Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
File: TXPZQBmjwjWHffa8GynHagtkydA.mft (raw, json)
Hash identifier: 9Avya/xzFnay/DAOQEN5J57FRM55vtbJ0knrGgdjgPU=
Subject key identifier: 1C:3B:1C:43:BD:83:91:96:7C:05:D2:56:C7:31:61:10:FD:9F:82:32
Authority key identifier: 4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
Certificate issuer: /CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Certificate serial: 0196C427862E4A301AB908EA4CB862238C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
Manifest number: 0B8F
Signing time: Mon 12 May 2025 11:00:46 +0000
Manifest this update: Mon 12 May 2025 11:00:46 +0000
Manifest next update: Tue 13 May 2025 11:00:46 +0000
Files and hashes: 1: TXPZQBmjwjWHffa8GynHagtkydA.crl (hash: TsFtN2W9ZrLJmaJFiUP75zIYZ8fHzSlMXSqLhnPFB4g=)
2: UFlaQCFJ4CLhOuiIqohu_AVKpLY.roa (hash: QMm4BiW8chALfiHKzYbt92A3p1kXxu/myJMcDRlryRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:86:2e:4a:30:1a:b9:08:ea:4c:b8:62:23:8c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Validity
Not Before: May 12 11:00:46 2025 GMT
Not After : May 13 11:00:46 2025 GMT
Subject: CN=1c3b1c43bd8391967c05d256c7316110fd9f8232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:4e:e0:14:13:11:05:c4:13:21:8c:74:03:
09:a8:d8:24:cb:04:5a:71:56:0c:de:32:36:b2:1d:
28:ab:ce:63:c5:73:ae:d1:40:4d:22:8c:85:a3:cc:
09:39:db:be:a1:fe:64:89:66:93:03:d1:0e:3c:29:
f1:0e:ea:51:bf:0d:30:11:0e:9d:92:9a:cc:64:7c:
c0:ca:cf:1b:f9:1c:99:9d:ab:3f:3c:d7:7f:75:e6:
aa:32:c4:9f:c9:60:86:d0:24:6d:87:a2:4c:de:ef:
be:4b:84:da:c5:0c:43:2e:38:af:ae:a6:1b:79:cd:
d8:78:cd:58:91:75:e6:d5:8d:16:78:63:95:ad:6b:
d1:26:73:4b:fb:f5:d5:50:42:cb:44:f4:68:cc:2b:
4d:8b:4a:72:fd:54:60:05:9c:10:ba:e6:e6:82:e2:
9d:de:74:75:8a:ea:e0:94:d3:b7:a6:19:f8:24:bd:
3f:0f:2a:15:49:63:f8:1b:5c:74:19:58:7a:94:c7:
40:1a:fe:b4:f1:fb:12:15:1b:02:ff:17:f7:7b:95:
65:b0:47:be:d3:b4:6d:89:c4:1b:27:b7:85:a6:b1:
5f:b8:62:30:cf:c2:16:12:8c:d3:a4:85:12:cf:60:
77:8c:fe:1e:a0:f8:ca:62:f8:13:17:b1:fe:10:db:
75:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3B:1C:43:BD:83:91:96:7C:05:D2:56:C7:31:61:10:FD:9F:82:32
X509v3 Authority Key Identifier:
keyid:4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:61:1f:41:80:6e:84:ad:9c:2c:b3:02:78:ef:32:cd:af:fe:
0f:44:32:c5:1c:b5:85:1a:9c:08:a9:33:4e:71:4e:52:c1:12:
d0:94:a5:5b:1c:eb:c8:6a:d8:a0:34:8b:44:c5:61:04:9f:74:
29:df:ae:30:90:cd:71:e2:cb:b1:83:54:3f:fd:d4:32:07:dc:
a5:bd:8e:b8:b0:1a:06:f8:16:ec:40:d1:9f:ed:53:5f:b4:c1:
08:e5:48:83:c3:6d:13:8d:c3:e4:85:91:e4:a6:8d:93:df:d3:
2f:15:20:02:6d:0e:9b:51:4a:3f:f6:ee:69:79:9a:c5:fb:6f:
f4:09:de:22:5f:0e:67:7b:df:14:a3:b4:a7:3d:fe:2c:9c:b2:
95:eb:ab:c6:4d:15:73:90:1e:e5:0d:4e:1c:b9:ad:cd:d3:d5:
e6:81:2b:ef:8a:b1:36:0b:5c:2c:c7:28:1e:d9:61:5a:76:85:
f5:33:ff:d4:1f:c2:e0:e0:0e:c9:fb:7d:45:74:94:4a:27:1a:
ed:09:e3:06:8e:54:9e:ff:73:ad:db:37:50:6d:07:b5:37:48:
7e:0d:bb:e2:e3:f2:b1:36:00:36:72:f4:6d:05:d9:94:d8:a5:
3d:0f:f8:92:85:35:50:b3:2a:76:7c:b5:49:46:a7:94:06:ca:
c1:b7:86:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:26:57 2025 by rpki-client