Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
File: T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft (raw, json)
Hash identifier: 9PAxiwwj1NeIyPe+TC5S7236NQN2MNNgoVWj3dzH7FE=
Subject key identifier: 3F:38:68:C8:88:3D:BA:C4:30:74:75:85:0C:35:55:11:C7:DD:19:4B
Authority key identifier: 4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
Certificate issuer: /CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Certificate serial: 0197B88EC8E4C7A057168E2B00F36F17E7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 22:00:54 +0000
Manifest this update: Sat 28 Jun 2025 22:00:54 +0000
Manifest next update: Sun 29 Jun 2025 22:00:54 +0000
Files and hashes: 1: T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl (hash: Wik+uZO23kfH0CjQ8Dfe5vcdvzCjLwsNFqDCWoPgu7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:c8:e4:c7:a0:57:16:8e:2b:00:f3:6f:17:e7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Validity
Not Before: Jun 28 22:00:54 2025 GMT
Not After : Jun 29 22:00:54 2025 GMT
Subject: CN=3f3868c8883dbac4307475850c355511c7dd194b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d2:c6:29:62:37:6f:27:9b:4e:68:59:d6:a3:
b1:fc:28:a7:59:76:e2:00:7a:3f:65:25:82:ef:cf:
d1:03:ce:1a:bc:db:18:4d:19:02:14:8c:32:b3:75:
5b:e1:4b:7a:7c:a1:47:d2:c8:19:b5:91:ba:dd:c1:
71:31:96:aa:bb:2e:e7:da:d9:0e:1f:f0:67:a4:28:
70:5c:32:83:64:e3:87:ed:31:38:07:28:77:00:9d:
82:23:81:9f:14:42:04:66:e0:86:1c:54:1a:c8:22:
23:cd:60:8b:31:54:20:df:f0:37:ec:23:0f:3d:1f:
3e:3f:03:c5:bd:90:29:c4:5f:ea:72:c3:d0:4a:28:
0c:4e:cc:15:41:b5:de:f3:b7:94:c9:65:4a:5b:63:
47:f3:e2:9b:02:0c:00:73:4c:fd:81:3a:82:c4:dc:
76:b1:e8:3c:a7:a8:30:39:1b:3b:3a:84:46:f1:25:
4b:73:19:ed:12:fa:39:b2:23:a8:3e:f0:5d:c3:14:
07:5c:0a:da:a0:a9:69:16:38:b5:83:df:af:e2:3b:
58:82:60:63:bc:ad:39:ce:32:fe:eb:3d:b3:83:88:
6d:d5:63:61:96:63:83:ba:e0:d3:7d:90:75:29:b5:
e8:d0:c8:30:e1:2d:b2:cc:80:d3:f5:ea:63:45:44:
40:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:38:68:C8:88:3D:BA:C4:30:74:75:85:0C:35:55:11:C7:DD:19:4B
X509v3 Authority Key Identifier:
keyid:4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0a:f6:3d:05:5c:01:13:c3:c5:21:a5:56:cd:0e:60:2c:21:
32:63:2e:36:66:7e:91:21:b7:70:57:98:94:5f:b1:57:db:f7:
00:c0:25:57:78:dc:da:af:be:5c:ac:22:36:0c:01:88:27:d9:
11:62:39:66:a6:d6:9b:0d:53:59:7f:43:ec:89:5a:b5:67:3c:
dc:b7:09:ef:4f:a4:5d:85:68:74:83:95:5d:fd:fa:ea:03:7d:
15:a2:54:1e:98:de:62:b5:7e:02:85:4d:ab:d3:c8:87:b2:cc:
87:d5:1a:d4:e6:be:5d:ee:90:f6:66:93:63:9c:9e:91:3f:25:
f8:25:f4:4f:87:3e:3d:9d:63:9c:8f:b4:74:28:8d:e9:95:97:
9d:49:a8:f3:2d:69:d4:89:e9:74:36:e4:6d:33:cf:3f:c8:ee:
1a:44:45:43:79:40:4d:a4:56:b6:10:8a:a5:ae:31:78:78:e1:
31:d0:4b:97:b4:00:e3:8d:11:37:ea:f1:30:6f:20:93:f8:5b:
53:bf:57:b3:46:a6:97:bd:92:b2:8a:8c:0d:8f:f5:c1:b9:0a:
02:e9:0a:7f:9a:9c:5f:d0:22:c5:53:5c:cf:ca:1d:16:16:83:
96:98:71:90:0b:50:23:0b:a7:cc:b4:3c:bc:94:63:17:ba:1d:
79:c4:c6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:34 2025 by rpki-client