Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
File: T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft (raw, json)
Hash identifier: sYT2CSaF4GLAzi04sgZUZVeBas6GN/dvYzAlFgu9CBM=
Subject key identifier: 7B:29:85:4B:10:96:02:78:EB:72:CF:09:BC:2F:D4:BC:A2:06:59:7C
Authority key identifier: 4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
Certificate issuer: /CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Certificate serial: 0198D65F2FEA8C8228A9B9B5565CE4161CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:00:19 +0000
Manifest this update: Sat 23 Aug 2025 10:00:19 +0000
Manifest next update: Sun 24 Aug 2025 10:00:19 +0000
Files and hashes: 1: T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl (hash: 7IY/1sC5Mur+NxK/k/c/cXBu3KwCWw7vOYv7hNSwhTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:2f:ea:8c:82:28:a9:b9:b5:56:5c:e4:16:1c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Validity
Not Before: Aug 23 10:00:19 2025 GMT
Not After : Aug 24 10:00:19 2025 GMT
Subject: CN=7b29854b10960278eb72cf09bc2fd4bca206597c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:c9:94:d2:76:66:68:ea:59:64:f2:c4:90:
b1:49:8a:04:e5:71:9e:e4:0b:bf:33:15:85:52:ed:
9b:41:11:9d:1d:36:40:11:2b:c9:84:6c:c8:f3:e0:
ff:83:bc:09:22:01:50:e5:4a:c9:a5:7b:f5:6f:ab:
b3:df:c7:54:a4:60:3a:1c:55:6c:66:23:c3:fe:25:
f3:bf:ea:97:b6:99:fc:d2:00:0a:e0:ea:46:90:a9:
1e:bf:9c:f1:7f:f9:95:33:61:d5:47:9e:0d:c5:6e:
f4:26:4d:86:55:9a:84:a7:a1:ac:07:77:53:26:21:
f9:5c:6a:81:ba:9c:ca:5a:bc:97:28:3e:f2:e5:f9:
cc:f8:7a:66:fc:22:37:5f:12:5e:3e:cf:83:e6:35:
67:67:51:99:21:14:f5:20:e8:45:cf:95:fb:37:65:
a3:f8:f3:98:06:74:d8:f4:ab:aa:f8:6c:d6:f3:a1:
3e:8b:9c:45:e5:2c:28:2f:d2:b0:e4:21:77:28:45:
dd:53:55:41:19:0f:9a:b2:68:67:59:74:6e:65:13:
58:6e:71:c8:3c:60:d9:5c:91:48:23:2c:3c:82:36:
7d:64:b9:25:b2:bd:83:96:b1:18:ce:10:1e:5b:9a:
f5:d9:b4:a3:32:42:61:bb:b5:c8:af:df:dc:24:bd:
b9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:29:85:4B:10:96:02:78:EB:72:CF:09:BC:2F:D4:BC:A2:06:59:7C
X509v3 Authority Key Identifier:
keyid:4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d6:60:9e:11:5c:3b:f2:f1:a3:65:02:74:ce:d3:89:59:01:
62:44:d8:ec:7f:5a:b6:dc:61:01:22:f9:d9:f2:e2:f3:7a:1b:
3b:db:ed:e3:2f:4d:71:c0:53:75:83:a2:81:38:3f:61:35:3e:
21:87:a1:6d:88:4a:b3:87:11:01:00:36:91:6e:14:99:76:d8:
00:35:47:4d:2e:cd:79:48:db:28:cf:0c:c0:04:92:33:a3:d2:
47:1d:48:57:0a:68:b6:78:c7:1a:c3:a5:84:bd:82:9c:ef:b7:
f5:a5:90:f4:bd:a5:8c:02:18:bc:ba:1e:93:cb:af:20:17:8c:
37:ff:0f:f9:11:ba:38:73:79:ba:e3:e9:f8:37:b9:16:0f:b0:
d7:36:64:4b:ed:ed:e1:8f:bb:4b:e5:1c:d1:74:0f:69:51:bd:
ce:73:18:ee:15:d7:62:2c:36:f2:f1:9f:20:33:be:d6:a9:9c:
8d:67:3f:cd:ac:2b:a5:a0:35:52:f1:1e:8b:35:4a:a3:d4:ca:
c2:ef:85:8f:36:f2:28:c4:8c:55:1d:a8:d0:0b:de:69:c5:b7:
d6:b0:05:69:c6:50:3b:85:6c:2a:fd:a3:fb:9f:d1:22:7c:eb:
93:79:2e:a7:7f:30:03:92:e9:dd:b0:5d:b9:ea:5c:28:30:d4:
b6:a5:0d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:51 2025 by rpki-client