Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
File: S_TZ-mawCKCMO47YLDgmfh0hJVA.mft (raw, json)
Hash identifier: YQnEJSbDv8aJcPbLTxH8loHuG0+1jfPItvdELSbaJXQ=
Subject key identifier: 1A:19:3A:76:04:1C:18:9A:B1:DD:8C:86:D8:E2:2F:6A:5F:A1:4A:2E
Authority key identifier: 4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
Certificate issuer: /CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Certificate serial: 019758007AEB888E54D02CE3CC738E59BFD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
Manifest number: 1585
Signing time: Tue 10 Jun 2025 04:01:55 +0000
Manifest this update: Tue 10 Jun 2025 04:01:55 +0000
Manifest next update: Wed 11 Jun 2025 04:01:55 +0000
Files and hashes: 1: S_TZ-mawCKCMO47YLDgmfh0hJVA.crl (hash: fZF/lEJ8yCNpeFgPBCHh9/rCrZcguS6vAeSwVAdLrIs=)
2: VHi9vxpSG4tYfENJTcecEKHCVRo.roa (hash: ZPBYgaWs41C7d8q4Zb2hDOx2GjzVI3YJSGRCZKGJpWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 04:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:00:7a:eb:88:8e:54:d0:2c:e3:cc:73:8e:59:bf:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Validity
Not Before: Jun 10 04:01:55 2025 GMT
Not After : Jun 11 04:01:55 2025 GMT
Subject: CN=1a193a76041c189ab1dd8c86d8e22f6a5fa14a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:79:63:2e:64:0a:7e:7c:2b:0e:71:85:57:
bd:47:83:4b:39:d7:b7:d1:95:cd:e0:fb:fd:50:26:
06:b1:15:43:a6:ef:e1:e4:e7:cd:67:a1:a4:46:0d:
fd:cb:ad:77:42:4d:94:4e:1a:80:59:f6:40:8d:bd:
35:5b:09:c6:84:f5:42:ee:9c:d1:95:f9:ee:ce:58:
0d:60:c8:34:2f:5e:22:ac:b7:63:c0:40:04:cd:2e:
e7:74:46:18:a1:a6:fc:7c:da:f9:58:34:08:e7:58:
7f:1a:77:4c:7c:70:8e:81:f3:b4:0e:b9:d6:2e:08:
19:27:b8:19:a9:95:40:51:90:e2:7c:03:47:15:dd:
97:b0:40:16:cf:83:2f:a2:9e:2d:d1:ec:6f:a1:64:
4d:e8:66:cd:94:b4:2f:6b:f6:99:26:ac:8e:dd:1c:
80:0c:73:a1:92:23:3a:1e:e7:33:fd:76:1e:01:2e:
4c:7d:6f:2e:b4:8b:ed:d5:ab:98:4c:93:7b:ea:bf:
d3:a2:27:5b:9b:9a:e4:eb:ef:7a:fe:6b:5e:c8:c8:
b9:ac:42:48:0e:3d:f3:6b:cf:62:3f:a1:31:c9:5c:
45:73:8a:79:e3:cc:af:75:8c:fe:9f:e3:7b:17:64:
e5:9d:75:b9:5f:42:34:b6:22:4a:f8:95:c3:50:a2:
7d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:19:3A:76:04:1C:18:9A:B1:DD:8C:86:D8:E2:2F:6A:5F:A1:4A:2E
X509v3 Authority Key Identifier:
keyid:4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f8:73:e2:c6:ac:8b:a1:3c:46:7c:e2:59:35:7d:7c:df:70:
22:6d:af:20:cc:6f:35:1d:c1:6e:86:b5:41:5c:f0:f7:f6:90:
08:38:0b:d9:3e:c6:77:42:4f:fd:ad:ec:5a:91:4f:3f:c7:0e:
3b:4e:c5:c6:b6:e2:f8:82:5c:38:72:11:f0:7b:25:4c:e1:6b:
0f:07:21:65:81:ef:37:04:dc:50:7c:9a:8f:16:19:4b:7c:9c:
a5:99:ea:98:34:0b:97:0f:b5:ec:46:15:bf:a2:3c:71:6b:23:
19:a9:c6:c3:21:a8:e2:78:99:06:e9:61:d9:5b:b1:fc:d1:a0:
49:6f:c1:63:04:1b:8b:c1:aa:55:a4:c9:d5:84:fa:ec:d5:53:
96:34:c5:7f:82:bc:05:84:b9:27:62:37:ae:9f:22:82:05:01:
4f:9a:d6:32:db:b3:10:05:f4:6f:be:01:e5:fe:80:89:d1:b9:
56:1a:a1:81:33:27:64:ba:42:14:e1:2c:03:ff:3f:a4:fe:7f:
7a:28:90:ab:ff:67:fe:d6:85:b6:d8:ac:8e:86:34:35:d1:5a:
df:60:cf:3b:1d:34:0d:62:12:2a:e2:46:27:cc:9c:6f:52:3d:
a5:21:71:95:b2:1e:c6:aa:37:29:23:09:32:4f:5a:aa:bf:a9:
6d:57:55:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdYAHrriI5U0CzjzHOOWb/YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZjRkOWZhNjZiMDA4YTA4YzNiOGVkODJjMzgyNjdlMWQy
MTI1NTAwHhcNMjUwNjEwMDQwMTU1WhcNMjUwNjExMDQwMTU1WjAzMTEwLwYDVQQD
EygxYTE5M2E3NjA0MWMxODlhYjFkZDhjODZkOGUyMmY2YTVmYTE0YTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnh5Yy5kCn58Kw5xhVe9R4NLOde3
0ZXN4Pv9UCYGsRVDpu/h5OfNZ6GkRg39y613Qk2UThqAWfZAjb01WwnGhPVC7pzR
lfnuzlgNYMg0L14irLdjwEAEzS7ndEYYoab8fNr5WDQI51h/GndMfHCOgfO0DrnW
LggZJ7gZqZVAUZDifANHFd2XsEAWz4Mvop4t0exvoWRN6GbNlLQva/aZJqyO3RyA
DHOhkiM6Hucz/XYeAS5MfW8utIvt1auYTJN76r/Toidbm5rk6+96/mteyMi5rEJI
Dj3za89iP6ExyVxFc4p548yvdYz+n+N7F2TlnXW5X0I0tiJK+JXDUKJ9GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoZOnYEHBiasd2MhtjiL2pfoUouMB8GA1UdIwQY
MBaAFEv02fpmsAigjDuO2Cw4Jn4dISVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lODEwY2QtNjQ5Ny00ZDhhLTkxYTUt
YmY1NzM4NzY2MmEwLzEvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lODEwY2QtNjQ5Ny00ZDhhLTkxYTUtYmY1NzM4NzY2MmEw
LzEvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvhz4sas
i6E8RnziWTV9fN9wIm2vIMxvNR3Bboa1QVzw9/aQCDgL2T7Gd0JP/a3sWpFPP8cO
O07Fxrbi+IJcOHIR8HslTOFrDwchZYHvNwTcUHyajxYZS3ycpZnqmDQLlw+17EYV
v6I8cWsjGanGwyGo4niZBulh2Vux/NGgSW/BYwQbi8GqVaTJ1YT67NVTljTFf4K8
BYS5J2I3rp8iggUBT5rWMtuzEAX0b74B5f6AidG5VhqhgTMnZLpCFOEsA/8/pP5/
eiiQq/9n/taFttisjoY0NdFa32DPOx00DWISKuJGJ8ycb1I9pSFxlbIexqo3KSMJ
Mk9aqr+pbVdVug==
-----END CERTIFICATE-----
Generated at Tue Jun 10 12:25:01 2025 by rpki-client