Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
File: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft (raw, json)
Hash identifier: cyfC153gpJ9K80c1hJe0dbDEfCwmP4tGN2EIaXaEPWE=
Subject key identifier: DC:14:AB:36:2C:6F:10:6B:77:3D:2E:A5:31:16:35:0E:DE:A5:BF:42
Authority key identifier: 4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
Certificate issuer: /CN=4c6319fe7859c342f7cd9f711306f56590828d60
Certificate serial: 0196846CC906CBFA659B50F155A913387373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
Manifest number: 0A3F
Signing time: Wed 30 Apr 2025 02:00:43 +0000
Manifest this update: Wed 30 Apr 2025 02:00:43 +0000
Manifest next update: Thu 01 May 2025 02:00:43 +0000
Files and hashes: 1: 7AICHMFq1kSjCOJXzQDO4zRvMc8.roa (hash: p5CUpe/5DfGPJwjUzsORFP9UxiFbMunTvT9GArgSAt4=)
2: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl (hash: 7RHZO7Ro4KpL8Z+Dx+ZpKv1vXLVDJfr+Tos69ofMFj4=)
3: t5BDJd8Dzrg2IC09MFuU9BxT5Uk.roa (hash: 9AOu1bBqC0e4A6DdOt1aKlQ9vH6ddvoaCculzcrBvgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:c9:06:cb:fa:65:9b:50:f1:55:a9:13:38:73:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6319fe7859c342f7cd9f711306f56590828d60
Validity
Not Before: Apr 30 02:00:43 2025 GMT
Not After : May 1 02:00:43 2025 GMT
Subject: CN=dc14ab362c6f106b773d2ea53116350edea5bf42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:e4:81:86:1d:c8:21:ee:f2:08:90:0e:9a:
e5:a9:ef:0e:6d:cf:51:3d:2c:0b:5e:4d:54:cd:75:
fb:3a:6f:7c:3c:ab:a3:fd:04:f0:e7:81:43:00:6c:
3c:69:4a:0b:42:f0:fc:7b:dc:4e:f7:f8:87:d5:ec:
53:da:97:6c:b7:32:6d:fd:65:ae:f6:b8:ed:63:e9:
f6:ff:94:93:2d:de:a3:61:f3:cf:74:a5:0f:3b:88:
22:3d:a0:10:55:68:84:e1:8e:31:1f:8d:d0:ef:7f:
65:e6:cb:1c:cb:a6:37:0c:5a:df:b6:31:b2:13:a8:
d5:f1:2c:38:56:91:69:51:0b:f4:41:43:6a:34:3b:
2b:dc:60:6f:0f:fb:96:99:f0:34:2b:6e:8f:75:8f:
88:3d:3c:7e:78:67:c6:36:f8:62:6d:f6:89:20:ec:
73:a8:ed:c8:1a:3c:40:94:9c:7a:4c:f5:d2:03:35:
f2:6b:d3:e1:be:ea:93:1d:97:e8:d1:83:a3:61:3a:
2f:a7:c3:25:d3:9b:f4:98:97:30:c3:72:e5:78:60:
8d:44:bf:d4:c7:2c:e5:af:8d:b6:35:25:ff:98:24:
e2:da:14:4b:95:5a:e2:5c:e9:ee:cc:22:bf:4e:1b:
e3:d9:ed:a5:11:5c:9c:ea:0a:56:7a:80:a3:ed:d6:
87:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:14:AB:36:2C:6F:10:6B:77:3D:2E:A5:31:16:35:0E:DE:A5:BF:42
X509v3 Authority Key Identifier:
keyid:4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:25:b4:40:a1:8e:ce:fc:61:50:85:f1:be:27:e5:77:11:4b:
6e:60:a3:2f:2e:32:09:13:2d:56:85:f2:68:86:42:75:62:d7:
51:38:3d:40:a8:cc:e6:a0:fd:78:96:ff:32:da:39:18:4d:4f:
d8:7c:db:c2:1e:d8:4a:75:b4:58:52:f1:16:e9:12:59:d7:98:
c4:78:0c:13:3f:ee:17:25:80:17:89:d7:dc:8c:92:81:53:1a:
d3:e6:46:69:df:af:20:a5:d4:92:6a:f7:89:55:4d:21:37:52:
8e:ff:e8:21:41:75:5e:db:5b:fc:dd:a3:ca:33:6f:5b:da:29:
3f:d7:28:5f:32:d8:5c:89:40:37:b9:6f:7e:90:ea:aa:05:ca:
2f:9e:33:bb:5c:2a:3f:29:89:7f:0c:5e:bf:24:4a:95:23:da:
3c:58:88:71:2c:a6:a3:5a:82:a6:c8:2a:4d:fd:0b:65:9b:35:
56:e9:c3:23:ba:3e:dc:13:02:a7:80:db:09:c7:fa:6d:8e:84:
c8:59:70:7f:ac:de:43:e0:b9:55:40:40:6a:4c:8e:1c:34:ba:
7c:26:65:6e:dc:3b:c1:49:39:0a:f9:36:76:ea:62:4b:a0:7a:
60:6c:6f:a2:a1:93:9c:a3:97:ba:c5:6f:e6:7c:9e:2a:d8:69:
60:d2:07:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:52:26 2025 by rpki-client