Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
File: TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft (raw, json)
Hash identifier: X6kaWE4uZlApJsZmxe4DvSknDpCPIFnQrX4Q7Tsv16o=
Subject key identifier: 68:30:F4:DA:4E:8B:F6:37:CE:0D:E8:27:DA:A4:72:ED:F1:D6:C4:A7
Authority key identifier: 4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
Certificate issuer: /CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Certificate serial: 019655DD3E01CAB9E38A2B8050A1A44FB4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 01:01:24 +0000
Manifest this update: Mon 21 Apr 2025 01:01:24 +0000
Manifest next update: Tue 22 Apr 2025 01:01:24 +0000
Files and hashes: 1: TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl (hash: gV3O6fQS5UTwm6ZooX+xD2zbt5gW/tIZjMWoJ5S6rnY=)
2: sXBtr0RmYgN7EHzS2OAuZuhPnSk.roa (hash: vzTvtT3U+hF4Cf7zWB9jndQ+LVyRdJBiHZIGS8DcnuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:3e:01:ca:b9:e3:8a:2b:80:50:a1:a4:4f:b4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Validity
Not Before: Apr 21 01:01:24 2025 GMT
Not After : Apr 22 01:01:24 2025 GMT
Subject: CN=6830f4da4e8bf637ce0de827daa472edf1d6c4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:b9:36:52:ac:2c:cc:85:63:47:ca:94:1c:
f8:d9:27:4f:50:9a:11:15:9a:08:5e:1f:87:ca:09:
c6:99:ec:d8:fa:26:2d:d1:23:15:3a:58:2c:47:75:
97:5c:df:9b:01:be:a4:4a:d8:a7:9d:93:ef:6e:a6:
79:ee:26:fd:dd:0c:26:e6:45:1e:72:9c:fe:b2:05:
50:80:2c:dd:1d:14:54:13:cc:74:31:13:13:1d:07:
e3:79:a4:95:45:7a:b8:1a:ed:60:6b:d0:f1:0d:0c:
8f:a4:2e:4e:cc:50:b9:17:38:53:01:74:5d:67:fc:
71:1a:44:24:c4:a5:ed:9d:af:6f:db:81:a8:ff:04:
82:d0:7c:d7:a3:b0:a0:80:2b:78:04:74:0d:3e:45:
d9:4a:ca:ad:05:0c:6b:de:5b:41:62:6a:21:d7:60:
24:13:eb:f1:df:2a:64:d3:16:b6:40:34:2c:82:89:
1c:8a:0c:8b:87:1e:bb:ed:fb:21:fd:32:fc:ea:56:
47:0c:8f:70:28:34:a4:25:5e:bb:b3:b4:3d:05:e1:
dd:ec:54:51:c1:bb:a3:d4:da:cd:9f:33:3f:89:27:
0b:5d:c4:a0:a4:9f:ef:e2:8f:11:3c:26:d6:d2:14:
d5:54:29:32:24:e8:e6:1e:1d:de:82:1e:80:3c:2b:
ee:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:30:F4:DA:4E:8B:F6:37:CE:0D:E8:27:DA:A4:72:ED:F1:D6:C4:A7
X509v3 Authority Key Identifier:
keyid:4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:59:c7:42:68:18:c3:6b:8c:b1:f6:7b:e7:f9:3b:96:0e:6f:
5c:8c:b0:18:ad:22:b7:27:9e:08:17:91:8a:6a:b6:2c:db:4d:
05:68:e0:42:03:24:94:36:ba:2b:2a:23:7a:1d:ff:e5:7f:e3:
47:2a:fe:a8:87:2c:7e:fb:42:9f:a3:fa:97:af:cc:78:89:b9:
82:94:d1:da:e9:7e:b0:4f:23:f9:e6:09:a0:b9:79:dd:04:79:
88:bc:7d:60:61:6d:f1:7d:cd:04:9a:dd:b8:52:dd:39:5e:78:
10:2b:1a:98:1a:6b:64:f7:93:b1:a6:ae:1c:b5:a8:ff:0b:2b:
cc:de:57:39:52:a9:d3:04:07:9d:52:23:d5:42:0f:cb:10:c4:
62:c1:e7:5c:06:04:97:e0:b8:bb:bb:7f:f3:d9:71:de:3f:16:
9a:a8:b7:23:e1:f2:55:4c:46:bb:3c:e3:3b:84:15:ee:b2:a6:
ff:54:ce:97:e0:42:5b:64:d3:15:09:56:66:ce:27:59:f0:1e:
a3:ee:cf:84:36:c1:80:9a:c9:8b:e4:15:5a:b2:2f:e7:14:26:
4a:84:9f:bf:4c:aa:6e:79:5f:e4:e5:58:c5:2a:96:12:27:09:
ae:96:28:52:85:51:14:8c:aa:22:34:e3:e0:5c:77:e3:c0:a5:
d2:cf:ec:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:58 2025 by rpki-client