Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
File: S_TZ-mawCKCMO47YLDgmfh0hJVA.mft (raw, json)
Hash identifier: i2ATYFubQfCa05GJG8h26vrPznkazHbN8iNWMl7Fams=
Subject key identifier: 9F:5E:66:C1:9E:C8:24:D7:1F:8C:3D:FD:BB:10:D2:02:C3:25:44:61
Authority key identifier: 4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
Certificate issuer: /CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Certificate serial: 0199239FCA7E8E72EC5732B8A3C2CBA1A1DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 10:01:38 +0000
Manifest this update: Sun 07 Sep 2025 10:01:38 +0000
Manifest next update: Mon 08 Sep 2025 10:01:38 +0000
Files and hashes: 1: S_TZ-mawCKCMO47YLDgmfh0hJVA.crl (hash: 01lDmNZ10IHx3OBz4g8gdEgLj+dUEDA6z8XCjBoVFU4=)
2: VHi9vxpSG4tYfENJTcecEKHCVRo.roa (hash: ZPBYgaWs41C7d8q4Zb2hDOx2GjzVI3YJSGRCZKGJpWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:ca:7e:8e:72:ec:57:32:b8:a3:c2:cb:a1:a1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Validity
Not Before: Sep 7 10:01:38 2025 GMT
Not After : Sep 8 10:01:38 2025 GMT
Subject: CN=9f5e66c19ec824d71f8c3dfdbb10d202c3254461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:e0:74:72:89:88:15:2d:78:cd:53:60:3d:
99:65:0e:fc:0c:98:19:60:c8:a7:b1:95:46:89:e7:
3e:80:1b:c9:30:f8:56:9f:d7:d2:0e:c8:25:f5:9d:
58:c2:31:11:9a:f3:7c:f3:9e:02:54:14:52:0b:a7:
e5:3d:7c:32:9a:ee:5f:5b:aa:52:cb:a4:ba:6c:34:
f6:d8:8d:bb:cd:fc:af:d9:21:c6:27:27:1e:2d:69:
14:a4:d7:f8:8a:89:b5:1c:a3:7a:61:a6:b6:c6:6f:
65:ce:dc:76:89:c5:5f:d9:71:cc:41:96:a9:7e:9b:
6a:09:b2:c2:27:c2:5f:84:e9:f3:9e:99:48:18:60:
c7:57:7e:02:2a:2a:72:32:62:cc:33:4f:53:6d:64:
be:56:1a:8e:74:5b:b1:70:02:72:47:39:92:5f:98:
7d:7e:b8:aa:0c:15:ca:33:b2:68:62:75:dd:72:b8:
5d:19:7a:c0:10:34:f4:4d:3a:2e:c2:42:18:3d:84:
8a:65:73:36:b0:31:81:d9:ee:e7:5f:82:05:68:8b:
69:7f:9c:28:00:2e:e3:6e:3e:c4:36:87:7e:c7:7c:
ad:19:cf:02:90:aa:90:64:e1:5b:d2:60:b3:79:2c:
f6:9d:df:98:cd:0f:59:f3:50:c3:d2:c6:04:be:83:
8f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5E:66:C1:9E:C8:24:D7:1F:8C:3D:FD:BB:10:D2:02:C3:25:44:61
X509v3 Authority Key Identifier:
keyid:4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:6b:69:da:d8:1b:8a:05:e9:1b:88:e9:b8:35:b0:6f:0b:24:
7f:2d:64:29:fc:06:f9:d5:07:bf:36:8b:e5:2c:64:e1:49:d8:
84:ef:ed:04:aa:59:6b:9f:59:0a:48:7c:cb:8c:5e:89:2d:77:
fd:48:8e:40:88:32:2f:24:bd:97:8b:ef:da:01:e9:0a:b3:18:
e2:3e:17:79:34:22:f3:61:39:08:27:a9:a2:03:38:47:19:3d:
3e:30:0e:cf:ef:75:fe:92:8d:bb:69:1d:89:9f:6b:7b:7d:20:
bb:8a:5d:3d:82:f2:19:88:30:fd:fd:40:cb:01:da:f3:e6:a1:
b6:17:66:2f:36:8f:42:46:89:79:2f:e5:c4:9d:39:5e:94:32:
da:73:17:cb:aa:e6:f2:15:4e:5f:52:52:e4:3d:e7:28:4f:b5:
04:3f:2a:1c:1e:a5:27:7a:b2:23:2a:75:23:d7:95:33:c4:79:
53:70:00:d1:f1:87:30:1a:32:21:cb:ec:f1:da:2b:8f:37:cc:
a7:e5:e6:af:88:94:c8:8e:83:03:61:cb:74:0e:22:d2:cc:71:
01:77:75:d4:dc:dc:c9:40:bf:04:11:c9:3b:41:05:60:cd:b2:
af:58:da:a7:01:d7:0e:27:03:b0:ae:31:a4:5b:cd:a7:0d:5b:
58:fb:08:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:53:29 2025 by rpki-client