Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
File: TXPZQBmjwjWHffa8GynHagtkydA.mft (raw, json)
Hash identifier: yLJ82dKFoAwMSVXICb/rS4cxjNVYDOHzbKviR49kU4Q=
Subject key identifier: 37:48:69:2E:53:D0:7C:E2:C3:A3:36:5D:27:93:6F:CA:8D:88:7B:64
Authority key identifier: 4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
Certificate issuer: /CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Certificate serial: 019676E7F1BC40FEAF035B003D335CCAB22D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
Manifest number: 0B67
Signing time: Sun 27 Apr 2025 11:00:34 +0000
Manifest this update: Sun 27 Apr 2025 11:00:34 +0000
Manifest next update: Mon 28 Apr 2025 11:00:34 +0000
Files and hashes: 1: TXPZQBmjwjWHffa8GynHagtkydA.crl (hash: 2Auxj2jmid7n7DSzUK8xi6uZmebt2RUObpejOi2H6qE=)
2: UFlaQCFJ4CLhOuiIqohu_AVKpLY.roa (hash: QMm4BiW8chALfiHKzYbt92A3p1kXxu/myJMcDRlryRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:f1:bc:40:fe:af:03:5b:00:3d:33:5c:ca:b2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Validity
Not Before: Apr 27 11:00:34 2025 GMT
Not After : Apr 28 11:00:34 2025 GMT
Subject: CN=3748692e53d07ce2c3a3365d27936fca8d887b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:46:2b:22:ab:c6:83:00:94:84:0f:e4:31:
ac:94:07:11:94:c6:0a:03:3b:e7:ce:d2:26:f4:52:
16:b0:cb:10:30:2c:d0:74:b3:fa:af:82:df:68:1a:
95:b5:40:ab:c5:09:05:19:95:2e:35:ee:a6:0e:b4:
8a:16:04:3f:8a:b2:7c:49:55:d4:83:66:6e:70:8f:
0e:d3:ad:c5:1a:2d:6a:8b:5f:a6:92:4c:80:3f:41:
d1:f0:33:f7:7d:43:37:6e:8e:07:81:c2:e6:de:05:
6d:e5:fc:a2:ce:70:de:41:eb:f4:d1:d6:76:de:c5:
f1:ff:54:73:35:ed:9b:47:63:8b:45:23:68:6b:29:
1b:77:26:08:f4:a1:cd:c3:11:e8:2d:1e:53:a2:d8:
36:ec:56:97:32:7a:af:5e:cc:b7:11:15:41:cc:d8:
53:19:9f:1e:d7:22:6d:8c:7c:07:87:d0:26:1f:8c:
7d:fb:9b:f9:56:16:5e:03:81:eb:89:35:e7:03:19:
51:af:04:ec:02:cb:eb:9e:79:b6:2d:1e:52:93:44:
3f:2e:9a:53:54:46:2c:ae:26:45:e6:0a:70:dc:dc:
01:80:40:31:ed:a5:3b:da:7a:62:40:d2:55:84:79:
22:86:54:a5:43:e6:e6:9c:0a:fc:51:80:0f:09:4b:
c1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:48:69:2E:53:D0:7C:E2:C3:A3:36:5D:27:93:6F:CA:8D:88:7B:64
X509v3 Authority Key Identifier:
keyid:4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:c2:79:5e:5f:7f:56:e4:89:62:3f:40:a2:b3:3b:30:d7:aa:
16:fe:0f:32:73:27:b2:6b:d4:a4:88:1f:46:19:78:6a:94:99:
e9:6b:92:70:48:f6:e3:5f:4c:04:c5:0a:41:13:40:57:3c:8b:
17:80:80:a0:dc:98:b8:be:8d:75:8e:b5:b4:f2:4d:83:27:90:
02:a3:9c:9f:45:4e:54:0e:74:84:b6:04:da:cd:fa:b2:fc:3d:
c3:80:79:58:aa:94:6f:4a:ff:96:70:b0:5c:64:fe:db:6c:21:
cd:f7:b1:b9:32:b1:9d:f7:11:f3:de:bf:f2:f8:e9:bc:0e:a2:
8b:89:55:74:58:f3:2b:53:c6:fe:27:b8:85:15:bd:67:3d:c2:
d8:8b:a1:9a:9b:fc:11:56:c7:87:41:f4:a9:6d:bf:6b:72:12:
59:98:ed:c6:84:1b:9e:f5:19:0e:80:99:7b:35:95:eb:7b:af:
d0:dd:75:5d:f9:32:a8:82:9b:33:d8:91:6a:4e:2f:1c:12:d5:
da:9e:29:13:e6:50:c1:c3:17:33:95:09:6a:37:b3:0a:b6:27:
e9:56:f0:7e:d9:4a:f8:67:46:60:1f:c2:57:ca:89:8b:e3:a4:
48:97:66:bf:41:e0:79:81:05:7f:4d:18:f8:cc:2f:cb:2c:6f:
82:a0:a6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:10:40 2025 by rpki-client