Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
File: S_TZ-mawCKCMO47YLDgmfh0hJVA.mft (raw, json)
Hash identifier: p8DjErDN1PWyMOVE0PoUi0T4u4RiXaZOQgf48U79Utc=
Subject key identifier: D5:93:9D:D3:56:7C:23:E2:B1:65:D7:14:D7:19:94:1C:AC:58:6B:DD
Authority key identifier: 4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
Certificate issuer: /CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Certificate serial: 0196C53A4C879ED8559B144751B140F86CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 16:00:54 +0000
Manifest this update: Mon 12 May 2025 16:00:54 +0000
Manifest next update: Tue 13 May 2025 16:00:54 +0000
Files and hashes: 1: S_TZ-mawCKCMO47YLDgmfh0hJVA.crl (hash: CDwMld1iDmaTlZ/VpH9f3D+wJdNHxr9c+FhChqnGgmY=)
2: VHi9vxpSG4tYfENJTcecEKHCVRo.roa (hash: ZPBYgaWs41C7d8q4Zb2hDOx2GjzVI3YJSGRCZKGJpWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:4c:87:9e:d8:55:9b:14:47:51:b1:40:f8:6c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Validity
Not Before: May 12 16:00:54 2025 GMT
Not After : May 13 16:00:54 2025 GMT
Subject: CN=d5939dd3567c23e2b165d714d719941cac586bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:01:0e:1a:ca:d5:3a:ee:57:29:6e:40:fd:
94:cd:a0:4c:2a:3c:f1:4d:3e:6f:ce:14:f9:49:b9:
01:37:76:0e:e9:af:59:e7:b0:66:ee:a1:48:93:96:
e3:74:05:34:91:ba:5a:fa:85:1d:0e:d4:49:cf:3e:
7e:ef:6c:4e:84:99:75:ef:c6:09:26:d5:23:eb:f1:
02:ac:59:a4:c9:b2:d4:38:27:72:d0:96:d1:ae:9e:
84:d7:5e:b5:1e:85:e6:d9:5b:ab:c6:04:ed:e8:3d:
80:09:d2:e2:a3:18:0a:de:80:51:93:64:49:cc:a0:
9e:fa:c4:e5:6f:37:19:85:1f:bd:10:5a:02:31:94:
cd:f3:3e:ae:38:39:4c:7f:53:c8:a6:7a:a1:a7:3b:
8b:13:2b:01:cb:31:d0:28:1c:b7:49:03:b6:c7:f4:
a7:b0:f8:de:be:42:df:ef:34:41:87:98:75:1a:a2:
f4:3a:73:9f:71:a5:c8:2d:2c:90:df:3f:10:05:a8:
3c:06:2b:03:96:f0:5f:4e:55:bf:a9:ce:a0:75:64:
f4:8b:5b:0e:89:a1:ec:fc:24:8c:af:ec:7c:1e:bd:
76:28:3a:42:a3:c8:68:f0:63:ee:ad:bb:b3:48:c7:
cc:b2:46:f7:65:96:46:2c:56:1e:63:72:a3:85:89:
e2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:93:9D:D3:56:7C:23:E2:B1:65:D7:14:D7:19:94:1C:AC:58:6B:DD
X509v3 Authority Key Identifier:
keyid:4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:8a:81:df:c1:b2:d7:89:b4:5f:2c:d4:cc:74:ea:c7:90:d2:
06:84:2b:0f:a5:69:d5:72:40:8b:52:cf:95:32:71:dd:6b:78:
14:d9:b3:43:0e:c5:12:67:2c:1b:86:4d:2d:b5:59:1f:5b:2b:
78:96:26:a4:65:a4:af:73:68:d3:3c:3f:6a:00:d3:50:7d:24:
e0:14:41:6f:27:85:b6:82:0e:35:a3:54:60:40:7e:9c:92:32:
62:4b:00:85:3f:a9:f1:06:32:fd:00:38:b5:6f:13:85:0a:12:
45:a3:b6:1b:51:23:65:95:40:d9:b4:58:34:42:75:ae:ba:6a:
72:e8:8d:66:67:8d:9e:7d:12:23:93:12:c7:fd:2f:b1:c9:7d:
9d:a9:eb:a0:ac:77:84:f0:c1:b1:3a:03:ff:ce:f3:c8:1b:27:
20:fd:9b:d1:df:7d:08:9c:f8:dc:4c:06:ef:15:4a:3b:69:0d:
a9:1f:fd:a5:6f:37:9a:f7:f2:ee:ef:e1:80:c4:78:9b:a1:ee:
fd:7e:e3:b6:05:6a:6f:6b:31:76:c3:8f:a6:d1:df:6c:8c:d2:
3c:1f:23:2c:77:65:47:26:9e:12:d7:71:4a:f1:d0:e5:9d:ed:
b9:f1:32:2c:d1:54:48:f9:27:6d:2f:ac:01:c8:74:4d:3c:26:
b5:48:c8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:57:25 2025 by rpki-client