Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
File: tznE4_6GnZeDui2t9mDczQ-lNwc.mft (raw, json)
Hash identifier: DDl49nqGUBW+NId16cnUshbKPx6c7jFa+EWkyl1+dQo=
Subject key identifier: 9F:2C:9C:42:B2:1F:EC:CB:4F:05:E9:E6:63:68:10:04:C4:5D:FE:01
Authority key identifier: B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07
Certificate issuer: /CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707
Certificate serial: 0196C0EF284323B5E0F75295A2D9349C47BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
Manifest number: 0F81
Signing time: Sun 11 May 2025 20:00:20 +0000
Manifest this update: Sun 11 May 2025 20:00:20 +0000
Manifest next update: Mon 12 May 2025 20:00:20 +0000
Files and hashes: 1: XSeQzzLzaRiIssAEaH8bFHtmW3c.roa (hash: 5lhi1fFGQ5t288ymZ18SpahB86WMGs7YGo9rolcKH9c=)
2: tznE4_6GnZeDui2t9mDczQ-lNwc.crl (hash: OaM49CeVKNfr6XZAbMa+X91i7ni+8jBmsw7adG5GZ6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:28:43:23:b5:e0:f7:52:95:a2:d9:34:9c:47:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707
Validity
Not Before: May 11 20:00:20 2025 GMT
Not After : May 12 20:00:20 2025 GMT
Subject: CN=9f2c9c42b21feccb4f05e9e663681004c45dfe01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:72:31:6a:04:d1:2d:bb:a4:c4:e5:aa:3d:2b:
78:77:b6:e8:b5:66:ec:d9:f6:b8:51:8c:d2:0b:23:
13:73:e2:db:ae:4c:47:14:3c:19:19:24:44:a1:27:
f6:c2:ba:72:21:4a:a1:9a:e5:c3:76:9c:9a:c1:1b:
89:67:9b:04:a4:99:19:fc:71:af:1f:10:e3:d9:0a:
3e:57:d8:98:36:09:1d:64:a6:c6:53:5c:80:3d:9b:
4b:c7:50:99:01:cd:1d:ea:a4:1d:ff:13:95:31:59:
0d:17:db:25:15:3a:59:8b:9c:25:47:9c:6e:b6:d6:
25:50:9c:68:9e:fb:76:7a:8c:e4:ac:19:f8:02:77:
07:20:1e:41:fb:7d:52:33:9c:6b:09:f9:1a:04:52:
b5:e8:71:a5:7c:a4:dd:26:fb:11:40:45:d9:c8:0b:
db:3a:02:e9:ce:8d:46:a1:74:f2:93:1e:57:67:a1:
c2:d1:b0:76:1d:2d:79:51:3a:5d:5f:84:72:79:ac:
17:fc:b2:45:cf:bf:dd:5e:87:bf:a5:90:45:ee:35:
f3:6a:ca:54:0e:15:a3:a0:0b:d7:3e:f6:36:46:9d:
4e:dc:6e:fc:80:18:aa:20:22:1d:26:6f:49:4f:d1:
43:ba:ef:c8:ef:fe:1e:99:83:2e:5f:9b:b2:9e:3b:
57:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2C:9C:42:B2:1F:EC:CB:4F:05:E9:E6:63:68:10:04:C4:5D:FE:01
X509v3 Authority Key Identifier:
keyid:B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:27:72:a5:cd:d0:c7:bd:03:d4:a4:ef:5e:34:f3:06:fc:81:
ec:32:6c:f8:c4:d1:b6:e1:0f:05:7f:1e:cb:74:19:55:f7:b4:
d0:c3:15:55:c4:bd:e8:c4:79:4a:9f:bc:cd:c7:a3:0c:f7:a4:
3d:a1:c1:07:91:8f:93:0e:d5:c9:c9:a9:ab:f0:e1:73:97:6f:
88:5f:7c:3a:dc:99:18:59:0c:09:2e:84:57:93:f9:4c:10:8f:
df:96:2b:23:ad:1b:63:1f:92:17:2b:c8:61:d7:df:60:0d:8d:
0b:5c:27:0b:d8:20:24:5f:14:9d:a3:8e:40:ca:4a:55:c3:65:
84:cb:34:60:f6:3d:5d:36:5e:10:78:e7:28:d8:f4:c9:41:4f:
0f:68:6c:09:dd:d3:01:b5:ff:e7:bc:f1:d6:8c:a0:51:9d:37:
cc:02:4a:4c:d4:0e:48:cd:72:4d:c2:17:b9:de:13:ca:ea:3e:
d1:58:f0:b8:85:35:53:a2:ad:36:74:35:3c:d8:3d:f3:2c:47:
35:da:f0:5e:de:22:ad:55:76:87:71:a8:07:30:b2:4f:86:06:
c9:09:28:ad:0f:64:34:ea:69:c1:eb:99:b3:d9:86:c4:a7:74:
9a:59:50:42:d6:ec:5c:2a:e3:ad:7d:38:95:53:20:7e:a4:df:
5e:c5:20:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:52:32 2025 by rpki-client