Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
File: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft (raw, json)
Hash identifier: lP5jlswraUhthvQcPQwTmruHEB/7507u0w+eY1pd8DM=
Subject key identifier: CA:98:35:7D:00:40:E4:65:C0:88:8A:D7:CD:62:9D:3C:BA:77:04:95
Authority key identifier: 4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
Certificate issuer: /CN=4c6319fe7859c342f7cd9f711306f56590828d60
Certificate serial: 0199228C55F96346B246FD11559BD313E0EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
Manifest number: 0B9A
Signing time: Sun 07 Sep 2025 05:00:46 +0000
Manifest this update: Sun 07 Sep 2025 05:00:46 +0000
Manifest next update: Mon 08 Sep 2025 05:00:46 +0000
Files and hashes: 1: 7AICHMFq1kSjCOJXzQDO4zRvMc8.roa (hash: p5CUpe/5DfGPJwjUzsORFP9UxiFbMunTvT9GArgSAt4=)
2: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl (hash: fnNfSfvQQJWqoxtP1usccCv2l7ts4fFowgAaOEhH+Us=)
3: t5BDJd8Dzrg2IC09MFuU9BxT5Uk.roa (hash: 9AOu1bBqC0e4A6DdOt1aKlQ9vH6ddvoaCculzcrBvgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:55:f9:63:46:b2:46:fd:11:55:9b:d3:13:e0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6319fe7859c342f7cd9f711306f56590828d60
Validity
Not Before: Sep 7 05:00:46 2025 GMT
Not After : Sep 8 05:00:46 2025 GMT
Subject: CN=ca98357d0040e465c0888ad7cd629d3cba770495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:17:79:1f:08:a1:a1:47:5a:24:00:a4:04:
71:30:77:f7:92:76:92:0d:9a:82:42:5d:63:f0:3f:
ce:d3:bb:7b:02:52:b9:59:12:b7:ad:ae:b6:6d:64:
57:89:2f:b5:40:e4:1c:80:8e:9e:c8:42:1b:c8:f6:
e5:60:5c:ae:07:15:6d:8f:51:07:74:b4:5a:12:ac:
a9:d4:c8:d3:17:85:e3:d3:9d:aa:1f:24:01:f8:44:
c0:8d:9d:39:ac:75:0f:9f:b0:93:b4:56:1d:ad:e4:
6a:1a:80:8a:61:f1:5e:fb:22:f4:94:9f:10:f4:8b:
7f:67:37:0f:cd:89:0a:0a:f5:7b:3c:70:d7:76:f3:
36:4a:67:f0:e1:e8:a1:17:5c:aa:06:79:5a:52:01:
6a:87:61:22:09:3a:e1:3b:7c:02:7d:63:0d:6d:5d:
a7:d4:54:44:d9:8a:c8:b3:8f:31:d4:d2:41:51:eb:
31:17:b9:ea:cb:06:a4:fd:fb:c6:a5:cc:cf:bc:c4:
43:23:5c:b7:77:6f:b9:14:9e:ce:2f:91:dc:b1:06:
f5:b2:62:40:93:c9:2b:1e:ca:a3:3f:12:43:1f:2c:
07:4e:23:9a:32:5e:3d:77:3d:be:41:fb:b2:aa:61:
3a:c9:cb:90:05:e6:5b:48:a1:0b:7a:a4:48:c9:d2:
8d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:98:35:7D:00:40:E4:65:C0:88:8A:D7:CD:62:9D:3C:BA:77:04:95
X509v3 Authority Key Identifier:
keyid:4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:22:94:06:ae:25:49:73:e5:bc:4c:55:5b:ba:36:60:e4:2e:
fb:d4:a5:28:96:35:5a:84:8c:a7:c3:ea:9c:ae:00:52:b6:95:
98:fe:9c:0e:8d:cc:42:1a:f4:1c:f7:67:b1:b5:93:8a:8e:7f:
63:5b:b3:5c:48:44:8f:8e:ef:11:07:dd:ae:fb:5f:17:97:16:
4c:a9:10:82:88:df:97:43:f0:fa:b4:e8:cd:16:06:a1:1b:11:
f0:3c:47:b0:0c:91:63:45:ab:f2:e6:22:8d:bd:dd:5f:6a:ed:
55:ee:1b:12:38:10:1c:d1:43:6b:90:30:2b:b9:1a:16:27:97:
67:8c:dc:44:66:09:73:9f:b3:dc:93:ee:ba:20:d2:91:d8:dd:
7f:aa:2c:d2:03:32:e9:b6:38:79:5f:e8:ef:45:59:43:d2:f8:
63:8b:a0:2c:23:e7:59:ad:86:60:b0:b7:1d:92:f2:73:90:5a:
13:d1:17:cd:dd:82:6f:6f:77:a8:4c:60:03:9b:15:bd:06:f2:
a6:0c:4a:05:5e:a8:7a:7b:e0:0c:d4:76:b7:c6:fd:79:48:55:
25:f5:7e:06:d7:c7:06:85:f6:9d:f1:ea:51:3a:85:39:af:56:
90:5e:34:f9:13:6c:d5:82:c6:ab:22:16:10:f2:72:d3:fa:4c:
b2:9d:8d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:37 2025 by rpki-client