Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
File: TzVzzX1WHNN-DzMfbKON6SAgQrI.mft (raw, json)
Hash identifier: BlZ/gSWAu5dMq+TTvmi4gLchQzwy86yobAeCisd9mi0=
Subject key identifier: FA:B1:99:DF:F5:A3:6D:B5:4F:13:98:AB:C3:1B:6E:B9:50:FB:78:8E
Authority key identifier: 4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
Certificate issuer: /CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Certificate serial: 0196C34B8C412B00B4D1390D0F30E133A54C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
Manifest number: 0A4D
Signing time: Mon 12 May 2025 07:00:30 +0000
Manifest this update: Mon 12 May 2025 07:00:30 +0000
Manifest next update: Tue 13 May 2025 07:00:30 +0000
Files and hashes: 1: TzVzzX1WHNN-DzMfbKON6SAgQrI.crl (hash: d6Ogo5TX391cCobh9Z5q0R3aX/DNx1micgfs23LIU/w=)
2: gNvVla9QTcgfrH76gu8sofAf_w0.roa (hash: OGSKcOJHQa1w9k6JZ39A0hFW39yZH1IaBP1pJ+a1YHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:8c:41:2b:00:b4:d1:39:0d:0f:30:e1:33:a5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Validity
Not Before: May 12 07:00:30 2025 GMT
Not After : May 13 07:00:30 2025 GMT
Subject: CN=fab199dff5a36db54f1398abc31b6eb950fb788e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:a6:1f:57:43:a2:28:1e:56:36:c8:97:14:
07:b4:83:3e:69:5f:32:c2:af:96:42:3c:97:ce:2c:
9c:9f:ad:8a:af:0e:30:42:9d:f9:a4:a8:98:04:72:
9a:cb:9b:1f:66:83:9a:10:4f:c3:3a:8b:eb:7a:4f:
8b:7e:f9:7b:fa:3b:be:ff:8b:33:5e:e0:47:81:56:
e4:b4:47:00:aa:10:f2:e0:06:e9:2b:38:e7:ed:5d:
e5:2f:b4:c2:e4:17:0d:5e:73:c9:85:92:57:bd:8e:
79:37:d1:13:4e:50:72:81:68:c3:53:bc:de:61:73:
bb:4f:e0:23:6a:c7:40:3c:ac:f4:11:c3:a7:49:53:
3e:97:b3:0d:27:1d:6e:c0:1a:46:41:56:fd:5c:1e:
c6:a1:2f:b7:39:f3:f8:85:73:03:83:e1:c6:49:bc:
fb:8d:3b:83:38:20:8f:b1:77:a4:3d:16:a6:62:5d:
e3:a0:99:6c:32:82:8b:76:10:3a:49:16:93:ee:fc:
cc:97:e2:e3:fe:75:bb:c7:bf:49:6a:e2:9d:b4:53:
c2:73:0a:06:f9:4a:72:45:02:f1:a1:13:0e:e8:56:
af:ba:60:a4:47:2c:d3:bb:5f:f5:c5:7e:d3:33:a8:
e3:c3:d5:d1:a2:23:c3:af:25:ff:90:7b:88:df:d7:
8a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B1:99:DF:F5:A3:6D:B5:4F:13:98:AB:C3:1B:6E:B9:50:FB:78:8E
X509v3 Authority Key Identifier:
keyid:4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e6:56:0d:e0:18:79:c2:1d:a2:bb:bd:19:32:c0:bb:7a:c6:
06:b0:9d:98:8e:36:78:ff:f5:7e:78:d9:67:27:eb:3c:37:f2:
90:ad:bd:11:a8:49:5f:d4:7a:de:c5:a5:eb:b6:6f:23:26:38:
0f:d2:ce:5b:6c:d5:0c:f6:ce:3b:3d:6a:93:e9:b5:d1:88:26:
3b:16:78:0a:31:28:8c:f2:e3:56:cb:3e:c0:7d:df:3e:00:03:
dd:3c:fa:ca:c5:10:a5:7a:67:7b:10:6b:5c:1d:6c:7b:4e:93:
a0:a3:25:a7:2d:85:61:08:be:26:ba:53:3e:1b:e4:dd:aa:ab:
24:83:d1:f4:18:37:26:02:e7:10:db:d6:0a:69:b3:90:88:a5:
db:f9:65:33:2e:60:c0:9e:07:06:a0:83:8b:53:dd:d8:e5:f2:
2e:ac:ff:8a:d3:bd:75:82:5d:3e:52:7e:2f:8a:9e:97:ca:6f:
35:2f:d5:f8:9b:a3:ac:52:65:49:01:04:31:27:b6:d0:66:cc:
93:64:71:75:48:a8:09:31:58:87:49:65:3e:2f:75:e7:23:de:
c2:6c:4d:ed:7e:99:f7:21:da:af:dd:a2:c0:e6:df:71:83:cb:
88:52:5a:c0:95:41:eb:d5:54:68:a1:6d:d9:d9:94:5a:4b:b0:
c0:14:9d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:50:42 2025 by rpki-client