Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
File: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft (raw, json)
Hash identifier: sm5XbFJyudsuThdQIzq6Nk/lc/bdnmI6S4Beqww3sqc=
Subject key identifier: 1B:9D:6B:9F:22:D8:C8:E9:58:C6:8C:7A:1D:A7:B0:F2:4E:DC:F5:6E
Authority key identifier: 4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
Certificate issuer: /CN=4c6319fe7859c342f7cd9f711306f56590828d60
Certificate serial: 01965BDEEFF1916553B669693C8CDF2212BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
Manifest number: 0A2A
Signing time: Tue 22 Apr 2025 05:00:58 +0000
Manifest this update: Tue 22 Apr 2025 05:00:58 +0000
Manifest next update: Wed 23 Apr 2025 05:00:58 +0000
Files and hashes: 1: 7AICHMFq1kSjCOJXzQDO4zRvMc8.roa (hash: p5CUpe/5DfGPJwjUzsORFP9UxiFbMunTvT9GArgSAt4=)
2: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl (hash: 4c74tA+QAvIA3hOigsMiE64oS5jJkY6yVrlkizv3hlU=)
3: t5BDJd8Dzrg2IC09MFuU9BxT5Uk.roa (hash: 9AOu1bBqC0e4A6DdOt1aKlQ9vH6ddvoaCculzcrBvgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:de:ef:f1:91:65:53:b6:69:69:3c:8c:df:22:12:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6319fe7859c342f7cd9f711306f56590828d60
Validity
Not Before: Apr 22 05:00:58 2025 GMT
Not After : Apr 23 05:00:58 2025 GMT
Subject: CN=1b9d6b9f22d8c8e958c68c7a1da7b0f24edcf56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:40:2e:7d:2b:76:40:5b:77:e4:b0:15:45:fa:
98:4a:93:01:3f:38:82:6c:6b:8e:d8:d7:97:81:87:
f8:4f:0b:1b:f2:e6:53:dc:7c:c6:64:d5:3d:7f:8d:
cd:dd:28:1f:af:7d:bb:ae:2e:68:a4:33:b5:19:4c:
8a:15:9f:da:36:a1:b4:82:44:c0:f8:44:1d:1c:68:
fc:94:38:e2:20:80:a5:53:ef:cf:29:ab:ab:6f:c0:
f3:d6:74:03:62:fe:56:50:d3:8c:ae:8d:53:e6:e4:
c0:68:06:ce:58:9e:b3:4f:86:87:e7:82:a6:8d:90:
85:04:97:56:2d:f1:1b:41:67:05:10:e3:8f:50:3e:
09:46:c5:e1:34:0e:3c:92:5f:19:c7:99:06:e1:4a:
34:56:7d:5a:47:22:9c:51:11:53:2a:46:10:e8:70:
b2:2e:8a:f7:6f:93:ce:97:1c:b5:c0:2c:42:19:78:
13:7b:d6:54:ee:d1:d9:0c:98:3f:55:ec:ea:67:f5:
69:96:77:8f:d4:9c:71:28:90:74:66:1e:09:d9:1d:
7e:f9:79:88:f0:8e:d5:5a:f2:b2:c7:e8:b2:aa:c2:
a9:78:cb:94:88:05:67:05:70:58:06:e7:d1:7f:80:
37:0c:e7:f2:1b:76:fd:5d:cc:19:15:17:79:49:7b:
6a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9D:6B:9F:22:D8:C8:E9:58:C6:8C:7A:1D:A7:B0:F2:4E:DC:F5:6E
X509v3 Authority Key Identifier:
keyid:4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:64:4f:43:a8:4e:ad:21:ab:c1:5b:60:78:15:f8:fd:83:d4:
0d:ba:65:b0:0a:74:c8:7a:27:a3:a4:11:2d:06:51:14:26:01:
31:92:92:b8:9b:61:6d:2a:52:e1:53:7f:cf:ed:da:7c:d1:5b:
8b:5f:94:10:7e:35:65:fd:b2:e9:fd:3f:c2:f7:fa:df:70:65:
9c:35:7d:60:18:92:65:e4:ae:aa:38:bd:60:61:a7:13:61:6b:
db:9d:59:27:6b:14:1b:c9:0c:0a:bd:9f:cd:1b:eb:8f:01:aa:
6e:5c:ac:1b:5f:2a:0d:46:58:d5:0e:73:13:8a:6c:ea:35:68:
98:e2:0a:c4:47:39:8c:f7:87:a1:67:32:16:63:dc:ad:d7:4a:
bd:a2:c9:52:cd:13:1e:ad:2a:d8:ae:2d:c2:a8:da:8f:b7:c7:
c8:8f:01:05:13:cd:82:80:0a:c3:cc:e8:4a:6a:5f:0e:9c:10:
59:53:30:a7:12:54:00:cd:40:f5:6e:82:6d:fe:88:d4:bc:72:
46:28:79:91:fd:b2:91:3b:fb:5b:17:09:68:ae:13:ab:24:41:
d9:1b:62:c5:45:b9:2d:c2:aa:48:ee:19:db:01:0a:1c:6b:33:
56:2b:46:84:00:6f:bc:2f:a5:0f:ae:36:cf:4c:5d:1c:fd:2f:
db:af:dd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:29:00 2025 by rpki-client