Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json)
Hash identifier: NleWpcWbkJfKWocgsUUlitzdt2OXkq90Pp7/EdEynRU=
Subject key identifier: 89:36:4B:6F:61:29:6F:C0:81:3E:00:1C:CA:D1:C0:FE:ED:63:46:CA
Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Certificate serial: 019582B7F229AD6E47D639016720E96B9D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
Manifest number: 1423
Signing time: Tue 11 Mar 2025 01:00:47 +0000
Manifest this update: Tue 11 Mar 2025 01:00:47 +0000
Manifest next update: Wed 12 Mar 2025 01:00:47 +0000
Files and hashes: 1: BeOIJLd8_MIXUGufXTnw_YPsJgs.roa (hash: UFekJjmZxy4vjH3dPZliRBeAZT4NRRq/0IMLKsXu0f8=)
2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: AWIKD5K8LvRDz/7uKsXBP0NGUovmdns/Z9aqTnLfiRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Mar 2025 21:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:82:b7:f2:29:ad:6e:47:d6:39:01:67:20:e9:6b:9d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Validity
Not Before: Mar 11 01:00:47 2025 GMT
Not After : Mar 12 01:00:47 2025 GMT
Subject: CN=89364b6f61296fc0813e001ccad1c0feed6346ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:6f:0e:c1:27:e8:d1:f7:cc:86:5c:29:d8:
75:f8:b7:bb:12:c2:ea:c7:68:f2:05:34:ca:27:b7:
9a:0d:bd:67:de:5a:a5:ff:e4:4d:97:6f:72:72:16:
c0:60:7c:d9:56:b7:6f:71:b0:3f:f1:3d:37:02:95:
c7:3b:b0:7d:49:19:fb:44:14:02:a1:ab:33:35:e9:
51:3c:6b:f5:31:2f:9a:a1:aa:68:6b:b6:c5:38:1d:
60:85:51:e7:fd:a1:b8:b7:3a:59:42:9b:5e:6d:f4:
f3:33:9d:08:bc:d8:14:00:84:85:42:e2:98:b2:6e:
4d:0a:40:0d:82:60:0a:05:ef:96:33:64:f1:a9:90:
34:46:be:64:8b:8a:1b:8b:6d:ce:61:25:b5:d7:e4:
de:ce:fa:61:ae:74:0d:e6:04:b6:89:18:72:9c:c3:
7b:a5:6b:6d:2c:48:64:dc:5b:4f:67:09:2e:27:36:
20:22:57:99:3d:87:d3:fd:4d:2e:2a:4e:bd:c0:00:
72:7c:10:8f:90:b6:c7:a3:f2:49:77:9c:0d:d3:22:
ca:d2:f9:4c:0c:f0:9e:5d:42:d0:be:b4:26:1b:cc:
a3:8c:cf:71:48:b2:3a:3f:86:b4:fa:72:a6:c4:d0:
09:95:bd:b7:67:e9:9f:f5:a0:1e:9e:0f:0c:ad:2e:
37:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:36:4B:6F:61:29:6F:C0:81:3E:00:1C:CA:D1:C0:FE:ED:63:46:CA
X509v3 Authority Key Identifier:
keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a3:4d:63:00:62:d3:69:63:22:7a:1b:f9:81:a0:0e:d6:3e:
1b:e8:f9:82:f7:27:39:6d:8c:ab:15:bb:6b:92:9c:d8:3d:11:
16:dd:cd:32:48:ab:5b:5a:08:e7:99:f7:7d:80:08:b0:c6:da:
40:40:19:f8:52:b8:ad:c4:1a:f8:bd:32:e0:5d:13:b9:82:a0:
31:87:9e:49:45:dd:fc:f4:7e:8f:49:7d:fe:34:1c:c8:ed:1e:
15:8a:34:2f:60:d9:57:b9:4d:c1:32:1d:66:a5:83:dc:2b:bf:
f7:d8:63:b0:4c:0e:74:ac:e8:8f:dc:30:b7:0b:83:47:af:48:
c5:76:6e:93:35:f3:ff:e7:07:21:da:90:e9:5b:37:79:f0:17:
13:7a:de:7f:ac:13:f3:56:10:42:12:2a:84:30:19:8b:9e:05:
03:4f:5d:38:cc:b3:f7:b0:77:04:14:77:9c:06:d0:3c:0f:f5:
cf:79:53:35:00:4f:1a:ba:ad:5e:d7:1c:fe:30:66:38:73:a1:
9b:66:50:b7:cc:80:3e:99:7d:7b:c0:c2:89:77:d2:dc:bb:1d:
f2:56:13:44:fb:00:3d:67:a5:e3:46:f2:cd:5a:98:33:b9:ca:
6c:d9:9f:55:8e:cf:47:30:90:83:82:3d:42:a2:48:b1:43:63:
52:29:8f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:11:01 2025 by rpki-client