Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
File: TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft (raw, json)
Hash identifier: Fk7s8bVFBsSwcIBUjhgtZ0u87km+6PDrUT8XogW0pro=
Subject key identifier: 53:50:CD:65:C0:FA:7A:45:30:D3:0A:34:A7:CE:5D:9E:06:C5:02:BD
Authority key identifier: 4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
Certificate issuer: /CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Certificate serial: 01989110D7FF6C53B8F3C6C9F0A85E22AAA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
Manifest number: 0364
Signing time: Sat 09 Aug 2025 23:00:56 +0000
Manifest this update: Sat 09 Aug 2025 23:00:56 +0000
Manifest next update: Sun 10 Aug 2025 23:00:56 +0000
Files and hashes: 1: TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl (hash: UtHBLiLjr+85C6USy4eZz051gHfdTHGMVYQKmnV75EU=)
2: U_0Qm9bmlfNCn0QcnMuKjqVhpok.roa (hash: rS2TodhOY6krb9NSbdEkyp8dkG2jF6/EwmhOAvSbJFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:10:d7:ff:6c:53:b8:f3:c6:c9:f0:a8:5e:22:aa:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Validity
Not Before: Aug 9 23:00:56 2025 GMT
Not After : Aug 10 23:00:56 2025 GMT
Subject: CN=5350cd65c0fa7a4530d30a34a7ce5d9e06c502bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:35:e6:7a:ca:0d:b1:33:8b:6d:7a:54:d4:
e2:43:d0:66:dd:57:24:06:80:fa:75:f8:4c:40:d6:
e6:ef:79:3b:73:da:83:43:43:21:49:af:21:4e:73:
d9:ac:28:f5:59:27:a1:59:06:54:d9:b2:c4:69:15:
2e:5b:be:29:55:ea:0b:d9:2b:b8:fb:3a:76:af:20:
67:e6:cd:3e:bf:4b:52:d2:92:1e:96:dc:e8:f0:e3:
90:eb:b3:2b:c2:31:3d:9e:25:ec:07:15:8d:02:21:
75:ac:41:e7:b9:82:40:23:cd:b8:7e:7a:f2:87:fc:
b2:d2:96:4c:ee:7b:82:fd:9e:15:4c:7c:7c:b8:9f:
98:b6:da:fe:07:13:ef:6b:78:79:a8:a7:91:70:5b:
8d:64:14:9d:cc:2e:28:56:b8:6b:12:96:a4:2e:fb:
44:05:4c:1e:d9:1f:42:24:51:83:e7:69:1f:b9:24:
22:ef:37:e0:5f:96:b8:e0:59:0a:24:91:17:9a:16:
82:54:7a:b0:bc:b6:4e:45:db:8c:9f:2f:f3:17:cf:
8a:83:d3:9a:71:f3:f2:4b:be:d0:39:dd:76:51:41:
20:f0:fe:74:b4:97:fd:1f:04:ff:2a:a7:af:09:51:
03:ba:41:2b:eb:fe:72:01:2a:0a:1c:3f:84:7e:69:
d1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:50:CD:65:C0:FA:7A:45:30:D3:0A:34:A7:CE:5D:9E:06:C5:02:BD
X509v3 Authority Key Identifier:
keyid:4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1b:3e:13:f6:f8:ef:8d:88:b1:03:f7:be:64:03:28:5c:7b:
24:5d:b8:91:01:bb:96:0b:3e:41:90:98:b9:89:68:7d:66:37:
b7:6b:ea:2d:d3:53:64:ca:82:c2:e7:70:33:2a:cf:13:ac:fd:
ef:e1:c5:4f:fc:08:f2:fc:59:9e:0c:72:ba:9d:cd:f6:65:cf:
fb:55:0b:31:57:68:79:01:30:78:39:f7:fe:10:17:8f:23:b4:
1f:0c:8c:67:28:ad:d3:21:40:79:04:2f:8b:78:45:95:05:96:
de:aa:d7:d7:b1:65:39:f1:70:4f:9e:e7:d6:eb:6f:6d:61:77:
16:0b:c8:84:f7:7a:d2:94:8f:14:13:df:ea:47:17:52:66:69:
8f:94:6f:28:24:99:67:65:a4:e0:15:b9:e4:5b:7e:39:37:46:
20:3a:d6:a0:85:17:12:02:60:bc:17:6e:92:3c:31:27:f2:36:
d5:85:df:d1:bd:7c:46:09:80:8c:eb:c7:66:3c:7d:37:a6:be:
c0:aa:1e:c4:8b:fc:c0:84:c9:2f:fd:46:1f:f1:6d:63:3f:8d:
42:21:44:12:f8:c0:d6:f0:5f:01:cf:15:c4:15:68:fe:3a:81:
ba:26:64:4e:7c:b7:d3:3a:e7:52:fe:d3:00:2c:35:45:6b:8e:
11:6e:8b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:29:34 2025 by rpki-client