Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
File: TzVzzX1WHNN-DzMfbKON6SAgQrI.mft (raw, json)
Hash identifier: riaEjP94/L1RY+zvVk3Y5E0oLp0Z9HfsHT21TwBy7pc=
Subject key identifier: 26:EB:00:1F:27:AD:10:12:6A:B2:49:06:4F:39:D3:B2:70:E6:AF:63
Authority key identifier: 4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
Certificate issuer: /CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Certificate serial: 0196572631DC03C7EB9F32DEC4911793C682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
Manifest number: 0A15
Signing time: Mon 21 Apr 2025 07:00:42 +0000
Manifest this update: Mon 21 Apr 2025 07:00:42 +0000
Manifest next update: Tue 22 Apr 2025 07:00:42 +0000
Files and hashes: 1: TzVzzX1WHNN-DzMfbKON6SAgQrI.crl (hash: uOuXNntef8w1z6wkuNkAiEXe9bV2EqHNgm5TjMJUFz0=)
2: gNvVla9QTcgfrH76gu8sofAf_w0.roa (hash: OGSKcOJHQa1w9k6JZ39A0hFW39yZH1IaBP1pJ+a1YHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:31:dc:03:c7:eb:9f:32:de:c4:91:17:93:c6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Validity
Not Before: Apr 21 07:00:42 2025 GMT
Not After : Apr 22 07:00:42 2025 GMT
Subject: CN=26eb001f27ad10126ab249064f39d3b270e6af63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b4:9e:d4:10:1d:ac:4c:29:c9:03:34:67:97:
a8:88:2a:86:2e:27:d7:be:21:e0:06:6d:88:5c:3d:
6b:13:cb:a6:5a:1b:b9:e9:20:2d:99:be:88:59:8d:
0f:fd:c4:b0:5f:07:8b:e9:43:0c:92:46:49:1d:be:
bb:2c:1a:7c:ac:6d:b6:70:92:c3:c5:ae:48:d0:d9:
93:52:6a:f8:c7:82:98:13:77:9a:73:10:17:aa:94:
b1:4e:18:20:57:6e:45:ff:86:f8:fa:29:4b:cf:0b:
6b:56:f4:29:92:22:21:cf:08:76:71:f4:c5:cb:7d:
fd:93:b0:33:0e:6a:c6:f8:55:c3:4a:a3:71:78:ca:
ab:f7:8e:a2:9a:ea:e0:7d:f7:04:5f:9b:a7:32:34:
1a:75:cc:6b:43:2f:be:10:de:59:f5:c7:d3:fb:24:
4a:c5:e6:7d:41:7a:f3:4b:1d:a5:b9:51:71:97:94:
36:eb:7c:3b:fa:2d:0a:6a:b4:3e:45:2b:17:21:52:
f8:68:9d:29:c7:cf:26:33:33:ac:90:08:0a:71:e4:
97:4f:9e:2b:8b:1c:90:c8:fd:e5:af:89:75:9b:41:
26:b2:ba:e8:6a:b9:86:65:3a:d8:a3:a7:18:71:cb:
61:5b:d0:e6:93:60:5b:7c:32:db:6a:d3:3a:86:49:
cc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EB:00:1F:27:AD:10:12:6A:B2:49:06:4F:39:D3:B2:70:E6:AF:63
X509v3 Authority Key Identifier:
keyid:4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e5:97:13:92:0b:9e:21:51:9b:b1:e5:6f:f5:77:9d:3c:6e:
b6:64:a1:0c:3d:d0:e2:03:00:a0:70:66:12:a2:77:dd:8d:3f:
c0:92:16:56:01:a7:6e:16:9b:6e:f6:d9:93:ad:65:ca:3f:bc:
4b:f1:c6:92:ad:d4:4c:00:c2:fe:53:3f:1b:70:83:46:33:0c:
68:24:d6:47:30:d6:b2:45:25:8a:f3:ad:3a:5d:34:11:0b:65:
01:e0:3d:60:68:38:0e:1e:ce:56:a6:29:34:dc:8e:44:77:07:
67:d4:fd:50:3c:d6:37:2a:cb:6c:f9:a3:da:ea:d6:91:09:d5:
e6:1b:7f:7b:d1:d6:83:28:f4:e0:01:1d:86:95:68:cc:2e:e7:
b2:65:f4:40:8e:d1:9d:5d:f7:c9:fa:00:67:a2:61:45:b3:68:
a7:97:91:ed:e4:28:cb:94:57:a1:1e:f6:5f:56:10:06:5b:8d:
bd:73:40:ef:1a:62:2b:96:9f:ef:a4:cf:bb:1d:03:ae:74:76:
45:ca:cb:8d:12:8c:90:a6:c2:26:eb:0f:9e:c0:7b:7f:dc:dc:
dd:7b:6f:ad:cf:21:2c:94:f3:12:52:8e:bc:4d:39:2b:1a:15:
a9:81:90:b8:03:e2:75:b6:42:3f:e1:7d:cf:06:b9:db:47:19:
b4:c3:23:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:51:14 2025 by rpki-client