Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
File: tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft (raw, json)
Hash identifier: OmncJNnCZzCNGdQ3PPm8epv6WmJ2Zeap5eVFTI4khMI=
Subject key identifier: DC:75:07:38:EF:DD:FA:B8:09:BD:15:B9:C4:C5:DA:62:00:CC:FA:78
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Certificate issuer: /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial: 01961A35BAAA51BE8857DD96CD4F33BE4CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
Manifest number: 14E4
Signing time: Wed 09 Apr 2025 11:00:50 +0000
Manifest this update: Wed 09 Apr 2025 11:00:50 +0000
Manifest next update: Thu 10 Apr 2025 11:00:50 +0000
Files and hashes: 1: m8jqf0t6bK4OvZVKVGnvFB0mdKA.roa (hash: 0ftdeq2I0Ls/OwARQ/FHezOkmfJrEt6ekfubL8KjG/I=)
2: sGGZndDmRMx-w7J8U5J6G3BFVOk.roa (hash: uF6jgyxh4ugT/l6V+mIZvN4IJ+X7IddAc7QQehPWZsY=)
3: tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl (hash: sB1PZzlVIV+O+uOSnXoaSjjrCrdIDNl3xI/7tWfj1P0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:35:ba:aa:51:be:88:57:dd:96:cd:4f:33:be:4c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
Validity
Not Before: Apr 9 11:00:50 2025 GMT
Not After : Apr 10 11:00:50 2025 GMT
Subject: CN=dc750738efddfab809bd15b9c4c5da6200ccfa78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:76:0c:be:e1:37:68:86:a6:80:69:16:5b:9d:
1b:6e:c8:26:d4:da:62:72:d9:f3:36:a2:37:01:a4:
26:7d:b2:77:20:94:5a:b4:1d:68:7e:96:17:14:81:
65:b5:b1:dc:41:5c:89:b8:0d:25:d8:8e:80:83:e3:
59:9e:9c:83:3c:47:a9:3c:d9:c8:9e:06:94:03:68:
a9:21:55:a7:e8:67:ac:f5:ab:ad:01:47:c5:14:2e:
b0:95:97:36:cb:e9:ed:74:31:c3:c8:f0:99:d0:1c:
14:9b:19:3a:5c:8f:d3:6b:be:2f:40:c3:3b:a9:e3:
0f:6f:03:8d:8e:96:a3:c7:07:b5:f7:8d:92:fa:00:
81:3c:d9:4b:e6:b4:e7:33:03:2d:75:e2:29:01:66:
97:cf:04:ba:65:5f:bd:3a:8d:cc:86:2a:1a:a9:dc:
72:d5:88:65:6d:83:8b:4f:cc:bc:76:d6:40:42:ce:
df:12:a9:30:f2:71:7e:56:41:56:41:d6:d1:70:4b:
0f:ad:7e:d6:87:d4:7e:b2:98:13:49:0a:71:5c:d8:
45:51:2d:3f:26:e3:2b:78:5a:55:88:15:b1:68:01:
82:ae:fa:2f:69:ac:8d:00:14:b3:3d:be:84:f5:e2:
66:2f:2d:ce:a8:94:fe:fc:6d:ad:9f:83:b5:66:77:
2e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:75:07:38:EF:DD:FA:B8:09:BD:15:B9:C4:C5:DA:62:00:CC:FA:78
X509v3 Authority Key Identifier:
keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:bb:a6:d0:e6:88:c8:15:cc:3f:44:67:76:88:82:a3:fc:83:
90:d5:2f:75:c3:d5:12:57:b1:9c:5a:39:c6:4b:09:4e:be:12:
1a:a1:7c:e8:c3:7b:ed:43:9b:54:21:7e:4b:44:4e:3e:3b:65:
39:b4:b3:52:e7:f7:53:00:31:2b:d6:e3:eb:4a:1e:13:0f:31:
8c:64:c8:16:78:78:89:36:1a:5c:31:16:f9:1e:17:a0:4a:dc:
9f:d1:c4:dd:2b:af:60:94:49:cd:fc:13:46:de:f9:0e:f6:e4:
06:10:ca:12:dc:7e:83:33:12:9e:4d:0e:e8:59:e6:69:06:f5:
37:df:0d:60:08:6e:a9:2c:68:dc:ba:bd:b6:b2:6a:39:8a:2d:
24:1e:31:50:80:70:17:b2:5a:b3:6d:be:9d:3f:45:b6:dc:6f:
0f:56:a0:26:c6:b2:bc:26:c2:78:b1:42:cc:f1:b2:4f:76:f5:
27:19:e0:33:35:52:73:95:e9:58:7e:e9:24:e9:d9:c5:6f:b4:
70:50:2d:75:31:3e:16:0e:89:b6:19:41:d4:6d:fd:b1:41:d8:
59:ac:a2:fc:bc:08:8a:e8:51:96:ea:95:0f:03:19:4d:41:c9:
d9:71:64:d7:c2:55:c2:b6:08:cd:26:24:4b:44:3a:3c:cf:06:
2b:54:34:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:47:30 2025 by rpki-client