Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
File: tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft (raw, json)
Hash identifier: UHLjKAOtp2w6umC6OoGjDzh2iJje3UXK4j2C4qjBocA=
Subject key identifier: FC:36:D6:EA:D4:0D:CD:76:E8:28:FD:A1:E3:3F:A3:04:6F:CB:D1:3F
Authority key identifier: B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7
Certificate issuer: /CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
Certificate serial: 0196BE932FDB95804768BC9EF8A5479AEA00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
Manifest number: 041F
Signing time: Sun 11 May 2025 09:00:39 +0000
Manifest this update: Sun 11 May 2025 09:00:39 +0000
Manifest next update: Mon 12 May 2025 09:00:39 +0000
Files and hashes: 1: Zw8tldKF4IamTYiqaUWTp-ORWaM.roa (hash: +YY2MSi0DHjKWNmQtrNLuY1Ni5g7MizVHlrZ12WPMsk=)
2: tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl (hash: mFn+9GyukmsrJqUQH7nwfZUYLeKRQVcmi6xC+gkx/Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:2f:db:95:80:47:68:bc:9e:f8:a5:47:9a:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
Validity
Not Before: May 11 09:00:39 2025 GMT
Not After : May 12 09:00:39 2025 GMT
Subject: CN=fc36d6ead40dcd76e828fda1e33fa3046fcbd13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d4:1b:fa:e8:76:ab:03:ab:10:01:2d:fc:01:
97:c8:b1:16:ad:47:88:a6:be:45:6d:e0:6c:70:06:
d2:c7:a6:e7:9f:ec:ea:7a:04:27:e3:db:62:ad:ee:
4d:0d:76:a0:3e:03:e8:13:8e:a9:25:47:1c:05:57:
6f:d9:b8:32:50:70:67:8b:a2:4f:95:ed:a9:09:6b:
55:1f:25:2d:95:1e:8b:11:19:99:a0:0f:55:43:ec:
50:fa:a0:18:e2:42:c3:48:5e:3d:f4:5c:51:b0:ea:
55:e0:d3:21:84:c5:6a:cb:c5:8f:6c:74:b2:9b:a8:
d3:bc:a5:23:6d:70:7c:2e:61:d7:ab:ea:41:f7:a5:
90:35:8c:e0:49:89:9d:c0:f3:ea:00:42:34:a9:08:
cc:87:d2:af:6f:20:2a:ec:86:d0:10:47:2c:8f:95:
d1:ce:63:9e:53:ff:fa:c4:7b:60:7d:9e:41:eb:1d:
cd:12:a1:c3:6e:18:ee:45:98:6f:19:d2:90:c0:33:
86:a2:f9:20:d3:ea:07:7f:5f:03:62:66:4f:36:e3:
23:01:41:1c:a0:68:ba:19:19:76:81:a4:1c:85:9c:
46:ca:da:0f:bf:e4:6d:ea:bb:40:ae:35:e2:98:0f:
0b:00:8a:97:1a:dd:d9:48:3e:e1:7f:30:f6:e9:64:
bf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:36:D6:EA:D4:0D:CD:76:E8:28:FD:A1:E3:3F:A3:04:6F:CB:D1:3F
X509v3 Authority Key Identifier:
keyid:B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ed:d5:12:1d:69:38:9a:93:53:0a:31:14:61:5d:96:9c:95:
d4:ae:79:e6:cc:00:f4:dc:30:c9:c5:4a:0d:71:7f:9c:18:a4:
20:0b:f6:23:36:ea:cc:0c:02:da:6f:e6:8f:9c:b5:ef:9c:da:
5e:20:e8:16:43:d4:43:e3:28:87:da:2a:5f:33:d1:ee:83:8c:
16:cb:d2:91:b9:c6:9d:cf:92:73:17:52:10:83:56:3a:5b:45:
94:61:ce:63:f8:65:76:f6:00:7f:6e:fd:c5:a1:97:00:10:cb:
f6:2b:fd:70:0e:4f:f8:c4:bc:ff:00:92:8b:da:7a:4b:d2:c7:
42:ee:0d:54:69:c6:3f:d2:f4:18:ab:f1:a3:a9:d6:1b:5d:9d:
6a:d4:00:86:9a:bb:a6:9b:97:9a:2c:04:ce:6f:e8:39:1e:b1:
6e:01:52:09:25:fa:91:b4:41:29:f2:7d:39:d0:5f:23:ac:e7:
e6:e0:c8:9e:29:15:6d:23:17:a9:da:00:21:b5:ef:6a:f1:6b:
f2:83:57:93:ad:0e:f7:04:03:65:9c:53:43:a9:28:5d:b7:c5:
8d:85:fc:a6:aa:6d:66:31:f3:ea:19:b9:b7:07:a4:e8:c0:12:
7a:ed:48:3f:8b:30:b2:a3:3e:dd:c4:28:0d:12:35:3f:68:ac:
e5:3a:1d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:06:48 2025 by rpki-client