Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
File: T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft (raw, json)
Hash identifier: RFgbpBWSJO2zRozMkClBWL4xhhd5FzItm/pEUrywrFc=
Subject key identifier: 45:8B:06:09:52:B2:8D:A3:27:F2:14:27:EF:AA:4D:85:DE:CD:9A:11
Authority key identifier: 4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
Certificate issuer: /CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Certificate serial: 019649A28642B0AEA4DA9EDAED5593F4710F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
Manifest number: 14F7
Signing time: Fri 18 Apr 2025 16:01:50 +0000
Manifest this update: Fri 18 Apr 2025 16:01:50 +0000
Manifest next update: Sat 19 Apr 2025 16:01:50 +0000
Files and hashes: 1: T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl (hash: o6Y6g0sVRmNKTctHgUVPQlwqZrTxoxWjt1+yxeYX2Os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 16:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a2:86:42:b0:ae:a4:da:9e:da:ed:55:93:f4:71:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Validity
Not Before: Apr 18 16:01:50 2025 GMT
Not After : Apr 19 16:01:50 2025 GMT
Subject: CN=458b060952b28da327f21427efaa4d85decd9a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:b9:34:66:87:1d:22:ba:a9:cf:87:f6:5b:
49:6f:c1:07:36:79:bf:82:8c:dd:81:46:86:ab:64:
86:ae:f6:36:96:e7:fa:00:8d:e3:59:4b:4b:e4:d2:
09:42:70:2b:3c:34:b5:f8:ae:67:33:94:fb:9d:0c:
38:74:c2:47:a3:a9:6f:40:3f:f7:f5:b9:71:f6:ad:
e1:93:29:ee:c5:e5:44:fd:80:9a:1c:49:58:68:86:
f4:25:dd:1e:8c:52:56:a7:c0:fd:5b:6f:85:a3:0f:
42:b7:a4:52:bf:66:20:74:d6:3e:d1:a7:1d:1e:8b:
4b:19:fa:03:e6:b8:d0:7d:3a:f4:52:5f:fb:69:10:
59:29:71:1d:2f:1d:5d:13:58:aa:4c:84:29:05:cc:
09:cd:b3:6a:73:98:96:f5:3f:c6:e0:bb:cd:c9:38:
4a:40:d8:3f:56:15:ed:2f:f8:0b:26:5d:f8:78:81:
c2:b1:bf:f2:c5:11:8e:12:e3:c5:cf:00:e1:ed:f8:
8b:38:63:69:04:c1:f6:15:60:84:2c:f0:ea:d5:5f:
10:66:5f:42:7c:87:81:dc:16:d7:99:f6:da:63:bb:
95:17:b6:7a:34:86:ca:ba:f6:ba:5b:c4:c8:dc:2d:
b5:5f:ed:1a:8c:93:33:a7:67:3b:23:ec:fb:43:87:
76:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8B:06:09:52:B2:8D:A3:27:F2:14:27:EF:AA:4D:85:DE:CD:9A:11
X509v3 Authority Key Identifier:
keyid:4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:33:b0:93:4d:25:b3:e2:5e:26:ef:ee:2f:a7:e1:2e:74:33:
a7:5a:96:27:6c:6b:73:82:d3:81:70:c5:4d:2f:cc:50:ec:e3:
64:23:c6:ab:2b:c2:3e:a9:44:af:41:31:7a:74:1e:9a:f7:ac:
19:c1:84:b7:74:5f:87:2f:1c:db:0c:88:c6:56:c9:ac:af:f2:
a5:43:29:8e:88:5f:88:78:c5:25:a7:4d:9e:c5:9d:b4:f9:78:
da:42:e2:21:76:2a:85:9c:19:cc:30:04:2d:50:55:c6:59:8c:
11:0b:38:39:f0:68:6e:26:b7:2d:01:08:d8:85:89:a2:e1:d6:
81:77:d6:8d:6d:5d:41:d5:a3:67:7e:c2:8b:ea:4f:a4:e5:b2:
6a:75:7a:23:dc:8d:41:ae:2b:7a:00:24:f3:c1:d7:9c:c8:1c:
d6:be:55:6c:5c:37:37:04:12:b6:69:ec:bd:43:fb:2f:5b:70:
f3:44:dc:b8:82:61:17:a7:36:3d:10:85:6d:d5:fc:04:c5:06:
5d:54:32:dd:46:aa:09:d9:2b:36:bb:5a:82:88:07:08:02:45:
49:03:85:09:0e:95:26:3b:7d:27:25:f8:78:9b:45:f2:15:f6:
6c:14:b2:d1:b8:dc:2f:9d:9e:de:a1:ef:c9:d8:e0:cc:c9:11:
72:6d:bd:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZJooZCsK6k2p7a7VWT9HEPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZTMxOWQzZjRlYzlhNzYwZGY3NzRmMDFjZmI3MTU0N2Ux
NjNmM2MwHhcNMjUwNDE4MTYwMTUwWhcNMjUwNDE5MTYwMTUwWjAzMTEwLwYDVQQD
Eyg0NThiMDYwOTUyYjI4ZGEzMjdmMjE0MjdlZmFhNGQ4NWRlY2Q5YTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYS5NGaHHSK6qc+H9ltJb8EHNnm/
gozdgUaGq2SGrvY2luf6AI3jWUtL5NIJQnArPDS1+K5nM5T7nQw4dMJHo6lvQD/3
9blx9q3hkynuxeVE/YCaHElYaIb0Jd0ejFJWp8D9W2+Fow9Ct6RSv2YgdNY+0acd
HotLGfoD5rjQfTr0Ul/7aRBZKXEdLx1dE1iqTIQpBcwJzbNqc5iW9T/G4LvNyThK
QNg/VhXtL/gLJl34eIHCsb/yxRGOEuPFzwDh7fiLOGNpBMH2FWCELPDq1V8QZl9C
fIeB3BbXmfbaY7uVF7Z6NIbKuva6W8TI3C21X+0ajJMzp2c7I+z7Q4d22wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWLBglSso2jJ/IUJ++qTYXezZoRMB8GA1UdIwQY
MBaAFE/jGdP07Jp2Dfd08Bz7cVR+Fj88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVC1NWjBfVHNtbllOOTNUd0hQdHhWSDRXUHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yMTU1OGItNjY2OS00ZmQ3LTg0N2Ut
MjZkOTJjNDI4YmEyLzEvVC1NWjBfVHNtbllOOTNUd0hQdHhWSDRXUHp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8yMTU1OGItNjY2OS00ZmQ3LTg0N2UtMjZkOTJjNDI4YmEy
LzEvVC1NWjBfVHNtbllOOTNUd0hQdHhWSDRXUHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzOwk00l
s+JeJu/uL6fhLnQzp1qWJ2xrc4LTgXDFTS/MUOzjZCPGqyvCPqlEr0ExenQemves
GcGEt3Rfhy8c2wyIxlbJrK/ypUMpjohfiHjFJadNnsWdtPl42kLiIXYqhZwZzDAE
LVBVxlmMEQs4OfBobia3LQEI2IWJouHWgXfWjW1dQdWjZ37Ci+pPpOWyanV6I9yN
Qa4regAk88HXnMgc1r5VbFw3NwQStmnsvUP7L1tw80TcuIJhF6c2PRCFbdX8BMUG
XVQy3UaqCdkrNrtagogHCAJFSQOFCQ6VJjt9JyX4eJtF8hX2bBSy0bjcL52e3qHv
ydjgzMkRcm29bA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:04:57 2025 by rpki-client