Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
File: TTxfCqFBARzi2_GMzOqsjSOoAlM.mft (raw, json)
Hash identifier: LtO6cT58WIR2LsNCpBZ57hfAOg6rF/nx3EuXorGpN9M=
Subject key identifier: 2C:C8:7F:B7:6C:C6:0B:AD:DA:57:6C:0D:9C:D1:FB:F7:A7:D7:84:EE
Authority key identifier: 4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53
Certificate issuer: /CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253
Certificate serial: 019682479F6FA6E2D74F1555EB9BCE70F70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
Manifest number: 0241
Signing time: Tue 29 Apr 2025 16:00:54 +0000
Manifest this update: Tue 29 Apr 2025 16:00:54 +0000
Manifest next update: Wed 30 Apr 2025 16:00:54 +0000
Files and hashes: 1: TTxfCqFBARzi2_GMzOqsjSOoAlM.crl (hash: YsbUmQh8C1qyiQmAZU2fmYC+Cpg96XqjgzEVZCfoQWE=)
2: VzuF2DppIrspDzJ85GPpog256VM.roa (hash: NVhHykKnaNaKUFenioMV2s+C+yHI/RstE5ooTmdayhs=)
3: gl57ADSHY0k4ndDK_OjTyc2Vj-w.roa (hash: K2iUKBC94qqs+lcuU9alkOi5wrj2IpvPW1nPAtFGI+M=)
4: wVbnrxwKxuyFCykAZfTxIk8usp4.roa (hash: nUg8btnlBOx76JKnTAelqbIAdPi5nKQqhhSAdUCbOU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:9f:6f:a6:e2:d7:4f:15:55:eb:9b:ce:70:f7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253
Validity
Not Before: Apr 29 16:00:54 2025 GMT
Not After : Apr 30 16:00:54 2025 GMT
Subject: CN=2cc87fb76cc60badda576c0d9cd1fbf7a7d784ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:b0:aa:ae:47:99:97:16:71:c2:17:76:5c:
26:9a:e4:05:86:31:a8:c6:28:c3:38:ea:a5:d4:79:
bd:bb:06:d3:43:75:88:77:76:38:8e:48:98:5b:bd:
c2:f2:32:de:33:8d:dc:26:81:dd:83:49:b7:8c:82:
c4:50:d6:5c:41:b0:bf:77:85:09:e3:37:f0:4a:bd:
32:b7:54:74:88:f5:0b:b5:02:f2:35:aa:15:35:e0:
4e:c0:2e:d0:e3:36:b4:bb:ce:79:ac:7f:a2:e7:ca:
8b:cb:37:e8:a5:9c:5c:69:a4:32:d6:8f:6e:a6:25:
23:9b:56:d2:8b:6c:e4:b7:09:32:e3:ec:61:ef:58:
2c:81:aa:40:40:a2:74:dd:bb:b4:ff:da:aa:71:7b:
74:fc:a1:2b:d9:ad:5a:62:dc:93:5f:aa:88:b1:05:
de:d1:b5:15:28:3a:c5:b8:8e:23:e1:08:cc:20:be:
c7:0a:2e:ca:bb:16:ff:f0:29:a3:3d:b8:17:51:70:
2f:ef:62:9a:9c:fb:0a:9c:cd:51:43:32:f1:a1:1d:
e3:e1:2e:05:4a:47:4f:e2:65:0d:22:94:67:bb:4d:
91:24:c7:44:42:a2:e7:ce:58:82:7e:0e:45:25:cc:
7e:e8:bf:7d:37:7d:2e:ec:32:d9:cf:5b:a3:67:89:
a7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C8:7F:B7:6C:C6:0B:AD:DA:57:6C:0D:9C:D1:FB:F7:A7:D7:84:EE
X509v3 Authority Key Identifier:
keyid:4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:4a:ef:99:c0:dd:12:57:f3:c3:4e:c8:fa:c3:94:dd:e6:6f:
9d:12:e1:a7:31:e4:f2:70:d3:27:d2:0e:49:4d:0b:db:d7:1c:
37:ac:fb:9a:c6:97:33:73:5f:43:84:eb:57:6a:57:bc:c5:b4:
01:d9:9a:f9:44:76:76:ab:b0:9b:ed:c5:6e:86:a0:02:de:23:
06:a0:14:67:0c:fa:54:34:b3:80:d9:35:e4:b4:86:fa:33:2c:
0a:a6:e2:a4:27:03:65:fb:11:e7:8d:e4:56:ce:75:5b:ea:e8:
69:b5:5c:5a:ae:d2:0e:71:d9:78:8e:29:96:d3:0e:9f:b1:36:
05:99:83:61:9b:f3:80:0d:ec:d1:d5:02:fc:ef:b5:6a:25:71:
59:05:9d:4c:e0:9d:7f:49:68:b6:3a:79:f3:58:ec:3b:ad:b1:
72:90:62:92:73:b1:60:d3:c6:71:96:0a:da:ec:29:59:78:57:
73:17:9f:52:1c:e0:f5:c2:e0:a4:b7:30:7e:b8:e2:7a:cd:d2:
d8:46:2a:8f:f3:fb:98:cc:8f:6e:4d:16:df:1c:78:54:f7:84:
00:56:ae:d1:bc:9c:0d:c2:ea:58:82:3b:34:71:1d:7d:a1:cb:
19:36:83:fa:d9:59:c3:ab:c0:ad:59:80:1d:c7:8b:34:4f:2b:
10:1d:97:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:32:05 2025 by rpki-client