Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
File: TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft (raw, json)
Hash identifier: uiPZPdc9z4DZEInFkqNKR2MdPwVXb+iFRkqwjR+Lvk8=
Subject key identifier: B7:A9:FB:CA:27:7E:7A:E7:03:6A:F4:52:02:18:A7:16:C0:53:D2:50
Authority key identifier: 4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
Certificate issuer: /CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Certificate serial: 0196CD2A76FC40BB9C60754ECEAD585326D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
Manifest number: 027A
Signing time: Wed 14 May 2025 05:00:34 +0000
Manifest this update: Wed 14 May 2025 05:00:34 +0000
Manifest next update: Thu 15 May 2025 05:00:34 +0000
Files and hashes: 1: TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl (hash: RidYmeUmMw4UPYmPkX3zJj3ru/+GHsezG+Jg80Vkrxc=)
2: U_0Qm9bmlfNCn0QcnMuKjqVhpok.roa (hash: rS2TodhOY6krb9NSbdEkyp8dkG2jF6/EwmhOAvSbJFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:2a:76:fc:40:bb:9c:60:75:4e:ce:ad:58:53:26:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Validity
Not Before: May 14 05:00:34 2025 GMT
Not After : May 15 05:00:34 2025 GMT
Subject: CN=b7a9fbca277e7ae7036af4520218a716c053d250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:53:7c:db:88:b4:51:11:b1:b1:eb:ae:16:
99:83:92:fb:8f:a2:99:4b:16:f4:c4:bd:cc:43:d8:
05:ee:08:8e:4c:3e:f6:18:db:6e:bc:46:c9:81:0b:
1f:8c:62:36:9c:60:a6:f6:3a:ba:65:00:48:94:ae:
e4:be:db:77:41:78:23:ac:a0:91:56:8d:98:41:ac:
e1:cb:eb:0c:2e:db:85:3e:1d:36:6b:07:60:0c:bd:
9f:3d:6a:ed:55:76:1e:2f:95:18:5b:e7:0b:98:49:
e2:8c:f3:6d:a0:f7:51:4b:b0:45:af:3b:2f:1e:f5:
6f:b3:b2:d6:3d:80:3c:50:cc:54:55:a9:e3:f4:13:
e7:d2:9a:ba:c9:1f:6c:5b:21:42:16:bf:b7:4d:11:
47:aa:77:ba:9f:0e:d7:a0:be:5c:53:e3:b1:8b:4b:
76:22:05:f1:0b:ea:39:c4:1b:a4:54:6e:09:63:93:
27:07:db:e2:ea:3a:60:8d:7a:19:d2:c5:c1:88:93:
11:33:aa:60:3c:ee:cf:1f:79:32:3e:26:4b:a1:8e:
77:d2:f5:97:f1:d5:00:ed:c7:9a:6d:3a:28:a4:24:
14:74:ae:42:3a:97:d4:a5:cd:a1:3c:a8:b8:ee:dc:
2e:8c:85:42:48:8d:2f:c5:fe:53:2b:68:d8:24:cc:
32:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A9:FB:CA:27:7E:7A:E7:03:6A:F4:52:02:18:A7:16:C0:53:D2:50
X509v3 Authority Key Identifier:
keyid:4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:a9:1e:75:9e:35:60:fa:15:21:54:e1:3b:df:35:0d:0e:e3:
b7:75:32:30:49:93:bb:a9:54:e8:62:e7:6c:98:45:49:2c:94:
aa:76:24:53:ba:e7:59:30:ae:ae:8d:75:f9:41:15:11:5b:66:
06:6d:e5:1b:54:6a:41:ba:3b:86:ba:4e:98:ac:bc:c0:e9:c4:
0e:33:bc:46:89:23:44:a4:b3:da:3e:88:62:a6:f4:f0:6b:d2:
31:d3:a3:81:85:96:a1:ab:30:14:77:6b:9b:1e:43:f6:60:95:
92:ac:3a:d5:e3:63:52:06:fb:0d:14:db:84:47:10:12:07:4e:
36:b1:e7:a5:bf:02:33:08:1b:ee:b3:33:33:a9:97:9a:16:01:
32:ac:bb:b9:e2:a4:f7:35:d8:3f:71:bc:eb:ee:b1:b8:76:2b:
df:49:7d:53:36:3a:c6:9f:0e:38:a0:fa:0f:0b:b1:c8:ca:a1:
b4:e4:32:34:8f:cc:ff:88:a6:b5:e1:96:22:33:47:c9:00:8e:
ec:5b:e1:b6:02:d8:85:18:d1:10:e5:9f:88:0e:9e:2d:ac:f0:
0f:c1:08:40:c6:81:ad:49:96:e0:79:0c:12:42:e1:ef:f4:b0:
83:59:1a:f7:9f:fe:c8:a8:3c:d2:2d:b1:aa:ce:07:2c:46:4c:
aa:1e:e6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:00:29 2025 by rpki-client