Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
File: TnxZtb-73klP0T13jm8i3adJYsE.mft (raw, json)
Hash identifier: mbyhhPIvYWu/eYVmNngIxoEACTa7eQHApel7y9L5Qjk=
Subject key identifier: BD:34:CF:78:FB:22:EA:B4:C9:D2:29:7B:E0:F7:C1:47:05:38:9E:51
Authority key identifier: 4E:7C:59:B5:BF:BB:DE:49:4F:D1:3D:77:8E:6F:22:DD:A7:49:62:C1
Certificate issuer: /CN=4e7c59b5bfbbde494fd13d778e6f22dda74962c1
Certificate serial: 0196741E6DAA9C9223C5BD7BE094248059AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
Manifest number: 0850
Signing time: Sat 26 Apr 2025 22:01:13 +0000
Manifest this update: Sat 26 Apr 2025 22:01:13 +0000
Manifest next update: Sun 27 Apr 2025 22:01:13 +0000
Files and hashes: 1: TnxZtb-73klP0T13jm8i3adJYsE.crl (hash: QcuqvJoPbKHm6gWmJjGUgeKye0nabrwWfonAqoY329Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:6d:aa:9c:92:23:c5:bd:7b:e0:94:24:80:59:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7c59b5bfbbde494fd13d778e6f22dda74962c1
Validity
Not Before: Apr 26 22:01:13 2025 GMT
Not After : Apr 27 22:01:13 2025 GMT
Subject: CN=bd34cf78fb22eab4c9d2297be0f7c14705389e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:05:e1:ac:e3:d9:7d:9e:e5:37:4b:38:bb:
07:2b:fe:ee:9b:9d:49:14:29:fe:f9:0d:a0:62:4b:
ef:4d:a2:77:22:fb:60:d4:b6:05:d3:4f:d5:1f:e9:
eb:f9:46:8f:1f:38:73:7d:f8:47:68:d1:fb:27:9b:
e9:59:3a:9a:db:71:80:34:a3:25:7d:72:56:96:86:
33:7c:5d:63:ef:35:4e:05:d2:98:16:2b:99:89:39:
dd:dc:cb:bc:4e:8b:66:3d:4e:1d:6b:89:4c:17:c7:
48:d0:cc:b6:ed:0d:47:8c:ec:7b:19:10:5f:ad:4f:
1b:15:5c:fd:b0:d9:b9:d3:43:98:8b:23:23:57:29:
03:65:d8:60:b0:be:c6:72:b0:b1:e4:21:af:a7:c0:
a2:21:c4:ba:70:ac:fc:66:23:15:7f:5b:94:7b:1e:
7f:be:11:a8:2a:78:ac:56:ac:2e:e6:f0:4d:cb:ae:
93:74:80:0f:4b:98:a2:3d:9d:21:30:aa:46:50:ee:
f3:53:83:fd:48:15:d4:44:0b:0f:8b:03:7f:38:75:
c2:5d:03:08:8e:b4:0b:e0:ed:ac:07:bb:34:49:5b:
01:e0:94:bf:6f:f8:ce:6d:b4:fd:41:84:02:25:48:
ef:5e:a3:6c:d6:9e:d2:e4:a3:4f:c3:58:c2:74:52:
28:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:34:CF:78:FB:22:EA:B4:C9:D2:29:7B:E0:F7:C1:47:05:38:9E:51
X509v3 Authority Key Identifier:
keyid:4E:7C:59:B5:BF:BB:DE:49:4F:D1:3D:77:8E:6F:22:DD:A7:49:62:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:48:04:39:cd:af:48:36:9a:38:7f:8b:e8:ab:9c:d2:82:73:
4a:da:40:b7:aa:36:db:37:7b:0e:fe:90:75:95:ff:83:28:e7:
d7:92:63:73:91:56:2e:fb:55:31:a0:d1:3b:d3:62:bc:1c:c2:
5c:ff:0d:12:af:58:60:a7:59:a3:c2:75:92:3e:9e:44:44:df:
d0:15:6b:05:be:32:8f:1e:57:37:71:d5:2f:c2:a0:d4:1c:ba:
6c:e0:5a:fc:15:37:01:ab:dc:bc:96:52:c8:57:be:6a:07:b3:
4e:1f:e5:c1:98:30:d3:b1:b4:08:da:f1:82:73:85:5f:0f:98:
38:16:96:51:31:99:5e:a2:50:a8:4f:43:a2:0e:a8:de:31:9f:
27:a0:22:4e:12:83:23:ad:d2:46:c9:7c:2a:6f:ea:39:14:a0:
3e:7e:53:f9:b0:47:cc:35:4e:2f:4b:b8:21:cc:ea:06:4a:e8:
d0:75:a2:76:46:b0:c2:17:e3:e1:51:ba:58:30:68:56:e0:d7:
71:75:d9:8e:bb:7a:ee:7e:3a:c5:b3:5f:c3:79:c9:ee:59:5e:
17:6f:7a:18:e8:ac:f8:48:df:4d:9e:6e:25:f3:dd:42:23:be:
52:9e:7b:19:c6:ba:fd:5e:e6:0d:8b:05:16:c9:0b:56:48:e8:
98:76:68:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:17 2025 by rpki-client