Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
File: T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft (raw, json)
Hash identifier: BhgIWJBtIzarMq362bWvwMxl9RT/A1VU+/xKkWzmCL8=
Subject key identifier: DF:CC:31:3B:4A:90:D1:CF:C8:32:97:6E:88:4E:20:1D:78:EF:AB:93
Authority key identifier: 4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
Certificate issuer: /CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Certificate serial: 019750459DB5A30DE1A7492FDAD13BB70095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 16:00:28 +0000
Manifest this update: Sun 08 Jun 2025 16:00:28 +0000
Manifest next update: Mon 09 Jun 2025 16:00:28 +0000
Files and hashes: 1: T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl (hash: y7hadfNhKd/Jknut2S1Hs+8XefRz7ftL6WcxWMEceyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:9d:b5:a3:0d:e1:a7:49:2f:da:d1:3b:b7:00:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Validity
Not Before: Jun 8 16:00:28 2025 GMT
Not After : Jun 9 16:00:28 2025 GMT
Subject: CN=dfcc313b4a90d1cfc832976e884e201d78efab93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:b1:8f:55:18:40:28:6d:4e:d3:66:ba:85:
71:19:54:05:d7:77:2a:f1:2c:e2:b1:e0:35:45:aa:
57:42:43:01:53:ad:f2:29:3c:05:04:c1:0e:43:b9:
d6:7e:5d:06:10:be:d2:09:42:a5:1a:e8:c0:29:b3:
04:c0:57:4d:0f:2c:c7:00:0e:b2:a5:cd:a7:d1:42:
42:43:bc:a5:ce:b0:a4:6e:0a:f4:c7:52:fb:7a:d0:
d1:05:39:71:f1:d1:60:7a:41:47:5e:24:e9:52:8e:
29:d1:b3:34:e5:8e:32:2a:4e:cd:8c:32:78:75:c2:
21:9e:f9:0f:eb:0c:79:6d:c0:db:2a:b7:87:82:95:
c5:db:ca:69:7d:10:44:52:40:ae:e8:4b:ce:b7:74:
4f:05:74:ff:a6:49:fa:bc:8d:cf:9c:a1:3f:b9:92:
69:49:d0:63:50:1b:4a:4f:e2:13:06:e5:93:7d:79:
10:df:c1:bb:e6:3c:5a:f0:d5:b2:f4:99:23:fa:70:
fc:00:1e:da:34:b0:43:82:20:d3:82:bc:03:83:7b:
e0:53:e7:dc:fd:6f:28:c1:dc:59:ef:8d:ea:88:b1:
2f:22:74:a1:00:60:fb:e3:c7:20:1e:86:61:65:e5:
41:d9:90:ef:70:23:e7:35:b2:20:a8:27:f9:33:b6:
31:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CC:31:3B:4A:90:D1:CF:C8:32:97:6E:88:4E:20:1D:78:EF:AB:93
X509v3 Authority Key Identifier:
keyid:4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2b:08:c5:7b:4a:93:ec:2a:52:6c:1a:0b:5a:d4:8d:9e:a6:
c7:2a:41:2b:45:f0:ee:1d:a4:b1:f9:a0:e5:b5:76:e3:c6:c8:
35:d1:12:ca:2b:4c:ad:39:34:b7:a5:a3:9b:e1:fa:92:d4:9f:
76:8a:ef:85:ca:77:2b:70:31:bf:25:ec:5c:4b:bb:0a:55:0d:
e6:db:ed:74:ab:53:79:10:d3:4a:cb:c7:3d:32:08:c0:da:19:
91:da:ef:5b:13:74:ee:70:64:d2:97:b4:9c:a7:6e:29:2c:d9:
92:2b:8d:34:fa:9d:ce:82:e4:01:5e:89:46:bf:f8:31:54:30:
55:04:3f:58:94:70:f6:3a:98:58:4b:b8:eb:d3:b0:19:ca:41:
58:87:3d:7d:66:af:05:ae:0c:e3:36:eb:ff:73:4d:5f:36:32:
b0:e2:b5:48:e6:14:03:ae:3d:a3:22:50:f6:0d:da:ef:06:8b:
14:e4:70:fe:7b:1f:a4:ec:7b:56:68:27:33:e7:af:2a:14:3c:
22:14:6f:fc:71:c5:3c:5a:d2:17:6e:42:ee:5d:28:d2:86:5c:
1b:81:1b:f6:aa:3a:9f:d6:3c:c8:cb:9f:90:1d:21:03:00:d0:
ce:47:69:0b:fd:1a:3d:ec:99:d9:88:f8:42:67:da:ee:bd:82:
bd:be:57:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:33:54 2025 by rpki-client