Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
File: S_TZ-mawCKCMO47YLDgmfh0hJVA.mft (raw, json)
Hash identifier: AjG97we3G8v7pWr+duyDFaV0Y/lLMJy4UXaRhH5gqyc=
Subject key identifier: B5:21:6A:33:74:9E:C7:8F:5D:9F:F7:AC:2E:5C:EB:F2:0F:8C:23:51
Authority key identifier: 4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
Certificate issuer: /CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Certificate serial: 01957910510AF722C71C3C0F7867C85405D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
Manifest number: 148D
Signing time: Sun 09 Mar 2025 04:01:07 +0000
Manifest this update: Sun 09 Mar 2025 04:01:07 +0000
Manifest next update: Mon 10 Mar 2025 04:01:07 +0000
Files and hashes: 1: S_TZ-mawCKCMO47YLDgmfh0hJVA.crl (hash: k6oRbk6AwrAmM3bgNrMgPkYX2U4My+8JuoXOsMungkI=)
2: VHi9vxpSG4tYfENJTcecEKHCVRo.roa (hash: ZPBYgaWs41C7d8q4Zb2hDOx2GjzVI3YJSGRCZKGJpWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:10:51:0a:f7:22:c7:1c:3c:0f:78:67:c8:54:05:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Validity
Not Before: Mar 9 04:01:07 2025 GMT
Not After : Mar 10 04:01:07 2025 GMT
Subject: CN=b5216a33749ec78f5d9ff7ac2e5cebf20f8c2351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:93:4a:ea:e0:e1:a8:74:00:7a:03:68:9f:4c:
27:56:e7:ad:25:b1:c7:d3:4d:5c:82:da:b9:d2:6d:
8b:3d:1a:1b:4c:1d:14:c4:84:2f:7a:38:33:d0:f0:
a5:ce:69:d1:1f:e5:85:c8:e2:2c:2e:78:84:78:3b:
bb:ab:22:f3:f0:b8:b4:9c:1c:1b:6d:d5:77:0c:93:
89:f0:94:3c:32:cc:e2:96:a8:25:a2:9e:62:b3:fd:
fc:a2:ba:fc:db:29:b8:84:bc:3a:fd:2a:84:1e:5a:
e9:a6:61:37:35:34:d3:3e:de:41:0a:28:a0:45:bb:
bc:f6:b0:fb:ab:ba:2e:a2:0f:b5:34:a8:89:ce:1c:
08:11:5f:dc:ba:39:47:9c:ef:04:4f:b8:9b:d0:0a:
6c:10:3b:e1:cf:54:68:da:32:ac:f2:c5:72:96:8a:
fc:5e:39:96:d9:40:64:fc:7b:a5:be:35:f1:4c:b6:
7c:07:ee:31:71:85:8f:29:5e:64:f9:7d:6f:53:d0:
72:7f:c0:ca:4c:c7:ca:06:dd:98:a7:bb:b1:12:8e:
93:d9:55:c6:53:c4:44:04:3c:39:8a:12:fc:81:d5:
09:dc:8a:7a:c3:3b:0f:fa:36:7d:d9:1b:f8:80:4a:
16:9b:76:55:b6:41:71:72:7f:f9:74:92:c8:66:c7:
27:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:21:6A:33:74:9E:C7:8F:5D:9F:F7:AC:2E:5C:EB:F2:0F:8C:23:51
X509v3 Authority Key Identifier:
keyid:4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9d:1b:97:76:d7:28:8c:71:08:fe:a0:60:3f:e2:02:ba:51:
60:b9:94:1a:ff:29:d1:a2:0c:f6:d7:c3:26:6b:ec:8b:ae:c4:
6a:33:75:b9:d7:d8:ed:b3:61:d9:bd:e9:9f:44:31:d7:5f:41:
9d:a6:7c:bb:52:60:f5:ee:6f:5f:f6:a7:aa:2d:14:62:b8:94:
29:c1:39:52:aa:91:f3:66:db:62:d0:25:46:5c:e5:30:b6:f2:
0e:ca:e9:a6:ef:31:b1:b8:88:a7:a9:9a:47:78:41:c3:5b:45:
9b:bf:cc:b0:f8:9f:68:ac:f3:a1:8e:fd:14:e0:9e:0a:14:22:
1a:c0:47:f9:64:cc:bc:5b:0f:27:97:6f:09:9a:b0:87:f9:19:
9c:c6:80:46:d7:cf:fd:fa:fa:ac:a7:20:35:85:ff:5f:79:18:
61:38:66:bf:29:38:67:73:f5:30:f2:e5:8a:f7:39:39:ae:99:
3b:a7:b1:30:3b:51:83:30:3a:2a:02:92:e1:8c:13:72:d8:71:
19:3a:5c:20:c2:d8:df:b0:f4:5d:d5:50:bb:77:c8:65:15:4f:
2b:52:99:25:7a:24:41:7a:eb:ae:63:3f:52:1c:07:cb:79:2e:
8c:7f:d6:81:af:8a:ff:23:c6:01:fd:e7:c0:53:04:02:d3:09:
83:99:c7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:50:34 2025 by rpki-client