Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
File: TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft (raw, json)
Hash identifier: BG7aD6oQpJaJazExWGyojTcsdTSNgvAsI9i5jGtBX70=
Subject key identifier: 2D:39:AE:E7:70:46:CF:1E:CA:3D:11:60:F6:D6:6B:AE:65:D4:E3:5E
Authority key identifier: 4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
Certificate issuer: /CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Certificate serial: 0198D4A8391A95ED7D4A13CBE83E76A27F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
Manifest number: 0387
Signing time: Sat 23 Aug 2025 02:00:51 +0000
Manifest this update: Sat 23 Aug 2025 02:00:51 +0000
Manifest next update: Sun 24 Aug 2025 02:00:51 +0000
Files and hashes: 1: TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl (hash: /j0P1LpF/M+YIq3D6qVIzTGNB6pOcrEH1MMhxY/UYs4=)
2: U_0Qm9bmlfNCn0QcnMuKjqVhpok.roa (hash: rS2TodhOY6krb9NSbdEkyp8dkG2jF6/EwmhOAvSbJFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:39:1a:95:ed:7d:4a:13:cb:e8:3e:76:a2:7f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Validity
Not Before: Aug 23 02:00:51 2025 GMT
Not After : Aug 24 02:00:51 2025 GMT
Subject: CN=2d39aee77046cf1eca3d1160f6d66bae65d4e35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2c:bc:23:a5:f4:bb:85:bf:00:45:b9:66:6b:
c0:77:e5:4b:0c:99:3c:db:51:e6:f9:3c:d2:f7:af:
c5:6f:f6:c1:4d:7f:d9:e2:5e:aa:f3:46:43:f1:a0:
90:46:66:1d:8b:24:96:90:40:f8:ee:b1:c1:44:86:
dc:ec:7d:f5:f4:bb:8f:3b:7a:78:3a:88:43:9c:a2:
a0:9d:7a:f2:6c:db:0f:9c:55:f7:eb:88:b0:75:8c:
de:a0:85:b9:89:dc:ce:58:1d:f0:6c:aa:a9:1a:25:
0f:87:57:b8:6d:4a:3b:47:15:b8:be:30:86:45:42:
88:d6:ee:29:3f:59:27:e7:75:08:f2:e0:cc:31:1e:
0e:37:51:2f:5c:e9:87:2a:60:e4:44:f9:36:8d:81:
7f:0f:c7:34:47:84:6e:3b:6b:15:d9:16:6f:6d:6b:
5f:c4:5a:8f:6d:ed:f0:84:a8:7c:33:2e:49:a9:71:
ae:42:fc:51:e0:c8:0b:a7:ce:75:59:1d:4e:11:fc:
fd:2c:0e:a4:88:01:88:26:0f:fa:d4:a5:4b:8a:8e:
e4:ed:5d:81:32:2e:f0:84:07:df:eb:1a:95:96:0c:
7d:97:22:57:83:a9:95:1b:f7:09:66:b6:9f:9e:82:
ba:87:32:40:42:2c:8c:1e:77:75:35:19:a7:7f:22:
47:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:39:AE:E7:70:46:CF:1E:CA:3D:11:60:F6:D6:6B:AE:65:D4:E3:5E
X509v3 Authority Key Identifier:
keyid:4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:6e:a7:e9:07:21:43:83:84:e7:07:01:b9:3f:20:31:47:3b:
26:7b:64:32:84:2e:52:de:ce:6a:02:79:30:24:1d:97:0f:0b:
9e:22:30:d4:4d:f0:19:44:be:90:24:56:5a:93:61:7f:8c:da:
d7:44:8a:f9:c5:e1:23:47:ef:15:d8:4f:b8:20:45:3d:e1:18:
d6:ff:9b:75:f3:b5:f9:89:81:d0:f4:ad:61:95:fc:74:f6:21:
59:95:c2:d0:6a:aa:c1:c9:0e:d4:e5:23:b3:80:2c:d8:39:72:
0a:22:f7:6a:7d:1e:23:ed:c6:49:66:df:80:75:7d:e7:a7:79:
2c:2c:63:ae:19:47:de:7f:a9:bb:81:b2:4c:38:ad:a5:e0:c5:
e3:1f:83:54:79:1f:ba:91:1a:8a:14:d4:e6:f4:32:8f:0a:bb:
d4:e4:a8:77:09:6e:26:31:18:02:d3:cd:8c:06:d3:f6:34:f4:
3c:e8:fc:12:31:83:d7:74:b2:4d:85:85:21:ff:88:ec:7e:54:
43:ec:1e:38:53:30:22:d8:db:6b:d8:61:68:75:68:8c:fb:40:
d8:2f:ec:aa:03:0c:22:24:3a:7d:c8:a6:78:7d:f4:87:28:87:
03:5d:c6:ef:58:05:78:25:0e:a9:f2:fc:6e:f3:62:35:00:45:
85:61:34:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:14 2025 by rpki-client