Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
File: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json)
Hash identifier: m0qzrlT0VEllrt7mam5peBLtAHZEMREd4a5zjeg8UmE=
Subject key identifier: F9:09:97:07:FA:1A:52:17:5F:8C:17:8B:11:57:EC:DA:5B:02:43:91
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Certificate issuer: /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial: 01974E574EE835B9BFA4A7913F13ABAFFAAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 07:00:33 +0000
Manifest this update: Sun 08 Jun 2025 07:00:33 +0000
Manifest next update: Mon 09 Jun 2025 07:00:33 +0000
Files and hashes: 1: EyfFy2NH9aJCITkH8OY0aqXp60U.roa (hash: g2tjwAhWJaxtQGBOt8pN1pr0p20riiq5xD7kk7B2kOI=)
2: JpQoMr07IMCnzpUf3J5IOOFupZQ.roa (hash: 0/xTgfGRIN2+JskAIstMX9/OEPtDKUPLwgbvCnLM6hA=)
3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: lVjbtZ/AaXfq0KeSfqZsq+bgLKRHtqm/PZ/Nqlf2qd8=)
4: uuK2CvjDB1elMTvaPuzNpmsW9KY.roa (hash: S75QfkrkhNbGGxbOdQrVjlRuXr4OJ2AaZXwkQhwwcQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:4e:e8:35:b9:bf:a4:a7:91:3f:13:ab:af:fa:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Validity
Not Before: Jun 8 07:00:33 2025 GMT
Not After : Jun 9 07:00:33 2025 GMT
Subject: CN=f9099707fa1a52175f8c178b1157ecda5b024391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b0:25:7d:b6:81:f9:b3:8b:43:7c:03:94:f8:
a2:0f:84:d2:99:87:fe:db:b3:3d:c7:bd:9f:e7:64:
1c:11:de:17:0d:14:f8:12:9e:aa:de:1f:06:ef:81:
52:57:e8:20:28:c5:44:00:e4:ec:94:d1:ff:39:b8:
b2:0a:39:b1:28:70:81:a7:4b:63:04:8c:f4:91:ee:
32:56:67:62:c9:ca:9d:66:e2:8e:06:5d:06:b9:c2:
a9:dd:17:a7:81:13:6f:e9:2a:55:20:de:9c:66:dd:
eb:58:15:da:c1:6e:05:89:da:2a:7a:b7:d5:bc:ff:
52:bc:37:c1:b3:c0:3b:53:1e:be:91:11:90:3e:7f:
2a:37:a7:ad:15:6b:2e:ac:c6:b8:5b:5a:a0:a4:5e:
a7:20:d7:9a:6c:ba:27:1b:21:9e:9f:5f:18:06:f2:
53:0b:9e:d5:45:84:da:af:36:d3:5d:6b:a3:b7:44:
ba:9e:de:d0:8e:3c:d3:d7:df:0c:d9:6d:c4:91:08:
00:d4:a3:56:98:34:33:be:47:20:59:1f:ba:4f:13:
83:c3:3a:ad:58:ab:6e:14:65:3d:7b:30:41:7f:ac:
79:ca:e8:e5:f7:da:04:91:98:0b:4a:14:db:68:e3:
df:d4:cb:be:02:59:12:a8:ee:b3:ef:07:1d:17:87:
2a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:09:97:07:FA:1A:52:17:5F:8C:17:8B:11:57:EC:DA:5B:02:43:91
X509v3 Authority Key Identifier:
keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d1:c3:87:e3:3a:2a:e7:79:b2:71:25:76:d0:fc:a7:fa:40:
33:17:cd:b8:0c:fa:29:8d:ef:27:49:5b:fd:5e:60:9c:bd:6f:
42:6f:db:e6:88:ae:b2:22:f3:24:65:00:d9:d3:35:52:7a:1e:
c4:ef:d0:6a:e0:0e:57:35:ad:73:be:17:38:38:b3:04:e4:ec:
6f:63:c5:53:11:a4:5e:dd:18:38:a6:b7:2c:d6:86:df:ad:6d:
30:57:25:fe:87:60:9d:71:a5:69:6e:27:fc:5d:29:18:cd:fd:
a7:49:82:96:f1:eb:b7:ae:5d:a3:ee:4c:80:45:6a:27:47:97:
95:84:1e:f1:d6:0a:6b:e5:76:ab:6a:c6:be:40:5d:00:fe:1f:
78:07:6b:86:05:e4:ab:fc:79:36:3e:da:fa:95:38:ba:53:41:
3e:e8:8c:b9:9e:a9:38:1b:eb:69:47:b8:a3:bf:c3:61:c0:a2:
84:c3:84:e9:ee:68:48:cb:ed:4e:fd:5c:7c:d6:e6:e2:09:d1:
e2:12:52:d4:4c:cf:bf:59:43:61:c2:86:9e:fa:d3:d3:ee:9b:
d7:fc:16:08:a9:13:3f:0a:86:55:d2:e4:ab:3e:b1:f6:3f:41:
98:71:ec:d4:97:5b:b1:81:d3:e8:40:4b:d3:09:73:73:d3:7b:
4f:9c:80:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:18:08 2025 by rpki-client