Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
File: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft (raw, json)
Hash identifier: 5l205AgixOu1PcJ8tiwhDGiDJZH6qIC7Eg0h3TN8mOc=
Subject key identifier: 72:4D:F8:F1:2B:63:5A:7F:F9:EE:C9:13:12:1E:D6:D9:9F:A2:8E:9D
Authority key identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
Certificate issuer: /CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Certificate serial: 01967F46766F300DBDB0A31DB68DFCB694C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
Manifest number: 1200
Signing time: Tue 29 Apr 2025 02:00:46 +0000
Manifest this update: Tue 29 Apr 2025 02:00:46 +0000
Manifest next update: Wed 30 Apr 2025 02:00:46 +0000
Files and hashes: 1: 9ykTfaxNeEIbk7wOARPuxoyYN9I.roa (hash: t511WQ9hIp1WWZqq1Z1Tp5plKXaqmdK3FlJidSm8B5Q=)
2: TVu5aQ7CXqbPlsSn9wNLY8tYilE.roa (hash: B5zfotvyVUd7f8T5ZgXVly2iMRkx4aTHfTXgfsPh/CI=)
3: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl (hash: zO0expPvZpYyCqKEVOFsJ5y3ZLkzQWuI5D7vZbSYwQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:76:6f:30:0d:bd:b0:a3:1d:b6:8d:fc:b6:94:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Validity
Not Before: Apr 29 02:00:46 2025 GMT
Not After : Apr 30 02:00:46 2025 GMT
Subject: CN=724df8f12b635a7ff9eec913121ed6d99fa28e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:aa:27:78:57:83:5a:78:53:c8:88:61:32:
5f:8d:cd:8b:64:62:81:3d:4a:3c:02:c3:2a:7c:16:
a6:66:7a:7b:d3:99:f3:c8:60:29:60:2b:7e:e0:0d:
24:3b:83:85:6b:4f:4f:f9:6b:92:57:ee:71:9e:6a:
3c:5f:69:cd:a5:71:35:a0:fc:86:d8:65:e0:54:dd:
61:57:b6:08:02:75:81:ab:fd:c9:10:00:22:6f:ee:
d6:0b:73:40:fd:55:11:be:6f:0f:e8:d0:de:4a:3b:
9a:83:fc:a2:01:d9:89:fb:8b:cd:cc:4c:03:06:bb:
3f:b3:a5:23:9f:d3:d8:a9:e8:e0:0a:43:c4:e8:0c:
43:a6:e3:64:26:6d:d0:10:1e:95:17:c5:47:1a:d8:
ff:9d:07:0e:94:ed:97:a5:83:04:8c:50:7c:90:aa:
a8:f6:02:76:ed:36:57:a9:3a:3e:f5:cd:70:8c:37:
af:7f:3e:9f:7a:b0:0b:1f:ef:14:96:18:30:11:c8:
20:59:f7:7d:04:57:b0:40:00:8c:58:fd:58:bf:18:
11:49:51:37:d5:93:70:d1:6f:a7:88:46:35:7d:c7:
e2:f8:a8:0a:2d:11:90:c8:a9:8f:bd:77:23:1e:df:
5a:0d:c2:8a:81:4d:7c:45:43:03:3f:66:a3:35:35:
c4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4D:F8:F1:2B:63:5A:7F:F9:EE:C9:13:12:1E:D6:D9:9F:A2:8E:9D
X509v3 Authority Key Identifier:
keyid:B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b6:85:8b:fb:d5:27:85:90:14:25:17:0e:d1:61:e0:79:ed:
94:10:35:4e:2e:15:12:ee:8f:d3:5a:1f:8b:f8:56:36:9c:46:
f9:d9:41:52:2b:71:d4:25:74:86:a2:25:e6:44:9d:ff:d2:0d:
61:26:aa:6a:b8:03:72:5a:fe:f9:72:56:c9:f0:b7:fa:c1:2c:
88:c0:71:f7:c7:b9:1c:a6:2f:8e:c3:d3:98:e7:e8:05:02:84:
c4:ef:e0:bd:56:5d:0d:e3:9a:3d:99:90:a8:5c:f0:49:35:cb:
7c:eb:54:65:25:eb:33:37:6a:75:5e:4a:ea:bb:1f:8c:a1:20:
0b:c8:f6:18:1c:90:32:ad:29:21:1d:8f:f1:c8:c2:c9:cc:c8:
2a:31:6b:8a:18:95:fa:50:80:d1:bb:8b:f7:26:8a:1b:c4:52:
11:40:22:e0:ba:f2:aa:d0:f8:1c:83:1c:07:06:a7:be:36:da:
b8:89:f4:01:81:f5:86:dd:d4:57:a8:4c:68:4b:ea:20:7b:db:
55:26:e7:a6:fb:9f:ff:b7:25:a7:c8:a4:82:93:10:03:7a:f9:
d7:95:87:e0:84:60:75:ef:c9:94:e3:dd:5e:b1:e9:90:bd:3a:
f9:20:d5:1b:7c:f2:58:e8:6b:e4:cd:40:08:24:11:a8:d1:0e:
a5:87:51:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:01:24 2025 by rpki-client