Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
File: TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft (raw, json)
Hash identifier: L69ocjUBe+3QQT3X5REh8DGHsgeWWEv2lpYqwbPTyLI=
Subject key identifier: BA:6B:AA:E5:56:C1:CA:9B:CE:6C:94:C4:5F:83:7B:85:F6:00:D8:90
Authority key identifier: 4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
Certificate issuer: /CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Certificate serial: 01964BC67CBC59C1AE8C9CB53FA1AEA1FF5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
Manifest number: 0237
Signing time: Sat 19 Apr 2025 02:00:21 +0000
Manifest this update: Sat 19 Apr 2025 02:00:21 +0000
Manifest next update: Sun 20 Apr 2025 02:00:21 +0000
Files and hashes: 1: TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl (hash: bmdhCeUjEbuopkYAHCTGjYZIyT5NIZj9L930KPQYZ2Y=)
2: U_0Qm9bmlfNCn0QcnMuKjqVhpok.roa (hash: rS2TodhOY6krb9NSbdEkyp8dkG2jF6/EwmhOAvSbJFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:7c:bc:59:c1:ae:8c:9c:b5:3f:a1:ae:a1:ff:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Validity
Not Before: Apr 19 02:00:21 2025 GMT
Not After : Apr 20 02:00:21 2025 GMT
Subject: CN=ba6baae556c1ca9bce6c94c45f837b85f600d890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:0f:f8:1f:4f:9c:e6:38:72:f3:0b:a6:dd:
bd:25:5b:07:c1:00:88:e5:d4:40:9e:01:94:c3:d2:
73:8c:d5:a0:9f:4e:ed:75:4e:bc:3c:5b:c4:95:4e:
df:ed:82:4a:65:6f:f0:67:32:f1:f4:35:86:31:c2:
b3:6f:4b:0c:be:b1:1d:25:ac:37:12:1d:0e:f2:88:
6a:a0:b1:bd:8a:f8:41:dd:07:d0:e1:14:26:1d:bf:
84:bd:a2:67:28:c4:9a:56:87:ea:70:d4:32:cd:d5:
2a:fc:4d:29:e1:c0:ce:0e:a7:e2:5b:cb:9d:4a:5e:
b1:b5:eb:a6:23:6c:c7:0c:6e:91:cb:49:1c:d3:59:
f4:e5:3c:85:0f:48:75:af:95:05:72:95:d9:fe:fe:
a4:bc:04:30:b5:56:5b:80:a0:24:10:fb:84:26:ab:
da:d8:70:7b:4a:77:7b:e4:c3:a0:8e:39:c8:dc:e2:
b1:17:e2:f6:f7:b1:e8:5d:be:16:8d:a7:e0:18:40:
06:fb:48:7b:33:bd:4c:79:9f:99:81:04:22:5a:04:
32:f5:85:88:9e:dc:8c:3f:e1:d3:e5:90:38:c2:78:
f0:74:df:44:61:b8:80:e2:d4:bb:12:39:65:cf:a7:
d3:74:d0:a6:76:55:6e:21:87:79:df:bb:b4:d2:6d:
22:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6B:AA:E5:56:C1:CA:9B:CE:6C:94:C4:5F:83:7B:85:F6:00:D8:90
X509v3 Authority Key Identifier:
keyid:4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:55:05:ec:df:cf:d0:e5:ce:c7:2d:12:d3:8f:4d:e1:a0:60:
f8:5f:17:c8:32:ec:63:98:28:da:8e:09:74:f0:60:cd:67:15:
b4:4c:41:e6:2a:28:05:60:ee:cd:05:4b:4a:f7:0e:f9:99:9d:
0d:0b:4e:1a:16:3f:96:a9:97:a4:aa:91:ac:9f:ac:18:c9:13:
91:ee:f7:ad:8c:78:5d:90:4e:7e:8d:b5:84:79:b0:e3:6c:97:
9f:dd:19:a0:11:eb:c6:8a:4e:08:6d:a6:3a:8c:ad:a5:79:fb:
42:24:cf:2a:01:dd:2b:fa:8e:e5:eb:1d:fa:59:00:e1:97:ad:
0d:4b:16:92:79:6e:ec:2e:a9:8e:87:8c:fc:b6:35:34:48:cb:
c2:d8:42:f9:3b:b6:f0:be:68:e7:89:3a:f9:af:bd:2e:70:90:
28:b5:9f:5f:9b:fa:a5:c7:46:f6:db:b6:3b:4c:d4:78:53:95:
48:9f:a0:82:8a:bd:57:a3:22:29:12:98:6c:60:b5:92:16:a8:
cf:75:13:a1:d1:05:e0:f9:b6:93:e0:a9:7c:ce:0c:13:f1:0d:
7d:7e:89:16:90:fa:cb:ba:5c:dd:8f:fa:61:ff:64:ec:bf:12:
dc:c8:be:6b:01:ec:0f:62:65:78:59:4e:b8:5a:6f:15:39:76:
61:d2:90:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:23:46 2025 by rpki-client