Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
File: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft (raw, json)
Hash identifier: Uu/woIfEAg9gRTkuRMlBzxkl8h4VUA2ostwwa+DP88g=
Subject key identifier: 43:13:99:94:F7:65:1C:86:30:72:CF:0D:37:2B:BB:C8:4A:26:AB:6F
Authority key identifier: 4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
Certificate issuer: /CN=4d92be02509643bc7a2f862871639d08e276c636
Certificate serial: 01974E206D4B4E7BCF86F4812FD47F6A5DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
Manifest number: 0EE0
Signing time: Sun 08 Jun 2025 06:00:37 +0000
Manifest this update: Sun 08 Jun 2025 06:00:37 +0000
Manifest next update: Mon 09 Jun 2025 06:00:37 +0000
Files and hashes: 1: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl (hash: 1YqzlAT9KPkMrcxdQq11hZ3SrobZHYpXygzboyQfUuM=)
2: odyRy2FLHB1ia0-B0wtN-GrVmpY.roa (hash: kVTUOVywoB+P4bkpPocvLbzGPCGuaGOyFmq1BUYllIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:6d:4b:4e:7b:cf:86:f4:81:2f:d4:7f:6a:5d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d92be02509643bc7a2f862871639d08e276c636
Validity
Not Before: Jun 8 06:00:37 2025 GMT
Not After : Jun 9 06:00:37 2025 GMT
Subject: CN=43139994f7651c863072cf0d372bbbc84a26ab6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:95:a4:31:ac:9f:b3:73:ca:1e:bb:3f:b2:
44:43:a4:da:e8:f1:2e:cf:c8:68:14:f6:79:75:4d:
60:5f:ab:8e:a2:3f:eb:f9:09:ca:9e:85:91:8b:58:
ef:b9:ce:ce:59:98:d4:e0:dc:a2:71:bf:b6:5c:34:
86:80:fc:2c:66:c0:52:b3:12:fa:53:86:47:75:af:
f7:36:b0:a8:73:fa:db:7e:85:76:fe:d0:40:97:1d:
5f:29:ac:ff:25:75:d0:9b:bf:97:24:d9:dc:bf:5f:
5a:ee:7e:a1:ed:9e:0d:fc:1d:bf:b5:4c:60:c0:78:
5a:d6:37:6a:89:87:04:ee:d4:90:aa:2d:d0:a6:b6:
86:26:bd:7a:82:82:f9:24:38:77:67:62:45:66:8a:
92:aa:07:a4:b7:8e:a2:d0:63:26:f8:72:f6:4a:d0:
1d:e4:f0:00:45:b3:23:42:82:25:94:8e:cb:02:9b:
7f:28:8e:b4:74:30:af:28:c6:14:c8:e7:51:45:98:
2f:f4:8b:8c:89:a5:6f:1e:ab:cd:41:3b:08:70:0d:
d6:26:dd:45:86:98:b1:21:ba:8c:02:4f:1e:c4:97:
21:5e:31:82:4e:d3:b1:e6:58:72:d8:c1:68:b0:50:
6f:c9:08:e0:bc:d5:3b:ee:44:f1:f3:14:60:05:19:
26:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:13:99:94:F7:65:1C:86:30:72:CF:0D:37:2B:BB:C8:4A:26:AB:6F
X509v3 Authority Key Identifier:
keyid:4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:ba:f9:29:f6:17:70:32:5a:42:a4:cf:2a:e6:78:7a:18:a5:
2f:73:cc:cb:bf:90:ef:90:23:bc:0f:8c:20:a2:1b:3c:e1:84:
5d:e4:31:a4:c7:cb:9d:35:9d:f9:76:ab:52:7a:dc:a5:49:fb:
ac:6f:3a:d9:0e:2b:6a:b2:9f:4d:5e:85:50:34:c3:d4:6d:cc:
a2:32:40:6a:0d:2a:2c:fb:58:28:75:2b:43:33:a9:f3:d8:09:
ea:49:76:21:b2:25:e2:0e:ff:c6:20:ae:61:ab:1a:4c:e7:19:
7e:6a:fd:8e:5a:32:08:66:a6:7a:cd:f5:67:3e:3c:cf:49:ed:
af:ff:9c:fc:6b:f1:dc:44:07:8a:78:f1:7a:10:67:0e:a5:3a:
a9:e2:c5:c6:08:95:2c:b4:c4:9e:16:e8:5c:a9:99:48:23:40:
6e:19:fa:62:4e:5c:9c:21:94:e5:c9:e4:76:52:e9:ba:c1:f9:
f5:66:c5:eb:06:02:b4:d9:38:a6:1e:60:55:c0:57:28:c4:ca:
ae:4c:82:65:99:18:29:58:4d:d2:d7:a1:33:95:5b:02:de:6b:
33:93:3f:7e:94:8c:ba:16:04:e9:1c:c3:1a:2f:62:92:12:61:
b2:0b:ba:a6:a7:cc:15:4d:79:e2:37:ca:9f:49:c8:c8:f5:b6:
94:50:c3:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOIG1LTnvPhvSBL9R/al3hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkOTJiZTAyNTA5NjQzYmM3YTJmODYyODcxNjM5ZDA4ZTI3
NmM2MzYwHhcNMjUwNjA4MDYwMDM3WhcNMjUwNjA5MDYwMDM3WjAzMTEwLwYDVQQD
Eyg0MzEzOTk5NGY3NjUxYzg2MzA3MmNmMGQzNzJiYmJjODRhMjZhYjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR6VpDGsn7Nzyh67P7JEQ6Ta6PEu
z8hoFPZ5dU1gX6uOoj/r+QnKnoWRi1jvuc7OWZjU4Nyicb+2XDSGgPwsZsBSsxL6
U4ZHda/3NrCoc/rbfoV2/tBAlx1fKaz/JXXQm7+XJNncv19a7n6h7Z4N/B2/tUxg
wHha1jdqiYcE7tSQqi3QpraGJr16goL5JDh3Z2JFZoqSqgekt46i0GMm+HL2StAd
5PAARbMjQoIllI7LApt/KI60dDCvKMYUyOdRRZgv9IuMiaVvHqvNQTsIcA3WJt1F
hpixIbqMAk8exJchXjGCTtOx5lhy2MFosFBvyQjgvNU77kTx8xRgBRkmtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMTmZT3ZRyGMHLPDTcru8hKJqtvMB8GA1UdIwQY
MBaAFE2SvgJQlkO8ei+GKHFjnQjidsY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFpLLUFsQ1dRN3g2TDRZb2NXT2RDT0oyeGpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yNDY0MGUtZjI1Yy00MmU3LWIzN2Mt
YjczMTJhYjIwMjczLzEvVFpLLUFsQ1dRN3g2TDRZb2NXT2RDT0oyeGpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8yNDY0MGUtZjI1Yy00MmU3LWIzN2MtYjczMTJhYjIwMjcz
LzEvVFpLLUFsQ1dRN3g2TDRZb2NXT2RDT0oyeGpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3rr5KfYX
cDJaQqTPKuZ4ehilL3PMy7+Q75AjvA+MIKIbPOGEXeQxpMfLnTWd+XarUnrcpUn7
rG862Q4rarKfTV6FUDTD1G3MojJAag0qLPtYKHUrQzOp89gJ6kl2IbIl4g7/xiCu
YasaTOcZfmr9jloyCGames31Zz48z0ntr/+c/Gvx3EQHinjxehBnDqU6qeLFxgiV
LLTEnhboXKmZSCNAbhn6Yk5cnCGU5cnkdlLpusH59WbF6wYCtNk4ph5gVcBXKMTK
rkyCZZkYKVhN0tehM5VbAt5rM5M/fpSMuhYE6RzDGi9ikhJhsgu6pqfMFU154jfK
n0nIyPW2lFDDig==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:31:23 2025 by rpki-client