Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
File: TZRvTfIjdJGmjfpAe-QfroS72mY.mft (raw, json)
Hash identifier: WdFnscSBi0CiqOGo/hWE8AXS6a7emK2pnm92FElJBTc=
Subject key identifier: C6:6E:A7:99:F6:CC:CC:E1:E7:B9:39:22:84:C6:F1:76:38:C6:18:61
Authority key identifier: 4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
Certificate issuer: /CN=4d946f4df2237491a68dfa407be41fae84bbda66
Certificate serial: 01965191E823CA126CBFE348AE4F1E31C216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
Manifest number: 0E5E
Signing time: Sun 20 Apr 2025 05:00:38 +0000
Manifest this update: Sun 20 Apr 2025 05:00:38 +0000
Manifest next update: Mon 21 Apr 2025 05:00:38 +0000
Files and hashes: 1: C8PR4XXWsjpP8PHYuoN78zoE9nY.roa (hash: uu2Jn3Slz9u+yGZ22j4LqOkp9lCOWyyfMINckydLJ3E=)
2: TZRvTfIjdJGmjfpAe-QfroS72mY.crl (hash: c5WVz12NE5jHpX7P0nwQTo/7/t7098NYJcPfdhP3QGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:e8:23:ca:12:6c:bf:e3:48:ae:4f:1e:31:c2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d946f4df2237491a68dfa407be41fae84bbda66
Validity
Not Before: Apr 20 05:00:38 2025 GMT
Not After : Apr 21 05:00:38 2025 GMT
Subject: CN=c66ea799f6cccce1e7b9392284c6f17638c61861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:09:02:52:1f:15:03:94:7e:a6:2e:13:df:
ec:ae:5b:e5:62:52:28:bf:b8:22:7b:1d:80:bd:69:
19:03:70:6b:7c:e8:fa:8d:60:54:95:6d:52:82:45:
5f:53:52:48:7b:dd:e8:c2:e9:2a:cd:00:76:65:1c:
91:08:62:16:85:ef:c4:ba:f6:48:da:3c:44:46:39:
93:45:72:9f:25:09:08:0d:7b:6f:df:5b:66:99:22:
dc:86:a5:57:b1:34:1d:fe:2e:e7:09:31:3a:4b:70:
a8:0d:13:bb:b7:1f:7d:0b:47:2f:61:c4:44:76:e9:
d0:90:dc:db:36:a9:1a:35:7b:b7:1a:f3:7d:20:c9:
28:33:a6:ab:19:68:90:e7:8a:8b:cd:e2:92:61:9b:
e9:58:ef:e7:0b:9e:c4:e0:5c:29:7e:84:03:46:66:
ca:60:9f:10:cf:f5:b6:9f:3e:02:b3:7b:c0:d1:44:
b6:78:47:66:dc:69:af:33:c1:6c:ae:19:fb:d5:d8:
db:b7:8d:be:c2:fb:52:62:2d:f2:e5:c4:67:5a:e8:
08:db:7b:e6:c7:86:95:9c:de:2a:79:b2:86:07:33:
ca:52:36:4a:62:45:2f:04:28:96:51:c0:6c:62:e9:
d8:08:fd:d9:20:a5:05:54:9f:ea:83:0b:4c:9b:b5:
04:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6E:A7:99:F6:CC:CC:E1:E7:B9:39:22:84:C6:F1:76:38:C6:18:61
X509v3 Authority Key Identifier:
keyid:4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:12:95:d5:d5:77:f2:ce:8b:98:e7:75:d5:bf:12:15:6c:20:
0d:f1:ea:96:fb:63:62:0e:7e:b9:e8:49:5a:22:f5:98:66:4f:
2f:e5:b9:ba:7c:52:61:00:86:b5:3b:5a:a2:9d:61:dd:df:9a:
1c:d8:c7:d8:2a:ce:78:76:30:41:51:63:68:b0:98:4d:8c:ab:
b4:22:38:1b:55:a4:65:6d:8b:6c:1b:de:1b:31:8d:d7:86:1f:
b9:20:b6:b4:a9:3c:00:cf:46:5c:27:5c:25:79:b5:f3:62:32:
26:44:97:0b:e6:1d:1b:18:08:7d:f0:80:49:86:3a:a9:08:da:
ab:02:82:af:82:fa:4f:42:40:b4:35:bf:ac:c0:cf:27:6c:d9:
4d:28:9a:f4:6b:0d:eb:3c:52:44:21:ec:7c:3e:be:e3:20:fb:
91:3a:0a:d2:65:7c:76:ec:d7:b5:64:38:fc:1e:96:bb:57:3a:
bb:4d:b7:e3:ab:68:94:d1:54:6e:8a:67:fe:af:c5:21:76:0a:
bf:29:f6:a3:79:f3:56:d7:6c:1f:2f:d3:c4:f1:67:d0:c6:ec:
cd:8a:47:91:72:8a:c2:03:d2:cb:12:c3:5a:31:1e:c7:e3:b3:
2c:7d:02:13:42:47:45:81:30:30:95:5e:4d:9a:67:1d:b9:88:
e4:91:69:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:21 2025 by rpki-client