Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
File: TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft (raw, json)
Hash identifier: sfjzHiFm/LkmRzvedB46Kx3nbAd6dR9ptaDCyQv7iiw=
Subject key identifier: 51:E5:3F:9F:51:63:B1:61:D1:3C:E5:D3:CE:6A:44:C9:63:CE:0F:78
Authority key identifier: 4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
Certificate issuer: /CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Certificate serial: 0198D5159D060CBDC6C4BF75751DCE57EA1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 04:00:20 +0000
Manifest this update: Sat 23 Aug 2025 04:00:20 +0000
Manifest next update: Sun 24 Aug 2025 04:00:20 +0000
Files and hashes: 1: TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl (hash: 8kT6KUrwcTy0FVRS3CPVekl6soo1HZkEZaIIzLg1YRw=)
2: duQK_L6CU_XoLOUwAAqGbBQ_c-w.roa (hash: c1e0IDxT38pGihwSE7PrZG6hwT/3gvgX+OwTOhT9gWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:9d:06:0c:bd:c6:c4:bf:75:75:1d:ce:57:ea:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Validity
Not Before: Aug 23 04:00:20 2025 GMT
Not After : Aug 24 04:00:20 2025 GMT
Subject: CN=51e53f9f5163b161d13ce5d3ce6a44c963ce0f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1c:53:bd:39:dd:ef:51:b6:a7:f5:49:28:d0:
b7:ce:a5:ac:f9:f5:60:88:bd:ee:f6:a9:9a:e5:03:
5a:3f:b9:4f:ee:16:44:30:73:e2:79:62:74:87:14:
93:6e:23:54:f5:ae:3d:63:5d:aa:0b:97:8c:9c:47:
03:b8:af:20:c9:54:83:9d:cc:64:ef:fc:0c:c2:07:
d0:16:b6:35:36:37:58:b4:ca:74:5b:10:ed:af:bd:
65:fd:8b:47:50:e4:ac:0b:29:10:e9:ab:67:6d:25:
32:99:ff:f3:71:54:34:b2:88:b6:6e:84:c2:2c:d7:
bf:08:e9:00:75:76:eb:12:13:6e:65:32:8a:b0:e1:
54:61:74:a2:71:aa:92:f6:77:6d:ad:37:c4:11:5b:
a3:c7:8e:b5:62:87:33:60:d5:d8:6f:78:54:e9:78:
6e:35:15:2f:7e:35:13:e5:f1:6e:8a:4b:4b:91:57:
b9:e6:b0:ad:e2:7b:53:88:06:1f:9a:b8:c4:79:8b:
8b:f1:e0:17:38:e5:5d:27:43:4c:00:3b:db:cc:f3:
c9:dc:9b:80:a7:e4:6d:24:5d:25:c7:8c:e4:1f:11:
7e:28:83:79:de:32:0b:5b:19:3b:74:a0:6f:75:58:
aa:1d:95:e5:1e:e4:4e:f4:4c:26:b6:87:3c:b9:79:
fe:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E5:3F:9F:51:63:B1:61:D1:3C:E5:D3:CE:6A:44:C9:63:CE:0F:78
X509v3 Authority Key Identifier:
keyid:4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d3:88:0b:04:c2:77:2f:da:53:22:2d:e0:2c:1f:eb:21:63:
d7:57:0a:90:70:a6:cc:f3:76:d8:9a:8b:13:fb:99:ba:02:1d:
97:b1:f0:4b:b1:7d:79:82:90:60:90:99:34:c7:96:50:82:42:
e3:17:34:77:c3:13:87:c5:ee:69:aa:86:1a:6c:f9:c2:8e:fb:
34:38:4e:6b:c3:59:82:ef:06:3e:7b:73:a9:96:ef:d2:c8:8f:
7d:2d:2a:a0:48:99:95:da:e6:d5:76:ef:88:76:35:b5:77:fd:
94:f7:d0:fe:ec:bf:26:0d:f3:c5:da:6c:e8:b2:cc:88:28:ec:
6e:1c:11:ce:d2:10:05:df:e3:0e:c1:88:be:19:a6:81:bc:af:
3e:23:33:a5:90:ba:5a:da:82:46:39:78:01:0b:5e:11:14:f7:
b4:fd:47:5a:7f:d7:e4:c3:ff:58:44:42:4b:8e:b7:31:9d:dc:
4f:d6:fb:88:48:ac:67:0f:e9:cd:fb:cc:75:18:31:ee:10:75:
23:8a:57:36:b9:f1:ea:15:08:c4:d8:cb:8b:d4:23:f6:bc:e4:
2e:37:fc:be:9d:6d:74:1c:d9:9d:94:b2:f8:b3:1c:f1:c0:18:
2f:ff:37:6c:ff:e1:74:e3:cb:e7:30:75:31:9b:0b:ca:e5:ac:
62:41:33:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:34 2025 by rpki-client