Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
File: TzVzzX1WHNN-DzMfbKON6SAgQrI.mft (raw, json)
Hash identifier: 4v75EKgN5+MkmhtdfWFGStedzTLNUjQX7PjqcqYjtu8=
Subject key identifier: 01:65:BD:4E:19:71:93:69:E7:11:6F:7B:62:B6:25:64:89:88:27:7F
Authority key identifier: 4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
Certificate issuer: /CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Certificate serial: 019510C8084A273AE59BC14A8F959C174FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
Manifest number: 096C
Signing time: Sun 16 Feb 2025 22:01:39 +0000
Manifest this update: Sun 16 Feb 2025 22:01:39 +0000
Manifest next update: Mon 17 Feb 2025 22:01:39 +0000
Files and hashes: 1: TzVzzX1WHNN-DzMfbKON6SAgQrI.crl (hash: ZeFdOmmtBFcAcSb+QWseYxx5aivHZ8qKGutMzZi1p4g=)
2: gNvVla9QTcgfrH76gu8sofAf_w0.roa (hash: OGSKcOJHQa1w9k6JZ39A0hFW39yZH1IaBP1pJ+a1YHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c8:08:4a:27:3a:e5:9b:c1:4a:8f:95:9c:17:4f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Validity
Not Before: Feb 16 22:01:39 2025 GMT
Not After : Feb 17 22:01:39 2025 GMT
Subject: CN=0165bd4e19719369e7116f7b62b625648988277f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:05:78:d8:e6:5d:92:6c:d8:df:f1:a1:b1:55:
a5:b2:76:27:aa:6b:cd:48:cf:96:3b:41:69:c4:3b:
d8:7b:1a:d5:70:66:18:8f:2b:79:62:d5:64:d8:f8:
85:24:ad:7d:b8:56:5f:e3:ad:81:d6:c0:18:22:c5:
e5:f2:f0:78:44:57:53:89:7e:8c:1d:11:61:98:1e:
39:fe:d6:e1:cc:f8:b6:83:cf:08:d5:b3:73:6f:19:
36:29:a8:ff:f0:47:94:10:6d:92:60:d1:7d:72:2b:
57:c8:f3:0b:69:af:58:63:82:f8:c8:f3:83:5f:f9:
5f:32:59:f4:dd:fe:01:b0:54:3f:79:93:a4:8e:fa:
80:42:ba:0a:71:4c:83:aa:1a:45:ee:5d:84:92:f8:
64:5b:0d:f6:dd:aa:48:5e:ef:20:0d:9c:68:60:b2:
33:aa:de:85:5d:f6:f6:4b:1e:ee:ad:cc:59:e9:b8:
b3:a2:7c:b7:46:7c:9b:41:27:60:86:03:a0:3a:27:
dc:86:d3:ae:37:72:7c:ad:f6:02:0d:68:40:c6:38:
72:d8:1b:ff:40:40:0a:40:35:5f:d4:73:68:0d:0e:
b9:df:e2:90:a5:1e:17:ab:93:86:d2:53:c5:32:4f:
2d:12:1e:75:54:91:0c:bb:c3:ec:4c:3f:e3:d4:22:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:65:BD:4E:19:71:93:69:E7:11:6F:7B:62:B6:25:64:89:88:27:7F
X509v3 Authority Key Identifier:
keyid:4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:da:be:14:ff:fc:e5:63:ab:0b:8e:17:fc:cc:c5:1d:50:d7:
b9:34:06:21:73:d5:d7:93:c5:66:f7:6b:d9:9d:bb:24:2d:60:
15:64:bb:bf:e0:d6:9d:f8:54:82:f4:9e:41:15:81:f2:f2:4f:
c1:15:d9:d4:67:5f:f4:48:76:be:85:dd:5d:71:16:dd:05:e3:
68:fe:7d:f9:2c:bf:c0:76:96:bf:1d:8a:3a:a9:86:ea:18:b4:
5f:13:8c:04:39:d1:f3:60:ce:45:04:42:9d:f0:25:cf:f0:1e:
54:48:ba:6e:f7:aa:08:4c:e0:05:ac:9a:fd:03:12:5e:00:e4:
f5:ed:04:dc:7f:7b:39:0a:45:9c:a2:8e:5e:da:63:81:9f:28:
59:1e:6b:06:f0:8a:f6:f6:bb:e1:8a:3e:84:4c:07:e8:2a:f2:
a7:fe:5d:89:7d:cd:ae:35:d3:08:10:12:99:93:4a:db:74:00:
19:74:ac:81:90:05:2f:1b:6f:46:34:b2:4f:b7:4b:ca:8c:36:
cd:4f:c1:79:df:5f:c1:44:c6:d8:7a:17:e8:6b:a7:f3:45:e7:
30:0f:e7:81:94:a0:72:69:31:de:f7:e0:4c:c0:01:72:e2:55:
a1:a6:22:aa:ab:83:7f:3a:71:51:c2:cf:90:49:71:9e:d7:3a:
ce:80:7c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:40 2025 by rpki-client