Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft
File: tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft (raw, json)
Hash identifier: QSNKMe16SMdzPB0aA64jn2i+57CuCBzfTwUXdtMEcF4=
Subject key identifier: 71:F7:84:CF:BF:59:5B:2A:60:A3:25:B7:6E:F4:E1:C6:E8:32:32:BC
Authority key identifier: B5:94:EB:B6:74:8F:DC:12:12:7C:3F:92:7E:7F:B9:B1:AF:89:26:2C
Certificate issuer: /CN=b594ebb6748fdc12127c3f927e7fb9b1af89262c
Certificate serial: 0196B9A418C62C3585FA01D921F39C20C9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZTrtnSP3BISfD-Sfn-5sa-JJiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft
Manifest number: 152F
Signing time: Sat 10 May 2025 10:01:01 +0000
Manifest this update: Sat 10 May 2025 10:01:01 +0000
Manifest next update: Sun 11 May 2025 10:01:01 +0000
Files and hashes: 1: tZTrtnSP3BISfD-Sfn-5sa-JJiw.crl (hash: UdsR0ecFedEgxEJ4Dip9IMpW+6I07EoZtJR2j7SedyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZTrtnSP3BISfD-Sfn-5sa-JJiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:18:c6:2c:35:85:fa:01:d9:21:f3:9c:20:c9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b594ebb6748fdc12127c3f927e7fb9b1af89262c
Validity
Not Before: May 10 10:01:01 2025 GMT
Not After : May 11 10:01:01 2025 GMT
Subject: CN=71f784cfbf595b2a60a325b76ef4e1c6e83232bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:49:54:64:74:b2:ce:5c:8c:4d:a5:c7:2f:0e:
79:24:45:9e:28:eb:0d:2f:f0:cd:bb:f8:1d:92:ae:
6d:7e:75:46:ee:2a:a1:bc:72:64:22:cc:20:30:e5:
06:04:5f:1e:d7:92:36:d4:bc:46:4a:96:64:0b:29:
85:b9:52:25:03:c1:04:4e:f2:8c:9d:47:7b:42:61:
52:1d:ea:91:24:e3:01:43:20:d6:a7:c4:6f:65:7c:
e9:38:77:54:1f:3e:a7:b3:4e:5c:7d:dc:98:a8:80:
2c:4a:dc:0f:c7:45:41:6d:c6:5f:4d:d3:d5:b5:87:
a5:77:52:61:15:61:89:19:1f:57:cc:f8:3a:b5:a1:
5b:31:08:01:04:79:91:3e:99:57:e8:45:3b:fa:87:
fc:1f:3c:f4:ea:57:28:0c:96:2e:76:eb:cb:5a:4f:
50:ea:8e:94:e5:e0:c7:24:4c:eb:49:6d:f0:cc:8c:
99:78:e1:bb:16:d1:f2:a2:84:6a:e4:ab:ce:6f:92:
96:9d:a1:41:3d:67:f9:41:be:59:7d:53:2b:2f:f4:
a2:84:18:0f:60:74:ee:44:20:c0:3e:08:72:8d:92:
7b:f4:6d:78:b9:64:08:32:be:0b:5d:f0:e2:3d:ab:
ab:91:9b:b9:96:56:88:6e:92:9e:93:ac:8b:0a:c0:
1d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F7:84:CF:BF:59:5B:2A:60:A3:25:B7:6E:F4:E1:C6:E8:32:32:BC
X509v3 Authority Key Identifier:
keyid:B5:94:EB:B6:74:8F:DC:12:12:7C:3F:92:7E:7F:B9:B1:AF:89:26:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZTrtnSP3BISfD-Sfn-5sa-JJiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d9:c9:fc:a9:a8:cb:15:32:96:4f:cd:ff:59:c7:0a:f4:9d:
94:ee:77:4f:27:b3:83:61:6e:5b:6f:da:d2:17:44:f0:1a:ba:
10:a2:c9:cc:98:55:3d:05:b6:55:3e:d5:db:dd:f9:eb:69:f8:
dc:cf:fb:c6:ab:91:a9:11:db:6b:f5:97:67:cf:e5:e3:22:d6:
d7:15:3b:64:bb:2a:61:cb:82:64:6d:af:c8:76:19:85:44:b4:
95:f0:b8:9a:83:88:04:26:ac:6a:5d:0e:3a:9b:ae:3b:3b:30:
02:b0:59:1e:f1:9e:ad:5b:78:55:90:63:94:9d:a0:3a:2d:a3:
4d:e9:da:74:96:ee:69:88:bb:f7:2d:18:66:ef:64:6e:3a:d4:
5e:9b:3f:7b:3b:ad:cd:0b:4f:68:35:31:dc:ab:13:e3:c2:0e:
1d:09:90:37:51:c2:6a:bb:e0:5f:dc:7a:7b:cc:88:34:62:75:
9e:7b:9b:b0:31:3d:e4:ce:73:a4:15:cb:60:ba:f5:50:2b:5a:
14:0c:64:d3:8e:92:06:24:7d:7a:c3:d3:a7:39:93:1c:f9:41:
ed:53:b7:f1:c3:c5:77:27:88:c7:17:17:9c:cf:a1:26:e2:93:
c6:08:c1:c0:7f:e5:41:29:c5:2a:51:70:42:25:bf:b6:09:25:
dc:6d:fa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:28:23 2025 by rpki-client