Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
File: TNR7i4qp-8zP89UHgU_HRGSiq_A.mft (raw, json)
Hash identifier: HzZfHkCVxMHbkQJ+MhD4mMfXrPcQ7IG/C2iQI9MU9nQ=
Subject key identifier: 9A:FB:9C:2E:3E:F2:CD:A9:C2:60:34:03:36:55:BA:9F:5F:A9:E1:EC
Authority key identifier: 4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
Certificate issuer: /CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Certificate serial: 01964FDA1EE0F4A028DCE60806DB47E90268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
Manifest number: 0BF0
Signing time: Sat 19 Apr 2025 21:00:16 +0000
Manifest this update: Sat 19 Apr 2025 21:00:16 +0000
Manifest next update: Sun 20 Apr 2025 21:00:16 +0000
Files and hashes: 1: TNR7i4qp-8zP89UHgU_HRGSiq_A.crl (hash: /szBK28JA7KssmApa84b0lFscwdF1vULpd3HOEMkhwY=)
2: zYBlb8-4iJi2Xsk5poztWDw6ukY.roa (hash: veXHQ0WmE+2KQkfYtO+EXvFrciAIGT+yWdclt50BTQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:1e:e0:f4:a0:28:dc:e6:08:06:db:47:e9:02:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Validity
Not Before: Apr 19 21:00:16 2025 GMT
Not After : Apr 20 21:00:16 2025 GMT
Subject: CN=9afb9c2e3ef2cda9c26034033655ba9f5fa9e1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:9c:9a:9a:78:df:8d:22:e7:c5:f2:b8:a0:
cd:4d:f8:d2:20:47:9c:71:0a:c3:be:c8:a0:05:25:
b3:24:72:ca:7d:5e:78:f7:7b:59:43:a5:1c:c7:eb:
f2:36:6f:38:59:e1:c9:91:ce:ff:b6:fa:a8:71:0f:
c5:6c:97:aa:40:c9:95:ef:80:38:e0:c9:d2:b2:a0:
20:63:f0:25:63:e9:fb:8d:6c:0b:c5:22:50:9a:63:
43:34:e9:96:53:33:30:ea:06:f5:b5:a0:69:08:e2:
42:5f:86:f9:40:c6:65:a1:2f:2f:34:8a:de:e7:77:
32:0b:ce:ea:65:6b:38:67:6b:21:10:45:3a:92:92:
64:85:e2:73:78:50:4a:8b:52:9b:24:fb:5a:97:12:
e3:da:fd:93:8e:ae:9c:6b:32:d6:76:61:d0:bc:f9:
ac:93:cc:be:ed:31:7b:c6:12:7c:44:ca:ad:c8:56:
c8:94:4e:7c:f5:62:e4:df:6d:c6:2f:2e:17:ff:ad:
9f:75:cd:6c:da:cd:91:46:84:ea:45:1e:c0:75:d5:
0a:64:9a:d0:a5:d6:d6:c8:a1:1b:3f:17:5d:20:e4:
41:6d:71:20:60:e0:2e:ce:2d:bb:9b:ff:9e:de:4c:
71:c9:70:da:95:0f:7b:9c:d5:02:0c:ed:fc:93:c3:
39:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FB:9C:2E:3E:F2:CD:A9:C2:60:34:03:36:55:BA:9F:5F:A9:E1:EC
X509v3 Authority Key Identifier:
keyid:4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:77:91:c6:85:cd:8b:6b:f4:33:2c:0a:81:02:0e:6d:ce:c1:
fe:84:f8:e8:8c:4c:c7:8a:80:e5:60:6e:7f:f0:1e:16:55:74:
19:0d:20:8f:a7:ce:ff:3e:ed:16:6d:03:70:87:fc:a5:3a:39:
f2:a5:9c:f3:ba:ac:30:e7:ec:3b:53:7f:58:dd:e1:5c:4c:4e:
c8:2c:06:e2:b9:4a:22:f7:ce:42:36:a6:7c:39:79:10:5c:6a:
01:37:90:1e:ba:99:dd:ed:f0:34:7b:c5:6c:f1:eb:eb:67:db:
aa:90:f0:d3:af:68:b4:45:9d:ed:98:31:86:c3:fb:1a:88:e3:
41:8a:3c:7e:b2:d5:42:8a:0a:df:22:3c:24:74:bf:91:3a:81:
b2:ee:76:b2:61:6a:63:6b:b8:7b:fc:d4:ba:13:4d:62:c4:fd:
58:08:6e:bd:95:2e:6c:df:e2:5b:63:c0:99:78:21:cd:ec:b9:
82:81:5a:44:c4:b9:e3:d7:2d:eb:05:cc:e1:67:93:0d:f9:4a:
48:d8:21:29:ce:f1:8b:1f:60:87:2b:55:c9:ad:c1:28:20:78:
c1:b1:71:53:4c:52:cb:b0:c4:7d:05:d5:ed:1b:97:86:c0:56:
5d:89:5e:f1:98:d4:94:86:e1:da:0f:de:81:47:93:01:a6:1d:
bf:2e:64:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:30 2025 by rpki-client