8:66:51:8d:
36:0b:36:81:2e:75:cc:9f:3d:c6:3b:9e:0c:aa:d7:de:41:d2:
17:24:59:92:64:99:ae:1a:5b:21:47:07:e7:e5:20:3c:98:ea:
d4:cc:57:7a:a5:e7:71:50:84:36:3e:85:f6:2f:49:d5:4e:6a:
df:95:91:a8:a8:08:a6:97:33:11:4e:6c:5a:e6:3e:69:e2:b2:
57:aa:37:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:58:11 2025 by rpki-client