Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
File: TjS6bj4mlMezjkZRr-4GGwsh3q4.mft (raw, json)
Hash identifier: /aC676/oLhiDQvUGD3pJ61IleINWSHbiPCsUyznSzd0=
Subject key identifier: 77:08:B8:D0:74:70:92:E8:D8:EB:56:F2:42:DE:47:CB:B2:07:10:81
Authority key identifier: 4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE
Certificate issuer: /CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae
Certificate serial: 019655382CB5BD5CBCEB1AFB730491C9A668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
Manifest number: 1F
Signing time: Sun 20 Apr 2025 22:01:06 +0000
Manifest this update: Sun 20 Apr 2025 22:01:06 +0000
Manifest next update: Mon 21 Apr 2025 22:01:06 +0000
Files and hashes: 1: TjS6bj4mlMezjkZRr-4GGwsh3q4.crl (hash: 2aiwlyiiTQx1dKM6H4v5oyDP0qtGlkDaU8jqYfgrotI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:2c:b5:bd:5c:bc:eb:1a:fb:73:04:91:c9:a6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae
Validity
Not Before: Apr 20 22:01:06 2025 GMT
Not After : Apr 21 22:01:06 2025 GMT
Subject: CN=7708b8d0747092e8d8eb56f242de47cbb2071081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:9b:3c:17:bb:60:2a:e5:cf:bd:04:40:5b:
f1:c3:fc:a5:52:df:fc:e3:8d:8f:b7:82:97:8a:7d:
0d:a6:d8:e3:c0:bb:fe:dd:a6:b0:65:4a:da:91:bb:
be:a9:32:8d:b2:4d:3d:18:20:dc:ea:ea:65:c8:41:
e2:34:7e:eb:fc:40:06:6b:fb:18:df:09:b3:94:1e:
38:d5:6b:4d:57:91:60:3b:18:43:a7:a7:cf:88:44:
28:64:b9:c5:18:18:5e:4f:7e:f3:f8:a0:ee:fb:e5:
f3:7c:33:f1:fc:b6:54:63:69:36:26:d4:be:87:5a:
1b:25:f6:f5:f3:c9:9b:81:6b:d4:b4:a5:35:6a:8e:
56:e9:7b:be:b3:9a:e0:7d:38:47:0e:50:94:b4:d3:
57:03:aa:f4:81:f9:72:08:47:3e:98:90:1b:f3:3f:
33:e5:95:e4:19:71:03:a5:a7:4a:30:42:47:b7:ae:
ba:6f:d3:86:40:f8:04:77:04:82:27:29:47:50:3b:
76:dd:14:96:16:49:bc:c9:b8:43:34:34:6f:6f:00:
65:d0:bb:9f:99:07:92:76:f1:f9:c7:10:6c:86:44:
89:34:26:74:e3:5d:b1:e1:8c:25:18:cb:b3:7a:1f:
59:75:d4:60:db:45:d6:95:c2:e0:9c:66:df:9a:c7:
82:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:08:B8:D0:74:70:92:E8:D8:EB:56:F2:42:DE:47:CB:B2:07:10:81
X509v3 Authority Key Identifier:
keyid:4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d6:c9:b7:48:84:16:09:df:a7:99:1d:ce:b0:4a:08:98:8d:
e3:32:f6:c9:a0:ee:2c:4a:1f:6e:f8:75:81:a3:5f:b9:c3:53:
07:7e:b2:23:cb:09:b2:05:29:78:2b:d2:73:46:82:43:b3:86:
2a:34:bb:62:ef:12:32:22:c1:25:bb:91:c6:47:67:24:3e:84:
c2:20:d5:2b:b3:7a:27:a4:a4:16:90:cd:ff:15:cc:ce:56:56:
cd:18:f0:8e:c0:36:7c:4a:97:31:62:9d:0e:b7:f9:e5:93:f0:
f0:e6:f3:56:ec:e7:65:0b:44:d7:a7:35:86:21:24:c5:54:c8:
fb:01:cf:dd:cf:7e:ea:b4:b0:65:4a:2f:9d:5d:36:90:90:a5:
27:ae:30:11:88:83:7a:ee:e4:93:f1:34:39:3f:ed:a8:c5:c8:
73:65:e1:42:d7:b1:09:58:5c:76:81:77:f0:b6:ce:c6:ab:fd:
8a:5a:89:3a:c8:53:2c:22:f4:96:70:bb:3b:0e:c8:62:24:27:
1e:af:57:69:b2:6f:8c:1b:d9:6b:a4:f4:8f:a9:59:a6:ff:ea:
0e:3b:b4:76:81:98:97:f8:79:d6:f8:11:ab:d7:d2:2d:7e:82:
5a:4e:65:8d:1e:5a:2f:72:fa:58:e7:f1:09:a0:0b:b7:db:fc:
1e:4c:ed:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:49:09 2025 by rpki-client