Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
File: tjC3O1HLxTgN1K2z1ar_TXozTF4.mft (raw, json)
Hash identifier: zb2riG4EKBuH2U8OGEs3PoW9NsoWhH7zCdCfGI4wYrM=
Subject key identifier: 8B:8D:BF:CE:E0:B6:30:2A:04:3D:70:6A:E5:32:AD:8E:DD:19:97:6B
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Certificate issuer: /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial: 01967AC4AC61A0038D4DC45B874772222C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
Manifest number: 151F
Signing time: Mon 28 Apr 2025 05:00:31 +0000
Manifest this update: Mon 28 Apr 2025 05:00:31 +0000
Manifest next update: Tue 29 Apr 2025 05:00:31 +0000
Files and hashes: 1: NwHU4_RRdYlU4XyGWZgPG7ScoJI.roa (hash: ipL8tImvWhn17uYEp5lsF1Z56RqnWb9jmUuXddwpoFg=)
2: tjC3O1HLxTgN1K2z1ar_TXozTF4.crl (hash: VJnZozAST0tjg5JFizesiKEfCa13AN5sqiqSXHvNS5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:ac:61:a0:03:8d:4d:c4:5b:87:47:72:22:2c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Validity
Not Before: Apr 28 05:00:31 2025 GMT
Not After : Apr 29 05:00:31 2025 GMT
Subject: CN=8b8dbfcee0b6302a043d706ae532ad8edd19976b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:80:c4:2d:7e:fb:55:42:7e:53:c7:8e:97:4a:
46:1f:d9:7e:07:0f:f7:68:c5:fc:29:7c:88:ef:be:
39:0f:f7:25:24:21:23:d6:86:2e:b2:54:71:7d:4c:
27:26:06:d3:11:bb:ea:a1:3c:3b:3c:02:aa:12:e9:
9e:32:4e:8e:23:0d:54:88:02:35:0f:36:68:10:d6:
42:62:8e:00:2f:c8:b4:18:4d:12:95:80:e2:ba:72:
d6:ec:55:cc:e5:6d:22:2c:0e:96:43:9e:4c:6a:3b:
02:7d:87:88:b1:2d:ee:76:67:4c:d2:03:c7:e3:77:
0d:09:a8:17:4b:f3:45:f1:4f:c6:0d:22:86:7e:f2:
09:b9:91:de:06:6f:3d:df:aa:a4:d4:b3:c9:ac:09:
3d:34:39:5e:af:ee:17:27:28:84:54:fd:53:04:01:
2d:3c:53:1f:c1:71:83:91:66:0b:ef:24:53:5d:b4:
2f:46:2b:8b:f2:e2:b2:14:ce:56:89:a8:01:ff:f5:
05:53:82:d3:b7:e8:0f:f4:bd:3a:51:ce:22:ca:de:
a4:5b:b2:16:b3:10:2e:45:2c:ff:bd:17:cd:d5:67:
9e:7d:be:12:ce:c0:9c:94:d3:d9:6f:f7:67:31:c3:
3d:bf:05:1f:bd:2e:41:2b:29:bd:30:0d:a6:10:9b:
b2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8D:BF:CE:E0:B6:30:2A:04:3D:70:6A:E5:32:AD:8E:DD:19:97:6B
X509v3 Authority Key Identifier:
keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:10:b0:db:88:79:52:e8:e9:2f:01:80:8b:28:e3:c9:6f:2e:
e0:62:d7:84:96:86:cd:3d:d9:45:2d:cc:0b:34:1f:ba:2d:53:
85:f0:4a:69:04:46:6a:75:65:d8:2e:8c:e5:11:ae:a9:cc:de:
d5:de:b4:92:7c:63:af:a1:ee:31:5d:0f:f8:67:cf:08:a0:ad:
1d:25:a5:0c:75:3a:26:89:87:e3:6e:92:c7:1c:67:ac:24:f8:
dc:8c:30:52:a7:c0:93:1d:51:65:4e:5f:ee:7a:2f:9f:1c:a0:
6e:7d:4e:d7:34:16:83:e1:d6:7a:d0:4a:26:3a:5d:8e:0b:fb:
74:66:72:5c:7c:fb:fd:8f:51:d6:8a:2e:55:f9:32:92:e5:4a:
04:b0:9d:9f:fc:8e:da:d4:f0:c1:c1:10:0c:9c:39:4a:f6:67:
9a:10:00:39:c4:81:3d:85:3c:5c:dd:04:95:fa:ae:4c:e6:37:
13:07:de:54:bd:f1:d7:7e:57:a0:30:aa:2a:fd:d0:8f:70:86:
34:32:ed:41:b5:59:0c:10:42:3b:1c:c2:3c:ee:4a:d0:08:87:
c0:81:d6:a9:7c:9f:f1:78:03:35:6e:bf:67:f9:a0:1a:ba:52:
b5:5f:73:64:6c:2f:98:c6:46:17:77:30:2a:44:f5:23:12:7b:
22:21:b6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:19:19 2025 by rpki-client