Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
File: tgcVWH7cyzJajXwPWkLY8EOHHbc.mft (raw, json)
Hash identifier: /AxMvYwrGM5tTZiLiFMVXSIUqXjiurYx+DBUop5KoLw=
Subject key identifier: 6C:A2:F0:7C:AE:5E:4A:40:4F:72:F3:70:7B:00:E2:BD:4E:D0:BF:3E
Authority key identifier: B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
Certificate issuer: /CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Certificate serial: 01965EA8B316058A671F2E4B64F19F87EDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
Manifest number: 28
Signing time: Tue 22 Apr 2025 18:00:36 +0000
Manifest this update: Tue 22 Apr 2025 18:00:36 +0000
Manifest next update: Wed 23 Apr 2025 18:00:36 +0000
Files and hashes: 1: tgcVWH7cyzJajXwPWkLY8EOHHbc.crl (hash: ZI15bsz5+kgCPhRBV5TKk7ToMVUb1wLiHQbfyssvEIM=)
2: zAVl6KN24j-HKETuiZlV3hao63U.roa (hash: djF473q/t5BuBhPbvFB06yhsIPQKmfmJ61GIeE/TTOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:a8:b3:16:05:8a:67:1f:2e:4b:64:f1:9f:87:ed:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Validity
Not Before: Apr 22 18:00:36 2025 GMT
Not After : Apr 23 18:00:36 2025 GMT
Subject: CN=6ca2f07cae5e4a404f72f3707b00e2bd4ed0bf3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8f:87:d3:31:f3:bf:7c:41:4d:52:59:c0:58:
c6:fe:d1:3c:fd:21:dc:e8:a1:5d:f1:19:fb:bf:97:
9c:d0:b5:c5:cd:bd:c0:3f:f1:5e:95:7c:31:fe:8c:
44:dc:df:88:a7:c6:cb:df:f1:ef:86:95:d8:92:ed:
b8:7e:49:0d:93:ce:ae:06:6d:a4:b5:35:b3:66:d4:
4a:c4:cc:74:eb:5a:56:82:5f:10:c1:d8:b4:79:22:
c1:b4:c9:b7:f1:0e:e6:14:51:b7:d1:74:40:19:8a:
1d:45:e6:6c:55:82:ab:e0:02:e5:da:c2:a4:eb:d5:
a4:67:5e:44:18:00:22:2d:c0:21:07:46:24:ef:2b:
4d:8c:db:e9:c6:37:2c:46:16:b8:92:a6:fc:53:9e:
90:c6:61:16:03:5e:7d:d7:93:e9:c3:32:37:50:11:
5c:cf:21:51:c4:ed:ca:64:53:50:e5:bb:f3:57:aa:
eb:86:9f:06:f0:ca:41:79:89:c7:e5:39:42:d9:48:
b6:97:a4:75:9b:f4:3a:3e:03:db:07:f0:9f:ce:72:
32:2d:22:7f:f2:23:7d:59:ee:70:26:d9:00:c6:5c:
fd:12:53:b8:fe:7b:de:29:a3:17:f2:1e:67:01:85:
e1:04:58:74:64:c5:4d:d1:e5:38:53:21:20:5c:7d:
38:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A2:F0:7C:AE:5E:4A:40:4F:72:F3:70:7B:00:E2:BD:4E:D0:BF:3E
X509v3 Authority Key Identifier:
keyid:B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:71:64:e0:d1:a1:68:38:aa:68:e9:55:8a:d7:aa:a0:6d:d1:
af:93:dd:50:9e:6c:95:1d:4c:c9:d3:c0:98:24:f7:53:07:c1:
c1:fd:95:ef:ba:1f:bd:77:a5:fc:c9:7c:dc:57:d9:f8:43:a4:
48:76:22:2d:19:0e:e4:45:07:b3:dd:64:5d:44:c7:76:52:a2:
8f:7b:a8:ed:61:c0:a6:77:e4:23:03:f3:68:19:3a:25:df:50:
d3:b2:b7:8e:ab:60:15:da:85:5a:ae:35:f2:5c:1e:9f:3f:a5:
54:e5:5f:da:8e:dd:44:e7:44:11:bf:2d:84:6f:3f:4b:1e:38:
2b:2f:89:18:b3:3f:72:1a:10:e4:32:3e:2d:67:07:ce:cb:88:
ac:6f:41:10:64:88:9d:41:e3:01:b4:ab:c3:1b:1e:39:d3:3c:
67:07:ae:f9:14:2b:9d:00:e5:f2:a2:b7:3e:ee:a6:8c:19:64:
2d:26:7f:f6:ff:51:70:64:38:78:bc:2c:53:32:6b:a7:35:fe:
1d:c7:84:16:69:59:c9:7c:aa:b8:d4:26:1a:a1:99:0d:7c:43:
36:1b:2f:cf:f0:4e:63:3a:76:84:db:59:a1:8b:6b:3a:f4:79:
bc:eb:7c:4f:4c:50:2a:0b:1e:49:f7:51:2e:65:8d:ee:03:85:
01:67:4c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:49:25 2025 by rpki-client