Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
File: S_TZ-mawCKCMO47YLDgmfh0hJVA.mft (raw, json)
Hash identifier: beEBsEaLo/SJ/QeddHKfGyc26h/UPkPBoq+kwvpse7I=
Subject key identifier: 67:92:9C:5A:89:48:98:CF:27:B7:18:8F:4D:FF:5C:59:41:C8:16:63
Authority key identifier: 4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
Certificate issuer: /CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Certificate serial: 019763966F6F8A8DB553C667E4F4E3DF1AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
Manifest number: 158B
Signing time: Thu 12 Jun 2025 10:01:32 +0000
Manifest this update: Thu 12 Jun 2025 10:01:32 +0000
Manifest next update: Fri 13 Jun 2025 10:01:32 +0000
Files and hashes: 1: S_TZ-mawCKCMO47YLDgmfh0hJVA.crl (hash: Ue27NjZmpvVzHAQIv3vYO9iRcueLe9Pgc0vIpoy5X64=)
2: VHi9vxpSG4tYfENJTcecEKHCVRo.roa (hash: ZPBYgaWs41C7d8q4Zb2hDOx2GjzVI3YJSGRCZKGJpWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:96:6f:6f:8a:8d:b5:53:c6:67:e4:f4:e3:df:1a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Validity
Not Before: Jun 12 10:01:32 2025 GMT
Not After : Jun 13 10:01:32 2025 GMT
Subject: CN=67929c5a894898cf27b7188f4dff5c5941c81663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3b:b8:c5:84:1f:78:9c:42:29:a8:50:ba:a3:
0f:55:98:e1:42:df:1f:b6:bd:50:56:1f:41:04:bd:
b9:8b:aa:0a:0e:49:81:23:58:98:f0:e2:e3:a3:b1:
bd:b8:0e:2f:c1:61:e4:e1:1d:1a:80:53:ef:b5:b1:
4d:77:4f:05:cf:63:e0:c4:ac:1b:2f:73:dd:7c:1d:
14:00:f9:0c:80:87:3a:23:fc:c2:aa:f3:5d:bc:e8:
ee:e0:c9:81:0c:f6:1c:9f:fc:a9:6b:27:b1:d5:b6:
54:7a:aa:1e:d7:d4:93:40:2d:33:3a:6c:2d:91:00:
ab:0f:c0:e7:3f:cf:9d:6f:74:1b:ea:18:76:c8:bb:
f1:08:8a:95:d5:f3:27:2e:b2:53:5d:15:f7:5b:06:
17:62:d5:95:90:b0:48:c1:e4:a9:34:e9:63:27:80:
04:fb:5b:9d:66:86:23:3e:10:a2:45:fd:cb:fb:a0:
a3:06:11:99:26:c2:86:66:79:af:a7:21:98:bf:ba:
ef:15:6d:97:d9:b6:74:b9:bd:53:3e:7e:eb:09:ab:
01:3f:a8:03:83:d6:7f:c7:53:39:b2:4e:cf:bb:d0:
9e:a3:87:de:35:1e:ac:16:29:2a:bc:e2:90:5c:4f:
64:17:27:b8:e6:14:bc:79:02:7d:eb:e0:57:0c:7f:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:92:9C:5A:89:48:98:CF:27:B7:18:8F:4D:FF:5C:59:41:C8:16:63
X509v3 Authority Key Identifier:
keyid:4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0c:57:44:95:f5:01:ed:70:22:e7:d5:b4:e5:1e:86:17:3b:
ed:45:96:a7:76:f3:7e:6d:28:20:8b:c9:f2:26:2d:99:25:d6:
bd:f9:72:eb:e5:b2:61:b3:9c:86:aa:ef:89:0c:29:c1:1c:1e:
f3:79:c3:8c:ca:9d:18:06:c1:18:f9:21:05:74:43:d4:10:84:
a4:02:c8:50:79:6d:38:0d:cd:bd:15:95:b5:7f:85:e4:e3:36:
36:51:04:0e:9e:e6:ea:38:3a:99:2a:8a:b5:ed:b7:85:59:74:
37:09:45:48:32:6a:b3:a8:6b:9e:3a:a9:f5:66:72:c9:3f:1f:
84:eb:d9:5d:36:d8:8a:4e:f0:ac:1c:05:ef:c6:08:3a:27:48:
3d:40:c8:1e:9d:fe:85:63:ff:97:a2:08:1b:2a:f3:de:60:07:
25:06:d7:ea:f3:17:e5:00:e0:30:a4:42:71:4c:52:74:e0:32:
e1:5d:63:36:fa:8f:0e:3a:ef:8f:bd:3e:bc:67:f1:7b:96:ce:
24:7f:cc:66:96:6c:e2:1a:d4:40:ee:a8:bb:ff:7f:08:ab:dc:
48:18:35:1b:d8:1c:34:8a:f7:e9:6a:a6:52:45:b2:e0:3b:07:
bf:f3:8b:3e:31:1d:95:0f:4f:c0:fc:5e:37:13:73:69:25:9e:
7e:4e:33:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:04:22 2025 by rpki-client