Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
File: S_TZ-mawCKCMO47YLDgmfh0hJVA.mft (raw, json)
Hash identifier: a4ZSRB0vm+z5CrYYY++lvZ/FzgnSKF7qQ3J772Teevg=
Subject key identifier: AB:3F:13:44:3A:66:46:26:68:11:7D:30:DA:6C:09:04:7C:D8:19:45
Authority key identifier: 4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
Certificate issuer: /CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Certificate serial: 0197B88F9071B9FB9028D232C36C8F25AC75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 22:01:45 +0000
Manifest this update: Sat 28 Jun 2025 22:01:45 +0000
Manifest next update: Sun 29 Jun 2025 22:01:45 +0000
Files and hashes: 1: S_TZ-mawCKCMO47YLDgmfh0hJVA.crl (hash: 628RxYE7V/1u3Y27ush0gGQ3dP50MF2TSfp0Lrc5SC0=)
2: VHi9vxpSG4tYfENJTcecEKHCVRo.roa (hash: ZPBYgaWs41C7d8q4Zb2hDOx2GjzVI3YJSGRCZKGJpWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:90:71:b9:fb:90:28:d2:32:c3:6c:8f:25:ac:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Validity
Not Before: Jun 28 22:01:45 2025 GMT
Not After : Jun 29 22:01:45 2025 GMT
Subject: CN=ab3f13443a66462668117d30da6c09047cd81945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:25:49:75:4e:82:57:b7:42:52:f1:b5:34:b3:
54:9b:eb:d4:4d:b3:c0:9c:93:da:2f:e3:b4:a9:6a:
41:11:b9:c8:44:26:2d:08:ef:42:62:68:85:8a:a7:
62:82:72:36:b9:cb:81:6d:fe:b0:a8:ad:66:b3:ca:
77:3e:ad:a0:2a:17:f1:9b:21:7d:97:79:0d:1e:0b:
ea:e3:b0:4c:1d:ff:bf:c7:f2:cd:4d:a9:80:f2:01:
0e:be:f8:e3:2b:f2:44:f6:e4:a7:d9:91:da:ef:d5:
fa:45:a5:26:5d:00:df:00:fc:6f:a1:7e:9a:ff:3b:
b8:89:3c:be:3e:35:84:de:69:93:81:4d:ec:c3:cf:
04:ee:18:10:2e:96:c7:03:d8:b0:ba:48:b8:d6:c3:
c1:c7:7c:1c:ef:bf:84:48:e0:c8:88:ff:2a:a0:48:
a0:2e:59:9e:6f:0f:bf:4c:a2:0b:14:1a:a2:c2:2c:
75:aa:3d:d4:c5:df:7e:e0:5b:8b:9f:96:e7:0b:d5:
9d:b8:e0:9b:b4:35:01:5b:35:7b:78:96:0e:ad:13:
98:9a:a1:b5:86:32:d4:56:ee:20:a1:d2:4b:d5:aa:
b4:3e:e3:f2:d8:d2:f7:ae:b7:79:7d:ac:4c:43:2e:
9e:00:74:59:3c:26:87:c7:f8:c6:cb:5a:a4:36:85:
26:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3F:13:44:3A:66:46:26:68:11:7D:30:DA:6C:09:04:7C:D8:19:45
X509v3 Authority Key Identifier:
keyid:4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:ac:51:37:7c:72:c1:b4:f0:ef:29:1e:1c:e5:30:22:84:a4:
66:94:44:db:dd:95:06:89:b3:f8:13:3a:73:5e:95:4b:32:2b:
68:30:83:5d:8d:76:8f:05:82:1b:55:67:e7:cd:76:88:de:ea:
e9:44:d7:53:28:c4:bc:50:d3:95:f5:06:1e:5b:03:68:65:51:
e9:14:08:d1:fc:97:6d:e4:e6:85:ae:a6:90:c9:ed:cb:f8:bb:
b9:b3:77:ff:18:e3:ee:0f:b5:d2:61:ce:34:75:80:7f:c2:c6:
49:42:04:29:07:4e:1f:cf:b1:1b:d3:76:c5:cd:a0:81:5c:9f:
6a:70:fd:a9:d7:54:32:f3:3a:a6:15:8d:73:73:4a:30:b5:d8:
ea:ab:fe:01:86:bb:04:2b:1b:b9:3c:a6:06:82:a4:9f:32:d9:
eb:93:38:fa:56:8b:f1:c2:6e:64:c7:a5:27:a2:75:91:18:c0:
4d:e2:46:0f:bf:4c:e5:5d:e0:e9:6a:f7:5d:7e:2a:d2:59:9e:
bf:a2:ce:00:87:9d:11:88:bb:d2:c3:47:f5:0c:7b:2c:60:b4:
ce:a5:6c:31:a8:2d:02:eb:97:1c:3d:7a:34:e4:78:32:3b:ba:
b5:82:b0:ff:d7:6c:73:56:e5:bb:e0:ea:cd:52:d4:bf:fc:b8:
63:15:3f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:29:59 2025 by rpki-client