Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
File: TXPZQBmjwjWHffa8GynHagtkydA.mft (raw, json)
Hash identifier: xjOhNWmHIFI+eF85u/kx9XRDhBppcYLrCqAd0mABoTw=
Subject key identifier: 46:7D:6D:C9:5E:01:B0:B3:A0:BB:65:81:D3:64:48:32:0F:68:20:6E
Authority key identifier: 4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
Certificate issuer: /CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Certificate serial: 0196561372FF5D0DBFB0B321B4650DC2CE82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
Manifest number: 0B56
Signing time: Mon 21 Apr 2025 02:00:37 +0000
Manifest this update: Mon 21 Apr 2025 02:00:37 +0000
Manifest next update: Tue 22 Apr 2025 02:00:37 +0000
Files and hashes: 1: TXPZQBmjwjWHffa8GynHagtkydA.crl (hash: Ef6lfnS5fdMnZBW1oMSNtB45brapfQd53m4I03vW650=)
2: UFlaQCFJ4CLhOuiIqohu_AVKpLY.roa (hash: QMm4BiW8chALfiHKzYbt92A3p1kXxu/myJMcDRlryRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:72:ff:5d:0d:bf:b0:b3:21:b4:65:0d:c2:ce:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Validity
Not Before: Apr 21 02:00:37 2025 GMT
Not After : Apr 22 02:00:37 2025 GMT
Subject: CN=467d6dc95e01b0b3a0bb6581d36448320f68206e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6e:60:45:60:c2:6d:38:0a:9d:ff:27:de:54:
e0:06:d8:3a:30:9d:08:95:c6:e7:e3:99:67:31:c5:
e3:ab:f3:39:4c:93:ce:e3:14:10:b7:93:01:e1:42:
cc:a6:78:64:4e:91:c9:b8:cd:95:82:19:41:05:8e:
5d:f3:36:18:1a:cd:3b:15:ed:9a:a4:65:3c:65:1a:
f0:88:a6:5d:59:56:30:f2:60:cc:31:71:6d:57:f1:
d5:a4:46:e0:5d:ea:66:37:72:40:f5:a0:91:9f:17:
4f:6d:2f:ad:ec:9a:86:b1:e3:d1:58:f0:e3:17:41:
48:eb:d2:ba:2e:05:e9:56:fe:cb:f9:fe:61:91:a3:
53:50:8c:cd:fb:d1:78:0e:c5:6d:95:16:92:79:ab:
69:19:32:8c:63:53:61:78:45:d1:ce:86:90:5f:2e:
8e:c5:f9:84:84:7f:fe:d9:95:f4:68:e0:4c:ec:7b:
69:b0:51:90:c2:96:72:5a:65:d5:ba:55:a2:6d:ee:
30:57:b5:40:86:8d:d8:35:f7:96:c0:4b:dd:dd:23:
c3:ad:65:a2:2c:2a:28:9c:1b:a8:fe:85:52:1d:8a:
1a:24:29:12:8d:ab:69:6a:f1:f4:32:ff:7d:ee:0f:
1a:29:62:e1:8c:c2:8e:5e:ef:3b:bd:47:69:68:67:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7D:6D:C9:5E:01:B0:B3:A0:BB:65:81:D3:64:48:32:0F:68:20:6E
X509v3 Authority Key Identifier:
keyid:4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d9:b2:29:d7:31:6d:c4:3b:42:ae:06:a5:7b:82:c9:1d:64:
6d:0a:87:d6:8c:da:b2:13:9d:59:75:ac:af:cc:c4:a6:1a:91:
f6:0e:18:6d:a7:29:96:9d:64:b5:51:15:3a:c8:6e:76:74:a4:
11:34:6f:96:aa:42:73:f1:e9:37:14:7a:a7:ec:58:28:38:93:
d1:ac:5d:c4:d7:79:d6:eb:c8:f4:d8:98:a1:70:42:12:7a:6a:
ff:75:8b:f1:d3:ee:20:d3:4e:5e:45:8b:d7:6e:b4:94:6c:86:
c4:32:25:9b:7e:81:e5:b7:30:66:26:a2:1f:28:b3:a2:8a:35:
b2:c1:13:87:81:43:42:68:d1:f5:ba:3f:63:8d:a0:79:54:5a:
39:e1:4c:96:6e:91:9a:f3:44:67:84:c6:dc:f3:3d:c7:10:03:
a0:e5:67:39:9d:e0:24:27:a0:6c:66:85:97:6b:a1:86:fa:86:
a6:7d:5e:e0:58:8f:e9:06:dc:85:24:98:88:9b:98:f4:5b:c4:
69:1e:0c:ec:ce:23:30:bb:97:2f:54:cd:ef:86:51:6a:d6:be:
51:e2:bb:43:cc:6d:c9:6d:54:ba:14:4a:2f:d6:ff:2c:b6:a1:
01:2c:be:65:43:52:2b:dc:f8:85:6f:f9:ce:96:89:27:00:9d:
5f:d5:37:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:31 2025 by rpki-client