Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
File: tpJFTBZpZIbPBx7Rjnl240BJCfs.mft (raw, json)
Hash identifier: FzP5/ano7z8j78cS7MZWbyGXirTYK6y0/1mzg/qAe3c=
Subject key identifier: 13:1D:F6:9B:83:3E:E1:7C:E2:E7:40:F5:0E:94:3E:0D:C1:29:4D:EB
Authority key identifier: B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
Certificate issuer: /CN=b692454c16696486cf071ed18e7976e3404909fb
Certificate serial: 019675676A9D4E2C6BC6EF72EE597A97248A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
Manifest number: 095D
Signing time: Sun 27 Apr 2025 04:00:33 +0000
Manifest this update: Sun 27 Apr 2025 04:00:33 +0000
Manifest next update: Mon 28 Apr 2025 04:00:33 +0000
Files and hashes: 1: 5czF8Od9k1lGzWbwlN6JD9EQv3o.roa (hash: xQiXSp/PKEr54Bt774G49z92F24A1eFshYT3vR6Fw2c=)
2: tpJFTBZpZIbPBx7Rjnl240BJCfs.crl (hash: 3XlqktJcwc9jMB9BiyY3JlVE450z0nz9fmy+Qr59xl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:6a:9d:4e:2c:6b:c6:ef:72:ee:59:7a:97:24:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b692454c16696486cf071ed18e7976e3404909fb
Validity
Not Before: Apr 27 04:00:33 2025 GMT
Not After : Apr 28 04:00:33 2025 GMT
Subject: CN=131df69b833ee17ce2e740f50e943e0dc1294deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ac:75:6d:28:ae:6f:cd:a4:5d:bc:72:02:f0:
17:1f:22:8f:ca:61:09:56:16:28:71:a0:a5:2e:7d:
aa:71:4c:8a:91:ab:a7:e5:5b:d7:5f:70:e6:e3:54:
b2:4c:40:c3:f4:e7:fe:d8:71:8f:f3:7f:6c:eb:ed:
17:1f:8d:cd:7d:bf:60:e9:89:0e:0f:3a:cd:91:8b:
c8:8e:7c:bf:68:6f:d9:f4:08:39:41:63:29:30:8d:
30:a8:91:b6:47:76:23:2f:20:e1:68:c7:9c:cd:6e:
9c:d8:ea:f3:5a:82:7f:93:5b:33:e5:f7:47:76:ed:
9d:15:80:d7:60:d4:6d:6f:7c:96:31:cb:f1:c8:2a:
22:ea:d6:e6:17:7f:1e:72:95:e1:09:6b:ee:29:42:
10:dd:3c:90:25:0c:5e:5d:fc:12:14:ff:6e:79:2e:
37:82:a8:a8:4d:59:36:75:60:b7:e3:93:94:d2:5a:
7f:72:53:06:df:53:f3:a8:0b:55:0f:6d:6b:c9:b4:
77:84:81:64:27:71:5a:29:3c:ab:ce:72:b6:b3:ba:
29:e7:17:16:f5:88:38:74:90:74:99:5f:be:57:50:
a6:cb:dc:c3:ce:3b:e6:a5:e1:09:ca:eb:91:83:96:
23:00:a4:5a:02:09:18:f3:49:fc:31:ec:82:7f:a3:
11:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1D:F6:9B:83:3E:E1:7C:E2:E7:40:F5:0E:94:3E:0D:C1:29:4D:EB
X509v3 Authority Key Identifier:
keyid:B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:54:87:6b:1e:7b:5a:dd:1e:26:89:6f:0f:c5:05:83:ee:0a:
f6:aa:e0:52:16:1a:1a:5f:34:4c:a2:23:8b:aa:fa:75:c7:4a:
aa:50:d0:bf:ce:59:eb:a4:0f:f8:3d:5e:8f:4f:77:f1:76:4b:
b8:24:fc:e6:65:93:5b:e1:59:26:ab:8c:23:c9:5f:9c:9c:a1:
62:f4:84:30:a9:61:57:41:df:4f:e7:af:37:61:1b:de:97:39:
ba:72:bb:d7:9c:46:74:ac:8e:5f:3d:6b:46:fb:ff:a8:f3:06:
35:ad:1e:ae:33:7f:28:68:32:89:28:ea:db:93:a0:8a:fd:45:
bf:7e:0c:5f:a1:78:f9:9f:60:a1:cc:53:bb:01:80:b0:02:2d:
cf:74:f5:62:d0:e4:b2:05:c5:d0:94:89:ff:c3:61:b4:1b:7d:
1c:75:f0:e9:b5:e6:ab:40:d2:e1:13:8b:ff:c6:2a:7f:b8:16:
32:ed:2a:da:a3:8f:7f:e8:4a:b2:8e:e2:bb:79:f1:e9:84:b4:
94:e8:62:e0:96:34:75:ca:a3:ff:41:6b:ea:55:3c:6f:27:0c:
b0:bf:2f:b3:a2:d7:08:ee:48:18:76:ac:42:b4:3b:3c:30:b5:
38:05:a9:1e:81:a4:15:cf:b9:2c:f4:d1:21:97:7b:61:c0:3f:
ee:1a:c3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:58 2025 by rpki-client