Timestamp inspector (RFC 3161)
Load a timestamp file (.tsr or .tst) or paste it as Base64 and see the time, hash, serial number and timestamp authority.
How it works
A timestamp following RFC 3161 is a signed data structure in DER format. The tool reads the structure in the browser, finds the actual timestamp information (TSTInfo) and shows its fields. It understands responses from a timestamp authority (.tsr) as well as plain tokens (.tst), as a file, Base64 or PEM.
What the inspector shows
- The time (genTime) in readable form.
- The hash algorithm and the hash of the timestamped data.
- Policy, serial number and, if present, the nonce.
- The name of the timestamp authority and the number of embedded certificates.
Compare the hash shown with the hash of your file to see whether the timestamp belongs to it.
What the inspector does not do
It verifies neither the authority's signature nor the path to a trust anchor. For that, provide the anchor as a PEM certificate on the verification page. The timestamp verification guide shows the whole process.
Typical uses
- Securing receipt chains: see when a chain's hash was timestamped.
- Checking providers: recognize which timestamp authority issued a timestamp and with which hash algorithm.
- Troubleshooting: find out why a verification cannot match the timestamp to the content.
Troubleshooting tips
A response file (.tsr) contains a status besides the token; only status 0 means the timestamp was issued. If the hash shown does not match your file, a different version was timestamped or a different algorithm was used.
Frequently asked questions
Which files can I load?
Responses from a timestamp authority (.tsr), plain tokens (.tst) as well as Base64 or PEM. The file is read only in the browser.
How do I check whether the timestamp belongs to my file?
Compute your file's hash with the same algorithm, for example SHA-256, and compare it with the hash of the data shown.
Does the inspector show whether a timestamp is qualified?
No. Whether a provider is legally recognized follows from its recognition and the anchor a verifying party provides, not from the token alone.
Why does the inspector show several names?
If the timestamp contains no name of its own for the authority, the inspector shows the names from the embedded certificates, such as the authority and its root.
Can I read a timestamp from an evidence pack?
Yes. Copy the timestamp from the pack, usually as Base64, and paste it. The inspector recognizes Base64 and PEM as well as binary files and shows time, hash and timestamp authority. The data does not leave the browser.