Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
File: TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft (raw, json)
Hash identifier: F7gnWjT6up2WhAmM8vqNmYlwpphRy3g3yCVKWDzzIE8=
Subject key identifier: 56:CD:43:2D:40:A6:44:57:E7:5E:6A:BB:66:5E:61:73:B2:D0:62:C3
Authority key identifier: 4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
Certificate issuer: /CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Certificate serial: 0196B859F8CC2EFE94CDEBF878C8592EDCF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 04:00:26 +0000
Manifest this update: Sat 10 May 2025 04:00:26 +0000
Manifest next update: Sun 11 May 2025 04:00:26 +0000
Files and hashes: 1: TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl (hash: fMDkmsHIfKcJqi77hLCpbZbUrRva10FtVxoWarrGYWA=)
2: sXBtr0RmYgN7EHzS2OAuZuhPnSk.roa (hash: vzTvtT3U+hF4Cf7zWB9jndQ+LVyRdJBiHZIGS8DcnuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:59:f8:cc:2e:fe:94:cd:eb:f8:78:c8:59:2e:dc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Validity
Not Before: May 10 04:00:26 2025 GMT
Not After : May 11 04:00:26 2025 GMT
Subject: CN=56cd432d40a64457e75e6abb665e6173b2d062c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:2d:4d:9d:c6:79:d9:20:77:f0:f0:f8:8b:
62:80:24:7b:f6:5b:b3:52:7c:40:33:cd:89:c0:36:
1d:02:9f:8b:01:07:b5:3c:7a:4a:8d:30:e2:1a:4e:
ed:ab:c3:62:df:8c:a7:1a:5f:fe:41:b6:e3:57:d3:
e0:eb:ec:39:d7:77:9c:32:5d:57:ad:b4:9d:e3:24:
60:e5:b7:b9:3f:46:ec:ed:cf:40:fd:11:e1:17:df:
7a:e1:2e:86:2f:db:e4:5f:02:98:93:4a:23:c6:e3:
5b:17:e9:a5:38:3d:af:d7:6b:19:d3:21:b4:a1:8e:
b2:49:3a:d8:ca:e6:11:73:b7:03:3e:9d:2b:5c:6f:
32:c0:90:e8:68:1e:28:6c:a2:56:6c:09:24:5b:43:
80:ff:a6:0d:52:aa:78:a5:9f:26:74:b3:67:b5:17:
f4:0d:1b:b6:3b:ee:70:eb:bf:72:47:01:5d:d2:95:
54:72:b6:fa:9a:c1:82:1b:86:a2:5a:64:b8:8f:42:
e3:24:f2:f0:13:3e:a2:bf:5d:6d:0d:e2:dc:65:42:
2c:8b:c5:6d:7b:8b:6f:59:f6:72:ec:e6:55:1c:a9:
f6:7f:65:85:b0:1e:1b:65:0e:67:06:38:1c:ab:da:
48:a1:25:6a:d1:e1:73:d2:d3:0f:26:31:08:0f:7b:
d0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CD:43:2D:40:A6:44:57:E7:5E:6A:BB:66:5E:61:73:B2:D0:62:C3
X509v3 Authority Key Identifier:
keyid:4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:df:ac:d8:10:a6:69:25:2b:f8:c0:c3:23:63:47:d1:46:cd:
bf:e7:ea:62:12:7c:a7:97:9b:32:81:06:f0:21:a2:41:50:5a:
09:05:1b:6c:34:46:71:a1:c8:f4:77:cf:cb:29:e2:63:26:4b:
fc:c8:48:20:0e:02:1a:50:fa:30:5b:ca:4b:ca:90:ba:64:3c:
d9:0e:ad:79:08:2f:c4:24:43:72:a4:ee:40:9d:c8:32:ea:7b:
de:89:5a:fc:3b:2c:b7:66:da:b6:3a:6c:97:e4:96:58:e2:78:
14:4f:58:72:05:c6:12:bc:e0:3d:99:49:6e:84:b2:64:49:33:
8f:5d:7e:93:60:18:ff:9a:c2:e6:38:fa:94:a1:41:be:d5:3d:
80:c0:c4:f8:82:f8:9b:e1:d4:de:cf:38:4d:39:09:f8:a8:9e:
a0:39:1b:ce:14:ba:03:0e:4c:05:4b:b1:8d:1e:d9:06:f2:12:
b4:e2:7b:59:af:87:23:c0:db:db:52:67:b6:61:48:6a:8e:6b:
aa:94:93:33:f1:80:e7:a6:38:5e:9c:ec:17:09:d5:a6:25:74:
9f:f1:d3:9a:4d:93:81:15:73:0c:01:e3:20:67:f6:52:47:31:
6a:14:d0:15:13:19:d7:c8:38:41:23:5b:b2:ed:2e:6f:95:10:
36:26:51:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:21:07 2025 by rpki-client