Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
File: S_TZ-mawCKCMO47YLDgmfh0hJVA.mft (raw, json)
Hash identifier: oNa2k1OTUuaMXFy9AP8zqKPORM1ygw5S+3Lnnp7G1BY=
Subject key identifier: 79:D1:C1:FA:69:C3:3D:CB:0A:8F:28:56:C0:DD:CA:5D:0C:F6:6E:18
Authority key identifier: 4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
Certificate issuer: /CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Certificate serial: 019890DAF0DC9A1EAF0E623A066B8EE5692D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 22:02:04 +0000
Manifest this update: Sat 09 Aug 2025 22:02:04 +0000
Manifest next update: Sun 10 Aug 2025 22:02:04 +0000
Files and hashes: 1: S_TZ-mawCKCMO47YLDgmfh0hJVA.crl (hash: Ky1yXY1vckYm0R2d/l5bnECuM1OXqt+PyDgLNCpDALY=)
2: VHi9vxpSG4tYfENJTcecEKHCVRo.roa (hash: ZPBYgaWs41C7d8q4Zb2hDOx2GjzVI3YJSGRCZKGJpWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 22:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:da:f0:dc:9a:1e:af:0e:62:3a:06:6b:8e:e5:69:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Validity
Not Before: Aug 9 22:02:04 2025 GMT
Not After : Aug 10 22:02:04 2025 GMT
Subject: CN=79d1c1fa69c33dcb0a8f2856c0ddca5d0cf66e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:93:87:e2:c4:8e:b9:2f:86:8e:f4:56:9b:5e:
24:c0:3f:b3:a5:f5:72:f1:b9:33:29:88:1a:e7:aa:
fe:6f:94:66:3b:f8:80:3c:99:57:e3:11:9d:ea:35:
20:39:f5:31:6a:cc:b7:79:d9:da:6e:91:85:fd:0c:
4c:ca:ae:70:ce:b0:90:8e:30:39:70:a6:b5:c1:04:
77:0c:4c:83:53:ee:4f:0a:a7:cb:ca:ce:62:da:e2:
a4:83:ce:7e:12:c3:0e:e1:3a:83:03:04:cf:cb:1f:
63:93:15:4c:a0:1e:f4:48:18:7f:e0:93:59:6e:76:
bb:1f:25:ee:5b:8d:f2:ce:7b:be:b7:03:2f:48:fa:
2a:d5:39:76:ef:d7:03:77:83:4e:3d:71:19:a3:6d:
cd:55:d9:c6:e1:da:ac:93:50:23:14:32:7d:be:bc:
27:37:28:b3:23:37:50:e7:0e:0e:46:6c:4e:db:18:
2e:e1:c5:a0:86:22:07:37:2b:cc:49:a3:af:0e:15:
1d:40:75:99:5e:8e:25:23:fa:39:b1:6b:41:a7:8d:
af:1d:87:71:6d:45:16:37:67:5b:ba:b5:ab:4d:fc:
16:1c:d4:3f:bd:79:a2:5d:ee:d1:f8:d2:79:b3:af:
48:6b:89:64:72:fb:73:c8:68:89:22:73:cd:0d:8c:
7b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D1:C1:FA:69:C3:3D:CB:0A:8F:28:56:C0:DD:CA:5D:0C:F6:6E:18
X509v3 Authority Key Identifier:
keyid:4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:82:ae:fc:3f:b9:be:16:24:7b:d0:01:07:02:88:bf:bd:ba:
81:4a:db:20:8d:27:f5:f7:ad:57:3f:e0:af:57:c7:b4:75:eb:
72:ee:37:c7:9e:24:e5:5c:dd:1f:16:f2:3c:3f:f1:37:90:d6:
e2:76:a2:6e:5e:48:90:f8:ba:1a:9a:d7:16:5e:54:6e:42:00:
80:7e:23:84:8a:92:25:04:85:b7:a0:07:dd:1b:00:92:bb:8f:
ef:81:88:36:1a:ae:4f:98:f7:51:64:a3:2b:35:d9:8b:82:34:
ba:e3:a7:b8:9b:67:a6:41:ca:ff:76:9c:6b:07:98:2d:83:0f:
d0:7f:16:78:bc:d0:2c:a0:4c:46:2e:fd:fe:51:09:1c:ab:ff:
92:f8:44:f0:c8:73:ea:2c:4b:66:d8:ac:df:d6:b8:89:79:7c:
8e:d2:e3:fd:c9:ce:d3:85:78:41:d8:b3:f6:5d:bb:35:9b:cb:
0b:50:58:a8:f4:f5:12:61:fa:8a:13:e7:47:0e:26:fc:d9:00:
d7:0b:66:ef:43:ae:23:a0:3f:e4:14:2a:dd:12:bb:a5:22:6b:
31:f6:76:5d:2e:19:ff:23:79:8a:b8:1c:e0:50:40:4c:43:28:
ab:b5:78:f5:f2:ed:d1:ac:47:51:fb:01:8d:b0:7b:01:80:96:
b8:b4:74:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQ2vDcmh6vDmI6BmuO5WktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZjRkOWZhNjZiMDA4YTA4YzNiOGVkODJjMzgyNjdlMWQy
MTI1NTAwHhcNMjUwODA5MjIwMjA0WhcNMjUwODEwMjIwMjA0WjAzMTEwLwYDVQQD
Eyg3OWQxYzFmYTY5YzMzZGNiMGE4ZjI4NTZjMGRkY2E1ZDBjZjY2ZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JOH4sSOuS+GjvRWm14kwD+zpfVy
8bkzKYga56r+b5RmO/iAPJlX4xGd6jUgOfUxasy3ednabpGF/QxMyq5wzrCQjjA5
cKa1wQR3DEyDU+5PCqfLys5i2uKkg85+EsMO4TqDAwTPyx9jkxVMoB70SBh/4JNZ
bna7HyXuW43yznu+twMvSPoq1Tl279cDd4NOPXEZo23NVdnG4dqsk1AjFDJ9vrwn
NyizIzdQ5w4ORmxO2xgu4cWghiIHNyvMSaOvDhUdQHWZXo4lI/o5sWtBp42vHYdx
bUUWN2dburWrTfwWHNQ/vXmiXe7R+NJ5s69Ia4lkcvtzyGiJInPNDYx7XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnRwfppwz3LCo8oVsDdyl0M9m4YMB8GA1UdIwQY
MBaAFEv02fpmsAigjDuO2Cw4Jn4dISVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lODEwY2QtNjQ5Ny00ZDhhLTkxYTUt
YmY1NzM4NzY2MmEwLzEvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lODEwY2QtNjQ5Ny00ZDhhLTkxYTUtYmY1NzM4NzY2MmEw
LzEvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4Ku/D+5
vhYke9ABBwKIv726gUrbII0n9fetVz/gr1fHtHXrcu43x54k5VzdHxbyPD/xN5DW
4naibl5IkPi6GprXFl5UbkIAgH4jhIqSJQSFt6AH3RsAkruP74GINhquT5j3UWSj
KzXZi4I0uuOnuJtnpkHK/3acaweYLYMP0H8WeLzQLKBMRi79/lEJHKv/kvhE8Mhz
6ixLZtis39a4iXl8jtLj/cnO04V4Qdiz9l27NZvLC1BYqPT1EmH6ihPnRw4m/NkA
1wtm70OuI6A/5BQq3RK7pSJrMfZ2XS4Z/yN5irgc4FBATEMoq7V49fLt0axHUfsB
jbB7AYCWuLR02A==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:38:28 2025 by rpki-client