Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier: 88jvR/aguXSE0N136VVIUJJuC6aY17CrUXAmJFJlFpo=
Subject key identifier: 8B:B8:77:F6:7B:E0:75:BA:B6:3C:7C:58:45:7F:71:F9:1A:10:FD:6B
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial: 01965CBA24B43F5E8E672DF03BB026507921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 09:00:24 +0000
Manifest this update: Tue 22 Apr 2025 09:00:24 +0000
Manifest next update: Wed 23 Apr 2025 09:00:24 +0000
Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: 9tKjfPNAIIHXBpyrJjsMTXGgP4TeFJC6DEb4x5F8qJU=)
2: UqGmWpGtflaEJvCw0bHQvmEnA74.roa (hash: EKIY9C4V0PmpfSkXvjVMr8vcUWFSLcsQTMlkDeIRJyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:ba:24:b4:3f:5e:8e:67:2d:f0:3b:b0:26:50:79:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Validity
Not Before: Apr 22 09:00:24 2025 GMT
Not After : Apr 23 09:00:24 2025 GMT
Subject: CN=8bb877f67be075bab63c7c58457f71f91a10fd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:25:98:23:f7:51:df:db:21:ed:fa:80:16:f7:
64:ce:7b:6e:b8:8c:74:4a:5c:d1:88:07:d5:a1:09:
fd:5b:cc:3c:11:91:92:18:6c:23:1e:04:35:2f:18:
0e:d9:4c:fc:b0:80:8e:0a:83:22:8f:99:71:40:28:
1d:d6:06:c3:7e:63:0b:34:eb:a3:ee:7b:27:a4:8e:
87:a0:ff:c3:db:37:68:c7:a7:c8:51:0c:02:38:65:
f6:01:fc:ea:a2:27:c1:50:1a:45:ec:83:13:b4:47:
b7:31:2b:40:93:94:f6:46:bc:f8:08:e2:ea:99:ee:
5b:58:4b:0b:df:c3:1d:6b:2b:2c:a9:2f:dc:3e:28:
33:93:29:5c:76:5d:4f:3e:5a:93:89:76:f0:0d:4f:
ff:70:cf:67:74:b9:c8:78:fd:81:8d:91:97:22:56:
10:14:7b:0b:b3:dc:87:fa:b6:e1:d8:66:db:1b:b1:
32:89:82:9e:66:68:f8:b8:6c:d2:90:7a:49:bb:68:
67:9c:b9:c9:62:13:85:fa:a5:93:80:5f:32:c9:15:
97:06:51:56:60:0e:13:4d:b6:a0:e6:5f:f7:b8:2d:
ad:c9:07:cd:f0:62:24:d9:63:7c:9f:70:55:75:e8:
bd:6a:77:bd:ec:7c:d4:73:48:33:eb:ad:69:b5:eb:
cc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B8:77:F6:7B:E0:75:BA:B6:3C:7C:58:45:7F:71:F9:1A:10:FD:6B
X509v3 Authority Key Identifier:
keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:9b:c7:49:c5:bf:a6:a6:e0:80:d0:22:47:5c:b1:6e:b1:50:
05:fc:48:af:21:f1:b4:72:43:f2:b1:d2:40:22:44:c1:4b:f0:
6b:f2:66:aa:1c:be:38:58:a8:ca:31:7d:08:08:f0:01:81:31:
c9:4f:16:30:df:2a:2a:46:66:59:7a:74:08:29:7f:a9:00:40:
f2:f6:3b:fc:81:58:72:97:65:02:2a:3c:e0:b9:58:55:92:e7:
88:bd:e3:9f:a5:56:a0:ac:07:6e:40:94:6e:ba:27:c3:4a:05:
15:c4:63:45:86:e5:0c:42:c7:fb:6c:71:20:bb:35:bf:d5:97:
63:35:20:16:ed:66:42:94:bc:94:25:4e:9b:a4:c7:0c:e6:42:
33:7c:d2:b2:a1:35:9e:b0:63:08:dc:89:f4:15:1f:0e:c2:ee:
df:cc:93:c9:84:7f:fa:39:52:d3:26:35:e3:00:46:97:2f:1b:
2a:04:b9:59:ad:44:7a:f7:41:ee:ba:fc:e5:06:05:a9:37:01:
fe:64:44:6b:75:bd:e7:d9:a8:36:bf:26:9e:1f:85:0d:71:44:
6e:fd:b4:65:3a:14:d7:d3:25:1b:db:d8:61:04:0f:6e:6b:b3:
e0:cb:af:c1:dd:6f:cb:61:18:19:80:47:01:e7:00:a8:e4:e2:
09:b9:07:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:06:39 2025 by rpki-client