Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
File: S_TZ-mawCKCMO47YLDgmfh0hJVA.mft (raw, json)
Hash identifier: NF79YOMO/X6+fOppDkFXsCl6mSE6ShPJWEhl81TwVCs=
Subject key identifier: 5D:49:ED:03:B6:4C:B3:80:35:32:C2:8C:49:8E:5E:FD:F9:96:60:E1
Authority key identifier: 4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
Certificate issuer: /CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Certificate serial: 01976D3D539A5860E850D362A54ED6F8D060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 07:00:25 +0000
Manifest this update: Sat 14 Jun 2025 07:00:25 +0000
Manifest next update: Sun 15 Jun 2025 07:00:25 +0000
Files and hashes: 1: S_TZ-mawCKCMO47YLDgmfh0hJVA.crl (hash: CfAhKWgQ+Q8gVzpRCt0zd7a1lGkZUaESDTTIZPLR1c0=)
2: VHi9vxpSG4tYfENJTcecEKHCVRo.roa (hash: ZPBYgaWs41C7d8q4Zb2hDOx2GjzVI3YJSGRCZKGJpWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:53:9a:58:60:e8:50:d3:62:a5:4e:d6:f8:d0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Validity
Not Before: Jun 14 07:00:25 2025 GMT
Not After : Jun 15 07:00:25 2025 GMT
Subject: CN=5d49ed03b64cb3803532c28c498e5efdf99660e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:70:48:b5:0a:ab:f6:b2:72:57:ed:e3:7e:
fd:9b:5c:c7:e9:e2:3e:d3:78:96:e3:0b:ee:7e:16:
dd:46:f0:56:03:dc:c4:f9:54:1c:1e:3b:d0:4f:ce:
c6:68:bc:ab:72:2f:c9:a9:c1:12:b2:d5:fa:19:f2:
0e:46:b7:71:22:6a:0b:16:09:cd:31:4f:61:2d:db:
e9:86:dc:e3:b8:bc:85:61:ae:e8:66:4c:4d:e6:6b:
a6:df:70:44:43:e5:45:7f:d0:03:bf:1d:16:11:ad:
43:21:93:b4:31:30:ff:b8:27:c1:fa:62:24:e0:40:
53:34:7b:68:70:af:f9:1b:e9:3d:69:ce:72:3d:9a:
00:aa:59:d1:f8:1d:82:1c:75:4f:0a:e2:08:f3:5c:
20:d9:eb:a5:49:a7:c6:48:73:8d:f1:da:bb:a8:48:
71:fb:09:83:44:48:cc:94:89:83:a9:66:48:fa:30:
89:be:a5:e4:60:70:54:c1:2b:5c:f1:43:0c:82:de:
21:10:ba:4a:39:71:bf:99:36:44:7d:9e:2e:18:eb:
fb:e6:64:c5:1e:16:db:a4:95:9f:f2:5b:a1:b2:1b:
95:77:55:17:27:39:a9:fb:02:7c:0c:06:16:47:84:
df:c8:84:f6:79:2a:3e:37:8c:3f:c7:67:c1:6e:10:
36:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:49:ED:03:B6:4C:B3:80:35:32:C2:8C:49:8E:5E:FD:F9:96:60:E1
X509v3 Authority Key Identifier:
keyid:4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2f:5a:82:36:3b:14:11:d7:d1:ae:b8:5e:62:3f:92:12:40:
31:d7:a9:39:37:4d:7f:4b:58:d4:d2:c9:8b:72:3a:a9:28:48:
b4:7a:3b:df:6b:b2:bb:d4:36:1f:1b:f5:fb:a0:8e:1b:c9:f0:
0b:8e:2e:55:80:68:72:18:7c:9d:1e:71:19:9a:ce:27:8e:2c:
46:ed:29:25:0d:54:d9:19:4a:d5:67:19:93:d6:cd:28:97:29:
a3:41:49:cb:70:f9:2e:07:38:75:b7:b9:2d:0c:82:b1:e5:5b:
13:04:38:9a:70:36:88:53:4a:8e:19:37:0b:02:5c:65:2f:e9:
60:9a:4c:c3:83:49:be:5a:1a:e6:17:89:3c:4e:e8:1e:d0:e0:
9c:07:9a:fb:39:2a:ae:f6:0f:af:67:33:cd:82:54:61:93:b9:
b6:0f:c7:a3:be:13:7a:7c:8e:c6:1d:fb:af:5e:8e:d6:d3:7d:
90:e3:af:f4:df:c5:28:45:61:8c:73:15:09:65:22:fe:f1:2f:
22:d9:c0:f2:07:9c:b4:c3:93:1e:fb:ee:b0:52:85:1c:7c:dc:
70:06:49:8b:31:3d:71:64:2f:39:74:c6:79:30:a4:3d:ff:96:
b0:f6:8f:de:84:a2:79:c6:83:91:df:45:28:ac:ed:ba:ca:27:
e7:0c:fc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:44:49 2025 by rpki-client