Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
File: tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft (raw, json)
Hash identifier: hI6RPZ3/Z5KRGcgmwXgKtWeEBimHu8l4adD0/zAlegY=
Subject key identifier: 5F:B4:0F:16:08:64:E8:AB:83:1D:44:E8:4F:56:FD:AA:27:54:F1:40
Authority key identifier: B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7
Certificate issuer: /CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
Certificate serial: 0196790D58A9A46EF2D509050067B1A43BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
Manifest number: 03FB
Signing time: Sun 27 Apr 2025 21:00:39 +0000
Manifest this update: Sun 27 Apr 2025 21:00:39 +0000
Manifest next update: Mon 28 Apr 2025 21:00:39 +0000
Files and hashes: 1: Zw8tldKF4IamTYiqaUWTp-ORWaM.roa (hash: +YY2MSi0DHjKWNmQtrNLuY1Ni5g7MizVHlrZ12WPMsk=)
2: tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl (hash: qdCzGgvYYVcSRiuxMjIicuIsJe/9eCPsv5O0+A8W4wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:58:a9:a4:6e:f2:d5:09:05:00:67:b1:a4:3b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
Validity
Not Before: Apr 27 21:00:39 2025 GMT
Not After : Apr 28 21:00:39 2025 GMT
Subject: CN=5fb40f160864e8ab831d44e84f56fdaa2754f140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:28:4d:96:e7:fd:6c:27:cc:10:27:f1:b8:0c:
78:31:df:e4:fc:97:33:39:1c:ef:eb:bb:2d:17:f9:
f7:41:0a:13:7c:38:09:e2:8a:fc:39:f5:6d:da:91:
ce:99:f7:b2:ff:b8:ef:08:09:b3:88:a5:e6:ea:56:
3f:00:4e:56:d0:62:78:52:b4:37:20:f8:b5:47:cc:
8c:85:0b:7e:81:c6:8a:bf:ad:bd:66:43:92:2c:53:
ba:50:48:4d:93:2c:cd:f9:58:f9:32:51:d1:29:d0:
55:9e:8a:8f:25:0f:a9:63:87:b2:70:d6:89:5a:18:
8c:47:18:08:20:4a:77:5a:6d:e9:db:e0:3b:42:4c:
9a:2c:00:03:81:4a:ea:cf:99:7f:8b:27:c5:78:03:
c2:96:a4:c7:12:fc:02:7c:31:96:74:26:54:82:24:
9f:b9:63:dd:1f:36:c4:65:f4:6c:89:3b:4a:05:c3:
18:8d:83:00:12:07:03:b1:3e:ee:2e:b5:75:6d:c4:
25:93:7f:c4:77:cf:e1:73:ef:6e:c1:0d:45:82:6f:
40:a4:c9:a8:0e:cd:18:c9:34:62:2b:0f:16:39:ed:
ae:56:eb:a4:d9:ec:33:1a:05:7a:33:10:45:35:13:
a5:7b:4a:f8:e0:6e:5d:61:9b:4e:4d:1a:54:9b:7d:
d5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B4:0F:16:08:64:E8:AB:83:1D:44:E8:4F:56:FD:AA:27:54:F1:40
X509v3 Authority Key Identifier:
keyid:B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:17:14:75:d4:53:ab:6e:1a:9c:a5:98:ae:ac:18:05:38:85:
2c:37:2d:44:7c:cd:54:4e:c0:df:d5:dd:da:ec:ed:3b:02:88:
14:45:5f:75:ca:64:23:b3:ea:9e:2c:2a:53:32:c6:9c:9a:20:
1d:0c:b4:6e:c2:a5:85:ab:0e:5e:7e:b5:a4:47:45:c0:2a:5d:
2a:f5:c1:55:c2:5a:1d:2b:a1:28:f4:7e:50:d8:5b:89:bb:4c:
f5:6c:3d:47:52:11:7b:a6:2a:2f:07:6b:87:b2:07:3d:38:2e:
b7:e6:24:3d:73:53:00:6f:48:64:a2:61:f7:4d:1b:b1:a5:22:
8b:9d:81:7a:65:c0:74:dc:85:fe:11:6e:94:a3:da:70:e4:2c:
8a:99:3a:d8:33:52:95:e4:d6:73:c0:b1:6a:c4:40:aa:f5:c5:
ca:ba:1c:36:7d:56:54:8f:9a:f6:f1:c6:de:a6:7a:fb:ac:03:
9b:b3:d3:dc:38:48:d0:90:35:ed:0d:93:7c:42:56:64:59:68:
29:e4:0b:b2:59:8c:f9:10:c6:d5:79:46:b5:80:22:e6:3b:09:
92:24:0f:53:27:4a:57:1d:c3:4a:e1:23:4a:39:0d:18:1d:1e:
97:2f:9d:ff:c0:a8:cd:de:89:d2:6f:b1:61:72:6a:b2:41:5e:
15:b1:dd:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5DVippG7y1QkFAGexpDunMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2M2Y5NzY5ZGY5N2I4YjlhYTg4YmQyMmU5ZjQxY2MyN2Zj
ZjE2YTcwHhcNMjUwNDI3MjEwMDM5WhcNMjUwNDI4MjEwMDM5WjAzMTEwLwYDVQQD
Eyg1ZmI0MGYxNjA4NjRlOGFiODMxZDQ0ZTg0ZjU2ZmRhYTI3NTRmMTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjihNluf9bCfMECfxuAx4Md/k/Jcz
ORzv67stF/n3QQoTfDgJ4or8OfVt2pHOmfey/7jvCAmziKXm6lY/AE5W0GJ4UrQ3
IPi1R8yMhQt+gcaKv629ZkOSLFO6UEhNkyzN+Vj5MlHRKdBVnoqPJQ+pY4eycNaJ
WhiMRxgIIEp3Wm3p2+A7QkyaLAADgUrqz5l/iyfFeAPClqTHEvwCfDGWdCZUgiSf
uWPdHzbEZfRsiTtKBcMYjYMAEgcDsT7uLrV1bcQlk3/Ed8/hc+9uwQ1Fgm9ApMmo
Ds0YyTRiKw8WOe2uVuuk2ewzGgV6MxBFNROle0r44G5dYZtOTRpUm33VcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+0DxYIZOirgx1E6E9W/aonVPFAMB8GA1UdIwQY
MBaAFLY/l2nfl7i5qoi9Iun0HMJ/zxanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGotWGFkLVh1TG1xaUwwaTZmUWN3bl9QRnFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81OTRlMDgtMTY2NS00MzQ4LTgwYTQt
M2JlOWE2Njk3MmU3LzEvdGotWGFkLVh1TG1xaUwwaTZmUWN3bl9QRnFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81OTRlMDgtMTY2NS00MzQ4LTgwYTQtM2JlOWE2Njk3MmU3
LzEvdGotWGFkLVh1TG1xaUwwaTZmUWN3bl9QRnFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRcUddRT
q24anKWYrqwYBTiFLDctRHzNVE7A39Xd2uztOwKIFEVfdcpkI7PqniwqUzLGnJog
HQy0bsKlhasOXn61pEdFwCpdKvXBVcJaHSuhKPR+UNhbibtM9Ww9R1IRe6YqLwdr
h7IHPTgut+YkPXNTAG9IZKJh900bsaUii52BemXAdNyF/hFulKPacOQsipk62DNS
leTWc8CxasRAqvXFyrocNn1WVI+a9vHG3qZ6+6wDm7PT3DhI0JA17Q2TfEJWZFlo
KeQLslmM+RDG1XlGtYAi5jsJkiQPUydKVx3DSuEjSjkNGB0ely+d/8Cozd6J0m+x
YXJqskFeFbHdAQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 03:23:37 2025 by rpki-client