Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
File: S_TZ-mawCKCMO47YLDgmfh0hJVA.mft (raw, json)
Hash identifier: TwwRRpqf9stHFFGZi3vi3PjmUsHcpPB2TMH1NTcQNiE=
Subject key identifier: DA:A2:CD:88:D9:17:BA:C8:1B:6E:FC:8F:ED:0B:13:75:43:45:05:96
Authority key identifier: 4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
Certificate issuer: /CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Certificate serial: 019759EE97938CE70CF024EBFD8D0D4E5047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
Manifest number: 1586
Signing time: Tue 10 Jun 2025 13:01:37 +0000
Manifest this update: Tue 10 Jun 2025 13:01:37 +0000
Manifest next update: Wed 11 Jun 2025 13:01:37 +0000
Files and hashes: 1: S_TZ-mawCKCMO47YLDgmfh0hJVA.crl (hash: Q+OVzbmYLqZxvz0ut7XGAcnQCCyPzH2Irg40Yw0bwUM=)
2: VHi9vxpSG4tYfENJTcecEKHCVRo.roa (hash: ZPBYgaWs41C7d8q4Zb2hDOx2GjzVI3YJSGRCZKGJpWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:ee:97:93:8c:e7:0c:f0:24:eb:fd:8d:0d:4e:50:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Validity
Not Before: Jun 10 13:01:37 2025 GMT
Not After : Jun 11 13:01:37 2025 GMT
Subject: CN=daa2cd88d917bac81b6efc8fed0b137543450596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:5f:35:88:9f:83:e4:6d:3e:2e:e0:85:88:
ca:ee:7c:7a:25:0b:01:7f:b3:d9:fe:aa:39:72:1e:
ee:90:c2:34:22:2c:03:e9:f5:d5:af:8b:03:00:22:
54:6a:77:2d:33:15:6b:31:ff:20:4f:4d:0b:50:90:
cf:86:42:85:b9:1e:74:4c:8e:f7:10:e0:77:2b:10:
bd:53:8f:56:6e:06:2a:62:25:ba:33:3d:30:8a:37:
c4:6d:3c:cd:f3:2c:76:11:71:93:5c:b2:27:11:70:
31:f0:a5:50:1c:e2:05:e0:4d:7e:31:1f:bf:48:46:
8e:ae:4c:78:26:8e:8d:47:92:53:62:41:a5:52:67:
38:38:2e:dd:70:ac:ff:ea:0a:9d:14:f4:73:24:47:
32:b5:f4:7d:de:ee:e3:88:80:96:ce:d1:8b:02:bd:
7f:7f:7c:d0:b9:a3:99:00:32:78:51:b8:d4:15:7b:
f3:d5:48:eb:7e:95:25:03:75:fe:44:f8:71:b0:70:
b8:84:e8:c9:ce:cd:d3:28:d2:5c:fe:9b:b5:99:23:
9a:7a:1e:53:64:5f:21:78:b2:fc:76:9f:48:fe:c7:
db:7a:31:2a:6b:82:db:50:d3:54:ff:17:cf:c4:c2:
f6:7f:d8:8f:a0:04:7c:82:ea:7f:a0:ff:7e:eb:14:
aa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A2:CD:88:D9:17:BA:C8:1B:6E:FC:8F:ED:0B:13:75:43:45:05:96
X509v3 Authority Key Identifier:
keyid:4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b8:78:c3:91:3f:99:07:2d:d4:6f:ae:c9:fe:f7:b3:86:15:
3a:d3:f3:76:63:1d:93:4e:4e:fb:0c:24:f4:48:8e:1b:96:48:
37:e0:89:35:2c:c9:fb:d6:c6:bf:9f:b9:00:61:b9:0f:c3:66:
45:af:bc:22:ba:8e:0a:cb:3c:42:dc:00:3a:d9:d8:21:84:b2:
f6:c1:18:74:56:63:b5:17:0f:46:29:f1:f0:a9:76:16:59:3a:
47:55:82:d8:d0:96:05:f2:f6:5b:3a:e2:cf:3d:7a:3b:4c:79:
dd:ce:d0:a7:fd:fb:b9:be:15:b6:b8:02:aa:8c:70:1f:51:f6:
dd:14:7f:b3:5c:94:f6:a6:80:4b:6f:2e:e7:b8:3f:48:95:45:
5a:19:f9:9b:2f:e0:36:4d:4c:37:aa:66:18:7c:88:17:26:c4:
a8:a5:bc:1e:c8:fe:4b:73:8f:be:f5:70:5b:4c:aa:0a:83:25:
3a:4a:76:c2:fe:4f:83:c5:df:c6:12:af:be:a0:79:c1:bd:b4:
e2:82:c7:0c:b6:3a:43:b1:cd:bd:aa:a8:33:5b:95:5a:88:2a:
57:0e:f1:51:5d:3b:24:4e:c5:c9:c8:f8:b6:99:1c:d9:a0:67:
6b:5f:ed:ef:be:d7:a2:b0:50:87:a8:f5:eb:7a:af:24:70:d9:
d3:b2:c3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:31:09 2025 by rpki-client