Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
File: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft (raw, json)
Hash identifier: nHbPGrSXhg07C8Wg0F8IeCk3FeaGzKDeQbe5ZJriuMk=
Subject key identifier: BA:2E:85:E9:D9:0E:9F:45:FD:66:E1:BB:A9:48:0B:F6:08:B6:1A:79
Authority key identifier: 4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
Certificate issuer: /CN=4d92be02509643bc7a2f862871639d08e276c636
Certificate serial: 0196BB5B1B19D7438EE8F29EE083DB32E231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
Manifest number: 0E94
Signing time: Sat 10 May 2025 18:00:32 +0000
Manifest this update: Sat 10 May 2025 18:00:32 +0000
Manifest next update: Sun 11 May 2025 18:00:32 +0000
Files and hashes: 1: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl (hash: KhKG3U5wX8LxLcTVtIXmKu5FoiAcIiutL9QfcVCHgh4=)
2: odyRy2FLHB1ia0-B0wtN-GrVmpY.roa (hash: kVTUOVywoB+P4bkpPocvLbzGPCGuaGOyFmq1BUYllIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:1b:19:d7:43:8e:e8:f2:9e:e0:83:db:32:e2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d92be02509643bc7a2f862871639d08e276c636
Validity
Not Before: May 10 18:00:32 2025 GMT
Not After : May 11 18:00:32 2025 GMT
Subject: CN=ba2e85e9d90e9f45fd66e1bba9480bf608b61a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0f:97:96:4c:79:fa:bb:0c:78:0a:88:cc:ed:
f1:59:c2:07:86:f0:6e:2f:ba:e0:7b:32:de:5d:e7:
f2:27:b3:05:9b:06:ce:35:2c:b8:74:41:e9:15:9c:
d6:1a:b4:55:53:eb:30:55:dd:24:ad:ac:3b:86:29:
c3:05:0c:a6:a6:b3:33:c5:c6:2c:24:ae:1e:14:b1:
ee:3b:e6:ee:8f:27:8c:e7:a9:2f:30:af:73:6b:3f:
77:84:62:5c:50:d6:a9:0c:7f:8b:c0:bc:9d:2c:58:
7a:93:ea:34:4e:59:70:2b:3f:73:79:7a:7d:9c:bd:
17:16:b7:a5:5a:bf:60:d8:4e:74:61:2b:04:ac:64:
0f:1a:d7:9a:00:b4:34:1c:5b:54:19:70:b4:16:4a:
b0:06:65:84:0c:f1:ad:8d:6b:f5:39:e6:51:2b:ae:
55:31:4b:6e:1d:bc:42:93:2c:ad:49:9b:f6:95:ed:
4c:f1:29:b0:0d:2d:72:bd:3b:ff:9f:09:e3:d6:f4:
17:ec:30:24:e5:db:24:d9:5e:55:57:33:04:80:44:
f5:f2:53:f7:f9:4c:5e:61:aa:80:58:90:36:bc:c3:
d4:51:d4:45:27:f1:f1:f1:ef:68:47:36:b9:50:24:
eb:d9:8c:a8:b0:f7:e8:a9:47:a2:44:85:cf:a2:d3:
c4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2E:85:E9:D9:0E:9F:45:FD:66:E1:BB:A9:48:0B:F6:08:B6:1A:79
X509v3 Authority Key Identifier:
keyid:4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:dd:b3:e0:e0:52:2e:c1:b7:7c:9e:32:cb:25:d1:5b:a6:4a:
ca:16:22:f2:bf:5e:29:47:b8:26:1f:9f:65:36:f9:2c:27:7f:
d1:93:da:16:58:47:43:a4:a8:e0:65:c3:31:cd:9d:cf:8a:ec:
5c:09:ef:86:e6:4b:4b:ae:da:9c:30:01:e6:b5:84:98:ea:24:
3b:f9:cb:db:b4:9e:ca:04:c9:99:65:cf:eb:c4:c7:80:a4:ba:
6b:78:31:9a:06:5b:f4:77:4e:de:70:33:9c:92:96:ab:d0:4b:
e1:09:62:2a:7f:a9:58:f3:41:69:5a:36:7b:7c:21:c8:14:e4:
2d:2a:23:3c:57:d5:49:3b:33:14:9a:9b:d4:b4:7d:f7:2b:23:
a8:df:8e:8e:a7:a2:fc:73:ef:f7:bd:35:55:be:d0:6a:6f:d2:
ea:e9:84:51:a4:9c:48:7e:8a:39:ac:18:cc:df:c2:4e:80:85:
9b:7f:bb:b1:b8:e6:37:89:4c:c1:48:97:02:31:95:48:16:07:
99:11:69:02:eb:9a:88:e1:df:a0:ee:aa:7e:98:ed:01:fe:ac:
f0:7b:ea:6a:e5:18:50:91:ea:d8:60:08:97:ab:f7:95:56:0f:
2d:32:19:66:8a:86:3a:bb:78:57:13:31:7b:db:8c:27:a1:85:
17:83:f1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:35:56 2025 by rpki-client