Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
File: TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft (raw, json)
Hash identifier: /oqcDt2RiL4tEdPSu4M0R9phZHi2rmc8gRyC7RRIy8Y=
Subject key identifier: F3:37:05:4A:94:0A:36:A4:18:E4:C3:C5:77:22:98:D4:63:FC:95:8C
Authority key identifier: 4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
Certificate issuer: /CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Certificate serial: 019748C3767E92E2A1EA1A2A435AB957337A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
Manifest number: 02BA
Signing time: Sat 07 Jun 2025 05:00:58 +0000
Manifest this update: Sat 07 Jun 2025 05:00:58 +0000
Manifest next update: Sun 08 Jun 2025 05:00:58 +0000
Files and hashes: 1: TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl (hash: 3Q50QXPvlv/nF50RJClW9Q8YmoLDJLZWf7EP03w1SJU=)
2: U_0Qm9bmlfNCn0QcnMuKjqVhpok.roa (hash: rS2TodhOY6krb9NSbdEkyp8dkG2jF6/EwmhOAvSbJFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:76:7e:92:e2:a1:ea:1a:2a:43:5a:b9:57:33:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Validity
Not Before: Jun 7 05:00:58 2025 GMT
Not After : Jun 8 05:00:58 2025 GMT
Subject: CN=f337054a940a36a418e4c3c5772298d463fc958c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:39:ce:fa:2c:b3:08:4b:15:7f:dc:10:36:
08:f2:03:76:09:7e:00:51:3c:20:20:37:e4:74:a4:
ad:1a:31:1e:c7:96:90:cc:02:73:9f:ab:93:c7:14:
0c:a4:7d:92:9f:da:85:8d:56:ec:05:3c:b1:ee:86:
88:66:2b:90:1e:1b:c8:8b:f6:1d:90:df:c4:da:31:
b6:bd:d6:19:f2:d0:e9:4d:97:c8:40:61:69:2f:3f:
b9:75:ab:67:41:73:64:57:b0:bb:88:7b:60:03:b1:
d9:ea:86:02:fe:9e:5d:b7:9c:5e:9b:22:e1:58:45:
b9:c3:ff:da:2f:f9:a8:0c:33:04:03:60:85:9a:8f:
df:fa:91:3c:3e:c3:38:bd:aa:0f:56:6c:f2:69:a4:
3c:7b:19:6a:d1:76:1e:40:0f:0f:dc:d6:0c:58:a5:
e4:c6:63:97:89:ad:7c:c7:56:3b:3b:bf:0e:07:94:
43:c3:d3:80:2f:53:34:49:77:bc:be:e6:a2:e5:49:
1b:b7:2e:40:8b:21:84:90:df:4b:8a:5d:85:fd:45:
d4:29:a9:fc:64:6d:4c:82:28:8a:2f:95:db:43:d3:
f9:3e:b8:72:c5:17:03:59:dd:52:d7:52:10:fc:dd:
b5:29:03:c1:e2:e2:2d:37:db:eb:cc:69:35:82:30:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:37:05:4A:94:0A:36:A4:18:E4:C3:C5:77:22:98:D4:63:FC:95:8C
X509v3 Authority Key Identifier:
keyid:4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e0:30:de:03:e8:66:a1:f8:1a:07:38:d8:8c:13:fd:99:d1:
af:27:e1:9f:d8:dc:5e:ba:1e:41:06:fb:06:36:66:57:cf:ad:
32:cc:b7:8b:86:30:cd:59:b6:c0:d8:82:40:7e:87:ce:de:21:
16:cf:e6:6a:b0:eb:2a:e4:65:11:95:53:03:3d:87:ba:7e:04:
1a:4f:71:01:fa:47:86:4b:30:33:d4:6f:9f:ef:b2:ef:c5:bb:
cf:c8:7c:71:b0:b3:c0:d7:06:ef:d9:d5:16:62:dc:84:8a:62:
bf:56:30:23:b0:ff:2d:1e:c7:b8:0e:d8:0a:e3:9c:3a:68:be:
34:fc:d8:e1:35:cb:f1:28:0b:f6:ec:e5:c5:67:5f:7e:2d:41:
d7:da:da:04:df:59:f3:4e:f7:08:87:05:00:da:dd:22:23:08:
3d:2d:76:4c:c7:28:6d:c2:86:7a:32:8d:bf:fa:4a:69:27:de:
d1:24:ae:4d:4a:ed:d2:96:7f:4c:23:e0:ae:40:0d:d9:44:1d:
34:27:42:39:f1:4e:16:1d:cb:5e:e3:2c:72:41:bf:71:f8:cc:
8f:36:6e:ef:a6:b2:ae:95:1e:9f:a8:3a:91:e0:7c:d3:7c:6b:
0f:b0:c6:50:df:bd:bc:db:29:0c:5f:f9:73:46:8b:b0:e1:c7:
5b:1e:1e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:55:06 2025 by rpki-client