Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
File: TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft (raw, json)
Hash identifier: sznTHovBTobM2oy7/Xm8tKpgvbekG7bIErcv79yinb0=
Subject key identifier: D5:E5:15:8A:7A:C9:24:03:0B:83:77:5B:E6:4D:F9:54:79:E5:04:1C
Authority key identifier: 4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
Certificate issuer: /CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Certificate serial: 0197B6D79B6642ACBE05FB5D8E1BB2225779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
Manifest number: 02F3
Signing time: Sat 28 Jun 2025 14:01:12 +0000
Manifest this update: Sat 28 Jun 2025 14:01:12 +0000
Manifest next update: Sun 29 Jun 2025 14:01:12 +0000
Files and hashes: 1: TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl (hash: gx0uuce4d5HbEq4mFdnd9WrTUeNTxDh4Wnv2IYMDXsY=)
2: U_0Qm9bmlfNCn0QcnMuKjqVhpok.roa (hash: rS2TodhOY6krb9NSbdEkyp8dkG2jF6/EwmhOAvSbJFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:9b:66:42:ac:be:05:fb:5d:8e:1b:b2:22:57:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Validity
Not Before: Jun 28 14:01:12 2025 GMT
Not After : Jun 29 14:01:12 2025 GMT
Subject: CN=d5e5158a7ac924030b83775be64df95479e5041c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:37:74:e1:c2:89:84:76:28:bc:a8:91:4e:
81:82:be:01:b9:e6:25:bc:ae:94:eb:1a:ae:05:5f:
18:9f:42:fe:ac:c8:0e:2c:d8:15:54:47:38:67:d9:
f1:d9:29:ee:f5:97:e2:e7:6a:0a:31:c5:ce:ff:d1:
70:ee:2a:bb:96:af:d5:87:f6:32:78:11:27:8b:d1:
f5:49:ca:b9:3d:48:15:d8:2a:79:90:ce:17:bd:51:
0b:7f:20:4b:cd:c6:c6:6a:a7:68:8b:a2:68:c4:38:
4d:3f:f3:fa:3d:21:88:ea:c3:81:7c:52:bf:ca:4e:
64:16:73:99:b8:66:6f:8c:9c:0e:56:92:91:05:53:
80:5c:3b:87:98:73:58:d0:b7:67:05:69:2f:59:17:
4b:9d:92:2f:be:5a:cf:b9:42:05:66:16:88:b1:bc:
31:e7:af:aa:62:af:53:e5:3e:ed:b1:22:e4:41:92:
3e:ef:f9:38:25:0b:b0:73:ca:f4:83:cb:be:f6:33:
3a:a9:c9:44:38:47:91:27:08:57:21:17:2e:bb:00:
76:0e:a9:37:7d:0a:6f:f7:4a:5d:17:d5:6e:dc:e9:
e0:78:58:70:ca:b6:ab:5e:4a:07:df:f9:c8:51:fb:
54:4e:9a:e8:21:28:b9:6a:06:aa:c8:2a:95:cf:0f:
86:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E5:15:8A:7A:C9:24:03:0B:83:77:5B:E6:4D:F9:54:79:E5:04:1C
X509v3 Authority Key Identifier:
keyid:4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:40:75:78:0f:61:39:be:b2:e6:21:1d:5d:b1:54:b7:7b:4b:
75:d0:f7:00:9e:07:28:e1:7f:85:da:a9:05:30:cf:46:3a:50:
94:93:3a:1c:63:c2:3e:69:49:c1:1f:d6:a1:2e:50:f0:c5:3d:
bb:cd:b7:b8:a8:02:08:b9:e1:6a:cc:28:9b:5d:68:14:16:86:
e9:bb:1c:e5:c1:05:b6:f2:da:95:e7:33:79:1f:5c:4c:9e:fa:
a6:32:69:ab:46:ce:8d:b4:d9:a4:09:3a:99:f9:87:bc:b8:81:
03:9e:40:ac:4d:ec:2f:f5:8e:32:a5:28:d9:8a:6d:39:87:60:
05:88:2e:f4:be:5f:0e:3b:f3:37:e1:4f:3a:7c:f1:b8:2e:b4:
49:e8:3f:22:1e:8d:ee:68:7a:2b:aa:a4:66:59:7b:c0:4f:22:
72:c0:ec:44:b8:a7:db:f8:c5:ba:93:e4:a4:f9:cc:e1:80:2f:
94:fe:c4:35:4c:d0:65:cd:ff:1d:1a:85:0a:8c:d1:17:44:2d:
d4:34:47:4f:f1:05:a6:49:21:a3:38:d1:9e:70:8f:f0:c8:6b:
e5:4a:45:34:34:12:0e:e3:70:4b:fa:c5:40:91:b2:7b:12:db:
08:56:c0:f1:8d:56:21:80:14:72:5d:e1:a9:10:d2:c4:24:8a:
6b:9d:16:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:04:45 2025 by rpki-client