Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json)
Hash identifier: vdUjQB66juNCJkt0HqJC0KhQBJ7Voc9a7b3494Gea3w=
Subject key identifier: 2D:58:79:0D:BF:67:89:F0:35:34:4E:C4:E1:52:A9:AA:F1:46:E5:67
Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Certificate serial: 01967BD813ABAF21A050C0651F8E90D6F9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
Manifest number: 14A4
Signing time: Mon 28 Apr 2025 10:01:20 +0000
Manifest this update: Mon 28 Apr 2025 10:01:20 +0000
Manifest next update: Tue 29 Apr 2025 10:01:20 +0000
Files and hashes: 1: BeOIJLd8_MIXUGufXTnw_YPsJgs.roa (hash: UFekJjmZxy4vjH3dPZliRBeAZT4NRRq/0IMLKsXu0f8=)
2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: yF7otkUKuP4QcNw0tPU5VeEnPY1a+GUskHGG8yBDkoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d8:13:ab:af:21:a0:50:c0:65:1f:8e:90:d6:f9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Validity
Not Before: Apr 28 10:01:20 2025 GMT
Not After : Apr 29 10:01:20 2025 GMT
Subject: CN=2d58790dbf6789f035344ec4e152a9aaf146e567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:c3:f4:1f:38:8c:1b:e9:98:bd:cd:6e:fb:
c5:6c:85:4a:cc:75:13:30:2c:3c:d1:af:84:92:f1:
f0:7e:8c:3b:1a:ea:e1:f3:9d:5b:3d:be:b9:05:03:
a2:4b:b5:2b:7c:53:de:62:ea:3e:1e:11:b0:a3:3d:
ab:6a:2b:8d:8d:cc:c0:ed:62:0b:98:bf:7f:d2:0d:
31:4f:a6:5e:27:d3:5f:e0:12:c6:6b:11:1a:78:d0:
a7:06:7a:b7:a9:35:2a:56:3e:cf:46:b1:26:9f:56:
43:02:ce:aa:83:95:f1:41:34:be:22:81:f5:92:3b:
92:05:07:1a:ac:4f:eb:82:af:40:64:60:42:11:1a:
95:49:c6:69:90:30:46:1e:c9:09:30:49:cd:61:4a:
7d:fe:4e:42:e2:51:98:d5:9b:a1:0d:fb:30:7e:50:
a1:06:8b:06:98:f3:7d:74:1a:b3:25:dd:4c:84:64:
ba:a3:4d:24:8f:cf:24:c7:9c:17:67:ee:66:1c:82:
2b:db:c7:2e:12:de:88:48:b8:6f:90:14:2b:a6:da:
02:2c:d5:49:bd:6b:f1:30:73:92:4d:ab:5b:b5:6a:
f2:23:a4:89:49:2f:48:94:f8:9b:c8:f5:06:7b:f6:
4b:ab:d4:e1:56:45:fe:81:61:ce:bd:c4:f0:fc:54:
2a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:58:79:0D:BF:67:89:F0:35:34:4E:C4:E1:52:A9:AA:F1:46:E5:67
X509v3 Authority Key Identifier:
keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f6:91:75:e0:ef:98:c0:2e:9c:d5:27:83:98:ae:49:06:a8:
37:ec:ab:c9:f5:ed:cb:9c:ab:c3:8e:96:8e:52:8a:ff:06:1d:
7a:bf:a5:ed:97:33:d7:b5:d7:c4:08:95:68:30:5c:ea:19:92:
46:d8:4d:8f:2a:4f:58:42:c5:fe:63:e0:b8:cd:e6:7e:e6:4e:
7c:b4:a5:56:f1:99:83:75:86:c9:55:c2:b9:39:f2:e0:1e:e5:
e5:d7:e8:36:b3:5f:20:42:d4:fd:47:c3:0d:8b:8a:eb:2a:7b:
90:9c:e4:20:64:1f:57:bc:74:cf:98:4e:cf:74:b8:a7:ce:59:
bc:7e:84:b5:a6:25:2b:cf:92:04:d3:63:97:86:3b:96:a1:59:
8d:fa:80:37:d9:cf:bb:c4:6b:fc:ec:5c:fd:8b:59:ca:f9:a4:
c7:de:31:c5:cd:53:37:3a:01:02:78:35:d0:64:f3:66:57:47:
f1:22:75:2b:14:fb:c7:db:4a:54:12:bb:2e:6e:23:4a:40:31:
51:2a:75:5c:cc:f6:c4:f2:5e:a8:a5:1f:d3:e8:4c:40:6a:99:
3a:ba:c9:27:f7:39:d7:0e:46:4c:97:e5:83:b0:dd:ff:d2:dd:
43:df:f7:6b:ec:79:d2:55:ab:51:30:74:7f:7c:84:24:fe:f8:
69:2d:a4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:10:59 2025 by rpki-client