Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
File: TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft (raw, json)
Hash identifier: PIbZUFN1xwT65j/MxwQAL20TYzLXeJvH1OwNOd9iX34=
Subject key identifier: 15:DD:7C:94:8A:F6:DE:91:BB:04:95:36:AF:92:D1:E2:5D:7E:8F:C6
Authority key identifier: 4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
Certificate issuer: /CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Certificate serial: 01968F5E5D5AC2BA38D40FCCD525D1FFE181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
Manifest number: 025A
Signing time: Fri 02 May 2025 05:00:48 +0000
Manifest this update: Fri 02 May 2025 05:00:48 +0000
Manifest next update: Sat 03 May 2025 05:00:48 +0000
Files and hashes: 1: TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl (hash: ByUnVwoCDRSCRpgHN3Rrhxt7lcN+jLwhJ/eq0JeYE68=)
2: U_0Qm9bmlfNCn0QcnMuKjqVhpok.roa (hash: rS2TodhOY6krb9NSbdEkyp8dkG2jF6/EwmhOAvSbJFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:5e:5d:5a:c2:ba:38:d4:0f:cc:d5:25:d1:ff:e1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Validity
Not Before: May 2 05:00:48 2025 GMT
Not After : May 3 05:00:48 2025 GMT
Subject: CN=15dd7c948af6de91bb049536af92d1e25d7e8fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:9b:27:34:be:2f:fd:59:1a:35:73:7b:be:
72:0d:ef:93:03:63:05:e6:9f:fc:51:f3:60:c0:5f:
4c:77:9d:ee:9f:dd:4b:df:8b:26:11:2c:70:09:02:
2b:11:a7:63:00:f1:2e:f8:f8:58:e2:d6:c8:36:fc:
f4:2b:d1:5b:cc:96:29:78:c4:05:e5:6f:26:56:d5:
0b:aa:88:ef:8a:a2:10:16:bc:97:65:f4:b8:f6:e2:
e0:f6:35:74:58:1b:8f:98:ef:0d:46:d2:e2:b0:31:
5c:da:af:bb:8c:88:4e:b2:00:2e:c2:0d:4d:49:79:
a8:3d:52:fc:22:21:49:96:60:c1:bd:d3:68:a6:78:
d7:8f:26:23:53:90:11:64:28:aa:6c:1b:96:90:02:
44:1d:5d:1c:a6:65:4c:5c:2e:f9:45:5a:5d:b5:a0:
6f:dd:85:2f:ae:3b:41:b8:55:80:f6:17:4b:07:84:
33:de:11:83:75:d9:8c:39:cb:4b:2a:79:4f:ed:da:
80:89:d0:60:7e:23:a5:cc:c1:fb:c8:d1:75:aa:50:
ef:29:29:89:6b:4e:cc:db:b1:39:66:ab:8b:dd:e5:
19:8b:93:b1:8c:57:f2:c2:ba:a1:ed:70:10:95:10:
4e:7e:a8:ee:97:80:84:30:5a:2b:10:25:eb:99:8f:
44:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DD:7C:94:8A:F6:DE:91:BB:04:95:36:AF:92:D1:E2:5D:7E:8F:C6
X509v3 Authority Key Identifier:
keyid:4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4f:e0:c6:f1:a7:52:24:36:85:55:b3:0a:07:f4:f7:52:84:
2a:54:03:6e:15:8e:4b:42:81:b4:dc:ba:31:17:a1:be:76:03:
2c:fa:8c:b3:2b:a1:f4:db:2e:91:12:14:ca:6a:0f:23:f3:b3:
c0:6a:70:f3:a5:04:e2:64:72:05:f1:2a:6c:21:3d:10:c9:87:
bb:00:97:d5:d3:66:84:4c:36:ac:10:6c:c6:7b:83:c0:e6:d5:
4a:36:84:b9:1d:d4:6f:05:56:b7:47:f0:d6:ec:71:2a:1c:a9:
0e:e0:80:5e:23:d3:b4:62:6a:2a:d1:1f:52:6c:93:aa:04:19:
7d:d4:d4:50:6b:a0:4c:92:60:2f:43:2d:36:98:32:c0:32:26:
31:0b:ef:86:53:56:c3:87:fa:bd:62:70:ea:00:79:00:6e:6c:
34:35:54:61:db:58:c0:60:c5:18:14:06:83:84:7c:8e:a6:6f:
a3:be:21:46:66:99:b0:de:ae:4e:23:50:2c:23:e8:53:74:92:
71:ef:06:8d:da:aa:08:42:fb:c3:f9:b4:53:e5:c0:aa:f1:71:
97:12:0f:4b:e3:04:fa:65:ec:56:65:1a:b6:42:4a:7d:00:53:
72:2a:f0:6c:c8:9d:6b:30:7f:8e:02:b5:87:3b:e5:51:cf:31:
e2:14:6a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:56:41 2025 by rpki-client