Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
File: tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft (raw, json)
Hash identifier: c86ifjjWYujkRQLmBD8zDE7JAw05TNcH4yFb6yIop0E=
Subject key identifier: 01:D9:34:DC:D2:CF:3E:AC:09:C8:30:53:47:FF:E1:C1:5D:6B:BB:B5
Authority key identifier: B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7
Certificate issuer: /CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
Certificate serial: 019658387D15E0372C0864926FE496D8944F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
Manifest number: 03EA
Signing time: Mon 21 Apr 2025 12:00:18 +0000
Manifest this update: Mon 21 Apr 2025 12:00:18 +0000
Manifest next update: Tue 22 Apr 2025 12:00:18 +0000
Files and hashes: 1: Zw8tldKF4IamTYiqaUWTp-ORWaM.roa (hash: +YY2MSi0DHjKWNmQtrNLuY1Ni5g7MizVHlrZ12WPMsk=)
2: tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl (hash: +43IGZ0O5xn/R+0FrY2oimpLB8u2MZLAIfMMKWqBBPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:7d:15:e0:37:2c:08:64:92:6f:e4:96:d8:94:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
Validity
Not Before: Apr 21 12:00:18 2025 GMT
Not After : Apr 22 12:00:18 2025 GMT
Subject: CN=01d934dcd2cf3eac09c8305347ffe1c15d6bbbb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:fa:d7:2a:10:9c:a5:73:2b:00:9a:b1:68:
86:d8:0a:92:64:4d:5e:69:25:fe:5f:3a:69:d0:22:
ff:d9:ef:5a:d7:ac:6c:d6:19:0f:03:9b:40:b0:99:
00:20:80:04:6a:16:2f:91:32:6c:1c:d3:ed:3b:86:
06:5d:26:ec:3c:e4:ca:69:ab:58:21:40:c0:5f:62:
aa:50:84:75:81:1c:e4:6b:32:5d:6d:7d:17:d4:1b:
ab:b8:9d:f4:84:98:58:b7:ec:08:36:57:70:dc:63:
d5:08:40:eb:27:49:52:af:78:25:b7:35:df:65:cb:
e9:43:25:df:57:78:e9:d1:7f:6d:be:bb:52:fa:3d:
83:31:a8:83:f5:2c:6b:cd:6d:c3:d7:e1:42:a2:70:
36:a4:d8:f5:fc:27:65:06:60:2f:f9:8e:16:5b:9b:
fe:08:97:57:bd:62:6d:a3:75:10:93:5b:7b:b4:06:
5e:26:48:7b:e8:cd:31:82:dd:81:8f:88:f6:b0:ce:
31:5d:21:45:31:60:90:35:2d:74:44:2a:04:d2:a5:
5e:6a:39:2e:3a:f6:42:59:4c:04:50:7b:a2:9c:a5:
ff:3c:2a:c1:26:f1:e6:3a:5c:51:65:67:9d:87:c1:
23:2f:75:90:f1:37:cb:4c:4e:0c:a5:05:f1:6b:6e:
19:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D9:34:DC:D2:CF:3E:AC:09:C8:30:53:47:FF:E1:C1:5D:6B:BB:B5
X509v3 Authority Key Identifier:
keyid:B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:22:b3:94:42:5a:68:4c:14:59:96:42:18:f8:43:86:2b:4f:
96:2b:54:1d:70:18:ff:7b:02:9d:7b:f8:64:64:3d:4b:6d:2d:
9d:31:89:bc:71:36:59:2d:4a:70:42:f2:3c:bd:02:8a:5f:f3:
71:95:20:11:c5:8a:ec:80:7a:74:30:4d:e3:a1:74:67:d8:6c:
08:01:5d:9a:77:7a:8a:8f:ae:2b:f7:16:fa:ba:3f:09:01:8c:
d4:74:45:b3:81:08:80:9b:24:da:e0:42:b6:3a:ed:f2:5c:af:
7b:0a:b2:c2:ec:92:b4:33:a2:fa:fb:ed:91:d2:52:94:b1:64:
30:a4:19:26:f0:9e:19:30:11:1c:35:26:70:01:fd:d3:15:77:
79:5e:88:98:0b:f4:29:51:bf:43:42:99:ec:93:f5:8f:29:0b:
f7:7a:0d:5a:d3:32:6a:49:1a:76:dd:26:b0:3e:77:eb:8c:da:
13:de:0c:7d:af:ce:9f:51:28:53:c0:d1:d3:5a:28:25:8f:43:
d0:81:a9:c3:8d:23:1b:02:72:bc:73:19:d4:cc:29:26:90:e3:
85:5b:84:d6:18:fe:36:75:f3:fc:61:30:51:f7:84:72:15:57:
68:83:c0:97:de:61:07:ca:62:57:72:1e:c7:e1:8c:6d:d6:22:
15:c0:6d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:20:59 2025 by rpki-client