Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
File: TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft (raw, json)
Hash identifier: xOWIsYGKxPKgNAEgYwEfZYG45gUBeBRGPsAFYS8rXww=
Subject key identifier: BF:5A:66:8A:9E:B3:23:A3:56:C1:44:22:FA:67:5E:D1:46:C4:2F:37
Authority key identifier: 4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
Certificate issuer: /CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Certificate serial: 019510FE2A90D868C6E293891F055B1A0C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
Manifest number: 0194
Signing time: Sun 16 Feb 2025 23:00:47 +0000
Manifest this update: Sun 16 Feb 2025 23:00:47 +0000
Manifest next update: Mon 17 Feb 2025 23:00:47 +0000
Files and hashes: 1: TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl (hash: KhbZWTUOymoaCfkzf1TNL7v/42zCN8FeX1961AzHm6A=)
2: U_0Qm9bmlfNCn0QcnMuKjqVhpok.roa (hash: rS2TodhOY6krb9NSbdEkyp8dkG2jF6/EwmhOAvSbJFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:2a:90:d8:68:c6:e2:93:89:1f:05:5b:1a:0c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Validity
Not Before: Feb 16 23:00:47 2025 GMT
Not After : Feb 17 23:00:47 2025 GMT
Subject: CN=bf5a668a9eb323a356c14422fa675ed146c42f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:02:cc:b6:ce:3e:2d:35:44:ec:a4:67:20:
ad:7f:65:d8:9d:81:6e:48:58:d9:25:06:f7:d3:88:
21:e2:38:96:83:09:56:e7:05:8a:bc:5a:82:27:22:
12:81:53:73:bc:87:b3:bc:23:b8:73:13:45:25:49:
20:ca:f7:54:e1:ec:05:e4:f1:3b:ae:6e:77:bc:7f:
c5:f2:63:09:a3:54:65:2c:ea:60:16:db:9f:41:7b:
24:4c:61:63:52:a0:e8:6b:05:0d:fb:b2:c1:58:a9:
45:5f:40:19:64:6e:6c:01:1e:e6:5a:80:d0:1d:f7:
57:35:f0:ad:c0:1d:32:9c:77:cb:14:b6:6d:30:49:
69:87:27:bc:3c:ec:f1:28:97:ee:94:c9:64:bb:77:
cc:bc:77:5b:60:4a:86:c3:85:d3:e9:13:11:1a:91:
d0:f4:48:62:20:72:e4:5c:f3:50:a1:06:6c:24:f8:
62:3e:56:72:84:d6:2d:e8:c7:74:4c:10:97:e9:c0:
70:23:4a:60:26:a1:8a:02:c2:32:9e:62:73:11:32:
89:bd:d7:68:c1:dc:c3:71:bc:6c:52:45:33:1a:2d:
b3:65:e6:81:a3:a0:f4:6d:63:7a:af:0c:a7:c5:20:
33:05:86:c9:2a:41:f2:b9:f4:d0:fc:f4:5f:e1:2c:
94:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5A:66:8A:9E:B3:23:A3:56:C1:44:22:FA:67:5E:D1:46:C4:2F:37
X509v3 Authority Key Identifier:
keyid:4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:53:52:77:82:0f:d3:87:f0:5c:9e:56:4e:a2:d4:7d:5c:e2:
2f:13:cd:c6:b5:18:33:f9:e0:55:f1:55:f3:31:9f:43:9f:fe:
61:c0:b9:80:c0:d0:1c:fc:30:ce:f2:d7:10:94:13:e7:7a:9c:
e6:36:78:77:b0:b1:df:ef:13:11:57:5d:65:fb:36:28:f2:55:
75:49:c7:e3:e4:c7:b1:3b:17:0a:39:59:c1:c6:a1:43:ca:b5:
b3:de:09:ba:0b:59:31:71:8c:1b:dd:77:7a:b9:a3:35:1a:ff:
8d:b6:b9:ce:da:62:93:4b:91:b0:12:a8:22:b9:52:4f:0a:67:
47:98:9d:a7:37:a7:f3:cb:7c:22:a2:8a:c3:52:27:2c:ef:a7:
9b:05:93:d7:15:b1:5b:24:a1:c9:fc:bc:b1:32:cd:b2:cc:36:
c7:a7:f3:ea:32:56:1f:44:22:2e:fc:cf:78:70:59:bf:21:b3:
26:1c:a4:8f:20:94:a3:63:61:92:1f:e8:b6:0f:94:6c:f0:9e:
8b:10:02:71:ea:ae:2c:18:cb:fe:a9:43:39:4f:4c:00:9a:fb:
cb:56:93:63:67:e3:fb:5d:10:3e:6d:b8:34:5a:83:ad:b5:1b:
06:5d:88:f2:20:c5:96:33:ed:9c:e8:a5:b7:ce:a4:13:84:ce:
eb:9a:7b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:58 2025 by rpki-client