Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
File: TZRvTfIjdJGmjfpAe-QfroS72mY.mft (raw, json)
Hash identifier: 0QP0E0x+rJiiNuoMd5YNRbAfmw7W5tErtaSDpJPXYX4=
Subject key identifier: 7B:98:AB:16:D9:19:D6:17:E3:00:1D:CC:C0:FF:D3:7A:43:C3:3F:70
Authority key identifier: 4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
Certificate issuer: /CN=4d946f4df2237491a68dfa407be41fae84bbda66
Certificate serial: 0196783143AAD7314366BC55D5FA4E8755CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
Manifest number: 0E72
Signing time: Sun 27 Apr 2025 17:00:16 +0000
Manifest this update: Sun 27 Apr 2025 17:00:16 +0000
Manifest next update: Mon 28 Apr 2025 17:00:16 +0000
Files and hashes: 1: C8PR4XXWsjpP8PHYuoN78zoE9nY.roa (hash: uu2Jn3Slz9u+yGZ22j4LqOkp9lCOWyyfMINckydLJ3E=)
2: TZRvTfIjdJGmjfpAe-QfroS72mY.crl (hash: dPRuREN1AyvWe1OIigKmGJ3TNDpLSehMDOLZ17X5ftA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:43:aa:d7:31:43:66:bc:55:d5:fa:4e:87:55:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d946f4df2237491a68dfa407be41fae84bbda66
Validity
Not Before: Apr 27 17:00:16 2025 GMT
Not After : Apr 28 17:00:16 2025 GMT
Subject: CN=7b98ab16d919d617e3001dccc0ffd37a43c33f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:80:25:4a:e8:81:ca:01:31:31:61:0d:57:
d6:d6:ad:ee:26:7c:37:c2:8c:8d:2f:27:61:b0:92:
ef:1f:85:17:6a:2e:b8:d5:ba:fd:80:72:c4:4f:90:
13:17:ac:aa:56:8c:c5:c8:99:eb:8b:67:5f:23:99:
6a:e6:d0:49:7d:46:88:17:3d:1d:10:30:7b:03:77:
5e:ae:ac:92:50:ec:60:47:42:df:ad:7c:c0:f3:95:
16:57:2b:ad:1a:36:7b:7c:b5:2c:ea:a3:f9:55:1e:
20:2a:da:c9:dc:42:87:7c:a6:34:13:11:40:8c:43:
55:2c:f1:19:77:70:4c:20:7c:84:50:e6:b1:ad:4c:
13:db:35:75:da:e9:50:16:f6:49:a2:be:b2:4d:6f:
39:2f:6e:8b:4b:de:de:ef:4f:cc:52:30:42:50:98:
67:79:8c:8d:65:b3:a1:12:af:ff:47:4e:b9:0f:10:
0b:b6:53:3f:97:08:d5:66:da:ab:95:a3:e5:81:9b:
f8:b2:3a:a1:90:8f:da:70:dd:5f:aa:14:05:f4:df:
db:9f:75:29:7c:d0:1c:24:bc:90:53:a4:4b:da:87:
52:ff:14:f6:3d:e4:1e:08:ca:5b:86:80:ed:67:4a:
3f:6e:19:e9:b9:5b:b0:1a:a2:01:14:be:e9:ff:92:
48:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:98:AB:16:D9:19:D6:17:E3:00:1D:CC:C0:FF:D3:7A:43:C3:3F:70
X509v3 Authority Key Identifier:
keyid:4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:62:82:12:9b:3f:65:2d:ba:c2:86:ff:68:39:f8:b9:2b:02:
f4:66:45:59:d0:c7:2c:7c:49:9d:f9:8a:1a:ca:75:ac:cb:c8:
0c:6f:12:3c:71:6d:b0:c6:42:e8:6d:1f:5d:4d:4a:34:04:ea:
27:6a:50:9d:3a:44:d5:84:f3:cf:2d:9a:1f:8b:65:b1:73:12:
c4:c5:93:8c:28:66:e1:55:9f:e7:b7:d8:1c:6a:f9:04:7e:67:
9c:d8:67:f4:d1:e8:a5:6f:26:a3:40:a3:3d:c0:ef:86:1b:5d:
30:43:44:81:f3:46:8a:5d:d4:aa:41:29:b8:be:22:09:83:d8:
3a:d6:ee:39:50:70:08:6b:93:89:ad:a1:c6:79:22:a6:02:70:
e3:98:03:6b:06:14:06:c1:c8:31:6f:25:cc:7c:f7:62:f3:d0:
5b:af:93:f2:f5:0f:a0:0a:45:3d:21:02:60:33:f2:47:8c:28:
9d:c5:c3:7e:13:7c:9a:65:f3:62:7f:3b:56:96:31:58:b1:95:
79:e2:b0:d1:4b:bc:da:51:1b:ec:d7:f4:76:db:58:ba:29:c6:
ce:e7:07:78:a8:82:e0:92:55:7e:81:98:a9:a5:ed:04:30:fb:
1e:8a:40:98:fc:75:8b:b1:25:22:aa:ce:91:cb:a0:a6:35:80:
08:69:1b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:13:20 2025 by rpki-client