Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json)
Hash identifier: YuFSBwyzi71OddNpUu4SSPx8wzEq4ovtJuqpeqLu/oA=
Subject key identifier: 12:54:08:52:07:BB:F0:D3:72:A3:43:08:20:E7:3F:06:15:D3:80:A9
Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Certificate serial: 0196C916E243D95B7BFB99D4F68A0B83A455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
Manifest number: 14CC
Signing time: Tue 13 May 2025 10:00:42 +0000
Manifest this update: Tue 13 May 2025 10:00:42 +0000
Manifest next update: Wed 14 May 2025 10:00:42 +0000
Files and hashes: 1: BeOIJLd8_MIXUGufXTnw_YPsJgs.roa (hash: UFekJjmZxy4vjH3dPZliRBeAZT4NRRq/0IMLKsXu0f8=)
2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: 46XLnO5LHeLxnc4fmUQtvcUiHfivTwNzBv7DQyClEiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:e2:43:d9:5b:7b:fb:99:d4:f6:8a:0b:83:a4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Validity
Not Before: May 13 10:00:42 2025 GMT
Not After : May 14 10:00:42 2025 GMT
Subject: CN=1254085207bbf0d372a3430820e73f0615d380a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:14:71:f8:97:22:ba:3b:db:05:3a:82:59:2a:
23:c2:6e:c7:62:27:39:c1:97:9b:db:44:9d:03:de:
1d:00:8d:e1:b3:8d:61:8c:87:e9:0a:db:32:25:69:
ea:34:44:47:1d:fa:ea:c2:7e:3b:dd:3b:85:69:94:
05:c0:03:c3:42:3a:87:65:32:ac:5b:7a:86:7b:ac:
fe:f5:91:66:29:08:3a:12:f7:d6:24:7f:9b:4d:bd:
3b:cf:24:36:f3:fe:3d:2f:04:03:10:38:bd:1f:98:
9f:3e:fe:bc:10:f8:8e:c6:66:8b:b9:81:75:1a:61:
32:35:d4:0b:aa:a2:b5:d5:35:cf:06:56:28:c9:16:
fb:d1:61:51:b2:41:28:22:d2:d9:d9:04:0e:c3:f7:
21:c7:0a:a4:e7:ce:eb:6b:19:f6:0b:22:f1:ee:49:
a5:a9:b0:cb:86:a7:1e:03:51:ae:17:e2:89:e7:62:
90:cc:ed:a7:5a:10:86:8e:2c:2f:ac:06:13:2f:6b:
07:71:4e:71:9f:14:48:50:e5:92:78:a4:2f:e4:30:
3d:33:0a:77:0f:9e:c2:51:4a:5f:5a:ab:88:01:b2:
43:86:cc:de:1a:e3:54:7f:de:e1:a4:ce:9c:9b:b5:
df:03:bd:0d:2e:e7:44:a6:07:80:ff:37:7a:17:12:
4a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:54:08:52:07:BB:F0:D3:72:A3:43:08:20:E7:3F:06:15:D3:80:A9
X509v3 Authority Key Identifier:
keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:62:79:b0:5c:c5:a9:f2:7c:f4:9a:a9:d0:a1:c4:66:c0:18:
bb:d2:da:cb:01:12:4d:a6:0e:38:c9:9a:4a:8e:76:ed:97:66:
8a:1b:68:2d:4f:8e:58:b6:52:f7:c0:d2:62:a5:9c:47:ed:b8:
32:95:a0:b0:b8:a4:c8:6c:e7:14:5a:42:b2:57:7b:b5:fb:57:
f1:80:fd:22:be:34:71:63:a6:83:3f:d2:31:a1:a2:31:af:77:
a6:db:8e:2f:2a:b7:e8:30:88:b7:a6:56:23:f1:e9:6b:a6:2d:
22:2c:5f:73:17:06:2e:18:2e:bd:ca:88:a5:01:99:a4:a9:40:
4e:fb:27:aa:78:77:6b:d9:00:df:c5:d6:88:5c:dc:96:48:50:
28:46:17:12:e6:4f:e2:8a:d6:1b:78:2a:e0:c0:2c:3e:b5:62:
67:e3:b1:56:71:22:ce:90:2c:08:a4:ae:4f:29:2c:ae:a7:9e:
f7:b1:0e:7e:1e:c5:f5:19:ee:5e:e5:21:b9:29:17:a3:f5:a0:
6c:85:8a:a0:f5:cc:1e:98:29:6e:1a:ab:c8:c0:24:a9:cb:88:
f1:e3:bb:b9:0e:23:96:77:5c:37:11:3b:d1:e1:a7:68:f7:54:
35:ad:27:e6:eb:70:b3:0a:7e:e4:ca:d2:20:0f:0b:01:fa:b9:
75:ed:2b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:29:45 2025 by rpki-client