Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
File: tvpArb6TaxhPhEWGoPkNEjC2hTc.mft (raw, json)
Hash identifier: S0jVndP6hZL/r42mAGXtFMjeAOi/OUVMSK40CYVn9aw=
Subject key identifier: C6:C0:06:F7:81:AF:39:05:72:F0:99:34:82:D2:50:59:0E:29:01:6F
Authority key identifier: B6:FA:40:AD:BE:93:6B:18:4F:84:45:86:A0:F9:0D:12:30:B6:85:37
Certificate issuer: /CN=b6fa40adbe936b184f844586a0f90d1230b68537
Certificate serial: 01967DFCD374046481FD32CCC9F1954DF359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
Manifest number: 0D08
Signing time: Mon 28 Apr 2025 20:00:43 +0000
Manifest this update: Mon 28 Apr 2025 20:00:43 +0000
Manifest next update: Tue 29 Apr 2025 20:00:43 +0000
Files and hashes: 1: 7XTv9hOTaLviFUQwCXilEpYpbHU.roa (hash: 4LkrU5FXjLzeM7TTaFB6Rd3GTMio8T94peCl7zXgOHM=)
2: tvpArb6TaxhPhEWGoPkNEjC2hTc.crl (hash: EOlzjd5blHHmKlSWeRFTQR1vrZ5vLx7o8zbOkAAH3gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:d3:74:04:64:81:fd:32:cc:c9:f1:95:4d:f3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fa40adbe936b184f844586a0f90d1230b68537
Validity
Not Before: Apr 28 20:00:43 2025 GMT
Not After : Apr 29 20:00:43 2025 GMT
Subject: CN=c6c006f781af390572f0993482d250590e29016f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ce:9a:79:ad:90:64:ce:f6:1a:a7:2a:74:76:
a9:ab:b3:3b:c2:e2:6a:99:f5:3a:04:8c:86:06:85:
f5:15:74:cf:4d:cf:46:ed:8d:93:85:c7:88:a9:38:
90:2b:42:77:b3:16:07:79:54:85:27:52:dd:58:45:
88:41:04:fe:00:09:e1:9b:07:5b:58:d2:69:22:22:
85:47:fb:49:29:10:74:12:ff:25:0d:da:12:ad:3b:
3b:47:ba:f0:c7:3a:04:1d:05:d2:ab:a0:59:cf:ff:
6d:e1:c5:1b:38:26:09:da:6c:5a:3c:e6:4e:2c:4f:
08:83:4f:82:50:34:17:d0:94:7d:1e:b3:9b:15:c3:
5a:c7:07:c3:23:0f:f4:b4:8e:a0:f2:f8:cf:56:19:
e0:bb:5a:3f:11:88:b6:0b:30:d0:27:fb:35:2c:3a:
c9:b1:e5:71:b4:56:24:9e:50:c3:0b:1d:ad:e3:3e:
2b:dd:ac:5d:b8:5d:bd:2a:84:77:3b:57:45:03:8b:
ac:43:5f:dc:ed:e0:52:7f:c2:18:8e:e4:be:79:d1:
e4:1b:50:62:93:24:e7:7c:77:53:9f:bf:0d:72:53:
cb:fa:d7:a6:41:67:43:c0:d1:4d:23:56:9d:f8:f9:
fb:c0:29:b8:c1:e0:f4:4a:d8:b5:8f:56:65:3d:38:
c1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C0:06:F7:81:AF:39:05:72:F0:99:34:82:D2:50:59:0E:29:01:6F
X509v3 Authority Key Identifier:
keyid:B6:FA:40:AD:BE:93:6B:18:4F:84:45:86:A0:F9:0D:12:30:B6:85:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4a:24:c0:a1:17:93:67:60:3d:83:eb:65:39:2b:9e:8b:e1:
47:f0:00:2c:82:bb:d3:a3:26:b7:ee:34:ce:4b:cd:7b:01:7a:
f3:6a:ad:d5:3d:63:ef:e5:35:4d:06:51:9e:65:c3:bf:9f:04:
04:86:80:f6:93:0e:a5:fe:d2:42:59:b4:8b:00:02:3e:36:c7:
20:9d:95:a5:0f:9b:b4:93:de:01:e0:58:5c:10:08:e5:53:93:
ab:f0:f0:a4:5a:6d:7e:83:c6:73:b7:49:b5:27:1e:53:94:bc:
c7:0a:19:18:0e:44:df:2b:48:33:bf:46:dd:5e:5c:59:91:40:
08:9a:33:82:57:d5:bd:db:28:fb:e1:3e:75:b7:a0:ff:46:25:
14:10:df:f7:17:c5:4f:7d:ba:ab:42:e6:78:76:76:d2:f5:e7:
62:90:21:f9:1a:f3:0b:55:d7:a3:3d:25:d8:ad:2d:74:0b:36:
0c:09:cd:85:57:87:61:7a:fb:b1:d7:fe:f6:b8:1d:86:84:ba:
aa:da:3d:2e:09:e9:52:fd:b2:2f:ae:07:34:b3:e4:f3:65:c4:
0f:cf:46:8b:50:bb:9a:6b:c5:cf:68:39:2d:26:a3:84:e0:9e:
ae:8a:48:cb:41:0c:78:3a:de:6f:76:ff:be:b5:a6:c7:5c:04:
f1:04:80:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:38:38 2025 by rpki-client