Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
File: T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft (raw, json)
Hash identifier: C9Er2Y5dkPDfIDy/opqLVbai5FdvwEQ7dV2zQ6cN3ek=
Subject key identifier: CF:F0:42:73:4E:7C:0E:40:09:92:43:71:22:78:49:15:58:FC:AE:BA
Authority key identifier: 4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
Certificate issuer: /CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Certificate serial: 01977CB10AF86A6A23B136ED6D1785BB75E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
Manifest number: 1596
Signing time: Tue 17 Jun 2025 07:01:06 +0000
Manifest this update: Tue 17 Jun 2025 07:01:06 +0000
Manifest next update: Wed 18 Jun 2025 07:01:06 +0000
Files and hashes: 1: T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl (hash: iKlufcFU3B8sPGEmUKH2aaI0f1G5H6w8mcszR4CwzkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:b1:0a:f8:6a:6a:23:b1:36:ed:6d:17:85:bb:75:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Validity
Not Before: Jun 17 07:01:06 2025 GMT
Not After : Jun 18 07:01:06 2025 GMT
Subject: CN=cff042734e7c0e40099243712278491558fcaeba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:a0:32:d1:48:c2:7a:6c:00:7e:4f:f7:94:
96:8d:bb:72:ed:10:53:8f:d1:b6:60:f4:35:01:ba:
a4:f5:91:52:3e:09:a9:7a:fb:51:08:de:e4:b6:c1:
f7:cc:5d:b7:ec:c9:c4:de:0b:58:43:2c:42:64:c7:
45:50:f0:d5:b0:7b:17:5e:b3:51:00:d7:1d:d6:d5:
3b:06:9d:be:0b:29:25:04:cd:ef:0d:55:19:4a:bb:
ea:be:64:c8:f4:1a:1e:0f:f6:b0:bd:a7:04:93:f1:
4b:a8:68:55:58:f3:d1:08:6c:20:a6:2e:06:f7:78:
d3:66:f1:b8:8c:b6:1b:f6:de:b0:ec:4c:26:8e:d4:
b6:2f:d2:45:ee:1b:f8:70:45:fb:27:8f:a6:e2:09:
37:3e:0b:a0:26:16:25:32:97:5b:4a:7b:3b:7e:91:
61:1d:da:61:45:77:f6:78:8c:c6:a9:d7:76:c9:ef:
e0:39:b6:38:6e:36:eb:d5:0d:c9:52:7a:16:0e:85:
06:fc:be:94:8d:bc:a4:8e:58:d3:e5:9c:a8:58:00:
6a:c7:a8:0d:0b:c0:d6:29:dd:34:47:6f:02:c3:52:
fc:90:35:4e:0e:10:db:b3:90:e1:12:d5:f3:56:2a:
34:45:5f:92:f4:cc:63:97:fd:89:df:5a:a5:22:a5:
ce:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F0:42:73:4E:7C:0E:40:09:92:43:71:22:78:49:15:58:FC:AE:BA
X509v3 Authority Key Identifier:
keyid:4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:99:0d:18:89:60:e0:49:86:25:4b:2a:7c:13:a2:db:a7:21:
a7:4a:43:c2:3d:ba:b7:b4:64:eb:db:44:8b:ef:ff:ed:98:95:
6e:75:a9:5e:42:f2:a6:8a:16:6c:55:87:51:d5:39:e4:6a:3e:
73:b3:8c:40:07:70:2d:ed:c4:58:3d:85:8c:38:ab:bd:9d:bf:
5a:6c:cc:bd:31:15:3b:36:37:45:d0:ae:90:bd:f5:53:6e:26:
31:e9:e5:55:98:e4:7b:5b:e5:64:c3:61:6c:ab:14:53:04:27:
8f:4d:e7:9d:c5:39:37:7a:5c:cd:b3:32:f7:62:0d:9b:cc:99:
8f:05:d1:54:3f:05:06:42:0d:1b:e8:dd:ca:6b:9e:bc:69:76:
90:14:aa:31:1b:06:eb:9a:d3:5b:ec:8e:3e:b5:7c:70:c2:b7:
65:a1:f9:a2:60:22:0d:a7:d2:08:d6:31:de:44:d6:bb:b0:95:
aa:f8:d6:ff:64:8c:40:bf:94:dd:9c:93:4e:41:4d:e4:79:e2:
f7:5a:e2:a6:20:75:63:6b:5e:f6:fe:04:39:08:0c:e2:81:79:
f6:4b:22:15:16:6c:a4:16:4a:47:6e:f0:f7:1e:1a:c4:3b:cb:
d8:ba:4c:4c:72:7c:56:e3:1c:72:5c:26:cf:53:c0:a2:84:5d:
43:30:a3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:33:39 2025 by rpki-client