Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
File: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft (raw, json)
Hash identifier: decVzVbzr1DBr0q1tqSJIQNenEjapv1HM4zDa7ndR8c=
Subject key identifier: FD:9F:AC:B6:5A:DA:9A:94:F6:91:88:D0:24:E2:19:05:CA:8B:A9:55
Authority key identifier: 4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
Certificate issuer: /CN=4c6319fe7859c342f7cd9f711306f56590828d60
Certificate serial: 0197DA3FBBE49B0DFC44D5F513679D1D744F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
Manifest number: 0AF0
Signing time: Sat 05 Jul 2025 11:01:39 +0000
Manifest this update: Sat 05 Jul 2025 11:01:39 +0000
Manifest next update: Sun 06 Jul 2025 11:01:39 +0000
Files and hashes: 1: 7AICHMFq1kSjCOJXzQDO4zRvMc8.roa (hash: p5CUpe/5DfGPJwjUzsORFP9UxiFbMunTvT9GArgSAt4=)
2: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl (hash: RdUopc3qfnalPmr8bpULMiCkPrkymSEaNarBL3q9OUo=)
3: t5BDJd8Dzrg2IC09MFuU9BxT5Uk.roa (hash: 9AOu1bBqC0e4A6DdOt1aKlQ9vH6ddvoaCculzcrBvgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:da:3f:bb:e4:9b:0d:fc:44:d5:f5:13:67:9d:1d:74:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6319fe7859c342f7cd9f711306f56590828d60
Validity
Not Before: Jul 5 11:01:39 2025 GMT
Not After : Jul 6 11:01:39 2025 GMT
Subject: CN=fd9facb65ada9a94f69188d024e21905ca8ba955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:d7:06:22:5c:c3:15:92:8d:40:d3:fd:f8:
92:b2:86:c8:c6:c4:97:38:e0:d0:c3:b1:6d:36:9d:
71:dc:1a:2e:c8:c8:f6:f6:3b:7a:57:07:a4:b4:a2:
97:b6:4c:8d:16:94:23:11:fa:ed:8a:85:c1:8e:f5:
bb:d9:25:62:b8:e8:3c:12:e7:e9:c9:26:df:60:1f:
19:74:f5:08:4b:ec:0f:4f:d9:9f:de:89:3f:d7:75:
e6:4b:f5:3d:0c:7e:03:36:b5:e2:22:40:68:42:d9:
f2:56:bb:89:64:cf:04:9a:d6:79:e7:09:31:a0:b5:
a2:a3:a4:3b:3d:1d:31:17:1a:24:69:46:78:43:48:
20:a3:7e:41:45:d9:78:86:66:e2:aa:62:01:21:f1:
05:d3:2d:db:ef:0b:68:b2:b2:2a:2b:90:57:b0:31:
b0:fa:54:cd:77:b6:d9:d3:36:1a:f7:4e:8b:3b:0b:
83:3c:0c:3f:64:39:d6:fc:38:99:22:e9:ea:44:d1:
61:8a:70:a5:b5:c2:99:12:92:73:1d:c0:3b:d6:1a:
5b:9e:bf:56:32:2a:9d:5d:9f:60:77:fa:c4:a1:f5:
72:4e:d5:70:5a:d7:85:06:a4:12:f5:ed:44:1f:0d:
34:d2:7d:9a:35:5c:0e:59:75:2f:cf:d4:ea:d7:3f:
f3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9F:AC:B6:5A:DA:9A:94:F6:91:88:D0:24:E2:19:05:CA:8B:A9:55
X509v3 Authority Key Identifier:
keyid:4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5b:ad:59:8d:47:69:e1:e7:ed:f3:6d:d1:c5:ce:57:17:3e:
b4:6f:47:d2:b6:c2:37:03:b0:d9:fe:4f:c2:eb:25:ab:e4:db:
39:0d:44:37:c7:1f:5b:f9:63:8e:dc:b6:07:59:01:a3:c9:fb:
f8:1d:cf:24:b2:aa:b2:de:2a:91:49:09:89:75:d5:8e:e5:db:
4a:91:75:6b:a2:44:fc:52:51:40:d7:49:59:5e:6b:28:cf:7f:
fd:ee:33:b3:85:b7:4e:c2:62:18:ad:e5:2d:70:9b:a8:ce:cc:
a8:46:29:dc:7d:ba:7b:ac:4f:fe:9f:29:18:90:11:d0:ab:56:
8c:f9:1f:62:fb:8a:10:14:ec:54:27:cb:42:16:7a:ec:11:2f:
6d:b4:f5:c4:84:ae:79:cc:bb:29:28:43:97:c3:01:82:20:90:
18:95:ed:27:23:97:a8:45:ba:ed:25:aa:c0:57:5d:81:e0:52:
2a:e7:07:5d:db:37:46:02:57:06:3e:e2:06:53:7a:8a:d8:1a:
56:00:3e:6d:86:be:e9:8d:52:02:84:4e:47:1c:36:fd:3c:27:
6a:d8:be:ba:48:64:c3:71:1d:96:9f:7a:2b:90:12:44:db:71:
5c:2d:f7:94:14:b4:3d:0e:6b:1a:27:1f:62:b9:71:a9:59:fe:
b8:62:49:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:50:15 2025 by rpki-client